Edit tour

Windows Analysis Report
https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en

Overview

General Information

Sample URL:	https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en
Analysis ID:	1374777
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Found iframes

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3872 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2256,i,15237379981053713451,14415150338944036936,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5708 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8
Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/bframe?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9
Source: https://www.synesgy.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MXJS4VS
Source: https://www.synesgy.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MXJS4VS
Source: https://www.synesgy.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MXJS4VS
Source: https://www.synesgy.com/en/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MXJS4VS
Source: https://www.synesgy.com/en/audience/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MXJS4VS
Source: https://www.synesgy.com/en/who-we-are/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MXJS4VS

Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.synesgy.com/en/who-we-are/

HTTP Parser: Title: does not match URL

Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb

HTTP Parser: <input type="password" .../> found

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9	HTTP Parser: No favicon

Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb	HTTP Parser: No <meta name="author".. found
Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb	HTTP Parser: No <meta name="author".. found
Source: https://www.synesgy.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.synesgy.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.synesgy.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.synesgy.com/en/	HTTP Parser: No <meta name="author".. found
Source: https://www.synesgy.com/en/audience/	HTTP Parser: No <meta name="author".. found
Source: https://www.synesgy.com/en/who-we-are/	HTTP Parser: No <meta name="author".. found

Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb	HTTP Parser: No <meta name="copyright".. found
Source: https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en-gb	HTTP Parser: No <meta name="copyright".. found
Source: https://www.synesgy.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.synesgy.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.synesgy.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.synesgy.com/en/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.synesgy.com/en/audience/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.synesgy.com/en/who-we-are/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49703 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.202.80
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.202.80
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /browser-ui/latest/loader.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/index.module.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/o_tc3l2da/latest/languages.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://service.synesgy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/o_tc3l2da/latest/languages.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/o_tc3l2da/latest/en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://service.synesgy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/DefaultData-6c4a9f0c-136e5ec3.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings/o_tc3l2da/latest/en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /session/1px.png?settingsId=o_tc3l2da HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translations/translations-en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://service.synesgy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit&onload=ng2recaptchaloaded&hl=ENG HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translations/translations-en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /session/1px.png?settingsId=o_tc3l2da HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/FirstLayerCustomization-9b6b3341-d1fb6047.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/ButtonsCustomization-bc97adad-cb7c10c6.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/SecondLayerUI-6436166d-84b7e885.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/bootstrap.min.css?v=5 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
Source: global traffic	HTTP traffic detected: GET /assets/css/swiper.min.css?v=5 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/css/custom.min.css?v=5 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/css/crif-esg.css?v=5 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/Taglogger-36e26749-73e4c0ca.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/scripts/jquery-3.6.0.min.js HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/PrivacyButton-09e27f75.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/index-23e52cb8.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/w31p5jul/immagine-hero.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/chevron-down-orange.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/synesgy-logo.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/scripts/bootstrap.bundle.min.js HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/scripts/swiper.bundle.min.js HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/scripts/jquery.waypoints.js HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/index-b604349e.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/scripts/lottie-player.js HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fregister&cb=1705327332250 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/SaveButton-cb5f3e5b.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/scripts/jquery.validate.min.js HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/VirtualServiceItem-b5710e81.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/chevron-down-orange.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/scripts/jquery.validate.unobtrusive.min.js HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/synesgy-logo.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /browser-ui/3.34.1/DefaultTabs-738dacba.js HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://service.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fregister&cb=1705327332250 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/eqlpzy03/switzeland-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/1ezg3lp0/beluxflag.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/w31p5jul/immagine-hero.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/animations/ESG_blue.json?ver=2 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/lcvfsmur/germany-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/4lijqlun/austria-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/ffgau1n1/netherlands-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/sqkoto1x/greece-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/eqlpzy03/switzeland-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
Source: global traffic	HTTP traffic detected: GET /media/1ezg3lp0/beluxflag.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/lcvfsmur/germany-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /js/bg/0Cqmw64vVDdXjGZEoSN2NjFc6s-AADeaJ1f3yoXUl2A.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
Source: global traffic	HTTP traffic detected: GET /media/4lijqlun/austria-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/ffgau1n1/netherlands-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/txgdbd5e/france-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/p34nnfqq/italy-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/sqkoto1x/greece-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
Source: global traffic	HTTP traffic detected: GET /media/odiemvmj/spain-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/qu1fsuip/czech-republic-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/xmkhy0e1/cyprus-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/14xjznio/slovakia-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /settings/G_xgCaSxD/latest/languages.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://www.synesgy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/animations/ESG_blue.json?ver=2 HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/txgdbd5e/france-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/3sidauet/romania-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/p34nnfqq/italy-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/pa5oke0n/bulgaria-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/yemlaspa/poland-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/odiemvmj/spain-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/qu1fsuip/czech-republic-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/fjef03g0/taiwan-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/xmkhy0e1/cyprus-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /settings/G_xgCaSxD/latest/languages.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/2sdnb5pz/flag_of_vietnam-svg.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/dk2nyoft/hongkong-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /settings/G_xgCaSxD/latest/en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://www.synesgy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/14xjznio/slovakia-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/3sidauet/romania-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/0o2jaanu/india-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/mg0lezrl/united-arab-emirates-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/lcabmwzn/turkey-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/a5tl02k4/jordan-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/pa5oke0n/bulgaria-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/yemlaspa/poland-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/fjef03g0/taiwan-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/2sdnb5pz/flag_of_vietnam-svg.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /settings/G_xgCaSxD/latest/en.json HTTP/1.1Host: api.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /session/1px.png?settingsId=G_xgCaSxD HTTP/1.1Host: app.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/ba5cbsww/philippines-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/dk2nyoft/hongkong-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/2cwb4kxf/united-kingdom-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /session/1px.png?settingsId=G_xgCaSxD HTTP/1.1Host: app.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/0o2jaanu/india-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/i2girxb4/ireland-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/mg0lezrl/united-arab-emirates-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/a5tl02k4/jordan-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/2vhcl40j/imprese.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/lcabmwzn/turkey-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/nehjkomg/world.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/mivd1pzi/istituti-finanziari.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/ba5cbsww/philippines-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /aggregate/en?templates=H1Vl5NidjWX@40.17.44,zqWojrT0P@15.7.10 HTTP/1.1Host: aggregator.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://www.synesgy.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/2cwb4kxf/united-kingdom-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/aqddpooa/assicurazioni.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/wnmdo5pn/synesgy_2.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/tkccxelm/synesgy_3.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/i2girxb4/ireland-33-33x.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/2vhcl40j/imprese.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /aggregate/en?templates=H1Vl5NidjWX@40.17.44,zqWojrT0P@15.7.10 HTTP/1.1Host: aggregator.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/spsp0w2m/ingranaggio.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/mivd1pzi/istituti-finanziari.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/b5ohr1ef/foglia.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/nehjkomg/world.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/hsentkoi/alt.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327340151 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/aqddpooa/assicurazioni.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/d3nj5svb/coccarda.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327340151 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/spsp0w2m/ingranaggio.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/b5ohr1ef/foglia.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/u31heilt/asvis_logogr.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/vefajzik/swisscleantech-logo-titelbild.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/jfwonuut/ilsole_csr-it2023_logo_en_hor.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/hsentkoi/alt.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/d3nj5svb/coccarda.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.synesgy.com/Accept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /media/vefajzik/swisscleantech-logo-titelbild.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/wnmdo5pn/synesgy_2.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/bg-world-leaf.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/arrow-right-white.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/play-white.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/social/linkedin.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/jfwonuut/ilsole_csr-it2023_logo_en_hor.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/social/youtube.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/u31heilt/asvis_logogr.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.synesgy.com/Accept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2Range: bytes=22446080-22524463If-Range: "38c551fcd022da1:0"
Source: global traffic	HTTP traffic detected: GET /assets/img/play-white.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/webfonts/subset-DMSans-Bold.woff2 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/webfonts/subset-DMSans-Regular.woff2 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.synesgy.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.synesgy.com/assets/css/custom.min.css?v=5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/arrow-right-white.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/bg-world-leaf.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/social/linkedin.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/social/youtube.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/tkccxelm/synesgy_3.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /assets/img/favicon.ico HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.synesgy.com/Accept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2Range: bytes=35481-22446079If-Range: "38c551fcd022da1:0"
Source: global traffic	HTTP traffic detected: GET /assets/img/favicon.ico HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fprivacy-policy&cb=1705327349392 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://service.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fprivacy-policy&cb=1705327349392 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.synesgy.com/Accept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2Range: bytes=102316-22446079If-Range: "38c551fcd022da1:0"
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327366603 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327366603 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/ HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2F&cb=1705327379956 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2F&cb=1705327379956 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/audience/ HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/0ptncnah/cribis_22-05_visualhero_achicirivolgiamo.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/audience/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Faudience%2F&cb=1705327382938 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/rknbnk2t/icona_pmi-smes.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/audience/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/n4gfog2a/icona-aziende.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/audience/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/5f3fl3vq/icona_bancheassicurazioni.svg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/audience/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Faudience%2F&cb=1705327382938 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/n4gfog2a/icona-aziende.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/5f3fl3vq/icona_bancheassicurazioni.svg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/rknbnk2t/icona_pmi-smes.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/0ptncnah/cribis_22-05_visualhero_achicirivolgiamo.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /en/who-we-are/ HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/dyvpywmz/cribis_22-05_visualhero_chisiamo.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/who-we-are/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/qssfso0o/cribis_22-05_visualcard02-supplychain.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/who-we-are/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/ipddiko2/cribis_22-05_visualcard03-sostenibilit%C3%A0.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/who-we-are/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/ogwbmvul/cribis_22-05_visualcard01-network.png HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/who-we-are/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/fvafxw53/cribis_22-05_visualcard04-digital-platform.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/en/who-we-are/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/fvafxw53/cribis_22-05_visualcard04-digital-platform.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/dyvpywmz/cribis_22-05_visualhero_chisiamo.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Fwho-we-are%2F&cb=1705327387750 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.synesgy.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/qssfso0o/cribis_22-05_visualcard02-supplychain.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/ipddiko2/cribis_22-05_visualcard03-sostenibilit%C3%A0.jpg HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /media/ogwbmvul/cribis_22-05_visualcard01-network.png HTTP/1.1Host: www.synesgy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
Source: global traffic	HTTP traffic detected: GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Fwho-we-are%2F&cb=1705327387750 HTTP/1.1Host: uct.service.usercentrics.euConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/synesgy/?originalSubdomain=it" class="icon linkedin">LinkedIn</a> equals www.linkedin.com (Linkedin)
Source: chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	String found in binary or memory: <a href="https://www.youtube.com/@Synesgy" class="icon youtube">YouTube</a> equals www.youtube.com (Youtube)
Source: chromecache_311.2.dr	String found in binary or memory: return b}DC.D="internal.enableAutoEventOnTimer";var xc=ca(["data-gtm-yt-inspected-"]),EC=["www.youtube.com","www.youtube-nocookie.com"],FC,GC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE

Source: chromecache_243.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_243.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_243.2.dr	String found in binary or memory: http://github.danielcardoso.net/load-awesome/)
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-destroy
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-find-by-element
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/context-refresh
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/destroy
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/destroy-all
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/disable
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/disable-all
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/enable
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/enable-all
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/first
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/group
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/last
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/next
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/previous
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/refresh-all
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/viewport-height
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/viewport-width
Source: chromecache_233.2.dr	String found in binary or memory: http://imakewebthings.com/waypoints/api/waypoint
Source: chromecache_345.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_345.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_345.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_345.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_349.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_311.2.dr	String found in binary or memory: https://app.usercentrics.eu/browser-ui/latest/loader.js
Source: chromecache_210.2.dr	String found in binary or memory: https://asvis.it/
Source: chromecache_311.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_243.2.dr, chromecache_315.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_233.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_243.2.dr, chromecache_315.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_357.2.dr	String found in binary or memory: https://matomo.org/privacy-policy/
Source: chromecache_358.2.dr, chromecache_357.2.dr	String found in binary or memory: https://matomo.org/privacy-policy/#optout
Source: chromecache_311.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_228.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_243.2.dr	String found in binary or memory: https://quilljs.com/
Source: chromecache_228.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_210.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/FR
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/IT
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/ae
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/be/
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/bg
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/cz
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/de
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/es/
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/gb/
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/global
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/global/#Account/Register
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/gr
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/hk
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/ie/
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/in
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/it
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/jo
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/nl
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/ph/
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/pl
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/ro
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/sk
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/tr/
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/tw/
Source: chromecache_239.2.dr	String found in binary or memory: https://service.synesgy.com/vn
Source: chromecache_228.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_269.2.dr, chromecache_260.2.dr	String found in binary or memory: https://swiperjs.com
Source: chromecache_311.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_357.2.dr	String found in binary or memory: https://usercentrics.com/privacy-policy/
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_364.2.dr, chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_311.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MXJS4VS
Source: chromecache_182.2.dr, chromecache_228.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__.
Source: chromecache_364.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js
Source: chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	String found in binary or memory: https://www.linkedin.com/company/synesgy/?originalSubdomain=it
Source: chromecache_210.2.dr	String found in binary or memory: https://www.swisscleantech.ch/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.ae/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.ae/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.ae/who-we-are/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.bg/en/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.bg/en/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.bg/en/who-we-are/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.ch
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.ch/en/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.ch/en/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.ch/en/who-we-are/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/assets/img/synesgy-logo.png
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.com/audience/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/de/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.com/de/https-www-synesgy-com-de-nutzer/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.com/de/https-www-synesgy-com-fr-uber-uns/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/en/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/en/SMEs
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.com/en/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.com/en/who-we-are/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/es/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.com/es/audiencia/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.com/es/quienes-somos/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/fr/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.com/fr/fr-audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.com/fr/fr-qui-sommes-nous/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.com/it/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.com/it/a-chi-ci-rivolgiamo/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.com/it/chi-siamo/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.com/who-we-are/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.gr/en/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.gr/en/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.gr/en/who-we-are/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.ie/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.ie/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.ie/who-we-are/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.ro/en/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.ro/en/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.ro/en/who-we-are/
Source: chromecache_210.2.dr	String found in binary or memory: https://www.synesgy.tr/en/
Source: chromecache_239.2.dr	String found in binary or memory: https://www.synesgy.tr/en/audience/
Source: chromecache_213.2.dr	String found in binary or memory: https://www.synesgy.tr/en/who-we-are/
Source: chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	String found in binary or memory: https://www.youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49703 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3872_398728195

Jump to behavior

Source: classification engine

Classification label: clean2.win@24/221@42/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2256,i,15237379981053713451,14415150338944036936,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2256,i,15237379981053713451,14415150338944036936,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://swiperjs.com	0%	URL Reputation	safe
https://app.usercentrics.eu/browser-ui/3.34.1/PrivacyButton-09e27f75.js	0%	Avira URL Cloud	safe
https://uct.service.usercentrics.eu/uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Faudience%2F&cb=1705327382938	0%	Avira URL Cloud	safe
https://service.synesgy.com/vn	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/browser-ui/3.34.1/DefaultTabs-738dacba.js	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/txgdbd5e/france-33-33x.png	0%	Avira URL Cloud	safe
https://consent-api.service.consent.usercentrics.eu/consent/uw/3	0%	Avira URL Cloud	safe
https://api.usercentrics.eu/settings/G_xgCaSxD/latest/en.json	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/img/play-white.svg	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/ffgau1n1/netherlands-33-33x.png	0%	Avira URL Cloud	safe
http://polymer.github.io/AUTHORS.txt	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/2vhcl40j/imprese.svg	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/scripts/jquery.validate.unobtrusive.min.js	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/scripts/jquery-3.6.0.min.js	0%	Avira URL Cloud	safe
https://service.synesgy.com/be/	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/xmkhy0e1/cyprus-33-33x.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/lcabmwzn/turkey-33-33x.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/css/swiper.min.css?v=5	0%	Avira URL Cloud	safe
https://www.synesgy.gr/en/audience/	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4	0%	Avira URL Cloud	safe
https://www.synesgy.com/fr/	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/ogwbmvul/cribis_22-05_visualcard01-network.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/fr/fr-audience/	0%	Avira URL Cloud	safe
http://polymer.github.io/AUTHORS.txt	0%	Virustotal		Browse
https://app.usercentrics.eu/browser-ui/3.34.1/SecondLayerUI-6436166d-84b7e885.js	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/browser-ui/latest/loader.js	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/scripts/bootstrap.bundle.min.js	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/fjef03g0/taiwan-33-33x.png	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/browser-ui/latest/loader.js	0%	Virustotal		Browse
https://www.synesgy.com/media/fvafxw53/cribis_22-05_visualcard04-digital-platform.jpg	0%	Avira URL Cloud	safe
https://service.synesgy.com/hk	0%	Avira URL Cloud	safe
http://polymer.github.io/PATENTS.txt	0%	Avira URL Cloud	safe
https://service.synesgy.com/gr	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/3sidauet/romania-33-33x.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/i2girxb4/ireland-33-33x.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/spsp0w2m/ingranaggio.svg	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/pa5oke0n/bulgaria-33-33x.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/scripts/jquery.validate.min.js	0%	Avira URL Cloud	safe
https://service.synesgy.com/tw/	0%	Avira URL Cloud	safe
http://polymer.github.io/PATENTS.txt	0%	Virustotal		Browse
https://www.synesgy.com/media/eqlpzy03/switzeland-33-33x.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/wnmdo5pn/synesgy_2.png	0%	Avira URL Cloud	safe
https://www.synesgy.gr/en/	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/img/arrow-right-white.svg	0%	Avira URL Cloud	safe
https://uct.service.usercentrics.eu/uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fregister&cb=1705327332250	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/qssfso0o/cribis_22-05_visualcard02-supplychain.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/webfonts/subset-DMSans-Regular.woff2	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/w31p5jul/immagine-hero.jpg	0%	Avira URL Cloud	safe
https://service.synesgy.com/FR	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/lcvfsmur/germany-33-33x.png	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/browser-ui/3.34.1/Taglogger-36e26749-73e4c0ca.js	0%	Avira URL Cloud	safe
https://www.synesgy.ch/en/	0%	Avira URL Cloud	safe
https://www.synesgy.ch/en/who-we-are/	0%	Avira URL Cloud	safe
https://service.synesgy.com/ro	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/img/favicon.ico	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/tkccxelm/synesgy_3.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/nehjkomg/world.png	0%	Avira URL Cloud	safe
https://service.synesgy.com/ae	0%	Avira URL Cloud	safe
http://github.danielcardoso.net/load-awesome/)	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/4lijqlun/austria-33-33x.png	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/yemlaspa/poland-33-33x.png	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/session/1px.png?settingsId=G_xgCaSxD	0%	Avira URL Cloud	safe
https://uct.service.usercentrics.eu/uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327340151	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/aqddpooa/assicurazioni.svg	0%	Avira URL Cloud	safe
https://www.synesgy.com/assets/img/social/linkedin.svg	0%	Avira URL Cloud	safe
https://www.synesgy.com/es/audiencia/	0%	Avira URL Cloud	safe
https://www.synesgy.ie/audience/	0%	Avira URL Cloud	safe
https://www.synesgy.com/media/mivd1pzi/istituti-finanziari.svg	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.js	0%	Avira URL Cloud	safe
https://www.synesgy.com/fr/fr-qui-sommes-nous/	0%	Avira URL Cloud	safe
https://www.synesgy.com/es/quienes-somos/	0%	Avira URL Cloud	safe
https://www.synesgy.com/it/	0%	Avira URL Cloud	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js	0%	Avira URL Cloud	safe
https://app.usercentrics.eu/browser-ui/3.34.1/SaveButton-cb5f3e5b.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
api.usercentrics.eu	35.241.3.184	true	false	unknown
app.usercentrics.eu	35.190.14.188	true	false	unknown
aggregator.service.usercentrics.eu	34.120.28.121	true	false	unknown
accounts.google.com	142.251.167.84	true	false	high
uct.service.usercentrics.eu	34.95.108.180	true	false	unknown
consent-api.service.consent.usercentrics.eu	35.201.111.240	true	false	unknown
www.google.com	142.251.163.104	true	false	high
clients.l.google.com	172.253.122.113	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
www.synesgy.com	212.7.67.30	true	false	unknown
clients1.google.com	unknown	unknown	false	high
api.synesgy.com	unknown	unknown	false	unknown
clients2.google.com	unknown	unknown	false	high
service.synesgy.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://app.usercentrics.eu/browser-ui/3.34.1/PrivacyButton-09e27f75.js	false	Avira URL Cloud: safe	unknown
https://consent-api.service.consent.usercentrics.eu/consent/uw/3	false	Avira URL Cloud: safe	unknown
https://app.usercentrics.eu/browser-ui/3.34.1/DefaultTabs-738dacba.js	false	Avira URL Cloud: safe	unknown
https://uct.service.usercentrics.eu/uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Faudience%2F&cb=1705327382938	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/txgdbd5e/france-33-33x.png	false	Avira URL Cloud: safe	unknown
https://api.usercentrics.eu/settings/G_xgCaSxD/latest/en.json	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/img/play-white.svg	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://www.synesgy.com/media/ffgau1n1/netherlands-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/	false		unknown
https://www.synesgy.com/assets/scripts/jquery.validate.unobtrusive.min.js	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/2vhcl40j/imprese.svg	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/scripts/jquery-3.6.0.min.js	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/xmkhy0e1/cyprus-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/lcabmwzn/turkey-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/css/swiper.min.css?v=5	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/ogwbmvul/cribis_22-05_visualcard01-network.png	false	Avira URL Cloud: safe	unknown
https://app.usercentrics.eu/browser-ui/latest/loader.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://app.usercentrics.eu/browser-ui/3.34.1/SecondLayerUI-6436166d-84b7e885.js	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/scripts/bootstrap.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/fjef03g0/taiwan-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/fvafxw53/cribis_22-05_visualcard04-digital-platform.jpg	false	Avira URL Cloud: safe	unknown
https://service.synesgy.com/tr/cookie-policy	false		unknown
https://www.synesgy.com/media/i2girxb4/ireland-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/3sidauet/romania-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/spsp0w2m/ingranaggio.svg	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/pa5oke0n/bulgaria-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/scripts/jquery.validate.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9	false		high
https://www.synesgy.com/media/eqlpzy03/switzeland-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/wnmdo5pn/synesgy_2.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/img/arrow-right-white.svg	false	Avira URL Cloud: safe	unknown
https://uct.service.usercentrics.eu/uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fregister&cb=1705327332250	false	Avira URL Cloud: safe	unknown
https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en	false		unknown
https://www.synesgy.com/media/qssfso0o/cribis_22-05_visualcard02-supplychain.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/w31p5jul/immagine-hero.jpg	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/webfonts/subset-DMSans-Regular.woff2	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/en/	false		unknown
https://www.synesgy.com/media/lcvfsmur/germany-33-33x.png	false	Avira URL Cloud: safe	unknown
https://app.usercentrics.eu/browser-ui/3.34.1/Taglogger-36e26749-73e4c0ca.js	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/img/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/tkccxelm/synesgy_3.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/nehjkomg/world.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/4lijqlun/austria-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/yemlaspa/poland-33-33x.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu	false		high
https://app.usercentrics.eu/session/1px.png?settingsId=G_xgCaSxD	false	Avira URL Cloud: safe	unknown
https://uct.service.usercentrics.eu/uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327340151	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/media/aqddpooa/assicurazioni.svg	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/assets/img/social/linkedin.svg	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	false		high
https://www.synesgy.com/media/mivd1pzi/istituti-finanziari.svg	false	Avira URL Cloud: safe	unknown
https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.js	false	Avira URL Cloud: safe	unknown
https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js	false	Avira URL Cloud: safe	unknown
https://app.usercentrics.eu/browser-ui/3.34.1/SaveButton-cb5f3e5b.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://service.synesgy.com/vn	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_182.2.dr, chromecache_228.2.dr	false		high
http://imakewebthings.com/waypoints/api/context	chromecache_233.2.dr	false		high
http://imakewebthings.com/waypoints/api/next	chromecache_233.2.dr	false		high
https://swiperjs.com	chromecache_269.2.dr, chromecache_260.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_345.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://service.synesgy.com/be/	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
http://imakewebthings.com/waypoints/api/viewport-width	chromecache_233.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_182.2.dr, chromecache_228.2.dr	false		high
http://imakewebthings.com/waypoints/api/context-destroy	chromecache_233.2.dr	false		high
https://www.synesgy.gr/en/audience/	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/fr/	chromecache_210.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_228.2.dr	false		high
http://imakewebthings.com/waypoints/api/group	chromecache_233.2.dr	false		high
https://www.synesgy.com/fr/fr-audience/	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://service.synesgy.com/hk	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
http://imakewebthings.com/waypoints/api/destroy	chromecache_233.2.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_345.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_182.2.dr, chromecache_228.2.dr	false		high
https://service.synesgy.com/gr	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_210.2.dr	false		high
https://www.youtube.com/	chromecache_210.2.dr, chromecache_213.2.dr, chromecache_239.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_182.2.dr, chromecache_228.2.dr	false		high
http://imakewebthings.com/waypoints/api/last	chromecache_233.2.dr	false		high
https://service.synesgy.com/tw/	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://quilljs.com/	chromecache_243.2.dr	false		high
https://www.synesgy.gr/en/	chromecache_210.2.dr	false	Avira URL Cloud: safe	unknown
https://service.synesgy.com/FR	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
http://imakewebthings.com/waypoints/api/first	chromecache_233.2.dr	false		high
https://www.synesgy.ch/en/	chromecache_210.2.dr	false	Avira URL Cloud: safe	unknown
https://www.synesgy.ch/en/who-we-are/	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://service.synesgy.com/ro	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_182.2.dr, chromecache_228.2.dr	false		high
http://imakewebthings.com/waypoints/api/destroy-all	chromecache_233.2.dr	false		high
https://service.synesgy.com/ae	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
http://github.danielcardoso.net/load-awesome/)	chromecache_243.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_182.2.dr, chromecache_228.2.dr	false		high
https://www.synesgy.com/es/audiencia/	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.synesgy.ie/audience/	chromecache_239.2.dr	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/fr/fr-qui-sommes-nous/	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_364.2.dr, chromecache_182.2.dr, chromecache_228.2.dr	false		high
https://www.synesgy.com/es/quienes-somos/	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://www.synesgy.com/it/	chromecache_210.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.31.99	unknown	United States	15169	GOOGLEUS	false
34.95.108.180	uct.service.usercentrics.eu	United States	15169	GOOGLEUS	false
172.253.122.113	clients.l.google.com	United States	15169	GOOGLEUS	false
212.7.67.30	www.synesgy.com	Italy	8884	CRIF-ASBOLOGNA-ITALYIT	false
142.251.163.104	www.google.com	United States	15169	GOOGLEUS	false
142.251.167.84	accounts.google.com	United States	15169	GOOGLEUS	false
35.190.14.188	app.usercentrics.eu	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.241.3.184	api.usercentrics.eu	United States	15169	GOOGLEUS	false
35.201.111.240	consent-api.service.consent.usercentrics.eu	United States	15169	GOOGLEUS	false
172.253.62.147	unknown	United States	15169	GOOGLEUS	false
34.120.28.121	aggregator.service.usercentrics.eu	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1374777
Start date and time:	2024-01-15 15:01:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@24/221@42/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.synesgy.com/ Browse: https://service.synesgy.com/tr/privacy-policy Browse: https://service.synesgy.com/tr/cookie-policy Browse: https://www.synesgy.com/ Browse: https://www.synesgy.com/en/ Browse: https://www.synesgy.com/en/audience/ Browse: https://www.synesgy.com/en/who-we-are/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 34.104.35.123, 20.103.102.163, 142.251.167.95, 172.253.115.95, 172.253.63.95, 142.251.16.95, 142.250.31.95, 172.253.62.95, 142.251.163.95, 172.253.122.95, 172.253.115.94, 52.165.165.26, 192.229.211.108, 142.251.111.94, 172.253.63.97, 13.85.23.206, 142.250.31.94, 172.253.63.94, 20.3.187.198, 40.68.123.157, 142.251.163.94, 40.127.169.103
Excluded domains from analysis (whitelisted): fs.microsoft.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, synesgy.westeurope.cloudapp.azure.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 13:01:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9731447688504113
Encrypted:	false
SSDEEP:	48:8+0drTzTfHnidAKZdA1oehwiZUklqehZy+3:8+krgOy
MD5:	DFF82135258FA64EADB9A9727A35523F
SHA1:	AB319243BF3F0113C13381B5EFCEC67AB47EA063
SHA-256:	83DB221ABD7DF9626EE80008AFD2E200DB89521F866AFB3B59CC0F55FFEE850A
SHA-512:	51FFF96DED5FCF74EE7C26D92E500E0608329DD79FBD9102F30DB74E0C613C34AE041A16F91BC3795FC5590238A8DA5152F65D10803BB993BA2DE0EA7E7993F4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Uf.G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I/X;p....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X;p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X;p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X;p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X=p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............+.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 13:01:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.985068513220697
Encrypted:	false
SSDEEP:	48:8U0drTzTfHnidAKZdA1leh/iZUkAQkqeh+y+2:8Ukra9Q3y
MD5:	74C0A1697A1C8318634E1EB224DBD0B1
SHA1:	8F15FB4B121E919A6B82E37EA7A7EA805BB80C57
SHA-256:	F01BAC193E025AFF53FA52DE64B5D80D63C727830AC8404EC16733B51C700F46
SHA-512:	A4D36D2E0D0CD21D06225F11CF4BB6E22DEFF0B23D6E79BBBE9E0FCEC762E3DBE77E022D54299363C88AB78AB45822EEAD56D5909D57F5E3CBDF6B7CCCF2AC32
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\KGf.G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I/X;p....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X;p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X;p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X;p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X=p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............+.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.001501624095384
Encrypted:	false
SSDEEP:	48:8q0drTzTbHnidAKZdA14t5eh7sFiZUkmgqeh7ssy+BX:8qkrGnSy
MD5:	707BF8EE397F565CF5F16767BD18E16E
SHA1:	9BF4318A97BD3E17434546950406ADB05AFD272F
SHA-256:	E91CA120BAE5ED1DD3BD8F5F0385367703AF961B02E1EF1B754C3689D9739AE4
SHA-512:	773DD41FE5D5E131B8A48800F569C2F7CA7F9993E9550AE74ACE38EE1AD04D48B4D94D70FDE07818F1352FFF012DA4B8EA58503551AD692B670866DEBBE48B4C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I/X;p....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X;p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X;p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X;p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............+.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 13:01:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9882308021628186
Encrypted:	false
SSDEEP:	48:830drTzTfHnidAKZdA16ehDiZUkwqehKy+R:83krREy
MD5:	E36F634391FF3389563D02FAE91819AB
SHA1:	EE5A8547488800F1864FDC94438E7284A8F15F1D
SHA-256:	60FABAAB0B566F9286FAAC9DA9D1EBF1BB4DEA350A27BE037D2B5F34D390AEB6
SHA-512:	A5F60C6EA90748F6860F700995D24A093BEDE0E261270E58C4129F78F5B34918649F8957CAA380ADD816F4030F2C8902FC2226F5FA82CBF11C8C4BBAC0C8DE44
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....{.?f.G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I/X;p....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X;p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X;p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X;p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X=p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............+.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 13:01:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9762343489893275
Encrypted:	false
SSDEEP:	48:810drTzTfHnidAKZdA1UehBiZUk1W1qehgy+C:81krR9Ay
MD5:	3F43A4E168A31D63C43DB56E83043972
SHA1:	6999BC23C3EC6AFFE0E72E852E9426093EB9E73C
SHA-256:	7A212A7C8D7926B0E8E768800601C9A09B116DD41FE5E5DC26F7DFF800E5A260
SHA-512:	4ACF6D2BEA3F9991917C6620D55E65B8BA708752460B9B794DFEC9A0856E494365F524EB97EE0663F123554FFCA05684B0BE9E82F612DD665B490AEBA30E9E5B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Mf.G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I/X;p....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X;p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X;p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X;p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X=p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............+.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 13:01:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9876007144101737
Encrypted:	false
SSDEEP:	48:8i0drTzTfHnidAKZdA1duTrehOuTbbiZUk5OjqehOuTbSy+yT+:8ikruTYTbxWOvTbSy7T
MD5:	28FBCEA73774EE568430590116006B61
SHA1:	427A86E8842FA76B3C4C8CF2D14C79A21096A8D5
SHA-256:	E2EE94FFF6FCF338C1C597E1DC165E9850315DAC6E7E7D50E9F78B46BC31325A
SHA-512:	E0FC48DDBE2170BF345DCC00D69D5EA7891A1989DA8225DA955B63CD37C9EF97FD440D501810330245D485F9FE58EDAA458D457A06C1669DF31B7AFE23CDD18D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......4f.G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I/X;p....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X;p....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X;p....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X;p..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X=p...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............+.o.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2111
Entropy (8bit):	4.946732082507182
Encrypted:	false
SSDEEP:	48:cvrc4FdZP3zTX7rdZmffGHph3FdZ0iBYVu/LiW/12vm:47TYGHFgiB35v
MD5:	C654FF26B07D3E5BB27966D68B0D9292
SHA1:	94528D08AF968814F4FFA4356C35546FCFE4B510
SHA-256:	AA3922762E72C62A95EDB27308FB8BE21693038C0708991144AF1D42036ACEED
SHA-512:	18444621E819062118BE41A529225FB41FF48560220FEF546FCCDFF27525DD92E5C85241E0EFA458AA28A711BD0EC81739B6B320EDA4AB866115DA13C5BEF4EA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="345px" height="345px" viewBox="0 0 345 345" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 17</title>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round">. <g id="A-chi-ci-rivolgiamo" transform="translate(-922.000000, -1402.000000)" stroke="#0779B8">. <g id="Group-16" transform="translate(923.000000, 1403.000000)">. <polyline id="Stroke-1" stroke-linejoin="round" points="71.6305221 343 60.6104418 71.6305221 11.0200803 71.6305221 0 343"></polyline>. <line x1="38.5702811" y1="110.889558" x2="61.9879518" y2="110.889558" id="Stroke-3" stroke-linejoin="round"></line>. <line x1="38.5702811" y1="143.949799" x2="63.3654618" y2="143.949799" id="Stroke-4" stroke-linejoin="round"></line>. <polyline id="Stroke-5" stroke-linejoin="round" points="88.849

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3156
Entropy (8bit):	7.848108825796091
Encrypted:	false
SSDEEP:	96:szeDBFRqWqKiNhW3cBzQGvry7aaxf3+YNu/Tp:s+v0WqKi/WQQGuNOmG
MD5:	ADF74B3417CB5545B9F29F1D09BEEFAE
SHA1:	65830FCBFE33024C6DC5A15D99468B0376DF33F5
SHA-256:	7433B1986A2C41C8F042A2E0F9A9E01661A79AE1EABD9171CFF404963B25D8FA
SHA-512:	1232BC30164486353FE7AE0FCDF55187DE88EEEED2DA47180D0629D70C57A21A90E84B6C202A64F9B935FAC0CB94B3AB35B2FB0C170A1216800AF867276AB656
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx....l...../P....:P:P\|..p%..L.!...K..m8'...Qq.j.......E.qB.... ..D.e...8`q..U.X..Zl..`....\............\.Ow..A~..=_....v..S...?..............D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p........i.:.J...'.77.'^.Ds.Vyo.o<(Ia.....].c.7yP..xy.(..E.. j..*..ww.b..U2x.UR:.J.g?.......x?.Q......q...8.&..b......b." ...sk0$......E.Os..B....r.\|.u@.oi..5........: .v...:....x....}.CN3.Z.V..u<.....q...3..Y..7..D!g..R\+.......C....U...w.\\=0......5..{...nE.c!..o..O3..`..]9.d.;...o.VUf.i...)c.,..3....P+pb%N.IJ.w.....k..M...~......w?%...w.....>.....O.~..-../.m.=8...S~..9^....L.bb..es.L}q..Y?.......b...mY.#0 ..D6 ..~..v.)U..u......+j.....v..=....Ad..:.Qhe_.....l...H.(URQ.%...L.V'Nu.T.k..e....;.....D.L.....d@$..t.Cs.8.d..)]....}l...I.Q6nd.4j;.Z1i\|...3!...I.s.=...k..>......V.......H.D..5.r.H......8...."...>.&s.....M...4.\|.L@.......H.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpgrpyxghb", last modified: Thu Jan 11 12:39:47 2024, max compression, original size modulo 2^32 2935
Category:	downloaded
Size (bytes):	1075
Entropy (8bit):	7.810281429857719
Encrypted:	false
SSDEEP:	24:XUIDiW9Za6EIL0AXpEdSQdpiI7RuXjh6qMcIKA7:XvDiSa9IFXp8nPiItuXjh6qNi7
MD5:	9AA2DBACECA2CB72E06855B4150AB385
SHA1:	7CF8A76C29D6271FB42DB471F88949CD1ACACCB7
SHA-256:	8ECACFA9A15BC865F9CBA7C6251476A47B0751A159C797D7C66E648E417EFC4D
SHA-512:	F0D815E76F6B5216BE52F1F6651EFE0181A5FE1F75F8FE73DBC16BD48397E43FF441805B770F4D7B2DE3B35EF9C2EB4D7FF09EE1B94E57B9ADA99911BADC15AD
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/FirstLayerCustomization-9b6b3341-d1fb6047.js
Preview:	......e..tmpgrpyxghb..V.n.6.}.Wh] ....E.n.@.\|.b..."...7Z..%R ).../I...8[YAh...\.9&....p.H.....2 +3R /fd@.f.@3 .f.w..y/.....A..2.._.Y..a..,R.......fATJ.s.J.p..T.$.)...Y...v.i...,..Jq6t..v..o......w`...Q<...2....K.bd..wU.{._3H.8..H.B..s.S...r&. C.........x...{?'..........+. ..X..r....X..f0..S...R...-.$..(uE.45..c<.....8c.$8v.gg..&...P...w.T].dd..wAW$..C.......J......[.IHN.j..Q.a.m.X.v....^..QF../.=URa.U/...E...N...)Go6.....=......a...d..oL.".u^.W.W..a<..a.BE#..c..w.....Pj....&=.$}.V~.....GN/..W...Yf..fN.ex..1.......?2Fm.+..j..........C...../...m......7Y'.>.C...".e6.x.7....\|.v`N..Z.&2.....O..<.L=.tp....Z...C.%5]9`........~o0.J-...i..........oz.!..a.....e.....N...>...\|q......J.C..n.vS....#\|q..a=..Z.0u.........oE...Ms"[..]..C1.U.......^...'Q..=._t._8l.(2.#.'......#..e...._..[U7.{j.^.p}".q.....[..f....c..y.i..n..3.....`..{...Z..l...y.......u8..>.:...6:...... ......U):..V4.&.....h...Zv.t..CZ.u..i.gS.M.g..8-....5..i...O..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	5.4230574585781115
Encrypted:	false
SSDEEP:	12:6v/7mAnvY5u+33333333333333333Tno21:qnvWfo21
MD5:	DF309043134BA1B7BD4743569BFA617F
SHA1:	907CD18BA8F1F78229563102AF3B6630B3513C75
SHA-256:	312E58B4160C8FA7EC11FFAE2D38BF197F8E43376B0F1E070F8AA1191EE5502F
SHA-512:	EAB4413D0C7A16E7B681981AE09071D27F4BA914FF7A868F2811A91C791289F5B4B4247E73A06A22519D88B2FAEE7B8D9678C3FDCD237288215B00EBF02ABB27
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/txgdbd5e/france-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........(IDATx...M...E..........e..."..E..T0..P`.+..i...=q/.....E.o......\?..l.w'9.8lV......H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ]..{.q8.^...)n;.......w...bfv......C.....IEND.B`.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2895
Entropy (8bit):	7.827676378713635
Encrypted:	false
SSDEEP:	48:GluahzobBwu1Nd/cowSCS8lIgiPCoBK8TyYXv/DTJAdGHV9wP18opuT:G/zoyocowTplto9yYXvHJAo218mq
MD5:	C484E8E5393151C9B1528B4F68EFD0BB
SHA1:	0ADDF2A858859075D1E964A311C53DCE8F9AE41A
SHA-256:	CC133F128968CB1C24E866D02AF84B95B8CF285C4C70C7BF0912CEF63E77DEEC
SHA-512:	72B773A1527F1DB41761050CEB7138CF7BA2F350BA51DBFE1DA754B8B18DD2CAB60A172AA0307F22A90D7C2FCEF2C6B5C57BAA6F057A6D1E15601253647A0185
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/lcabmwzn/turkey-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...ol.W...S......("%dP..:....:.F.&b\|..Y....&..8.d..D..>Yb,,...F....X..%...%,H....1:.P.j>.^.BO{.{n.9..~%....-..9.s..T..uc....5.O..............D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p.....S..l.}~...-.H.qs..a.3..^....b......[7.o.Z...}f.1z.....0W..l`...]E.Y7..E..j..1u..M...._.....#f..Us..U...XW&.b.vS..3.%...b.a..ft..}\...........U.e}...........]6.B...e...)(....B'.....9UcX...i:\| .p..[....#.a......S.../.....Zg....E.q...d./.....C.+{....6....-i..._[..?.%...yf..V<...j.U-.m8.b.2...>.+}...k.C.4..sV.n....F.......J.........[.w...KA...z...=.L+......VX..B..3.~P....(..(e8h.0.}.\....};.-.2.xP..(....T....8/.}...."?(...Q........VoK8....6.....=..9.h.B..M.....8..SE.r....d..v.V5.`.E.......T.<..aF.8..5}.(F.U..}.eR..(.bY.N.....g......"=..;L./..0[.......x....<_....;.L].cQ<+..]@h#./.9.Po..._.h.>u_<...E...Z..%..V.h..7s.UG..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3685
Entropy (8bit):	7.848836157809215
Encrypted:	false
SSDEEP:	48:2jqJa666666666663+OxeC293pHkpgWBAnYqkOBX9C/cpMGN5KO0qiZeNZtLljTz:2e5EC4dkSNYsJk/cDNvIGJGklIu6yp1
MD5:	787B91C7A57571C1D43E090B74105260
SHA1:	8BF754299DD00FFCE931AF0FCF19783F5E64C7C7
SHA-256:	BE3EDA832FF062E51A8420D480411B660633E81DE16661C77628A0CC2FC0AA71
SHA-512:	DDDDF258B36440EAA410CF3BD3146632D2AFC9E05FD2E2A3057373DB04EACFEAB278DA1B5DBDB62003F0A5173CFBCAF9D19BDFB07AF6E39982EB126E6DECA5AA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..].]U..w.`.....F.`.....)%...Ikb....M.>.....h.TJJ..c...0....[}.'D.>PxP:.........i".....=k.sfv[.8w./.t..s......k.....\|z"...8{.6..7EDj(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(...2.W.N...H.9g}..s&&&......\...+G...L.....o.GA.2^.}==..P:..h:...i...]. .04.e.z.4........b.....N.m{>=.c4.....3....u...f......1<..tr..).(....9....r....+..;..].....\..}...O{.V.8..l[...\8...~FA.+O.9...n..bx\|.-...Y...>>. ?.........x.Y\5.(....=..[.\._../.H. .2..).y(..n.p}....!.6.8.A$.&..\|......O.z!....k.&..........\|d...w(..c...:..S..........C.G...{Y.C.5C.O{>....O ...^@...F.."J.60\|(!.(..,....= .Dq......\|v.#.y...D....._..=..>....2..\|...d.1..7.]:.s.=.....V........D.. ...2.@..'<_e...).,...H9.I....<o.UV}...3....&.].D...=..@......9%H.j...j.s9.8VtT.P".5X..C...D6...

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1365
Entropy (8bit):	7.419859726940909
Encrypted:	false
SSDEEP:	24:N9P4PcpA9YgeM5sB5PGkaeH8U8gl7PtBLTqp/HJa8jWTTYLZlr:N94k9l605jaecU8UJYjvLZlr
MD5:	C62C5CE27E30F00B5F7CC2653E82EC13
SHA1:	25EFC534ECFB6EC513BE8FD2D4B330EA4F649C83
SHA-256:	55A793213D3A2CB8D2AB20080E811564F296E6331CB840180EBA00574BD68A7B
SHA-512:	BF79D64805851A8EF72331CC5BB8A5CC66E45E66ADA44D194BD5B0B36FE024E00CD14A6A719CA833F65EDB1EB71411FB0E74610C59D9A4B137C4C762EAB5D9ED
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/qu1fsuip/czech-republic-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...;h.e......S'.N.v......E.b..t.8..f...........4.PZb.....X.&.\|.W../....9\..l......./.....-....../.~...w.......9...B.X>.y<sf9..v......`M..-.t.k..q..k......aM@...DX.P....&..S.".....hX.P.......o.@4..(S+..k...Z ......@.5...$..k...i ...u...5...-.aM@vz.D..<....& ....aM@...DX...$..& -I."..HJr.hX.0.d.......@4...F...k...M ....'.@.5...2..k...u ..Ne...hM<.....4>..(&.#+..b..r\|....~..+.#..6..?.&.....aM....DX.0....&`6U."...I5.hX.0......L..@4..8\..k..U} ....'..X...@..............j&...&..@L...6.1%k......j .s.&(.@....T...k...D..J"...&(.@t. w..1k...DO..r$.=.&.@... ..1.k.......R&...&H.@$. 5...k...D...R ...&..@d..`(...k.!.Df...$...&6~...tH 26Z...{;>..M.#....x..x...OA..9j....S..^...S./."s.....+q\|{..S.....h5,...c?...tH 2d5.....@..".V.C...Y..I .f504.H..@."1V.)..DX..H ....xa..8...OAb.b@....+q...jo@..b V.9...Y..D zd5.....@...cV.9...X..@ :`5P..h..@i..%V.%..9Y..L .`5P:....@-.bJV.5...Y..H &`5P+.8..@..b....

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25036, version 1.0
Category:	downloaded
Size (bytes):	25036
Entropy (8bit):	7.991359676020685
Encrypted:	true
SSDEEP:	384:XXDskdVPYKuZUABMzIiVZ6ah1k4xsjtZ/dBY6chLuydvJGYLfXmd6sC:XzzYLZUABMkij1g4xgxBY3Luy1JVvuU
MD5:	9DD150FB7229E143E0F71BA1FE8C8F63
SHA1:	664ABFC4941054600213DDA51A3D6F0D05B3C312
SHA-256:	CFFE139366B3882387DDDBD10D59E7D9AA29345793FDBF51DDDE809CA6A0BEC2
SHA-512:	EDD29166BFC8DF01AF98E6EBCAB8ACCD7B9A609C741A9A2EE049DF059050EE72B50C083D2081FD4B66F58DA71EAE09070F1F86A0C74DE24CF0052E4F4CA064D8
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/JTUSjIg1_i6t8kCHKm459Wdhyzbi.b1007c521d80cd9c.woff2
Preview:	wOF2......a...........aX..........................Q..`.."?HVAR...`?STAT.8'2.../~.....p.V....0....6.$.... ..x..x......,v.O..`..T...ql.p.$....'..l....q...OJrT..K.m....D..`T..H.({b,.1..lX..WSq)..A...J.L..)L.HB..#Q.adY..N./$.j.NE.D.hxu..f.IKq..D.W.\P...........K\.wd.X.....8.+...XP.....`?Vb...aA..;.U=.r..H.+..y....<.C..h.g..~o.^..?V.o(,./L)\....-\a.2L....(.e.Y...#..............1A"U...b....h...O7..T..F....3...8.9k0+e7.I6N ...l6.D..$.@..^.I.\.'..3)g..W.!....S..Z._;.7..W..o.Y...4...\.K...U.c...s..H4..B;...x.6y..DEp.T......j/.P..@V.^.H...Wv..b.K5!4...0'.[^K.....!.=.,a.A.Q......P7..V.l.L.H...^......6..0......B.lJH.P:.hbP.t...<..y<*/...fM..?u~=.,.%c..........Uy...vD....>&.}.....%...Ab.d;2P..a.1^g.^p@8.........z-]..'.fR...4.l....Q.W.....;Y.'0I..\...D.x.A..{.S...v...x`..K..fI..r.....gHo$.. ...(.4.X...\|....2....+Ni.......Nm.....x..k.J...z7..VX^`..q(.=.@C@..`..,......[......oBCJ.EM_.`.uu.X.V.H..}.V..I<......k"4..9...)....A.4AR. J.)...t..../:.%u...v.nuLR......

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5341), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	6286
Entropy (8bit):	5.186210803303336
Encrypted:	false
SSDEEP:	192:lLe+im4u0TccE/tybTKyBiwRG9cQf8zQ5CtKWOJeN8e787lXg7WHFVHUFNHrRg3:lLNidFBE16gcwcQkz4Ctb2eud5XcWHFZ
MD5:	37FEC7E0CEBA9180658072576393CCE7
SHA1:	D13A65042C659FAFFC20C2742CD02D466DA20E72
SHA-256:	11F24140F22F336529A89C2EF3A8C39263C2D48979DD5F4C7C700B022D14A650
SHA-512:	77AD8CAE25B0D2EE3CD6ABC0B3D24BFBD5624A2AF0D3F3C6F694FA87648CE7F371D9CF4AB23C0E4FF467AC4BB4640DB83C197F3F08EEC3C78C03D4394045067C
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/scripts/jquery.validate.unobtrusive.min.js
Preview:	/* NUGET: BEGIN LICENSE TEXT.. .. Microsoft grants you the right to use these script files for the sole.. * purpose of either: (i) interacting through your browser with the Microsoft.. * website or online service, subject to the applicable licensing or use.. * terms; or (ii) using the files as included with a Microsoft product subject.. * to that product's license terms. Microsoft reserves all other rights to the.. * files not expressly granted by Microsoft, whether by implication, estoppel.. * or otherwise. Insofar as a script file is dual licensed under GPL,.. * Microsoft neither took the code under GPL nor distributes it thereunder but.. * under the terms set out in this paragraph. All notices and licenses.. * below are for informational purposes only... .. NUGET: END LICENSE TEXT /../. Unobtrusive validation support library for jQuery and jQuery Validate. Copyright (C) Microsoft Corporation. All rights reserved..*/.(function(a){var d=a.validator,b,e="unobtrusiveValidati

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (657)
Category:	downloaded
Size (bytes):	515472
Entropy (8bit):	5.694445641910104
Encrypted:	false
SSDEEP:	6144:5BFr62CZXtgv1BOziSb3qb5DUOzxklE+ceVGdAxIBhH27i6r9YPOPqJtUzl8m:5BovgvBXRAxCIG6remY/m
MD5:	F989B2A4486B04EDFF93AEF40F36584E
SHA1:	02234BA0B3DDA2CCCD38470F35DA5494069B1186
SHA-256:	52C308157B0F273A5F4F67BB4F28CCF47C24A68FBC7D0226D49BF4EEBACFDF97
SHA-512:	D725F9B39F13794BF0CE57F5821A49EECF2A0B55C73EFBF218826C9F001514FE5C6FD290D553638C36EBC7D6BD0FAB29C0307F00E894AB9D0353093E2288752F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1478 x 473, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	279269
Entropy (8bit):	7.995043192798841
Encrypted:	true
SSDEEP:	6144:OTQ+gTvauel3YOxTTWWHLZILjKr+oZ1hRULFbGR3+35EFYlQQ:OE+gaTpy3cRZVULF6x+3Kc
MD5:	881DAA7A42283AB22CB8A5F0D06E1EC2
SHA1:	50B103FDC169029928278954B9E64238E7E435A4
SHA-256:	0FB2E0F08A09A383E311E851D0325E3A70767EEA3E33410441C550289C0A9359
SHA-512:	6E17391380E33ACECE123A2BB7CD928B927997D42E3C5E105014577BFDAAD0EE4ED3E77D6A46E2B91454BA581769B58C2BFDB711475D8FED54B3343CF8272E38
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/jfwonuut/ilsole_csr-it2023_logo_en_hor.png
Preview:	.PNG........IHDR..............;......pHYs...#...#.x.?v.. .IDATx....m.Q...NKm..R..;.A..a..F.......O .....K...-.....0.u...'.u3ap.D7....Z........Y9.U.........sze..........U.Z,"t.I'.>......%f&"z..).L}.$.D."..RKK.o..q.....t.jZ........j.t....5..bf.E.T%YM...K#;~.R...!..5..C.Ku...H.......Yi.Q..~.H1.CR....r.u...N.5...0.0..v......We......W(..\...`..h..uM.>..D....>.........Fx.b..:..8#..dn....q..<.8..-z....+VB..o. ...l.G.}.Of...%k.r...?a.X{..0.....l.Q.g.2.T..s.1.M......Q.\w..U.n..u.0....Atz.:.`ym...I.DM6:v.d.O....K..9..F..-..n....X^.;.)..7#.!a&.J...&...M..L..}#Y;.....6......n...i.&.k+?..>..M.0.H.,...;...5.3..Q....}.........jMn.l.l.....D.y...w.2.e..J..Uv......l.}.5.n:u.&...O]&...<0...._v._.....#T...o.$=....G.sIH..f2...h..._....d..LP........;Y=S..K.........B.G.~.^.{..X.X....l.x_.]...M..3-..P.....-".&..0...M"z..\|.......9.. >..N...............DL.".b.8.1..a.f...q........-.y..K...]:`.~>......!:..7......ub....yBG....f.R..wA^A.....}`\|.?......%.. ...+.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	dropped
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/session/1px.png?settingsId=o_tc3l2da
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1365
Entropy (8bit):	7.419859726940909
Encrypted:	false
SSDEEP:	24:N9P4PcpA9YgeM5sB5PGkaeH8U8gl7PtBLTqp/HJa8jWTTYLZlr:N94k9l605jaecU8UJYjvLZlr
MD5:	C62C5CE27E30F00B5F7CC2653E82EC13
SHA1:	25EFC534ECFB6EC513BE8FD2D4B330EA4F649C83
SHA-256:	55A793213D3A2CB8D2AB20080E811564F296E6331CB840180EBA00574BD68A7B
SHA-512:	BF79D64805851A8EF72331CC5BB8A5CC66E45E66ADA44D194BD5B0B36FE024E00CD14A6A719CA833F65EDB1EB71411FB0E74610C59D9A4B137C4C762EAB5D9ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...;h.e......S'.N.v......E.b..t.8..f...........4.PZb.....X.&.\|.W../....9\..l......./.....-....../.~...w.......9...B.X>.y<sf9..v......`M..-.t.k..q..k......aM@...DX.P....&..S.".....hX.P.......o.@4..(S+..k...Z ......@.5...$..k...i ...u...5...-.aM@vz.D..<....& ....aM@...DX...$..& -I."..HJr.hX.0.d.......@4...F...k...M ....'.@.5...2..k...u ..Ne...hM<.....4>..(&.#+..b..r\|....~..+.#..6..?.&.....aM....DX.0....&`6U."...I5.hX.0......L..@4..8\..k..U} ....'..X...@..............j&...&..@L...6.1%k......j .s.&(.@....T...k...D..J"...&(.@t. w..1k...DO..r$.=.&.@... ..1.k.......R&...&H.@$. 5...k...D...R ...&..@d..`(...k.!.Df...$...&6~...tH 26Z...{;>..M.#....x..x...OA..9j....S..^...S./."s.....+q\|{..S.....h5,...c?...tH 2d5.....@..".V.C...Y..I .f504.H..@."1V.)..DX..H ....xa..8...OAb.b@....+q...jo@..b V.9...Y..D zd5.....@...cV.9...X..@ :`5P..h..@i..%V.%..9Y..L .`5P:....@-.bJV.5...Y..H &`5P+.8..@..b....

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	585
Entropy (8bit):	5.125561689392954
Encrypted:	false
SSDEEP:	6:6v/lhPk0a1lmm8XDd4333333334+o73g+33333333ITp:6v/7Gmm+u33333333roB33333333I9
MD5:	F64FB7B06291A6CDF9F52358A5A2E244
SHA1:	891A8E45E09EA650A9BCC9D50E47EF14939A0D2A
SHA-256:	40F4B93F53CCFD5510F40DCB543126FA6B766EF2DF53DF11A0C52584BEA2A57F
SHA-512:	68635F77951F2C4AF978FAE7BD0FBE42F044CC2D7B255A8A8DCDAE5B99E8C54C28C2E475D6F3E0C7A2251962AA0524FB3282EE18305EAE745ACDCB63B9EA15DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx......P.D.(..B/b9.d...4!.\|....L.{x..1..~=.F..@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@._...<...~=..^,..m..q1.$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@...i...$...s.....IEND.B`.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/fontawesome-webfont.e9955780856cf8aa.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5219
Entropy (8bit):	7.926417902741636
Encrypted:	false
SSDEEP:	96:mtjn95Z5n7euisgZNGvafMeRPxH/soi2GuMahD7OVxQwixIzS2Y7yqSlquuXqa:0jnb7euzgZNuoMeRPp1GuMwwxWII75SG
MD5:	936CB91523E7454BFBE5373DD677F727
SHA1:	FA63FB2B5DEF7B46B978C010518FC0CCFF110BAA
SHA-256:	BC2E0DF7649DAB6BC6C941BE3CC5CB4B5FBBC9C4B6CB3ED8CADD76BE7EB4D037
SHA-512:	CA7083DB5B506625147AF506FE2F52F1B2CE091BD0ACABE1B0818451B28AB9ECDE7DC5CAC7720934C6168542777F84B4139E6544585D2357E4D1415E6F403BE4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..}l[g..c..X?...%R.)t.....!`..B.`..1.:i.`hC.R.6.tmVM.e@..+Bbb....."..i-...-S.MM.ikYh...&.c..y.7.v....{..'Eq.;.v\|...9.='.....?.g...!.X.I...<~.....{v. .N_..D.....<..qyx.r~<.W...f.@..Yyx.Q..S....".......7F.....?.G..!..p..........O..Xx....\|U...8..B....B........-.G..o....02.O.R.T/.....-yh.Q...........H.". .......Q.....z...I>7..C;z....H....<.......M..9...H....K.D"..^%(......o...{.e..4.#...G..M...=wP&.o...\fX.....M.W.R.7o.C.n.m_....!1.U ..}L}...TB`...s.dj.&.M.K..[....e...nVB..k..!$F.G.m....E.Q...n...W..I..,.e./...O.f.5..W....q.b@.&...>.....y...?Q.m.b<.Y.)z.n$.T%..[..P-;.....mB.....\|.Dr....k..Y.....+...[.O.b .K..73#......i{..l3....mB......Cf.....\|.Xf.m.Sbh...?AH.,.Dv.L..^..a..^.w.~..,.&$r..b..an.uu..3g..\|.....z..l...'.m..?108..!..m...^.=.7.3R..p`I......fO....\|.$4.'.Qp.AHh...<.._..6.!...>..Nv.&$D\...E jMm......O..#.....WG./.e..V.mB..@....,.j......M\|....rB...@4.n.T....l..`...p..!..o

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpimc_rgi0", last modified: Thu Jan 11 12:39:48 2024, max compression, original size modulo 2^32 567
Category:	downloaded
Size (bytes):	318
Entropy (8bit):	7.29779667581939
Encrypted:	false
SSDEEP:	6:XXAMfa4z/kBLRxGb35H0uCCXjzVQQmiq9RRudG+HLkAuzJfdZdp6zuUHQY2QVL6C:XQMtkBLR45HDTz3mX9RUcaQJfbr6zHHt
MD5:	8A44193EF5E190A9E938F6697386742D
SHA1:	2C56BE8913D5AA6B7435F8AFE04B385934B3CDED
SHA-256:	3F9295321D121E65BFC16E6D35A71A08DB481E5E0903C5883FC2B4075A7F1A31
SHA-512:	0CAD8D651EEDA448B4D2EC1E77F60FCAEE9E2C67801AA4F491AADB027AD17106EB4981EEEE6AE3F3C0D61F23BF6394DDE3584D4956BFCFF1B14550000DB65796
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/SecondLayerUI-6436166d-84b7e885.js
Preview:	......e..tmpimc_rgi0.u.Ao.0......S+E....&.v.4i..v7..Li<.i.A...BE%.d+...S.S...{.&........V...V#.CN.Yz...8.[Y..,....u.x..\.....}X...?j..v...........;..y....o...)J..~...!.,g.y&:..h\|.....d6n...6....=F.'...&.<"^.f..W........,.<..'.1..,....z~E..,....U.*....+.E.J....g.CMF'.H..}..h=.,.,....h..&.m.S.K5..?.1.7...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.084249217845464
Encrypted:	false
SSDEEP:	3:HS75hPU0E4GJ8+WniuWthyH49GruCRI9ypzth3H4Gk/n:oNEL3G9qsLi2KQxLk/
MD5:	26DC99688CD75FB88F258A40B93CA97C
SHA1:	4666E0F37939318BB14FB9EF775641B31C8F43E6
SHA-256:	A57BA3D82B18CBC1D4E58AD2A94E372F716285E49A553A93231FDA154793B177
SHA-512:	3B0F2EB4745BCBB53C0624320515C7622E2CD86504753C805310C7914D292C6776C40A01F71AC12F2EB2164D62BE923490FEEAE19D56DE4D6B80E3E30C5AC3DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlwyO8xYGkhEhIFDRYweJoSEAnSAg-9UBvBlBIFDaqYN6ASEAnT9g6K7dYJaRIFDQpFu5QSEAl--YvHEMerBxIFDWUhmeoSEAkTYgGG5JYGdRIFDW3a7h0SEAkfhqy5ie7tOBIFDce0pOgSEAmkOOph0u9mVRIFDXaskqISEAl40EmdKYUSnBIFDWVN6Z4SEAm1YaMVMdKLsxIFDU5sH3gSEAl9R2DJFAyorRIFDb-2ekQ=?alt=proto
Preview:	CgkKBw0WMHiaGgAKDQoLDaqYN6AaBAhkGAIKCQoHDQpFu5QaAAoJCgcNZSGZ6hoACgkKBw1t2u4dGgAKCQoHDce0pOgaAAoJCgcNdqySohoACgkKBw1lTemeGgAKCQoHDU5sH3gaAAoJCgcNv7Z6RBoA

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	621
Entropy (8bit):	5.448656948004224
Encrypted:	false
SSDEEP:	12:6v/75aw2WrE333332bp33333hnZS33333nIHN:G/iUN
MD5:	0302B8CA3EE71EC8445CF4E4EF57DA82
SHA1:	7B587580D2B2E1B2493AD693FACE9AC7A040AF8A
SHA-256:	D2124A23CDF9058E94E9927A36390DF1347279EE8DE8A72E56ED471A55BB65FA
SHA-512:	4EE8B7CFBB2E0AF0D59996457975CB7EC4188F7296C4967616C95F8EB0A4072F1707F3F31F9635215368EA9D7719352FD6DD5BBFCA3C98E5868E1E3391610324
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...MDQ.EQ>..3.,.1...3.P..!ii.@R....xP..s.;X..#vr..u]..f.GF..@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.i..=[...].o...e.......$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H...../..&'._....X..,W.....@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$....~..4............a..}....IEND.B`.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp55ocxdsj", last modified: Thu Jan 11 12:39:46 2024, max compression, original size modulo 2^32 2217
Category:	downloaded
Size (bytes):	969
Entropy (8bit):	7.756156680786435
Encrypted:	false
SSDEEP:	24:XslL7xIzwl1B+DXaiweiHi9m8tbOFbTOuQGhpy:XV1qi9dtbOFbTBQ
MD5:	DA73FB71831183FA611AD38C5334F1EA
SHA1:	C51ED52522DFCDFE951F15063AE31F11CE480977
SHA-256:	E0DE0B5E9928A69525AFFE678E8787BF69A1AD4D08B515117122F88A98E27E27
SHA-512:	B091704C129E23ECCF56031C9014774AD768050799BDAA090C88BE1708B4952EE82268EA6C8DE861DD991523A749C6350C5C7122E67D717A17598CC80E06502C
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/DefaultData-6c4a9f0c-136e5ec3.js
Preview:	......e..tmp55ocxdsj..V.n.8.}.P....@...E.a.....h.../....-..I/):-.....K.8..H.!...3.Y....]..C....6^.Pxa`....^............z.../6.....E..^l....P9...t.$.....!5A.6Ne..XZu.@.....6kf.,...[aQ....S.KgT......N.+..m.O..\.Lx..."G........k..z..J..w..".b..I.yz...m.Fg.Zm.]^....q$%.....n....r5V..UQn1#..7...h..It....v..&..N..7.{.B..7.Q..v.../.m2H..V-..Y.A.<.....y&,.p.B.1.a.{6dB7.=_........t.%.....:..bY.....-S.qBA........$e..(m1.M...,W.i....Xl2=..D]z!.c..[...-.....-.....0....;.H....j..t~2.C...^^.TYl(,.....J<....6.Q.5.1.......hCd.y......nq.......$..}yH.?..qC............v..D.Xm4z.1..!Kn.3=.g..G...E...i.5.....R2.....qD..l.4M.a$.........>.+..-{.\Lg..r!Z.....2..Ss.!.y.p~...t..,a.V^.....F...x.&.?kQ.k..Z....e.R6A....g....H...ny....uT..4.....jPa.\a..y.......gUc....u.-...V5.l.../P.:.;..\|4R..v...hCH.r..].>...I...qr......{...-...V...o..8..H..9!.8.SBlKH..2n..a..=.A...E.D..6.....b.w..E[...+E.$:;.q.J....4ZJ...._.$..!9.N......(......

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1498
Entropy (8bit):	5.0665970464249135
Encrypted:	false
SSDEEP:	24:2dvAWKLfqXMPuSoDJgI+JwPIsCdgLrnd/AvBWJx+9KWptNsJ26aJnCM:cvAJf+MPnu2rJuS2Lrnd/AvBWXXWp8Jm
MD5:	2768D510E5A3EFF20F65A0D08D8C96BD
SHA1:	0B4ACA1DC7D21D80ED31DEE38FCAC50ABD1C7439
SHA-256:	1B1210146F7BD42278AB232EA0526162C72CB6D0CB5EEF386334940B616FD125
SHA-512:	D271E78062A9FF58B44D468614B18805944D233B8D33DAF657E22244B69523D6A3A4AD12FF6FF2EFF714952AD281FEFAE5ACFFF24D249B81F2310A2CC98D415A
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/hsentkoi/alt.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="43px" height="38px" viewBox="0 0 43 38" style="enable-background:new 0 0 43 38;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g id="Group-7" transform="translate(750.000000, 2006.000000)">..<g id="Stroke-1">...<path class="st0" d="M-711.3-1968.3h-34.4c-1.5,0-2.9-0.8-3.7-2.1c-0.8-1.3-0.8-2.9,0-4.2l17.2-29.3c0.8-1.3,2.2-2.1,3.7-2.1....s2.9,0.8,3.7,2.1l17.2,29.3c0.8,1.3,0.8,2.9,0,4.2C-708.3-1969.1-709.7-1968.3-711.3-1968.3z M-728.5-2004c-0.8,0-1.5,0.4-2,1.1....l-17.2,29.3c-0.4,0.7-0.4,1.5,0,2.2c0.4,0.7,1.1,1.1,2,1.1h34.5c0.8,0,1.6-0.4,2-1.1c0.4-0.7,0.4-1.5,0-2.2l-17.3-29.3....C-727-2003.6-727.7-2004-728.5-2004z"/>..</g>..<g id="Stroke-3">...<path class="st0" d="M-728.4-1979.6c-1.3,0-2.4-1.1-2

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30928, version 1.0
Category:	downloaded
Size (bytes):	30928
Entropy (8bit):	7.992693499896298
Encrypted:	true
SSDEEP:	768:cqIWUWfTJuJ3SRXdbmE/PBNN+6GT4XJxay/DGHNUJSE:czibIJ3CkE3jN+yLCHNUJSE
MD5:	AC0D2859EA5F8FD6BCB3C305C08EC184
SHA1:	7F6C17E3E592CD8BD346B9CC261D8DD961B8AEF7
SHA-256:	AE919A7C9F25F0FD97FC18E398AE8E453FCAAE487E4A4CB4F896E7FECDE4A780
SHA-512:	2DA77A65F24B3A0348259774BE36CFE6149ABF805D17D7D8CC58A3513446C9E505DA06A8D73DCB1448EE1C4414B25B074A8B85AB19DEC1D5130B179388265C40
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/JTUSjIg1_i6t8kCHKm459Wlhyw.bbd0be5a28f4fc95.woff2
Preview:	wOF2......x...........x^..........................9...R...?HVAR.^.`?STAT.8'2.../~..........F.0..v.6.$.... ..x.....[..Q0v......_....v...y....#....?.8.C....w.1....[(..B.:........n.......oS...nTA.uL.....3.....5.Q.TfO<..'...ty`...Z....z.....b..iyR....3........<.g{........@YA.....I.....<....U.#jT.X5..`.....K.0q.%r..9".(.a.N~.M....q.1..E..Tl.3s.=..3.mg.&z....iN.%H......!F."J\..$!F.....m...v.9Sa..&.<O._..m&.A(.RQ.B.....W.jL....w..r.^1M..yvv6b.....D...$[...w.B..8Q..z..........r...4.K.9D..n=vU..>..K...M.,.....%...B... ...L...7G.NQ..e.Y...8.$/.#c/S...R..X@:......:q.........j..c.B...$$.X:L..?.=X.Z.N"?.9....D.....{....x.\|KPhz.C])..i..4s..a...;....:.q.4..........8Qz.(.'....w......sH}.w........jjj....j.j..j...7[.v.<4.sf.s..>...k...H..OO.....gf95.......w8....y.....3...<...X..g...".J.%.].).....i.s........WL........^.{....^2D..2....If...lQ.. ..F..U).....N..R.-...B...1A..R.d.0.$..oj.R.^...H.t@.[\|.....m...{..;ci%m9.i.......@+.D..T...s.L8........o.W3.M.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2524076
Entropy (8bit):	5.280944134306843
Encrypted:	false
SSDEEP:	24576:3BEu/xVZSYBVMTBZWBuHF3tpK8ZFflakQPo+K/C17U77CzCANyJYB+KS6lakQPox:fMv9F3ZqyM
MD5:	29D6D676AB8B275E8A5E80F290BBDC7F
SHA1:	ED6579E275F9BA4F5FD382D337F544675AE3463F
SHA-256:	FE5530A503B4D7B330E5AD6CE09FD7F2B852D4EE0A0D2D2767B9D8E724D5BCA7
SHA-512:	EE741431504280D156C56D086571B749D411C98C30B3875FB8EAA5C686CB6DAA573B84A420EABB618E068F5FBA04733E29818CC5C1095A7BC2A9790E23E318A2
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/i18n-extra.0c26dc932204e253.js
Preview:	"use strict";(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[547],{36154:(u,a,o)=>{o.r(a),o.d(a,{default:()=>i});const n=void 0,i=["af-NA",[["v","n"],["vm.","nm."],n],n,[["S","M","D","W","D","V","S"],["So.","Ma.","Di.","Wo.","Do.","Vr.","Sa."],["Sondag","Maandag","Dinsdag","Woensdag","Donderdag","Vrydag","Saterdag"],["So.","Ma.","Di.","Wo.","Do.","Vr.","Sa."]],n,[["J","F","M","A","M","J","J","A","S","O","N","D"],["Jan.","Feb.","Mrt.","Apr.","Mei","Jun.","Jul.","Aug.","Sep.","Okt.","Nov.","Des."],["Januarie","Februarie","Maart","April","Mei","Junie","Julie","Augustus","September","Oktober","November","Desember"]],n,[["v.C.","n.C."],n,["voor Christus","na Christus"]],1,[6,0],["y-MM-dd","dd MMM y","dd MMMM y","EEEE dd MMMM y"],["h:mm a","h:mm:ss a","h:mm:ss a z","h:mm:ss a zzzz"],["{1} {0}",n,n,n],[",","\xa0",";","%","+","-","E","\xd7","\u2030","\u221e","NaN",":"],["#,##0.###","#,##0%","\xa4#,##0.00","#E0"],"ZAR","R","Suid-Afrikaanse rand",{BYN:[n,"\u0440."],CAD:[

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21639
Entropy (8bit):	4.893055202495686
Encrypted:	false
SSDEEP:	384:P2L3iwt13Ej3Tjdjzj0qh/SbTiAGnZ6gQ4ASeaRs4mRkwma4W5:P2j113EjD1IqheTyU5nrJmaZ
MD5:	10A5F5D70F7902AD3E1F8B8B89AC646C
SHA1:	DBC4A6D6942735365FF0558BD7668759B46292F3
SHA-256:	B01483D69D9701D85B823FDEF2627DECA7292BB7D08932CA2933B1D74434409B
SHA-512:	AFA04FF84166F28C638DE060111CAE7CF41495386F548518BC385ACAFCF2A64694659DF25A61B1CBE130B6064D8B533A48A7572CD3EA5598815FFD0873F6BC99
Malicious:	false
Reputation:	low
Preview:	{"settingsId":"o_tc3l2da","version":"7.5.65","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"http://img.usercentrics.eu/misc/icon-security.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":true,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":false,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":false,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdown":0,"o

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp4zx7w985", last modified: Thu Jan 11 12:39:53 2024, max compression, original size modulo 2^32 1740
Category:	downloaded
Size (bytes):	808
Entropy (8bit):	7.736894383092689
Encrypted:	false
SSDEEP:	24:XxyXKjzMxgM3pT5caCC8UPQ06IvH+BtQwc/:XIKjzmgOB5XpBQxIvwW/
MD5:	22E9AFD66419AEA5BDFA415ADACCC146
SHA1:	2CB92152C558D670701EBB750873072A6370E279
SHA-256:	BD9C8CD4A513AA6DCAA7751F9923670DAEBD1CA42E8E8712EBB2ED8476399E5A
SHA-512:	F360108FC9C5DE1E82117B0677409891B6061393D6422BFA79D58F76004A54E3F01DF5F5A3E2DD5FA39021DB510ABD097A4493262FBD83C33C2CB78E59C8D5DE
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/index-23e52cb8.js
Preview:	......e..tmp4zx7w985..U.n.H.}.W.}(F.W......d...7X..EQ..D.JF#C#..I..3..$n..O..!..$..$..tZ([...H....]....1...1...(.!..4F..jL..4.}.!.@c.8..T.4...G"...'a...o.A"d.Zu.1ft....q.x..q...sv...{....cp..BT..24......C_>,..sq........O.t&N{.i..A... .Mfs.%.<.T....B..G.C..@...O.\a...Z.$..$...>.U.+r.. k...V..E]..>,.t8{.."..n..L.....f.F(2k....+p.).v ).'z9.~...k.}S\.".Y#.....G.(..j.m.IT..{(x.a$V....k..(.Ae.T..W1.....@>..( y....zI..u....~Mx.P...Iw..l..SN........f.&....j7.0.Z......y....0d....aTp.y`. .f......{..h2...h8.{.+X.k.?)..V).G{....e.y......X.0Q..t..4.^...#.Mf....;.&..g^mTm...`.&F....4.gl[)eyZ...X"...............2K....CKLV+NN.AgM..j.%d...f..v........e1.Kb..I..u...D..VU["...^R.A.g}.x..y)......E..Z.........T^...ZG.OT.#.s...T..e9..=l._#.......Z...T.W.._%`}....

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 184 x 82, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6513
Entropy (8bit):	7.902108824767374
Encrypted:	false
SSDEEP:	96:x3f2aI3vW/VJ+j8gsba13Q7HVLdag2jiUMuXRvRuLESouwvPe+4N2TK+eDnYZKbR:Ye/VkJs37Vd4jUuuLESsvPDI+jiPbj
MD5:	15B95E28998D10E5E7A8518D84B8A988
SHA1:	03B81C4AA60F59A0B4C419B72057889EA61FF431
SHA-256:	AC872563D7CB4C74753A530C118854BB4E36C4B1551DE352DE0580449669B3BA
SHA-512:	8602C4E1234FBFB1B10B09261A760B855E807B125C1321F1B503B45FCF4209ABB9D9C9F40F52ACA7D8B1884886788DDE65C69BCCD59BE2D8336D29E5CD5229E7
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/assets/imgs/logos/Logo_Footer.png
Preview:	.PNG........IHDR.......R........#....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:B025FA174E3E11E68A18C06F34FF1DD6" xmpMM:DocumentID="xmp.did:B025FA184E3E11E68A18C06F34FF1DD6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B025FA154E3E11E68A18C06F34FF1DD6" stRef:documentID="xmp.did:B025FA164E3E11E68A18C06F34FF1DD6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...u....IDATx..].....`E..*.....b.'.Q..._\.`........"1"...AV......."J... ....5...D........ \...........^..}gg...

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	5.448656948004224
Encrypted:	false
SSDEEP:	12:6v/75aw2WrE333332bp33333hnZS33333nIHN:G/iUN
MD5:	0302B8CA3EE71EC8445CF4E4EF57DA82
SHA1:	7B587580D2B2E1B2493AD693FACE9AC7A040AF8A
SHA-256:	D2124A23CDF9058E94E9927A36390DF1347279EE8DE8A72E56ED471A55BB65FA
SHA-512:	4EE8B7CFBB2E0AF0D59996457975CB7EC4188F7296C4967616C95F8EB0A4072F1707F3F31F9635215368EA9D7719352FD6DD5BBFCA3C98E5868E1E3391610324
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/pa5oke0n/bulgaria-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...MDQ.EQ>..3.,.1...3.P..!ii.@R....xP..s.;X..#vr..u]..f.GF..@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.i..=[...].o...e.......$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H...../..&'._....X..,W.....@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$....~..4............a..}....IEND.B`.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1893 x 1412, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	144983
Entropy (8bit):	7.846686670638701
Encrypted:	false
SSDEEP:	3072:zxzRy9QWGmNR6EHRKTQpgP2ee8xKlJoj1Z5VgJIC6pXaZ:1zk9QWGAR6ARKTj2h06Joj1TuJIZhO
MD5:	43928D18533CAEC139BEA47E3D751A52
SHA1:	F90DD9C1BDF68CB9101F404068D622A00E826F18
SHA-256:	E766AF3D615CC6F0853F9063BB917C0B32464C01F22E95E88A7B2A5A1C1B98A2
SHA-512:	3A3FC2592856E1AED9124ECBCE65AB2C820FBA8AC001BD80C63D6BE9F26AA6E9AFF3F5B370BE08ACC3D445B5306B638CA24D9799790B15D2F26BF8A9D787D290
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/assets/imgs/logos/Logo_Main.png
Preview:	.PNG........IHDR...e..........g......pHYs...#...#.x.?v.. .IDATx......g}...]]I..-...6....%H@2.].\.L...$@&.7/.f...m.......I.\|.2.3.A..1`....>.93..&X.$..../`.".Mo...S}.....z..........j..V...'..X.....h..w..v.0.m..>..._9...a.".....}C(......D....f..G...3....#..@..r..xy.e.......#......."..w...#l......Y..O.n...#i.{,^^.V.......B(.....s$.r.B...+zq.Q.cN.c.}J.........`"........T...l...m..}.................C.......P.....z....5.\|..\|.5..9Hh..$..?Bgk...Z.Z..............F.k..i9.6.Z...Q....n..da.a...H........B(......S`.....h..5T...f.JV..S%...m.}....=\k......T......@...=J.......S..J..E..E.....k.@.'.-.l............0..e.... .h0....m... \|..]...>....7.-.l...j....Q......B(........ak..e.o..$h]h..j.........,.-.k...G..6.i.U.........,....T..#.&t.[7..._}..!.B...Zk8Z.....u....V.k./.h.i.....{.......!...Q..+?f.l...6._}...k.u....k.?.V.r}B.&am...~H{.......]......`.V.fA..*?F.B...,\|..^...m..}Q5...n..............'.......,......a..A..J..g..:.-._}..a.Z{..j.Y...e.m.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 683, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5837
Entropy (8bit):	7.703850118069366
Encrypted:	false
SSDEEP:	96:i7IilfgKqTPtkyiXfCj7ZCxtEJ28RsCFRtX9P4ii0nIXp7AWeMFrlGTZUOQTyDPP:InY+zKjOtEJ7RsC4F0ngV1FeX
MD5:	D55B953D66770AE5971DF16F1D482198
SHA1:	4D6879F3E676298B868A781EF1663589C6DDA2D2
SHA-256:	44D9EE101E35BB8A1865E3A76DFA22440CC1965E8AAD2FFE297E7B97B9DF592A
SHA-512:	A13F32EE8F6F110A53F26D12591D15221191978F0665DF575EDF69C1A009EDB5224C4C9FF91F66D2BE6FBA80B952F50B204A2A736088BBB0B1DD8DAFAA0F03BC
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/2sdnb5pz/flag_of_vietnam-svg.png
Preview:	.PNG........IHDR.............X.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.%..+..e..d......(........`....._......'........(..[..Z......&........V..U............P..O............K..J............E..F............@.....B............<.....=............6........8..\|..{........3........4..w..v........0........1..r..q..................m..l............,..g..f......)........*..b..a.........]..\............W..W.........Q..Q............L..K............E..G............A..C............>............9..:..~..}........5..y..x........2..4..t..s.........o..n.........-..i..h.........c..c.........^..]......Y..X............S..R.........N..M.........I..H............D............?............:..;.............7..z..z........u..u......../..p..o......j..i.........T.............?..k........r.'.....bKGD.........tIME.....5........IDATx.....e..p.Zp...=(...J.k.X.+.`).5.K.j..K..Z..i)V...R......K-+.4...R.J...5...._...rv.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 536 x 748, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	854572
Entropy (8bit):	7.996978372280195
Encrypted:	true
SSDEEP:	12288:+XCQrwU21UCv0FkYsXuoHhW+tt8LEUsOBwlxfodYqWna7a64pmBW4a2xB37/Ta+D:+XChvM2F5W+tt8+OijTa76uWXo5iyOI
MD5:	6396E99EEA56FC06B9A6C4E8A7C3F2FA
SHA1:	35A94ECA7B480BC08C484C3BBD8DEDB8D6571B27
SHA-256:	A07536D8F3AFA44D74BF78626F075DB41B32A9BC7835745607811B4E18478ACE
SHA-512:	D82887F4DA3F048668A170314E37A1505F2FF996AB78432837FE2216E2BAFF85AFCB8BF171D88C19631693EA4C834199644560072D8AC26BA94243FA0B49BAA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a....8eXIfMM........i............................................4Uk...@.IDATx...K.n[v...{.s.<NC.eK)A..T=..S..M...`:t.....4(..K.,...B.$..i.H.Y.....}...y.k.>...sG.5...x.e.5...."..........y............G........G..._<?>>.....\|......t..{............}.q.....JP.AZ.`..:...5..^....#.bh..a8..6..>><.xxzz.0..x....j.#cr...F....Y.(W,.~k..~j..d.d.b..j..J....i.b. ...@..K.>d.:.."8.J?.kj..x.N..s....p....~H,....z..F....f...F}h.`..=5..E.{G....4.b...n>..lz.F..{H&.SO;9..1...\|^=...uuL]Z.rg.....q.......-..2..._...._......B........_..../.~.....<..m0.....=.I:O..?.';.....5e.....Y.q..Y..0.9.....I.3....`4.W."'.W.....qs.}..O....}........9.y.`>$6.d.....).......u........o......M..zx.$.....>...o.~...._.}.9./..Ku..yH.F."l)....K.B.8z.2b.2..h1...'v+'....k....[j..\|+'..M.y..6.8....o..&.(..FW.......u........{<~.....\..{.X......d.._.....$...P...?.a.n.......<PL........e..p.Y..f`5.,...v.4N...83)....O_..'..O..~.....~...............+.....

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1191
Entropy (8bit):	4.96769440968878
Encrypted:	false
SSDEEP:	24:2dvAWKLfndSuIc+J6p+SV1Asy1n/jjKFloOFi0H8VXEG:cvAJfdShc+IgSV1Af1//y1wc8FEG
MD5:	CA255E7B606CEEDBEC3845245B490753
SHA1:	F906C26829C877D31247F4C125777E7D4D84B9A3
SHA-256:	7F5E14BB3B5567259C0EC040D8FEED3869C089E6D90A59386F47CB095870858C
SHA-512:	F7E57FD365BB1DC01AD30F490B79C490B9A38938A259C3CD2E92E73B5CCA9898ED44488CF2DA684E02D96A8566270ACD3F4D2A0C898AD6BA6624CC3F09B72E69
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/b5ohr1ef/foglia.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="31px" height="47px" viewBox="0 0 31 47" style="enable-background:new 0 0 31 47;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<path class="st0" d="M31,23C31,12.1,17.2,0.9,16.6,0.4c-0.6-0.5-1.5-0.5-2.2,0C13.8,0.9,0,12.1,0,23c0,8.2,6.4,14.9,14.5,15.4v7.4..c0,0.6,0.4,1,1,1c0.6,0,1-0.4,1-1v-7.4C24.6,37.9,31,31.2,31,23z M16.5,36.4v-6.6c2.8-0.3,5.3-1.8,6.9-4.1c0.3-0.5,0.2-1.1-0.3-1.4..c-0.5-0.3-1.1-0.2-1.4,0.3c-1.2,1.8-3.1,3-5.2,3.2v-6.5c2-0.3,3.7-1.4,4.9-3.1c0.3-0.5,0.2-1.1-0.3-1.4c-0.5-0.3-1.1-0.2-1.4,0.3..c-0.8,1.1-1.9,1.9-3.2,2.1v-5.1c0-0.6-0.4-1-1-1c-0.6,0-1,0.4-1,1v5.1c-1.3-0.3-2.5-1-3.2-2.1c-0.3-0.5-0.9-0.6-1.4-0.3..c-0.5,0.3-0.6,0.9-0.3,1.4c1.1,1.7,2.9,2.8,4.9,3.1v6.5c-2.1-0.3-4-1.5-5.2-3

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1582
Entropy (8bit):	4.998434527336529
Encrypted:	false
SSDEEP:	48:cvAJfGSxisRnSEu8xNrOJ1CvrC1ocZJ3mw00CgI:zJfji6nSEuQOUOZdmeI
MD5:	CE2EEAC93DE03533AFA54F71A0C15520
SHA1:	41EE6B298501FA358E283E964008D8E80C01F1D1
SHA-256:	C7DF226629FC12A827D76C0E4705B6E15D1818329CA5C35EF4729AF4D96168A4
SHA-512:	7B4097DD2E3374A00010C86A10D3D3D7FAA97791C5A65746477A6404E92BD956A44CED5B87861ED2E222EE31B7F9814283018BC4912BDF14A4CAC40EF4EEC436
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="73px" height="73px" viewBox="0 0 73 73" style="enable-background:new 0 0 73 73;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g>..<path class="st0" d="M73,50.5V37.9c0-0.4-0.3-0.8-0.7-0.9l-16.7-5.8c-0.2-0.1-0.4-0.1-0.7,0l-4.5,1.6V3.2C50.4,1.4,49,0,47.2,0H3.2...C1.5,0,0,1.4,0,3.2v56.8c0,1.8,1.5,3.2,3.2,3.2h39c2.6,3.4,6.5,6.8,12.7,9.6c0.1,0.1,0.3,0.1,0.4,0.1c0.1,0,0.2,0,0.4-0.1l0.1,0...c0,0,0,0,0.1,0C73.8,64.8,73,51,73,50.5z M3.2,61.3c-0.7,0-1.2-0.5-1.2-1.2V3.2C2,2.6,2.6,2,3.2,2h43.9c0.7,0,1.2,0.6,1.2,1.2v30.2...l-10.1,3.5c-0.4,0.1-0.7,0.5-0.7,0.9l0,12.6c0,0.3-0.3,5.2,3.2,10.9H3.2z M55.4,70.9c-16.2-7.5-15.7-19.8-15.7-20.4V38.6l15.6-5.5...L71,38.6l0,12C71,51.1,71.7,63.4,55.4,70.9z"/>..<path c

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3768), with no line terminators
Category:	downloaded
Size (bytes):	3768
Entropy (8bit):	5.456072164534838
Encrypted:	false
SSDEEP:	96:QADYRuRGAqkgQhapy+h7fV/FVCFtS4MI+8iEXkOa:QfuRfDPCD1fDEFtvX+8Ta
MD5:	A67FAEFB2E5822EEFDFD563D3D1E33A8
SHA1:	5A1478403DE94B4EF57081F1316F67B3D6E5DC6C
SHA-256:	A409C7B73C6FB34E611979105F0270962A5735B4F23C8AAFD2DB0A67446D89F8
SHA-512:	7412647D1BCEDE061DF3AA69198F541E2D33620A84970E4334E1FFB1FBD578E02D508DD85A3CAE0D38387E421C59449B675DEDD140B632FA35EA3DD58D0BE009
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/runtime.3959d681ae9b2ed2.js
Preview:	(()=>{"use strict";var e,g={},v={};function r(e){var n=v[e];if(void 0!==n)return n.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,e=[],r.O=(n,t,f,i)=>{if(!t){var a=1/0;for(o=0;o<e.length;o++){for(var[t,f,i]=e[o],l=!0,d=0;d<t.length;d++)(!1&i\|\|a>=i)&&Object.keys(r.O).every(p=>r.O[p](t[d]))?t.splice(d--,1):(l=!1,i<a&&(a=i));if(l){e.splice(o--,1);var s=f();void 0!==s&&(n=s)}}return n}i=i\|\|0;for(var o=e.length;o>0&&e[o-1][2]>i;o--)e[o]=e[o-1];e[o]=[t,f,i]},r.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return r.d(n,{a:n}),n},(()=>{var n,e=Object.getPrototypeOf?t=>Object.getPrototypeOf(t):t=>t.__proto__;r.t=function(t,f){if(1&f&&(t=this(t)),8&f\|\|"object"==typeof t&&t&&(4&f&&t.__esModule\|\|16&f&&"function"==typeof t.then))return t;var i=Object.create(null);r.r(i);var o={};n=n\|\|[null,e({}),e([]),e(e)];for(var a=2&f&&t;"object"==typeof a&&!~n.indexOf(a);a=e(a))Object.getOwnPropertyNames(a).forEach(l=>o[l]=()=>t[l]);return

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	4.046935120543495
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGJJAtMREHJxr/4ALpHRX1:YQTiE3AtRHNF
MD5:	CE93584D45494D968E0AEF35B4857BB1
SHA1:	6EE70A1EBD3D36ED5E7EB794123B4DA8D7C74C2A
SHA-256:	8B69E62166BA3ECC77B2460545E400B23D71C816722043BDADD652EB67ED6D9F
SHA-512:	6D08EB8AD9BFD40B1F98C8B2864591870BF3D325EDB7B43E9D046A49CE0A1F9AB7E94FC23AA25E5B15242B06DDBC5BE693E402157F02661C7A5BEE0A3354A80F
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/o_tc3l2da/latest/languages.json
Preview:	{"languagesAvailable":["tr","en"],"editableLanguages":["en","tr"]}

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 716x1000, components 3
Category:	downloaded
Size (bytes):	180004
Entropy (8bit):	7.971717860855083
Encrypted:	false
SSDEEP:	3072:ynZ5nfej3961EW9mnkSgZADXNYZKhX9ZR8Bl3xSMpx5Kamar/vi0CLuLrXI+cs9L:4Z9Gbg1B4iqu49ZR8rhDpx5KN+XlCLUv
MD5:	D906284FBD00C2F97D9C504DD151AC16
SHA1:	45A336C6F406A0117653D3B741DFAF7436E22ECE
SHA-256:	C590F1EF1CA58E68812B9B1C0412180D0AF27DAE766A5AED3D26884E963B22DF
SHA-512:	5DF3D9DCD96A30676A4C47B2AF477CC86F3F6822E91726CC93B3B1130D68428BDB8E927DEE93BD60D3758B4DB66D85A7E5B9CDAC7B9CC7AA5BDA1D5FEA1D4948
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/fvafxw53/cribis_22-05_visualcard04-digital-platform.jpg
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C............................................................................"..........................................s...........................!.."1A..2QaBq...#Rbr...$3....C...Scs..%4DT.....&'5Ed.......68Fetv....7UWXfu......)H....................................;......................!..1.A."Q2aq.......#B..R...$3brCS..............?...k.....a..`..$s&1....)5.\...."...x.kv.Q0...lh.]M.W'.3^...E.N"5R.Fx.:.d..:..D}#...OW.~r...."&....X\.8.-k...{..i.V.!.q.h~PCwhc..........y.\|W....W....^(.....=9y...,... .L.v.QSP..%......{>....u..I.2..!x-."..z....f.r...^.r....a..R.:y`.....`./X0n..[^.Q1.0......b..b...P.6...P..)..b.p.e..2...K...1...yA....S.........L^-..(\.....H..(u.`"P..\|:...N...d..Jd.`.....\.j.18.%`/`...@..y..@r.,XN.ai....../P....L).F6S...5.X)Bp..._.F....>..xm.c./...w....a..k.X......g..E.xG..n.Pb.t.Ln....P...-..&.%K....".].w

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1285), with no line terminators
Category:	downloaded
Size (bytes):	1285
Entropy (8bit):	5.787681984577099
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJlj+KVCLTLv138EgFB5vtTGJTlWtA1r1sLqo40RWUnYN:VKEciyKonR3evtTA8612LrwUnG
MD5:	5C6F603BFD767CE9238FE62E6B345EA7
SHA1:	9088C6887A72E763881A6884B6CFC48AF56AF7D9
SHA-256:	EDF9E15B71D641054EE25FA1BCA69D7B79D799B13AACCB79DF0ABB7AED51D5CE
SHA-512:	BE586D33A146F48EF1DFFF8E6279F42035F94952DDC2FC72C286FC9B64658E8A6204BE2DE451995C2C2780A308E0258C31FA66049A13D4F03917BD2F6EEB7A3F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=explicit&onload=ng2recaptchaloaded&hl=ENG
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('ng2recaptchaloaded');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js';po.crossOrigin='anonymous

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	69482
Entropy (8bit):	3.4529616010472997
Encrypted:	false
SSDEEP:	384:tNPyrOZZZxjME7Mh4yysMVz56qxc+berbzhdwtBiz8N:tNpZZDKhEVzo+SdwtBiz8N
MD5:	964B594ADEB1A231BD2FD29CC97E45B6
SHA1:	BD0A0ECDE874CA9F29FC6DAE55D2189ACA468456
SHA-256:	AF066993671E044E9956A69FD7587462E603BE0DD95398F33BB11A6015534F51
SHA-512:	89A4F9A88D7CA778B1F2A093291FAED3F6BE856CB678A306FF570C0B9B8A0815096E326BE204B22E7BB43683D620D557C46B8002F505AD88C3CD2FA39803F7A6
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/
Preview:	........<!doctype html>..<html lang="en">....<head>.. <title> Synesgy \| The ESG platform for companies </title>.. <meta name="description" content="Synesgy is the partner that supports, through its services, firm's transformation process toward an environmental, social and governmental sustainability.">.... .... <link rel="alternate" hreflang="x-default" href="https://www.synesgy.com/">.. <link rel="alternate" hreflang="en-tr" href="https://www.synesgy.tr/en/" />.. <link rel="alternate" hreflang="en-gr" href="https://www.synesgy.gr/en/" />.. <link rel="alternate" hreflang="en-ro" href="https://www.synesgy.ro/en/" />.. <link rel="alternate" hreflang="en-bg" href="https://www.synesgy.bg/en/" />.. <link rel="alternate" hreflang="en-ch" href="https://www.synesgy.ch/en/" />.. <link rel="alternate" hreflang="en-ie" href="https://www.synesgy.ie/" />.. <link rel="alternate" hreflang="en-ae" href="https://www.synesgy.ae/" />..

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1498
Entropy (8bit):	5.0665970464249135
Encrypted:	false
SSDEEP:	24:2dvAWKLfqXMPuSoDJgI+JwPIsCdgLrnd/AvBWJx+9KWptNsJ26aJnCM:cvAJf+MPnu2rJuS2Lrnd/AvBWXXWp8Jm
MD5:	2768D510E5A3EFF20F65A0D08D8C96BD
SHA1:	0B4ACA1DC7D21D80ED31DEE38FCAC50ABD1C7439
SHA-256:	1B1210146F7BD42278AB232EA0526162C72CB6D0CB5EEF386334940B616FD125
SHA-512:	D271E78062A9FF58B44D468614B18805944D233B8D33DAF657E22244B69523D6A3A4AD12FF6FF2EFF714952AD281FEFAE5ACFFF24D249B81F2310A2CC98D415A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="43px" height="38px" viewBox="0 0 43 38" style="enable-background:new 0 0 43 38;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g id="Group-7" transform="translate(750.000000, 2006.000000)">..<g id="Stroke-1">...<path class="st0" d="M-711.3-1968.3h-34.4c-1.5,0-2.9-0.8-3.7-2.1c-0.8-1.3-0.8-2.9,0-4.2l17.2-29.3c0.8-1.3,2.2-2.1,3.7-2.1....s2.9,0.8,3.7,2.1l17.2,29.3c0.8,1.3,0.8,2.9,0,4.2C-708.3-1969.1-709.7-1968.3-711.3-1968.3z M-728.5-2004c-0.8,0-1.5,0.4-2,1.1....l-17.2,29.3c-0.4,0.7-0.4,1.5,0,2.2c0.4,0.7,1.1,1.1,2,1.1h34.5c0.8,0,1.6-0.4,2-1.1c0.4-0.7,0.4-1.5,0-2.2l-17.3-29.3....C-727-2003.6-727.7-2004-728.5-2004z"/>..</g>..<g id="Stroke-3">...<path class="st0" d="M-728.4-1979.6c-1.3,0-2.4-1.1-2

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1946
Entropy (8bit):	5.085456293077417
Encrypted:	false
SSDEEP:	48:cvAJfYqS0pPQ1/0YkWHxz2GPlAnFk1H9CQ:zJfxhpPy/0YkWHxBlYEdCQ
MD5:	4560A5D152B6B13AB3FAE7B852BFD675
SHA1:	52E7F2D4E1A3108EF6C94867665FA78BC383A6E2
SHA-256:	0A8821277B673984420E478BF79BFC800A5F38B1F9EBFC8F04998BC373854078
SHA-512:	7942711A511E9023C7C9906EB008DD4B312625AED3F325FAF744EE53EFAD23223FAD489F8DC68CEA8FE33276F13E3B233411BFF1CF0AABF6CE50856022D5B834
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/d3nj5svb/coccarda.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="36px" height="50px" viewBox="0 0 36 50" style="enable-background:new 0 0 36 50;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g id="UI_aggiornata">..<g id="C_Home_V1" transform="translate(-755.000000, -2100.000000)">...<g id="Group-9" transform="translate(757.000000, 2101.000000)">....<g id="Stroke-1">.....<path class="st0" d="M12.3,23c-0.5,0-0.9-0.2-1.3-0.5c-0.4-0.4-0.6-1-0.5-1.6l0.5-3.1l-2.3-2.2c-0.6-0.6-0.7-1.6-0.3-2.3......c0.3-0.4,0.8-0.7,1.3-0.8L13,12l1.4-2.9c0.3-0.6,0.9-1,1.6-1c0.7,0,1.3,0.4,1.6,1L19,12l3.2,0.5c0.9,0.1,1.5,0.8,1.5,1.7......c0,0.5-0.2,1-0.6,1.4l-2.3,2.2l0.5,3.1c0.1,0.8-0.3,1.7-1.1,2c-0.5,0.2-1,0.1-1.5-0.1L16,21.3l-2.8,1.5......C12.9,22.9,12.6,23,12.3,23z M10.5,14.4l2

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (544), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	60173
Entropy (8bit):	3.4051450667981995
Encrypted:	false
SSDEEP:	384:CSPyrkZZSLik6Yn44IHITIwI5xmK+berbzhdwtBiz8N:CSnZZSLCLYK+SdwtBiz8N
MD5:	6ABB335A376F165EE6D92621EA3F4280
SHA1:	8753993957CFC895778BF99710C62E90517A8AFB
SHA-256:	559E99ED44C586071FAAE1D3CF98F59ECAF376B7DB198E71710CF9A928569067
SHA-512:	6E50FD26692CEF4E1C35D30DD6AEC7A0865F38C7E0899283527124A9538967E69C75411F37E9D71D23E1623318905B407146BC1186E709CAB51E7A09196DA59E
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/en/who-we-are/
Preview:	........<!doctype html>..<html lang="en">....<head>.. <title> </title>.. <meta name="description" content="">.... .... <link rel="alternate" hreflang="x-default" href="https://www.synesgy.com/who-we-are/">.. <link rel="alternate" hreflang="en-tr" href="https://www.synesgy.tr/en/who-we-are/" />.. <link rel="alternate" hreflang="en-gr" href="https://www.synesgy.gr/en/who-we-are/" />.. <link rel="alternate" hreflang="en-ro" href="https://www.synesgy.ro/en/who-we-are/" />.. <link rel="alternate" hreflang="en-bg" href="https://www.synesgy.bg/en/who-we-are/" />.. <link rel="alternate" hreflang="en-ch" href="https://www.synesgy.ch/en/who-we-are/" />.. <link rel="alternate" hreflang="en-ie" href="https://www.synesgy.ie/who-we-are/" />.. <link rel="alternate" hreflang="en-ae" href="https://www.synesgy.ae/who-we-are/" />.. <link rel="alternate" hreflang="it-it" href="https://www.synesgy.com/it/chi-siamo/" />.. <l

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 63, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	6859
Entropy (8bit):	7.960792481365164
Encrypted:	false
SSDEEP:	96:HZzuJ1eUaFWrWVIL7x5rFVsMRnwbV3p0wb27KFHCPfl73mPtae67VPGW:B+NN7VVdcV5sYi73mF3eGW
MD5:	386158A2F9E847FCFEB7640737969EB7
SHA1:	9639FC656FBAA3BB34A812D87CC70F1841DD1A84
SHA-256:	690A038778A96C253BC438065E5BB841BD9EC915026B7A82B38A2AFFE0694A2F
SHA-512:	F84AE377785EC3B8434D9761C62F2281FE8ECE7790D3321E413F928CFFE64BB834FC902CA4D3ECCB6747FB9267799DD0A25444284A8F0E29F335CB655A0ABC5C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...?......o.J....sRGB.........gAMA......a.....pHYs...!...!..[.....`IDATXG.Y.\|U..>wyK.K......Q.....k..,uAE..Z+..+...b.+K.....n....,j.Z.J.k]Z..,...BBH^.v.~......@.../....=..9s.;.LO<jNO.%..b.5=.\|o.../.2...%.q.....LC7.=...gT...<....=..VKw...75.l.+..xqD..".t....o\|.()..5$.>C.!/.WnQ....45$.....Mf.Zc.o6x.F.lj....x....+J....^S.c.T.\|...H~..J>J......;.N5..L.....KL}P....X._.aF.0=i...-...#.{..^Q.Z~.5.....A=.9..W.x.C~.g5.o\JJ".p..o..R._.<m.'uI1N..\y...+).\.'...U}.k.Q..+..K...D........._W.}.u+.sl_6........l..^T..)...K....VG..7U...K..........,Y..~.j\-..q.o.V..8.g.z.E.!.^+..xJ..W.2n.;.....ecz.....}.B.....F...a1Km1.<d.!..K.Jc*'..d}?).Q;......)......eL.......#ZGw....s.v's......2......=,e.$eZ..O......-....e..Oj`...u$....[....;...WU.xpI,$.._=R.D^.]......0diI9....P8.>7.....+..(f..nR.[..n.)..x.-2n...3.p.~.....+k..mk]....T...]O.\.iwN..../.c..8.4e..z.....[...].PU..'l..6f.f..9.t...9.uJd...y[...\....w..3.......Y...R9z.#[S.......

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1946
Entropy (8bit):	5.085456293077417
Encrypted:	false
SSDEEP:	48:cvAJfYqS0pPQ1/0YkWHxz2GPlAnFk1H9CQ:zJfxhpPy/0YkWHxBlYEdCQ
MD5:	4560A5D152B6B13AB3FAE7B852BFD675
SHA1:	52E7F2D4E1A3108EF6C94867665FA78BC383A6E2
SHA-256:	0A8821277B673984420E478BF79BFC800A5F38B1F9EBFC8F04998BC373854078
SHA-512:	7942711A511E9023C7C9906EB008DD4B312625AED3F325FAF744EE53EFAD23223FAD489F8DC68CEA8FE33276F13E3B233411BFF1CF0AABF6CE50856022D5B834
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="36px" height="50px" viewBox="0 0 36 50" style="enable-background:new 0 0 36 50;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g id="UI_aggiornata">..<g id="C_Home_V1" transform="translate(-755.000000, -2100.000000)">...<g id="Group-9" transform="translate(757.000000, 2101.000000)">....<g id="Stroke-1">.....<path class="st0" d="M12.3,23c-0.5,0-0.9-0.2-1.3-0.5c-0.4-0.4-0.6-1-0.5-1.6l0.5-3.1l-2.3-2.2c-0.6-0.6-0.7-1.6-0.3-2.3......c0.3-0.4,0.8-0.7,1.3-0.8L13,12l1.4-2.9c0.3-0.6,0.9-1,1.6-1c0.7,0,1.3,0.4,1.6,1L19,12l3.2,0.5c0.9,0.1,1.5,0.8,1.5,1.7......c0,0.5-0.2,1-0.6,1.4l-2.3,2.2l0.5,3.1c0.1,0.8-0.3,1.7-1.1,2c-0.5,0.2-1,0.1-1.5-0.1L16,21.3l-2.8,1.5......C12.9,22.9,12.6,23,12.3,23z M10.5,14.4l2

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2880x1360, components 3
Category:	dropped
Size (bytes):	1295447
Entropy (8bit):	7.973758565831485
Encrypted:	false
SSDEEP:	24576:InqHlrUotw7q+yCd4pkDPKpBF1GvbdDr5sSk8xDI2uJJ2NX+wtrxbaxrqLLz:CMrftwsFpkDPuBwdRvuJHw7axmfz
MD5:	FE44C09E27BC1864816684A5D94E8B9B
SHA1:	A229CC56591DC57962EE9B7191725D9B739109D4
SHA-256:	C6229506E0F89B637170377DDFDD54CBF7E3D614DF2873E2B781E10AF4731EEC
SHA-512:	A1AE8153EDF1FB4AEAFCD067D502912634530B3B944F160DE4DE0B5B10BCD8F8594A1CB70384166B21692BF1D349A2414CD69EC59186A373F0D52C00BDB3983E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:523FAF7E707611ECA0D3F366E534E56B" xmpMM:InstanceID="xmp.iid:523FAF7D707611ECA0D3F366E534E56B" xmp:CreatorTool="Adobe Photoshop 2022 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="B72C8F3285CFB042160B2409B8299AE6" stRef:documentID="B72C8F3285CFB042160B2409B8299AE6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C.......................................................................P.@.............

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24492, version 1.0
Category:	downloaded
Size (bytes):	24492
Entropy (8bit):	7.990032819468412
Encrypted:	true
SSDEEP:	384:LNjwMA6DpMryxHyZWoRWLbXU8Vm1apL3BFwmDMd9ifjINq4Yqtf7:hVtMaHbXpVmoL3IMkDT
MD5:	B3C3CEAC11F6F59E0F02C7C2797FA119
SHA1:	0BB939B676787C68C3F45792A70999CA86212F1A
SHA-256:	5CBA2C56D5B95C05420DEAF759AB1FE3364EFE741296264A8DA9D01472A2C904
SHA-512:	E8DED7921CDFA8CDD9AB76ABFADAF8A19A1C5B7DE1EBAC54B3538E5699B3D3086290FB927723DAA9CCFA19BF13911545D0392DFE0008480530622C43F39FC37D
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/webfonts/subset-DMSans-Bold.woff2
Preview:	wOF2......_.........._K.........................f.....,.`..L.`........L..<..z..6.$..X. .. ..a..=...G.m.5,B..;...f,.......[.U.m..n.H..J....OM&c....jJ..'H...J8.}...P.z.X....~<......I...]....2S;.7...q.r..X5+r.t.0B1.@..Gi......^....>...z..9A.AP1AIIi..'..P....`X..Qg`.E...[.K~.;y$.m...E2%RB......k.?..3..T.g..8\|.....E1..0.cD.....tQ.c`..1.S5.3.2..[.F..+OV}.....{.{%].I..,;..q...{l.@,..v.T....n...lS."..& ..%.d.....=..Y.v.....E;}..Q...._9...K.-.!V...p=..W...h>.-S......"^.z..0Ch.Lf. q..BH..~'..tZ#....w%[l../..:.HEQ.q.\|........4XT@.\|eR..n....##h..o}E}E...Z3...!.1p.m.. ...CJ....K.0..C....].].:i..L..Z..5v._..X.......,.?A0.1.Wf...?2Y<R...ZQ......?..X#....0..-......-.\.PR..!@..Q..}..x.1.......r&.......Y...+{....Xn@K./&.t....S3Bh...2.1R.aZ....~...[.?....%......%r...#.....DVK...N.i....B..B........t..4.Yr...]. y...c....r. .9.'.<.5...2.2Y..O.'..o..f.........u.{S.....".v.i....n.J\K..!w.T~{.U....G........!Hj...#....&. H.@.q.[k@..R.+{..l.......W.D.E..<.2~.>...O

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4961 x 3508, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4247276
Entropy (8bit):	7.988785196532871
Encrypted:	false
SSDEEP:	98304:oNspRQi/lEPyZT4n+skfBxz6eKCRa5gW+YQUqzJFqhmiQd4kQmZOls95Tc:kPi/l/yn+VBxpa5H+ZUSFqkQmZOls9Jc
MD5:	13BEE15D925DE763C51BC925044AC75D
SHA1:	74893ECA87032C022CC4D97AEF35F0C02E49DAEF
SHA-256:	B604115A4F53F0A79CBF1887E3E01305684803759D72EBA06B1F25C039E3D7DF
SHA-512:	5FCB39FBEF6B4140A2388CBCE9F4ABC86A400E0B4824C1EFDB87AD04641AAE5D9455CBF6BA832DA4F681D20BD81F65665FE8B153A948EA8BD8768273D8302148
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...a..........6.5....pHYs...#...#.x.?v.. .IDATx..}k.....dHRU.vO.g..q.....+.....mC...Ti..;...eY.........""..4.IH~. ....@D(\....7..G.Y0.2p........m.W.2_.1...i..8.K..".?\|N..R.S.e.z...."...m9.6......<H.c.....x..e.p--.=..0...t+`YqlP......6.H^Z_e.~..1=U.\X;..>..&.1.....f~..K~p(x.IR.U1...SI. ...........+..W..."...#l....G6...8A..c.@..nfG..Z..J.b.,.{...%.....]Cr..}$ua.^.................}@...t=.Hk......).U1.G0......t..K^.^....c...:}.3......%..R...nE....e..O.S.......qo?P.].8..ph.`...\|.m.0...+e~..().....#...hL]aYsO.m...........t..+.<_...Rq...(...'Nx....2.P1....s.M.....g..y.K......N.T...{.E.s+!2......2..............Z...Q.IP.TWz.u..?........)$..:./.tl.$....0...5Y......#'.........$.!.o.IMbj...0v./....I..@...g...7..h".'.....3}T.t..[./o.Q...C#O\'..5F........Oq.8.........'.'.]~ $.}....XpA...p.L..;.#pp...+.....0F.;\.tiF >....Z......#yN#4...@....LH5......!..6..m..m..-8.......<.J...9.A...R..2f)..1.6.}.......... 9.../..Y.......lW...&6

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 2880x1000, components 3
Category:	dropped
Size (bytes):	4443719
Entropy (8bit):	7.985559198630412
Encrypted:	false
SSDEEP:	98304:e5o3f2qgWg5Vzbqu7xO9DrcXtaZfRJ9f+i5zzNs521CKSbpje:l3+ocVHDOtrAKP9Wi5I4CRp6
MD5:	C6168BD9BB580A0A5F6A2FC141B5FAEB
SHA1:	3900306E4FF17A31A7D6B0B873D54E8CC50E8407
SHA-256:	3FDF47F781BFC217BFD5755B64F112D3FC81AD2C4E710FA79960A1277CE550E6
SHA-512:	0C0B95B42C4002F4FC45759B3D56E4C0ABFF66C3978E483E64CE4B096C03C2D1F479B4FAD3E8C3FE44E29D74C4BFC0FF2F509E499C031D01836A3D049B09A969
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C.........................................................................@..............................................U..........................!..."1..A2Q..#BaRq.$b.%3..Cr...&4..S....'5.Tc.....6s..DU....................................Y........................!.1.."AQ.2a.qB....#R..b...$3r.....%C...4.S..5D.&cs..E...6T................?..4<.B.7v.....E=.C....O!ZRV......F.<k... !.~9..P..e..h..+..Z&..}.......+.r9....x.y.l..e....X?Q....(B..........M..G.\|l.(..R..,...J.^.....[.C......{.....p.6.........]...y`..p.T5.Q. .(........I.........kwr..I.\(Q....0jou.j.........@....vG....... ..@=M.....k=..........6....B......................:.u.gC]...m..J.=..........&u.....k..z ........B....= ...R{..I....{.......#....$.n.$.d.XY...8......P..6....{.....l{..v..... .z..Sc..TsW.%AL...`;....m..........T.........lv...@.TA>.@.O.<....

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.375788256062571
Encrypted:	false
SSDEEP:	3:YGKtBy6onRwXy5HVEiQGi+R9gLZDjn:YGKznoRtbpTrMj
MD5:	68BB6C835EA8C98C883246F48BB32A0E
SHA1:	CBC3B0883EB5FE531B7B517C681750316D482ABA
SHA-256:	E196559020CA75B03EC1D359B41B4232795B9C2BE41311FC292BB953D6DE545C
SHA-512:	88C04C0F8AABEE5FCF47A81D96A601C28321AFF5587230517F589748CA5FE8D90BECB3697C83F78A7B6EC7DBCEB7AF293470DF71C38A2FEBB403AE6970CA69DA
Malicious:	false
Reputation:	low
Preview:	{"code":"reminder-api-err-empty-partnerid","message":"PartnerId cannot be null or whitespace"}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	917
Entropy (8bit):	5.10708739241076
Encrypted:	false
SSDEEP:	24:2dcl6R/2Ni9sJKy7LXJRVkYUY40MuQ6a0:cv3uJK21kYpMb0
MD5:	1716293DFF38A8B01D69BB194DE58478
SHA1:	4C775A23A54050C2A93E1B81D42542C4362DEF50
SHA-256:	39601ADE67901436B0A875D547AD9CDF6A2C683DAF09C045B2A2C2239A1D9388
SHA-512:	F6E82D04A9B5776F4693EDD39BF254EF09A082558689A59A05CEF62F618D97F2CC66DC3EADB723A5D9B4281B15D1A1D915EB2CA660101F47546831B8A51E1DC7
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/social/youtube.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="30" height="22.5" viewBox="0 0 30 22.5">. <defs>. <style>. .cls-1 {. fill: #f9b233;. fill-rule: evenodd;. }. </style>. </defs>. <g id="UI_aggiornata" data-name="UI aggiornata">. <g id="C_Home_V1" data-name="C Home V1" transform="translate(-1149.000000, -14.000000)">. <g id="youtube" transform="translate(1149.600000, 14.600000)">. <path id="Fill-16" class="cls-1" d="M13.06,14.2v-5.91l4.97,2.95-4.97,2.95Zm11.05-7.77c-.22-.86-.86-1.54-1.68-1.77-1.48-.42-7.42-.42-7.42-.42,0,0-5.94,0-7.42,.42-.82,.23-1.46,.91-1.68,1.77-.4,1.56-.4,4.81-.4,4.81,0,0,0,3.25,.4,4.81,.22,.86,.86,1.54,1.68,1.77,1.48,.42,7.42,.42,7.42,.42,0,0,5.94,0,7.42-.42,.82-.23,1.46-.91,1.68-1.77,.4-1.56,.4-4.81,.4-4.81,0,0,0-3.25-.4-4.81h0Z"/>. </g>. </g>. </g>.</svg>

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1696
Entropy (8bit):	7.571105314075939
Encrypted:	false
SSDEEP:	48:44vvMqO9BhjjIwOg6qFwhSJWpVcbaRCFDrb7KXqWCM:4i0qO3hAwOg6qqS78CFDrboH
MD5:	D54616D04C458E55AB57EC426B1D2E03
SHA1:	C8AA8367C3D9DDE9501E9F311F254C393C8CA06E
SHA-256:	C5127FC4B90C2B75C1B6514DB64C57E395CA8321B662A34B7ED7AC373682EEE2
SHA-512:	824050A044427D0FA2C983F19EE59723DC8AADDDA703B254950BABB03D937BDDD06C446D016B18A3CBE6CDE69DCEE75B6AE287999C4AFD8A1B41EFF661E53EB4
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/a5tl02k4/jordan-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........RIDATx...M..c...g44.N..b...j.2&...cK>.,P...-.ZX...,,\|..EivhH..#e..\.$..k........}>~...s.t.s..\|.....W..j8.^.G.b8......=.....SA(..........D"...@$B..Z7..P@{..D"........o.@$B...9..P@}:.D".P.......on.H...5.@$B...-..P@9z.D".........k.@$B...&..P@>..D".0.l.....'.@$B..+&..P@...D".0...".........t..@$B.....P...D".0......L..@$B..k...P....D".0Z.H.....U...#.#............................DG....D.R(.......U.n.G .(F..PP,..PP*..PP....PP....P.;..P.+..P....P......n...?l.......D.....DA....D.....D...y......".....&....."....f%.....%....&%.....%.....#...#....[6/..y.....B.j...\...a..fp$u8.......Ww?.N......y.......].=.....FF..;..#.M.l]..p...Q}.(.:.g..+N/.Q..F..)..P.+.@..c[......O..n.q..q.p..........o<.<...B... ...p...,....b8..a....D8..q..}.?.....o.~..FQ....G.._.j........E.._..#..f.......a.Q."v1&}...Z.O(.SD .(b..0,..G........F.\|..G.vL.ge(.._.l...2.;.J....a....?~..w,=>.x0........R..v1..)...7x...h\......

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12136
Entropy (8bit):	4.678037527274538
Encrypted:	false
SSDEEP:	192:y/9zt9KrO9A9kVyE9uJ89FlcmFgOAUJ8VYr+S2IRBtLT/+1959ti1Af8xUW35o:YvNWy/cm6yJxr+STRBBTG1xaAfuUW3u
MD5:	9FDFE5D50B3BB0AAD87D735A5A917245
SHA1:	7B3EB862489812FC07817EB68996DBA853ED81D8
SHA-256:	9BD34D19FBDD998E4871C39E6E2DB8689A52F901735094EAB9F8C9CF3A4A7564
SHA-512:	EC56AC1BFD298FE7EF418D28817E33A8703896283EEF8B0ECBDE649AB9DB0B36E5C8140832F7F8961C271B23AB39512C1805A888BBBC8CC93395B3EC43A1E4BC
Malicious:	false
Reputation:	low
URL:	https://api.synesgy.com/provider-api/api/Tiles/registration?domainCode=TR&countryCode=TUR&invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497
Preview:	{"tiles":[{"type":"text","size":"md","behaviour":"visible","name":"CompanyName","token":"company_name","value":"IPROTEX GMBH & CO KG","default":"","position":1,"readonly":false,"required":true,"relationships":[],"validator":[{"condition":"maxlength","value":"140"}]},{"type":"text","size":"md","behaviour":"visible","name":"Email","token":"email","value":"","default":"","position":7,"readonly":false,"infoToken":"register.email_text","required":true,"relationships":[],"validator":[{"condition":"pattern","value":"^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\\.[a-zA-Z0-9-.]+$"}]},{"type":"text","size":"md","behaviour":"visible","name":"BusinessId","token":"business_id","value":"","default":"","position":13,"readonly":false,"required":true,"relationships":[]},{"type":"password","size":"md","behaviour":"visible","name":"Password","token":"password","value":"","default":"","position":19,"readonly":false,"infoToken":"register.password_text","required":true,"relationships":[],"validator":[{"condition":"patte

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	900
Entropy (8bit):	6.822038534655009
Encrypted:	false
SSDEEP:	12:6v/7vyxw79R3FyZQTC3svYGsQT3pNa3wUFHLZ32kzY3pNSJ803w5XdqfRqZU:X2EJ8vYGuAmHLYXe+nmJ
MD5:	3BBA465B971A0967AB13ED5D79A7E17C
SHA1:	DC704FBCD4742BDE55DADE3816C3C464779D7532
SHA-256:	6DC944BF21A5FC6F5ED4E27A865743A03052705D07921E424B2EC921AAD07B31
SHA-512:	171F62C4CFB2AE08057803B97A2D990205C920961191E3C9F541613CD1C163E7F155D07C7613F98BBC71C0557F7C28C0DB4AD5F68FD1BF7A5F497B83A86CCFEE
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/sqkoto1x/greece-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........6IDATx...?k.e...7..f........Q2.Yl?B'.Tp.+.3.R.I...N......uP7'!R(...:...-]M~..s.........<.rq.6....=.!>...>...i.....K.F......H..$...@.I .$.@.. .....H..$...@.I .$.@.X........hc.d.;.&.....a........w...@.I .$.@.. .....H..$...@.I .$.@.. .....H+.8..3_.].;\|....4.K...g.=.s...?......\,....M .$.@.. .....H..$...@.I .$.@.. .....H.....+.N.v.............m.....t...I:{...d..6....*.j.z{}..~...y0.h..$...@.I .$.@.. .....H..$...@.I .$.@.. M.f.~....7../.\,....V.......^..n0..+....H..$...@.I .$.@.. .....H..$...@.I .$.@.llN....\|.....~....nlN...D.....^y...I..fqiz~ue.....#l.b.I .$.@.. .....H..$...@.I .$.@.. .....H.....+.l.8...gk.;;.6..e...H..$...@.I .$.@.. .....H..$...@.I .$.@.. M>......K..+.8.6..a...H..$...@.I .$.@.. .....H..$...@.I .$.@.. Mn.........VW...<....1@.. .....H..$...@.I .$.@.. .....H..$...@.i2.....2....jah..2K.....IEND.B`.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1224 x 1029, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	13997
Entropy (8bit):	6.642772734380257
Encrypted:	false
SSDEEP:	384:puWh7Q1xxxIxxxxxBBxxxxZxxxxxZrtxxxYxxxxxxxx+znEmGGSymbVq+1:puWFQI7fzzGGSvRv
MD5:	5B484213E8ECD001A658BD0AE2F54B98
SHA1:	C3BB9B9B2D5F003B3C4B27502F070B54D7A3EEC8
SHA-256:	EF458EDE0258105C95FD7E419906E55550BFED13C23EE2E9FA7D5931840269C9
SHA-512:	7A6D4F18FB94356C8F7CD06C083AE29A51819654F51B6B664046A5DBD8BCCB2CC7B8443194AE5AEFEEBD6E0E6B685AF518A010AC34439C2502DDB6B0E98F0ADD
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/rknbnk2t/icona_pmi-smes.png
Preview:	.PNG........IHDR.............3.......tEXtSoftware.Adobe ImageReadyq.e<..6OIDATx...=R.@....0C.o.'.;J..k..q..`K......-...86.a.>..I....OL......Ey!E...2..tM.I..o......R...@d..........!2.."#..n{.aK..@d....G.....z7ML8.\|...f=-._..q.c...e'...oc..B"K9.c....N......._.D....^F.U..bd....k..@...W...;..J"Cd..D..........."..!2va.....1.............P.../?..X..."Cd 2D..@d..D.......!2....."Cd 2.G6...Xo.,.^.\|.s2.E.....d..D..@d......."..!2.."Cdp...\|.yCa.T.Y..Dew..@d......."...i...^A_..n..}..0K\|nF..z.[...D.;.KD..@d..........!2..`.>.`..m..........c.K'..q.....9...;5....y./....<...H..u.5..W.H...\|........!2.."..!2D..D.{@.......!2.'....]&S\|.L.....4.I.=..D...1.u2Ef...........pR.w.....)..&:......fD.....Y....!2.."Cd 2D."Cd..D......".]..X3.1D.5f5..`l/k.K\|&Cd 2D..@d..D.......!2.e@8.!2D."Cd 2D..@d..........E......"..!2D6......;Ttc.J..[n.p+\|.C..W.:........."..!2.."Cd 2D..@d....C.H...Q..D.r..@d......."3.........s....p...o.o.XTd..1~........."..!2.."Cd..@Q...w.8..q..CB..7....n.=..@G&q......l....

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 63, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	6859
Entropy (8bit):	7.960792481365164
Encrypted:	false
SSDEEP:	96:HZzuJ1eUaFWrWVIL7x5rFVsMRnwbV3p0wb27KFHCPfl73mPtae67VPGW:B+NN7VVdcV5sYi73mF3eGW
MD5:	386158A2F9E847FCFEB7640737969EB7
SHA1:	9639FC656FBAA3BB34A812D87CC70F1841DD1A84
SHA-256:	690A038778A96C253BC438065E5BB841BD9EC915026B7A82B38A2AFFE0694A2F
SHA-512:	F84AE377785EC3B8434D9761C62F2281FE8ECE7790D3321E413F928CFFE64BB834FC902CA4D3ECCB6747FB9267799DD0A25444284A8F0E29F335CB655A0ABC5C
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/assets/imgs/logos/favicon.png
Preview:	.PNG........IHDR...<...?......o.J....sRGB.........gAMA......a.....pHYs...!...!..[.....`IDATXG.Y.\|U..>wyK.K......Q.....k..,uAE..Z+..+...b.+K.....n....,j.Z.J.k]Z..,...BBH^.v.~......@.../....=..9s.;.LO<jNO.%..b.5=.\|o.../.2...%.q.....LC7.=...gT...<....=..VKw...75.l.+..xqD..".t....o\|.()..5$.>C.!/.WnQ....45$.....Mf.Zc.o6x.F.lj....x....+J....^S.c.T.\|...H~..J>J......;.N5..L.....KL}P....X._.aF.0=i...-...#.{..^Q.Z~.5.....A=.9..W.x.C~.g5.o\JJ".p..o..R._.<m.'uI1N..\y...+).\.'...U}.k.Q..+..K...D........._W.}.u+.sl_6........l..^T..)...K....VG..7U...K..........,Y..~.j\-..q.o.V..8.g.z.E.!.^+..xJ..W.2n.;.....ecz.....}.B.....F...a1Km1.<d.!..K.Jc*'..d}?).Q;......)......eL.......#ZGw....s.v's......2......=,e.$eZ..O......-....e..Oj`...u$....[....;...WU.xpI,$.._=R.D^.]......0diI9....P8.>7.....+..(f..nR.[..n.)..x.-2n...3.p.~.....+k..mk]....T...]O.\.iwN..../.c..8.4e..z.....[...].PU..'l..6f.f..9.t...9.uJd...y[...\....w..3.......Y...R9z.#[S.......

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (657)
Category:	downloaded
Size (bytes):	515472
Entropy (8bit):	5.694445641910104
Encrypted:	false
SSDEEP:	6144:5BFr62CZXtgv1BOziSb3qb5DUOzxklE+ceVGdAxIBhH27i6r9YPOPqJtUzl8m:5BovgvBXRAxCIG6remY/m
MD5:	F989B2A4486B04EDFF93AEF40F36584E
SHA1:	02234BA0B3DDA2CCCD38470F35DA5494069B1186
SHA-256:	52C308157B0F273A5F4F67BB4F28CCF47C24A68FBC7D0226D49BF4EEBACFDF97
SHA-512:	D725F9B39F13794BF0CE57F5821A49EECF2A0B55C73EFBF218826C9F001514FE5C6FD290D553638C36EBC7D6BD0FAB29C0307F00E894AB9D0353093E2288752F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp628orhhl", last modified: Thu Jan 11 12:39:48 2024, max compression, original size modulo 2^32 1513
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	7.654802123364775
Encrypted:	false
SSDEEP:	12:XQdeVR2U5uPx7IVQt7/D+XDcH9UKe1FUYM8jJKX9EDKMvazzYu:Xg8Rwp/trSTcW1/Zy9EWMvgj
MD5:	A65871A840FB16F44476AAF37F160A3F
SHA1:	13B904399BD4991BEB3AEDFA720A77035EEDC4BA
SHA-256:	17191CDFA26316EC07402421AA5D290E13C74205199E1D7C237EC4071C5E10C3
SHA-512:	8CE7823A852AF257E6FE74ED15E61949701DC51F48532D1286D404889ACADF32A941CE629078E5F39BC55083F6AF8D66CB0B16948F34198DB804AFA29B074B03
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/SaveButton-cb5f3e5b.js
Preview:	......e..tmp628orhhl.....0...}.L..H..,.V.h.0.z.....Uel7r...4(..!..2.....>.d..R..Z...Q.....b....N%Hs......'.....ZP8I.J....8x.... ..r....9k..r)vNm.2........4}..vF....a)....;..Q.)..H.q..!.L...{TP.a.7$ Cj.Dl.NaQ...C....r..`...z>8.j8..24..V.....2.._.....f.m(=...e.x<W.X%F.K..Dx..<...V../..72.$..;t.0..YYc..w#...Ca9..d....f0.....s.z..R...JZA"......l.nA..".u.6T.F...i...q>m6.W....sA...9}j.>.\|.;......_.....].S.+.Uo.<.Nz.......J.VM;ji.=..L.y.t2Q...ABE...O.D...U.\|.m...%{d.l..C.._.:...bH5.$r.Zt..v"...!A.#.{...f.Zd`....`..........6ZtO....E.Fm/.9L.^.\.v.....a..rN........]s1............

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 186, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23023
Entropy (8bit):	7.973268599455137
Encrypted:	false
SSDEEP:	384:Dw8CM/cFOykEvB7wTmOLSQp76QuiMyVWKc/pYuLloVLu+SkVy7J6FcEpKxfsH6Lf:DweqO1wB6GIuB9/VALwSDpyw6LKq
MD5:	58E50EB31D2DACBC229A5516CD3A2A2D
SHA1:	CB2EB7F485980A6A2A1BE4ABCB43080C870B1AB6
SHA-256:	73665C1013B832333D1B2F92041291BF49F35EE76604C35021551F2FC4A213AD
SHA-512:	F3B23C3DE58849A6AB4176E9ADF4897FB7AADF86557C95766EC8517BECC9123F91390E6BBD93480A3E8FBA6EDDB383DE0CF23FC5C628CE9CF07E3030E7D5156A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............PQ....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.2 (Windows)" xmpMM:InstanceID="xmp.iid:867366D89EC611ECACC2C061237525B4" xmpMM:DocumentID="xmp.did:867366D99EC611ECACC2C061237525B4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:867366D69EC611ECACC2C061237525B4" stRef:documentID="xmp.did:867366D79EC611ECACC2C061237525B4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....V`IDATx..}...U......}-//=@.=.K.0T.A.)*(......"V....v.t....J.N.$..HB.i...ef....3..6./...k.\|n...;...=.s..4".

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1893 x 1412, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	144983
Entropy (8bit):	7.846686670638701
Encrypted:	false
SSDEEP:	3072:zxzRy9QWGmNR6EHRKTQpgP2ee8xKlJoj1Z5VgJIC6pXaZ:1zk9QWGAR6ARKTj2h06Joj1TuJIZhO
MD5:	43928D18533CAEC139BEA47E3D751A52
SHA1:	F90DD9C1BDF68CB9101F404068D622A00E826F18
SHA-256:	E766AF3D615CC6F0853F9063BB917C0B32464C01F22E95E88A7B2A5A1C1B98A2
SHA-512:	3A3FC2592856E1AED9124ECBCE65AB2C820FBA8AC001BD80C63D6BE9F26AA6E9AFF3F5B370BE08ACC3D445B5306B638CA24D9799790B15D2F26BF8A9D787D290
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...e..........g......pHYs...#...#.x.?v.. .IDATx......g}...]]I..-...6....%H@2.].\.L...$@&.7/.f...m.......I.\|.2.3.A..1`....>.93..&X.$..../`.".Mo...S}.....z..........j..V...'..X.....h..w..v.0.m..>..._9...a.".....}C(......D....f..G...3....#..@..r..xy.e.......#......."..w...#l......Y..O.n...#i.{,^^.V.......B(.....s$.r.B...+zq.Q.cN.c.}J.........`"........T...l...m..}.................C.......P.....z....5.\|..\|.5..9Hh..$..?Bgk...Z.Z..............F.k..i9.6.Z...Q....n..da.a...H........B(......S`.....h..5T...f.JV..S%...m.}....=\k......T......@...=J.......S..J..E..E.....k.@.'.-.l............0..e.... .h0....m... \|..]...>....7.-.l...j....Q......B(........ak..e.o..$h]h..j.........,.-.k...G..6.i.U.........,....T..#.&t.[7..._}..!.B...Zk8Z.....u....V.k./.h.i.....{.......!...Q..+?f.l...6._}...k.u....k.?.V.r}B.&am...~H{.......]......`.V.fA..*?F.B...,\|..^...m..}Q5...n..............'.......,......a..A..J..g..:.-._}..a.Z{..j.Y...e.m.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15218
Entropy (8bit):	7.974961216745218
Encrypted:	false
SSDEEP:	384:FoDqsAZ0R/ZqQr7qRXDzi7siUcXZhslkY22w6Lx1/R0gBd23sy:FoGsAZo/ZqQ3wi53ckIw6Lr50McD
MD5:	3D0A32BB86AFDB75C1D111C55AD7AEB5
SHA1:	BCC051D7D28A88B96A571F7C550ADF930811DE60
SHA-256:	C1267C0FA89B28A484D21F47395A14A21B7DD0CD46433CE54BA38C4F623FE7FA
SHA-512:	E784C66B0FFBD0214FFD3B3146E30092C8CF363EA81A62DA539D500643F35F513BBF000ACE44AD07B9A26E99787753C616ECDAA92CA0F07D82FBCEEAD8A61FD8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................M....sRGB........DeXIfMM........i........................................................o....:.IDATx..].\|.E..........P.DWW..A..w].].H...{..J..q= $.."n.D\.U./@.U....E...V .9f....N...g&sO&.........^.z...}?c..U............fB..e3......Aan.THp..t...1.=x6!..I{........Ps.Vm.:.#....?....+.%.U?..3.TM.!... .. .C.<.:.{..X..\|#c......v._.c..M).....n^U...Rc1.c..F.."o.............{....)..4.[...E=.c.b../.2.......3R\|.:.3.y..=o......:.].!8..T6..U..w1..g$..9oE.-L...6.P..M..tg..Y...N..w...".q..g_s........\..u...Y..a.....e..l.9J0^..\.q`.-...bV....B..4.z.P....:'a........[.I......o:Q.........,..u,..h.O.-,_&....,_.xC.;Eo.gr.F@^<..H2..7H....Gp^..... y.Dt.%.~UE.....>pr......By.k..U.....8p...y53...._.J.Jq....p.....g...........9kD..6('k.3J.2.Z..Ep4m>PS.1....!~..Ps.......'NL..v(.....Us....7@.yV>.?..._7...+..`.?.....'.X9_.4.@.i...-.f.....Q..q..I...7fu...L..`...>^...1.pT.M,].)...7g...Ds.p.#.t../.^P.\...L./.z.4..1..A..v......_...k>._.;X

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	18198
Entropy (8bit):	4.853926657874851
Encrypted:	false
SSDEEP:	384:lGKwqRWlNkxN5NvMBQVOhzCVBq1j22x0a83yy7flAJ97B9IwFwKOem:lGII8Ca8J3SewKOem
MD5:	9238E1F59B1BB41E3C90CA46F252EBB1
SHA1:	E88D7694A444BE058381D5DFF76C86071DDFB987
SHA-256:	B141DA4C73CA66B2C753EADCABD427179415870BDCBA65A117CE6DE28F4F01A9
SHA-512:	FB3A0D1E36B0B4F7F0DE652DA14563DFC1C85A3D48F9B0940F0ED452A91E613958003052C228D5CFB52CC4FDC75B32679A56CD08990013F68584D9521E9C9A93
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/scripts/jquery.waypoints.js
Preview:	/!..Waypoints - 4.0.0..Copyright . 2011-2015 Caleb Troughton..Licensed under the MIT license...https://github.com/imakewebthings/waypoints/blob/master/licenses.txt../..(function() {.. 'use strict'.... var keyCounter = 0.. var allWaypoints = {}.... /* http://imakewebthings.com/waypoints/api/waypoint */.. function Waypoint(options) {.. if (!options) {.. throw new Error('No options passed to Waypoint constructor').. }.. if (!options.element) {.. throw new Error('No element option passed to Waypoint constructor').. }.. if (!options.handler) {.. throw new Error('No handler option passed to Waypoint constructor').. }.... this.key = 'waypoint-' + keyCounter.. this.options = Waypoint.Adapter.extend({}, Waypoint.defaults, options).. this.element = this.options.element.. this.adapter = new Waypoint.Adapter(this.element).. this.callback = options.handler.. this.axis = this.options.horizontal ? 'horizontal' : 'vertical'.. this.enabled =

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1104
Entropy (8bit):	5.1548899881431405
Encrypted:	false
SSDEEP:	24:2dvAWKLfS9SpuIAUpHwYDhRthChzrHVxpuF:cvAJfWSpdxpQarE/Y
MD5:	6F8890839D9E8DC44F007CDB1BC0E610
SHA1:	28B57822197A860B0E6D2462E2019EC11113ADDB
SHA-256:	0C54374765C7F2F07A106367352B0CEC7A6EEA8DD71A428E54100386D6C8A94A
SHA-512:	7C94F95449B147984D9E8557F8873584129B9F17E9D6A1BB25256E6DEEF41A5ADBDDFCF7414E0BB7C19876E8D39FFC9710347B4B87E570AD9C11CB9980ABAAD1
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/2vhcl40j/imprese.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="72px" height="61px" viewBox="0 0 72 61" style="enable-background:new 0 0 72 61;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<path class="st0" d="M68.2,10.3H49.4V3.7c0-2.1-1.7-3.7-3.8-3.7H26.4c-2.1,0-3.8,1.7-3.8,3.7v6.6H3.8C1.7,10.3,0,12,0,14.1v42.7..c0,2.1,1.7,3.7,3.8,3.7h64.5c2.1,0,3.8-1.7,3.8-3.7V14.1C72,12,70.3,10.3,68.2,10.3z M24.6,3.7c0-1,0.8-1.7,1.8-1.7h19.2..c1,0,1.8,0.8,1.8,1.7v6.6H24.6V3.7z M3.8,12.3h64.5c1,0,1.8,0.8,1.8,1.7v14.9H43.4v-1.4c0-2.1-1.7-3.7-3.8-3.7h-7.7..c-2.1,0-3.8,1.7-3.8,3.7v1.4H2V14.1C2,13.1,2.8,12.3,3.8,12.3z M41.4,27.5v5.1c0,3.1-2.5,5.5-5.6,5.5s-5.6-2.5-5.6-5.5v-5.1..c0-1,0.8-1.7,1.8-1.7h7.7C40.6,25.8,41.4,26.5,41.4,27.5z M68.2,58.5H3.8c-1,0-1.8-0.8-1.8-1.7V30

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 716x1000, components 3
Category:	dropped
Size (bytes):	180004
Entropy (8bit):	7.971717860855083
Encrypted:	false
SSDEEP:	3072:ynZ5nfej3961EW9mnkSgZADXNYZKhX9ZR8Bl3xSMpx5Kamar/vi0CLuLrXI+cs9L:4Z9Gbg1B4iqu49ZR8rhDpx5KN+XlCLUv
MD5:	D906284FBD00C2F97D9C504DD151AC16
SHA1:	45A336C6F406A0117653D3B741DFAF7436E22ECE
SHA-256:	C590F1EF1CA58E68812B9B1C0412180D0AF27DAE766A5AED3D26884E963B22DF
SHA-512:	5DF3D9DCD96A30676A4C47B2AF477CC86F3F6822E91726CC93B3B1130D68428BDB8E927DEE93BD60D3758B4DB66D85A7E5B9CDAC7B9CC7AA5BDA1D5FEA1D4948
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C............................................................................"..........................................s...........................!.."1A..2QaBq...#Rbr...$3....C...Scs..%4DT.....&'5Ed.......68Fetv....7UWXfu......)H....................................;......................!..1.A."Q2aq.......#B..R...$3brCS..............?...k.....a..`..$s&1....)5.\...."...x.kv.Q0...lh.]M.W'.3^...E.N"5R.Fx.:.d..:..D}#...OW.~r...."&....X\.8.-k...{..i.V.!.q.h~PCwhc..........y.\|W....W....^(.....=9y...,... .L.v.QSP..%......{>....u..I.2..!x-."..z....f.r...^.r....a..R.:y`.....`./X0n..[^.Q1.0......b..b...P.6...P..)..b.p.e..2...K...1...yA....S.........L^-..(\.....H..(u.`"P..\|:...N...d..Jd.`.....\.j.18.%`/`...@..y..@r.,XN.ai....../P....L).F6S...5.X)Bp..._.F....>..xm.c./...w....a..k.X......g..E.xG..n.Pb.t.Ln....P...-..&.%K....".].w

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5219
Entropy (8bit):	7.926417902741636
Encrypted:	false
SSDEEP:	96:mtjn95Z5n7euisgZNGvafMeRPxH/soi2GuMahD7OVxQwixIzS2Y7yqSlquuXqa:0jnb7euzgZNuoMeRPp1GuMwwxWII75SG
MD5:	936CB91523E7454BFBE5373DD677F727
SHA1:	FA63FB2B5DEF7B46B978C010518FC0CCFF110BAA
SHA-256:	BC2E0DF7649DAB6BC6C941BE3CC5CB4B5FBBC9C4B6CB3ED8CADD76BE7EB4D037
SHA-512:	CA7083DB5B506625147AF506FE2F52F1B2CE091BD0ACABE1B0818451B28AB9ECDE7DC5CAC7720934C6168542777F84B4139E6544585D2357E4D1415E6F403BE4
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/ba5cbsww/philippines-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..}l[g..c..X?...%R.)t.....!`..B.`..1.:i.`hC.R.6.tmVM.e@..+Bbb....."..i-...-S.MM.ikYh...&.c..y.7.v....{..'Eq.;.v\|...9.='.....?.g...!.X.I...<~.....{v. .N_..D.....<..qyx.r~<.W...f.@..Yyx.Q..S....".......7F.....?.G..!..p..........O..Xx....\|U...8..B....B........-.G..o....02.O.R.T/.....-yh.Q...........H.". .......Q.....z...I>7..C;z....H....<.......M..9...H....K.D"..^%(......o...{.e..4.#...G..M...=wP&.o...\fX.....M.W.R.7o.C.n.m_....!1.U ..}L}...TB`...s.dj.&.M.K..[....e...nVB..k..!$F.G.m....E.Q...n...W..I..,.e./...O.f.5..W....q.b@.&...>.....y...?Q.m.b<.Y.)z.n$.T%..[..P-;.....mB.....\|.Dr....k..Y.....+...[.O.b .K..73#......i{..l3....mB......Cf.....\|.Xf.m.Sbh...?AH.,.Dv.L..^..a..^.w.~..,.&$r..b..an.uu..3g..\|.....z..l...'.m..?108..!..m...^.=.7.3R..p`I......fO....\|.$4.'.Qp.AHh...<.._..6.!...>..Nv.&$D\...E jMm......O..#.....WG./.e..V.mB..@....,.j......M\|....rB...@4.n.T....l..`...p..!..o

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	651
Entropy (8bit):	5.672529459488271
Encrypted:	false
SSDEEP:	12:6v/7dNqv333333z9lw8A33333L9h333333nz:KNYz9t69F
MD5:	3D12D3D2B6940B7504005692C6C10CF8
SHA1:	4F3DB01914D40EF201400E61A842B917AC477DE1
SHA-256:	E8B4AA8C86ACC062D07F405D52A2A7E69C2DEB4E3860BB4C5A7CB8773B34C744
SHA-512:	3A93725813AF3FC6BFF2C0CCCD3FBD26F7F6C01FE3C7F86827499D100386CD1437684F9E5C23B1500190188CFFFC81EE28F44B1671075789DC96751D2EB25C04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........=IDATx...!JDQ....0.X..#........q..1...e.&.m..n.7.i..g........t.31..e.`...+......@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$....i.^...N........@..\|{.].h.tvz1.b.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.i.4..nn?..yi.a.n.............f_. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ...i.~........x....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	214000
Entropy (8bit):	5.459466998846096
Encrypted:	false
SSDEEP:	1536:C2QfIcKWxb26618yY8cUv7+CVsEpMB1c0Zg2qHZmkBrRr6Y3D1pkh85W0wsBXWxH:oPUsMd2MvDThOCNHOQaFaKLsdc
MD5:	BEC4FF642BBF67AED97CED8170037F2D
SHA1:	48F8253658D9E7C94ADB8F45B8E62CEB08A915EB
SHA-256:	981057F5568A3747DEFA83FB418A7D17D32EE55B96C884E42E916881582DCB91
SHA-512:	DCDAB6CBB7481BF6BA673D622B70896900BA7C8A097779D85BDC80B191ECD1E449ECA957B1BC42A0C94142A40B53D9B2509451B22E214F93B6653870608EC10B
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/scripts.a031a3392433bc9f.js
Preview:	!function(B,g){"object"==typeof exports&&"object"==typeof module?module.exports=g():"function"==typeof define&&define.amd?define([],g):"object"==typeof exports?exports.Quill=g():B.Quill=g()}(typeof self<"u"?self:this,function(){return function(B){function g(w){if(d[w])return d[w].exports;var T=d[w]={i:w,l:!1,exports:{}};return B[w].call(T.exports,T,T.exports,g),T.l=!0,T.exports}var d={};return g.m=B,g.c=d,g.d=function(w,T,k){g.o(w,T)\|\|Object.defineProperty(w,T,{configurable:!1,enumerable:!0,get:k})},g.n=function(w){var T=w&&w.__esModule?function(){return w.default}:function(){return w};return g.d(T,"a",T),T},g.o=function(w,T){return Object.prototype.hasOwnProperty.call(w,T)},g.p="",g(g.s=45)}([function(B,g,d){"use strict";Object.defineProperty(g,"__esModule",{value:!0});var w=d(17),T=d(18),k=d(19),_=d(48),f=d(49),u=d(50),e=d(51),t=d(52),n=d(11),o=d(29),s=d(30),i=d(28),r=d(1);g.default={Scope:r.Scope,create:r.create,find:r.find,query:r.query,register:r.register,Container:w.default,Forma

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (707), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	64929
Entropy (8bit):	3.5132707715501907
Encrypted:	false
SSDEEP:	384:iNGvPyrEZZNYgRT2q+zvOzp4nkplxvT+berbzhdwtBiz8N:8U3ZZNVnSmNPT+SdwtBiz8N
MD5:	21458809BFDB5E082ABBC2FFFC4E8B19
SHA1:	DC43EDB5654E927E443AB97CF2037BEAF82AEBF8
SHA-256:	8A8B930C36E8FF19C823E11EF7963A37F1D383DBEB57E56A29F547F377F8FD60
SHA-512:	D630C1462446CF1054A1CAD1CB8F15F593A6D26428CAD567BFAC248B9EB047BEA326A13A8BFF4F703031D84F1D07DBC66FE62F96BD589EA13297F125FA76B99D
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/en/audience/
Preview:	........<!doctype html>..<html lang="en">....<head>.. <title> ESG consulting for companies, banks and insurances \| Synesgy </title>.. <meta name="description" content="Synesgy measures the commitment of corporations, banks and insurance companies on ESG subjects in an attempt to define their sustainability and transparency.">.... .... <link rel="alternate" hreflang="x-default" href="https://www.synesgy.com/audience/">.. <link rel="alternate" hreflang="en-tr" href="https://www.synesgy.tr/en/audience/" />.. <link rel="alternate" hreflang="en-gr" href="https://www.synesgy.gr/en/audience/" />.. <link rel="alternate" hreflang="en-ro" href="https://www.synesgy.ro/en/audience/" />.. <link rel="alternate" hreflang="en-bg" href="https://www.synesgy.bg/en/audience/" />.. <link rel="alternate" hreflang="en-ch" href="https://www.synesgy.ch/en/audience/" />.. <link rel="alternate" hreflang="en-ie" href="https://www.synesgy.ie/audience/" />..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 156 x 156, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15218
Entropy (8bit):	7.974961216745218
Encrypted:	false
SSDEEP:	384:FoDqsAZ0R/ZqQr7qRXDzi7siUcXZhslkY22w6Lx1/R0gBd23sy:FoGsAZo/ZqQ3wi53ckIw6Lr50McD
MD5:	3D0A32BB86AFDB75C1D111C55AD7AEB5
SHA1:	BCC051D7D28A88B96A571F7C550ADF930811DE60
SHA-256:	C1267C0FA89B28A484D21F47395A14A21B7DD0CD46433CE54BA38C4F623FE7FA
SHA-512:	E784C66B0FFBD0214FFD3B3146E30092C8CF363EA81A62DA539D500643F35F513BBF000ACE44AD07B9A26E99787753C616ECDAA92CA0F07D82FBCEEAD8A61FD8
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/nehjkomg/world.png
Preview:	.PNG........IHDR................M....sRGB........DeXIfMM........i........................................................o....:.IDATx..].\|.E..........P.DWW..A..w].].H...{..J..q= $.."n.D\.U./@.U....E...V .9f....N...g&sO&.........^.z...}?c..U............fB..e3......Aan.THp..t...1.=x6!..I{........Ps.Vm.:.#....?....+.%.U?..3.TM.!... .. .C.<.:.{..X..\|#c......v._.c..M).....n^U...Rc1.c..F.."o.............{....)..4.[...E=.c.b../.2.......3R\|.:.3.y..=o......:.].!8..T6..U..w1..g$..9oE.-L...6.P..M..tg..Y...N..w...".q..g_s........\..u...Y..a.....e..l.9J0^..\.q`.-...bV....B..4.z.P....:'a........[.I......o:Q.........,..u,..h.O.-,_&....,_.xC.;Eo.gr.F@^<..H2..7H....Gp^..... y.Dt.%.~UE.....>pr......By.k..U.....8p...y53...._.J.Jq....p.....g...........9kD..6('k.3J.2.Z..Ep4m>PS.1....!~..Ps.......'NL..v(.....Us....7@.yV>.?..._7...+..`.?.....'.X9_.4.@.i...-.f.....Q..q..I...7fu...L..`...>^...1.pT.M,].)...7g...Ds.p.#.t../.^P.\...L./.z.4..1..A..v......_...k>._.;X

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4533
Entropy (8bit):	4.663128189025364
Encrypted:	false
SSDEEP:	96:AYfkzR6Qz/GrjN0zVbU9Xys/4Y6GEDlO0ae:721iN0zVc/4rGEDlO0N
MD5:	E1367C73858CBE32FE2ABD67F540787F
SHA1:	6169275ACE7584617BABC7D1229B147EC974D879
SHA-256:	C58AFE4EFABCA4BFB363300F1B6AEEB69B398FAD438885511DDBFB85D417417F
SHA-512:	A989A6C6DE93A5919AD560B5B87F60D25BA1285A1345C5147E172AC12550A1FC87E9A1D4236C68977406035A1500A0F6FB599A5B68F346F2DFF0C20A6A702508
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="288px" height="401px" viewBox="0 0 288 401" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 27</title>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="A-chi-ci-rivolgiamo2" transform="translate(-923.000000, -1414.000000)" stroke="#0779B8">. <g id="Group-25" transform="translate(924.000000, 1415.000000)">. <path d="M201.392925,322.381795 C199.995638,314.397883 193.053003,308.287315 184.650917,308.287315 L151.538477,308.285905 C142.10644,308.285905 133.580025,305.666889 124.544992,302.895637 C115.014057,299.97356 105.153933,296.944353 93.7298093,296.944353 C74.6481596,296.944353 65.4647802,301.648151 52.7535702,308.163271 C47.4978514,310.856996 41.5978833,313.863649 34.0957687,317.023947 L34.0957687,308.285905 L0,308.285905 L0,399 L34.0957687,399 L34.0957687,386.543463 C50.9112429,381.848122 70.2

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22932)
Category:	downloaded
Size (bytes):	23070
Entropy (8bit):	5.226634512155472
Encrypted:	false
SSDEEP:	384:QhrHpZky+JB6/tX2lHldkMiYnFpY54LjfdANAc0Eny+RWuW7NeoMwV/vtrx+OLDE:c+JB6/8lHldkMioFpY54PKQEny+kLxVc
MD5:	9346EC27896981BC4C0B146CF327727A
SHA1:	21486194BAA22EB1155FE98BF7AF6314E7773CC7
SHA-256:	50E497B00818378DCFFE856B994F89947B620C66163768879C9B8A63D583F898
SHA-512:	6DA45EF1A2F7F82BE8F17464F9827FD4A7490C18B86B2EC43677DAA7F80475147EAF3D2B0931C1343542626E87951DD698C142BD14B87D9936A8D2486323E019
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/scripts/jquery.validate.min.js
Preview:	/! jQuery Validation Plugin - v1.16.0 - 12/2/2016. http://jqueryvalidation.org/. * Copyright (c) 2016 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.settings.submitHandler&&(c.submitButton=b.target),a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return!c.settings.submitHandler\|\|(c.submitButton&&(d=a("<input type='hidden'/>").attr("name",c.s

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65309)
Category:	downloaded
Size (bytes):	263504
Entropy (8bit):	5.182919665211103
Encrypted:	false
SSDEEP:	3072:0ttz34RZuq4iaNipz600I40vOm/xHFiS22l7pq:0tpQZuq4iaYpz600I40wS22C
MD5:	DEE198A856D16A8AB131A02C258F1135
SHA1:	5704A415F907E5184A73A00D9530BADC33F9347D
SHA-256:	C909BCB16A4383D918A39EF24FFB6079DFE08924EF3DDDD681C57723F0BDDEBC
SHA-512:	9A7D87DA0E254F50BF67CB4340E8F05E6BA7947C02862B88EFCF098E58D32FFE85E62AB2AD234839F3D23118A1CB593F5136E00FA1809E9C9D379552C18E3AD8
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/styles.3780f3edbde77d47.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue: #0d6efd;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #d63384;--bs-red: #dc3545;--bs-orange: #fd7e14;--bs-yellow: #ffc107;--bs-green: #198754;--bs-teal: #20c997;--bs-cyan: #0dcaf0;--bs-white: #fff;--bs-gray: #6c757d;--bs-gray-dark: #343a40;--bs-gray-100: #f8f9fa;--bs-gray-200: #e9ecef;--bs-gray-300: #dee2e6;--bs-gray-400: #ced4da;--bs-gray-500: #adb5bd;--bs-gray-600: #6c757d;--bs-gray-700: #495057;--bs-gray-800: #343a40;--bs-gray-900: #212529;--bs-primary: #0d6efd;--bs-secondary: #6c757d;--bs-success: #198754;--bs-info: #0dcaf0;--bs-warning: #ffc107;--bs-danger: #dc3545;--bs-light: #f8f9fa;--bs-dark: #212529;--bs-primary-rgb: 13, 110, 253;--bs-secondary-rgb: 108, 117, 125;--bs-success-rgb: 25, 135, 84;--bs-info-rgb: 13, 202, 240;--bs-wa

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.960656225380364
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKEMCsxBG8gWaee:PLKdXNQKrZgL
MD5:	7ACB77FD99ECED093F7849E9E0C261B1
SHA1:	5A9A0046D82F18B04FD2DF84A363D1854B5388DC
SHA-256:	28BD191BBA13945F81B09F2DF5F54B9208309F4DA0E7BB202C1E61C7ADF039B9
SHA-512:	6983990149C871728E0286674E3E415FBD226306031A52F6A24DA60BFF39CD1B30003D9A85180A989D638B030C5919F948E678320B4B7AE458C1DDC43EB1CEC5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js');

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 2880x1000, components 3
Category:	downloaded
Size (bytes):	3947829
Entropy (8bit):	7.965969618053065
Encrypted:	false
SSDEEP:	49152:QWqACMPmtXUteFL30fP4n/LHrkdnk+FX9YF9lKADklEMMVgpELgtgf28fT2A1:QWPZP8Ete5kgn/3g9FXpykGJZ1
MD5:	19FFDFF278F46907BF27A6A420DB163D
SHA1:	02CC8FB8BAF353635F4A882A22DE98E958FF6934
SHA-256:	4A89FC612068DA11C0855E2F06B173E7EBA1B90CB3C3DD437B5CFDAF0517970B
SHA-512:	62F814589B0F16A3AF5B1054C13D1BAEDD77761AE2EC61ACADBF4C769888274DAC2E1CB45D5AEB61BAE1D151413BE8935EB1D7CCABDD94C3BB590E53CCB7606C
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/dyvpywmz/cribis_22-05_visualhero_chisiamo.jpg
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C.........................................................................@..............................................S........................!.."..1.2A.#Q.Ba.3R.$qb..Cr..%4.S.......&5Dc.....T'6s.......................................O......................!.."1..A.2Q.#Ba.3Rq.b...$Cr...S.......4c...%..Ds5..&T.............?....\|............W......t?...Q..U-h..g....mtE.@..?..9.0s...9.#...~G.v.,F....._..uc.xc.b@.H.....7.'...'..6...?..v..8......rZ...... .?..V,.kB..u...F...P..Ys.......O.8?.?<\|z.....x...^~\|..+...n....j..h..+y.>.O..1..\|c..89.>.w.Cu......: ..2...MV......@....^..rN9....2..>q.X...............z...LI..?......U..>..R..........2~q...j.._..........D.2...I?44..G.Y.{.?..9.s.....?.F.?......[.......b?.G..}...........4I...S.g.'.....H.?..drpH......]........VQ@.y.Uk.../-..n.d...q....q.......).../..........@J.]b..7d

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.515401363444512
Encrypted:	false
SSDEEP:	3:YGQWu5ILfRLY5XCZIHtWusvrQf9OrfHQHY:YGQL5IN2NLAQlOrfHQ4
MD5:	F868D71A47DF9535E3FA07D9E49B3FF4
SHA1:	F33CA4EF6283DA3C37F00498B2CD69FDF8C8824A
SHA-256:	E853ED00A8DF233A5CCBB4849E7B4BC1E2EC5D0748FE240A56683F2089D42121
SHA-512:	2D5CA6E89F65DC88CD2CEE19BBB7A4205FE71E5F16C8F6004533544043A4EFF0F6A9FF28B8F123CB9FB10E3E27E3B48DCD557F6FAD35CC5512791A930629D9FC
Malicious:	false
Reputation:	low
URL:	https://api.synesgy.com/reminder-api/api/Partner
Preview:	{"customerCareEmail":"tr.info@crif.com","customerCarePhone":"","defaultCountryId":"TUR"}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	22085
Entropy (8bit):	4.909721441860394
Encrypted:	false
SSDEEP:	384:82eJi76deaDlZXNyjdjzj0qhLqBTPAGnZ6g4ASelRs4mRkGJGV4W6:82Kg6QaDlZdy1IqhETTUUnYJGVa
MD5:	36B493DFD06C997676CA2AD4D2964C9C
SHA1:	858FFC0F2FE88E416048955A512A83F385E459EC
SHA-256:	511003D0FBBBA4EFC7FA378017CC66FBC76D3F288CE60DC4ECF332738CAD0148
SHA-512:	037F7496A11436DE1675AF968BDF489F40CAFD76B5EF916EC4C3F39D2C8AF9F82C217A7A5BA37786367DBABFA0DD46C4453B2374A61715D773F412A9D10BA112
Malicious:	false
Reputation:	low
Preview:	{"settingsId":"G_xgCaSxD","version":"4.2.49","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"http://img.usercentrics.eu/misc/icon-security.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":true,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":false,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":true,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdown":0,"op

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	90078
Entropy (8bit):	6.090701847204512
Encrypted:	false
SSDEEP:	1536:TDTFQP1UTtIWcJ2DYD36YK342geeM19ACkiE+Uiy5wE+Uiy5whklCW:pQP1g+z6YIXgY9ACki1py5w1py5whklH
MD5:	EE5EEB13C7717F508AF2020F5593CEF5
SHA1:	1618B290BF6A74DB104A51BC347796F3AF6B34D1
SHA-256:	EE1BFC0BAA2642E6F9AF66E141A753C43D3030C6174A1A7773D87D8179E281E1
SHA-512:	75AEE4B8ECF8BE03B6600E7C2D898C192F213112E867F85B1AF6ED7613AE4AE57B1638BD1C7C131968731F638495C13C4461C1C14031DE88AF341203809D596A
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/animations/ESG_blue.json?ver=2
Preview:	{"v":"4.8.0","meta":{"g":"LottieFiles AE ","a":"","k":"","d":"","tc":""},"fr":25,"ip":0,"op":250,"w":1440,"h":600,"nm":"illu x Walter new","ddd":0,"assets":[{"id":"image_0","w":536,"h":609,"u":"","p":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAhgAAAJhCAYAAAADqckZAAAACXBIWXMAAAABAAAAAQBPJcTWAAAAJHpUWHRDcmVhdG9yAAAImXNMyU9KVXBMK0ktUnBNS0tNLikGAEF6Bs5qehXFAAAbb0lEQVR4nO3dT3Jj15Un4HMfSKbtkFVgSa5IF0D30woER/Rc2IHhSUdYssLQDtgrKNYKmjsgHSmQHZ4ktQN43IOmZz0TbClLjkxCYEly2kkC7/YgxaxUJsnkH5Agwe8bEQ9/eIa/OPfceyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3868
Entropy (8bit):	7.840747944005885
Encrypted:	false
SSDEEP:	96:AmIVTc8SmVByyqSDcEPJbKffRiq8y1RBkg3:ALcRy9qSLKffRioT
MD5:	BFE75913A5D408770806A5098C6EAD43
SHA1:	C2D075A0E75B2EB91DFB7FB6E3949CD0AA5EB4E3
SHA-256:	793E7643608752727CB836F955164367F7F6FBC4641A3EF7118EDE8BB73D5D04
SHA-512:	E0E426A0275723BEC0CD05732C4C61FA44FCB2AF803186C970416CCCC92B99482001EF969B73B74F963B6F8F684A510ED6661930659C2FE51B22C07810A40461
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..}l..... .T..E....-.DH.d..R..J.6..d..?S..i...%......)$K....u..]&..,.C.(.B5.`....J. .]...s=.......y..4...yn{...v~......P...R. ....A.....@.@..... ....... ....A . ....A.....@.@..... ....... ....A . ....A.....@.@..... ....... ....A . ....A.....@........;:........1...@.(..F+....3....k....rO..u..O.......08Zf,..`....-'..6.{...B.=..7....>.s...q...0.....1G....R....L.M..1..K....r...4.....K...z.C.e.-.......A...Wq9.....z-....@@.K....{.En..0r.....M.8.z...0..K....g.......4......).m.....@@fPfb(q.;y...h...@ ..z...v.3}.?;.P%..,y.q....R...G^X5.0....q....R..J..2Z...e.B.....> ....N..3..X...~......H...Y.'...t8r%&}........DQ.C.k..)...NH..q .PW......;......{wVl....!.....-...K.r....#.qH.."...*+...M..0..........N..j....D. ..W..~...y....X..h....Sj."A.m\.......i..A...A...$....8...M.B..U/L...X..... l.6oH.E.s..1.Q.6._.K....O..g......g....6....%>.2$.........M.m.G.EK..Y...A4Q.i.8$D.CA.S..\.H.....t.@@..zP.iH'.D.Q.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2203
Entropy (8bit):	4.901176649639355
Encrypted:	false
SSDEEP:	48:cwESYJHI+TvcZCuvhpd8c0cTsTSQ6iio+hxb+suM:P0VpKppd8RosTJ9+L+w
MD5:	E4676498898D74CB2877B8AEE1810209
SHA1:	0671602FBC698412CA015205439DF30358BBB3F4
SHA-256:	DB4D3AF44A5CC76ED84438B2CD9AD2908962BC73855FA2838FC236EF5C62B719
SHA-512:	41A7B017FC9DF2551044C1410BB9667E7F6A7961DE26BF0650046BE4F542FC52A79FF40E0E08DF4451F2B9DC70B0ABCCEF8E29381CD2F1A95E604C3BDD4451D8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="77px" height="77px" viewBox="0 0 77 77" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>4293CAB8-5D5C-45F7-9AFF-DFA378197051</title>. <defs>. <polygon id="path-1" points="0 0 76.2819 0 76.2819 76.2819 0 76.2819"></polygon>. </defs>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Approfondimenti" transform="translate(-381.000000, -1440.000000)">. <g id="Group-10" transform="translate(381.000000, 1440.000000)">. <path d="M50.8875,39.1796 L50.8935,39.1736 L29.2605,17.5406 C28.5805,16.8606 28.5805,15.7576 29.2605,15.0776 C29.9405,14.3966 31.0445,14.3966 31.7245,15.0766 L53.3585,36.7096 L53.3635,36.7046 L55.8275,39.1686 L53.3515,41.6446 L50.8875,39.1796 Z" id="Fill-1" fill="#FFFFFF"></path>. <path d="M28.7507,46.9021 L28.7587,46.9021 L28.7597,16.3091 C28.7597,15.3471 29.5387,14

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12136
Entropy (8bit):	4.678037527274538
Encrypted:	false
SSDEEP:	192:y/9zt9KrO9A9kVyE9uJ89FlcmFgOAUJ8VYr+S2IRBtLT/+1959ti1Af8xUW35o:YvNWy/cm6yJxr+STRBBTG1xaAfuUW3u
MD5:	9FDFE5D50B3BB0AAD87D735A5A917245
SHA1:	7B3EB862489812FC07817EB68996DBA853ED81D8
SHA-256:	9BD34D19FBDD998E4871C39E6E2DB8689A52F901735094EAB9F8C9CF3A4A7564
SHA-512:	EC56AC1BFD298FE7EF418D28817E33A8703896283EEF8B0ECBDE649AB9DB0B36E5C8140832F7F8961C271B23AB39512C1805A888BBBC8CC93395B3EC43A1E4BC
Malicious:	false
Reputation:	low
Preview:	{"tiles":[{"type":"text","size":"md","behaviour":"visible","name":"CompanyName","token":"company_name","value":"IPROTEX GMBH & CO KG","default":"","position":1,"readonly":false,"required":true,"relationships":[],"validator":[{"condition":"maxlength","value":"140"}]},{"type":"text","size":"md","behaviour":"visible","name":"Email","token":"email","value":"","default":"","position":7,"readonly":false,"infoToken":"register.email_text","required":true,"relationships":[],"validator":[{"condition":"pattern","value":"^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\\.[a-zA-Z0-9-.]+$"}]},{"type":"text","size":"md","behaviour":"visible","name":"BusinessId","token":"business_id","value":"","default":"","position":13,"readonly":false,"required":true,"relationships":[]},{"type":"password","size":"md","behaviour":"visible","name":"Password","token":"password","value":"","default":"","position":19,"readonly":false,"infoToken":"register.password_text","required":true,"relationships":[],"validator":[{"condition":"patte

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 536 x 748, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	880026
Entropy (8bit):	7.996825257299694
Encrypted:	true
SSDEEP:	24576:0nHw+nK21XfYeu9WOXOMDJi68AksnTTYkMTirEyv6q:6Hc21vxOX/Dy2Rbgcd
MD5:	63B1F8DA601A4B691811E743A34A1303
SHA1:	839798BF7ACAD2B9A1236B0C0F01E26D516C812A
SHA-256:	3B712A451A8EFC6C61CD36073528045A5E8E2C9CF246C9E2DC2A1ACEDA6C891D
SHA-512:	E8F9F44D06EB02F037AA71510FA9C6274A09936C75F32F74618F0E338BC25F5AF88029E1B0E72E68065F480BD9C45257FC1AD6511F4F6811DE91C670429F6307
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................gAMA......a....8eXIfMM........i............................................4Uk...@.IDATx...K.uI.....}..2.....d!..2.?.0m..j.XH.-3@mO.n...!.U..!m!7B.1@..FFv#!A.oUYU....y....\|Y.....k.......k.........o.........z\|<~yvv..x8\|.xxx.x .....xxx\|<<>>...p8......"0.....o.'}.......w..@......xvV....p.......}.p...py...x. }..P.3...#.x_.. .....>Y//......yv........D.`.... e.....F. .W9z...D.H.....[....jtU...8..HG.9#..[.Q..a....Hh.DSa..........E.A Z..K.G.U..`.......Uf....$.....-54...`..........._...0;D,...%S.V..A....}.Uw....>.......8...n~.\|....P.......8..GvIZ.?...s.P....F.U..G&0.........6....V.xC.#..j;...pD.t..X.Y......Gf...iE`.m..)s..,.n'.'..)...'..\a.....:.i.ajd1..A..Yd..;q.D.N.GNAF.).................[.......u,./M-$.9.g..Ky...-.,Z..7FU..$..n.L~.qSl2K.......L...8.{.K..z[...V........."X.T.YL...c.I.s"......./.-A<...._`C.#....[...K..9......C..!......................H<q............o....._E....@....9.3N..>.......t1.hX

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1000, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21756
Entropy (8bit):	6.897513229857776
Encrypted:	false
SSDEEP:	384:zVG0kCLIrNgMy4YZZVW746DdSz399QbqFRq7siUx8m7A5:z80vLIpf1EIc2g9Q2fq6Lw
MD5:	B170FECB8D805D5636044A27FD8CC347
SHA1:	FAB11B67EA61DF0D360A2AC377C9DD19ABD4DC97
SHA-256:	4C3B474DF2FA0CADC2078AF11393CA2BCB724DEEDB734EBBBA1ACC2398A8C935
SHA-512:	9325B78346ED77C357358C7F61706A08436E12FEDC1EA1A11937C9660EFFB370A440B97DE481EF211BA970C2D2846A92C613F48A8E4EF1C48D8D3207D8279CF9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............^e...T.IDATx...O...}....4.h,.H.Yxf...X..v6..).6.,....!;...B+..2A...."5r............ZZA...K..!..LH....f.....{.y.....~.....jI..3.<.~.}...g.\|...@e.................ko..._........,.T).........o...^......g.+...\|......,...@uO?u.....r..s..f.^...........,../...U.0.N..^y.x...l7~uP.}..r./..b.....:..U.......x!...E....-H...P.t;...I....!.....y..n..`&.v...f@.....v...l.. ..w..f.n..`2.v...q......J.v..&.l.. ..:...H...0.d;...I...0.t;...I......t...=HJ...0.d;........D....1$....@.........L....D\...0..R.....$........(.....!...@F.....&....^....$.....a.......!...@v.t....n...$.....@..........I......@.....F.v..v.l...5.t..N$....q$...h..;..;I...p..v.................d;...3...p,.v....l.........E.....$.....t...> J......v..zc@.....v..J.l...O.....&....d;..=s......C.v...I....;.:....R.......:&.........R>.....?......G....p.....s..9U~...'e:..z#....GI...t.[_..x...!.v.....t...I...tH....v2...tJ....?....p2.w..NI....E.....s....!.v...H....`.t...H....C.....p...t;.@.$...`<.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1478 x 473, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	279269
Entropy (8bit):	7.995043192798841
Encrypted:	true
SSDEEP:	6144:OTQ+gTvauel3YOxTTWWHLZILjKr+oZ1hRULFbGR3+35EFYlQQ:OE+gaTpy3cRZVULF6x+3Kc
MD5:	881DAA7A42283AB22CB8A5F0D06E1EC2
SHA1:	50B103FDC169029928278954B9E64238E7E435A4
SHA-256:	0FB2E0F08A09A383E311E851D0325E3A70767EEA3E33410441C550289C0A9359
SHA-512:	6E17391380E33ACECE123A2BB7CD928B927997D42E3C5E105014577BFDAAD0EE4ED3E77D6A46E2B91454BA581769B58C2BFDB711475D8FED54B3343CF8272E38
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............;......pHYs...#...#.x.?v.. .IDATx....m.Q...NKm..R..;.A..a..F.......O .....K...-.....0.u...'.u3ap.D7....Z........Y9.U.........sze..........U.Z,"t.I'.>......%f&"z..).L}.$.D."..RKK.o..q.....t.jZ........j.t....5..bf.E.T%YM...K#;~.R...!..5..C.Ku...H.......Yi.Q..~.H1.CR....r.u...N.5...0.0..v......We......W(..\...`..h..uM.>..D....>.........Fx.b..:..8#..dn....q..<.8..-z....+VB..o. ...l.G.}.Of...%k.r...?a.X{..0.....l.Q.g.2.T..s.1.M......Q.\w..U.n..u.0....Atz.:.`ym...I.DM6:v.d.O....K..9..F..-..n....X^.;.)..7#.!a&.J...&...M..L..}#Y;.....6......n...i.&.k+?..>..M.0.H.,...;...5.3..Q....}.........jMn.l.l.....D.y...w.2.e..J..Uv......l.}.5.n:u.&...O]&...<0...._v._.....#T...o.$=....G.sIH..f2...h..._....d..LP........;Y=S..K.........B.G.~.^.{..X.X....l.x_.]...M..3-..P.....-".&..0...M"z..\|.......9.. >..N...............DL.".b.8.1..a.f...q........-.y..K...]:`.~>......!:..7......ub....yBG....f.R..wA^A.....}`\|.?......%.. ...+.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21639
Entropy (8bit):	4.893055202495686
Encrypted:	false
SSDEEP:	384:P2L3iwt13Ej3Tjdjzj0qh/SbTiAGnZ6gQ4ASeaRs4mRkwma4W5:P2j113EjD1IqheTyU5nrJmaZ
MD5:	10A5F5D70F7902AD3E1F8B8B89AC646C
SHA1:	DBC4A6D6942735365FF0558BD7668759B46292F3
SHA-256:	B01483D69D9701D85B823FDEF2627DECA7292BB7D08932CA2933B1D74434409B
SHA-512:	AFA04FF84166F28C638DE060111CAE7CF41495386F548518BC385ACAFCF2A64694659DF25A61B1CBE130B6064D8B533A48A7572CD3EA5598815FFD0873F6BC99
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/o_tc3l2da/latest/en.json
Preview:	{"settingsId":"o_tc3l2da","version":"7.5.65","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"http://img.usercentrics.eu/misc/icon-security.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":true,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":false,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":false,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdown":0,"o

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmph7zyugrf", last modified: Thu Jan 11 12:39:49 2024, max compression, original size modulo 2^32 1275
Category:	downloaded
Size (bytes):	689
Entropy (8bit):	7.7068386146624945
Encrypted:	false
SSDEEP:	12:XWozenNzeFXRZLaJp9fjDYUPtfwLgqzSEUJxLdlFDasabhC6OadhSSNvI/vKywAh:XNehqXfaJpljDNP4WZrd3O9nDNhIHfh
MD5:	DD2A24FDD4920DF955CB49E4E5E125A4
SHA1:	F111AE3FF680EDCB86F1750C066736CEDE46D683
SHA-256:	DF78436A8566C766D1CD60965C0F37FF614ABDB7413584115CF36A4253A969DB
SHA-512:	0958E2DE9AE90071D22AA8DA06E3C81FEF7BA30B8C646BEB2A3A3C914C25C9788E2B294DD769D8262B0EBD10827DFD07E757722A599079B15E3A60F50EF45FC6
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/Taglogger-36e26749-73e4c0ca.js
Preview:	......e..tmph7zyugrf.mTMo.1...Wl\|@.........P)R%U.d+.......!...;......~o<..C..u.....L.@.7.fS9.29.....24 .<.>+.....@m....3Q....Ru...L...5`..b...#..E...".^9..G.F.w.E..=.H.e 3..K.X.V.?.,...nuO.........Ni...4..I.:............g.....Km.&......G.....<..G\|....._d~.d.........0...{..P.....t...0/mK.r-...p.e..6#...B.uA.\|..@..gc..l..^k...\l.S..z}c...i:.7..}IO.Tey.L..h.`.q6..:....d)?a...-a? m...U.P...D..e..Q...G..........k*%.....r..p...&C.;2...... +.....p\|.!cL......}.Ejf..`..<#...2.BL../...G.q.G0..]1.y..:.\|.&......x.\(..4?....J..i...).#.Y..0.3.M...k....[.:.,.. ...1......{}(...F\|.:.;%El.....i(....A9.M=IP.I.5....X....e1.#..d.JV6.d...N...<...Sq..P...f..?..K....

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Macintosh), datetime=2017:04:18 11:58:03], baseline, precision 8, 783x367, components 4
Category:	downloaded
Size (bytes):	780600
Entropy (8bit):	7.2892817022896415
Encrypted:	false
SSDEEP:	12288:A4E0p1RE70zxntT/ylTyaaSMn2fSFeJE6xkP4svMrIJTd:A4HyUt7yQaaPXT6xU4sEr4
MD5:	50A6C896056409ACD5F991DFFE14EAD2
SHA1:	4E0FF0E58858A862938D9EED341022FA44D89E53
SHA-256:	D720E0EADC2D7A19D018AA2600B7FE8AC70622FAF2D70408831B65731F0440CA
SHA-512:	885A6EE758C1814FEB76D49B52654BD75AE220C292CEB3F330ADABB83446755405F60AE6A96E9D104D647C7A3AD797CFAFE82687CEBAB3D4E8D9183B9E28076E
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/u31heilt/asvis_logogr.jpg
Preview:	....+.Exif..MM..............................b...........j.(...........1..... ...r.2...........i....................'.......'.Adobe Photoshop CS6 (Macintosh).2017:04:18 11:58:03........................................o..............................."............(.....................2..................H.......H..........ICC_PROFILE.......appl....mntrRGB XYZ ...........acspAPPL...................................-appl................................................desc...P...bdscm........cprt...d...#wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt........ndin.......>chad...X...,mmod.......(bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc......."....hrHR........koKR........nbNO........id..........huHU........csCZ........daDK........ukUA........ar..........itIT........roRO........esES........heIL........nlNL........fiFI........zhTW........viVN........skSK..

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65267), with CRLF line terminators
Category:	downloaded
Size (bytes):	135632
Entropy (8bit):	5.2522388599956455
Encrypted:	false
SSDEEP:	3072:vJkYe9swzLjkTbkC75OrynIm1/T5W9D/EL74ami0lLHt:vJte9rzLjkTbkC9OrynImRT5W9D/iP0L
MD5:	85EED47639B9C83AE922B458E8A67A88
SHA1:	7396E4D4D883E851C864822F6D8ADE78AA6B5091
SHA-256:	51C8A5E5C4167E514C944F76FED77D3F36FB99AAD6E404EEC57C2C0E77FF3B9F
SHA-512:	C92C34AB2A54EDE4437D2F596056557E6133F7841FF2184CB551D69AE451656A77387DFC767D0D4035D9E9ED794235F76CCCE411C990FC3229E7983F943D1413
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/scripts/swiper.bundle.min.js
Preview:	/*.. Swiper 7.3.0.. * Most modern mobile touch slider and framework with hardware accelerated transitions.. * https://swiperjs.com.. .. Copyright 2014-2021 Vladimir Kharlampidi.. .. Released under the MIT License.. .. Released on: November 18, 2021.. */....!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s={},a={}){Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],style:{},setAttribute

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	917
Entropy (8bit):	5.10708739241076
Encrypted:	false
SSDEEP:	24:2dcl6R/2Ni9sJKy7LXJRVkYUY40MuQ6a0:cv3uJK21kYpMb0
MD5:	1716293DFF38A8B01D69BB194DE58478
SHA1:	4C775A23A54050C2A93E1B81D42542C4362DEF50
SHA-256:	39601ADE67901436B0A875D547AD9CDF6A2C683DAF09C045B2A2C2239A1D9388
SHA-512:	F6E82D04A9B5776F4693EDD39BF254EF09A082558689A59A05CEF62F618D97F2CC66DC3EADB723A5D9B4281B15D1A1D915EB2CA660101F47546831B8A51E1DC7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="30" height="22.5" viewBox="0 0 30 22.5">. <defs>. <style>. .cls-1 {. fill: #f9b233;. fill-rule: evenodd;. }. </style>. </defs>. <g id="UI_aggiornata" data-name="UI aggiornata">. <g id="C_Home_V1" data-name="C Home V1" transform="translate(-1149.000000, -14.000000)">. <g id="youtube" transform="translate(1149.600000, 14.600000)">. <path id="Fill-16" class="cls-1" d="M13.06,14.2v-5.91l4.97,2.95-4.97,2.95Zm11.05-7.77c-.22-.86-.86-1.54-1.68-1.77-1.48-.42-7.42-.42-7.42-.42,0,0-5.94,0-7.42,.42-.82,.23-1.46,.91-1.68,1.77-.4,1.56-.4,4.81-.4,4.81,0,0,0,3.25,.4,4.81,.22,.86,.86,1.54,1.68,1.77,1.48,.42,7.42,.42,7.42,.42,0,0,5.94,0,7.42-.42,.82-.23,1.46-.91,1.68-1.77,.4-1.56,.4-4.81,.4-4.81,0,0,0-3.25-.4-4.81h0Z"/>. </g>. </g>. </g>.</svg>

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2643
Entropy (8bit):	7.692475379318737
Encrypted:	false
SSDEEP:	48:16c60OhlptYqS0gw9oPHSkHmcz5cM7JjVSElTpZFzDpasJoLwlR4444444444448:0l04vbS0L9ZkGcz5cwSsTssKku
MD5:	0CF9DAE47AAEF28C0ACDB45CFC7C7FFB
SHA1:	064FD5F88C7F01C4B3A5D0D2E8A0805004909549
SHA-256:	E04FD58072B0F6B9A63B18B1079EAB11F0770E92FB3741E5543012F6FDA6EB99
SHA-512:	AED1D508A07065ACCA242C5A8C8B37A684FFD2EBC8ECC4BF3E4328BD63DAC7D81ABF651F303552DF4E38C7FB2E7B5CA345303B7D8E9B255AA77DFCC36EC9DA0D
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/fjef03g0/taiwan-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...]..W....a.t..&.K....B..]...Xz.I....&%j.I,.5......j...hLSH...H..M..R...P..].....kh...s.g.}..3...y..~.....3.9.=.......}g...v\8e_..E.3....(.x..........." .............D@l\|.....\|..[6....$.N.r........6\|.....P.]....._..,.....M..BC.f.`......v..+U@h..s.HS...a.SK..C(...H@7)U@.:\|.6.?.pH(...Q.u....m.....T.q..].t...V....C.p....}co.(...)..._...\|.a.:D6..D.Z@U./ 2?.g..\|.a.:D6.,.D@.....y!.j....<.......A.L..(_@..1q....Bb}A.X...(........c.{.t..,=.8s.v>.Jxv\|.m{l.....&.}7..................qlz@.AONNZo.............#.\.09.^+_...&p...j.....C..o.0.....{.p..j..4.P....%/^...(..}U....k...#...z(..5..s..xy,.&.M.8.#v...U.TP.._.x...C.\|2..4.8......uv../.zM.#..,.:...fO.....}.............k.^......h..d..)......B#_...{.w/..BE.V=.F.!OA......o\|m....).K=.......p$.p0....N@..EC.5d5....YhW.~..(....).s..#!(.8tP(x..R8....K.d-565."j...{....#...E.p8...o8.D...U:.b0<.v._$..@;,._..R.d...X..........P....Ps..\..7.....nx\|.g

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1104
Entropy (8bit):	5.1548899881431405
Encrypted:	false
SSDEEP:	24:2dvAWKLfS9SpuIAUpHwYDhRthChzrHVxpuF:cvAJfWSpdxpQarE/Y
MD5:	6F8890839D9E8DC44F007CDB1BC0E610
SHA1:	28B57822197A860B0E6D2462E2019EC11113ADDB
SHA-256:	0C54374765C7F2F07A106367352B0CEC7A6EEA8DD71A428E54100386D6C8A94A
SHA-512:	7C94F95449B147984D9E8557F8873584129B9F17E9D6A1BB25256E6DEEF41A5ADBDDFCF7414E0BB7C19876E8D39FFC9710347B4B87E570AD9C11CB9980ABAAD1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="72px" height="61px" viewBox="0 0 72 61" style="enable-background:new 0 0 72 61;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<path class="st0" d="M68.2,10.3H49.4V3.7c0-2.1-1.7-3.7-3.8-3.7H26.4c-2.1,0-3.8,1.7-3.8,3.7v6.6H3.8C1.7,10.3,0,12,0,14.1v42.7..c0,2.1,1.7,3.7,3.8,3.7h64.5c2.1,0,3.8-1.7,3.8-3.7V14.1C72,12,70.3,10.3,68.2,10.3z M24.6,3.7c0-1,0.8-1.7,1.8-1.7h19.2..c1,0,1.8,0.8,1.8,1.7v6.6H24.6V3.7z M3.8,12.3h64.5c1,0,1.8,0.8,1.8,1.7v14.9H43.4v-1.4c0-2.1-1.7-3.7-3.8-3.7h-7.7..c-2.1,0-3.8,1.7-3.8,3.7v1.4H2V14.1C2,13.1,2.8,12.3,3.8,12.3z M41.4,27.5v5.1c0,3.1-2.5,5.5-5.6,5.5s-5.6-2.5-5.6-5.5v-5.1..c0-1,0.8-1.7,1.8-1.7h7.7C40.6,25.8,41.4,26.5,41.4,27.5z M68.2,58.5H3.8c-1,0-1.8-0.8-1.8-1.7V30

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36660), with no line terminators
Category:	downloaded
Size (bytes):	36660
Entropy (8bit):	5.2819389674374895
Encrypted:	false
SSDEEP:	768:JoUwXokueukXNW7ZOvrdJwg87SudCF2J3xut8s42ZC3xSo:5wOxoTeSF0J8fC
MD5:	E12EEF222C39F40106111646C3F9C14F
SHA1:	7B6FE6932020C535B57A33F281AF00C144C47891
SHA-256:	00D620C7A796A0E1E041841D9A24D64740BA876A35455DF998C65D98E0CC141F
SHA-512:	6FDBD8A4B4BF63C45BBDFDEC2C4B19F5052D7D4F6E98C9CEE6176E1C65B06E57ED7F5EDC2B0C3EC52531D5686BF9221A238A843500C5D41150A5F22D942F24CA
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/735.624d5a8781dba816.js
Preview:	"use strict";(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[735],{43735:(he,z,w)=>{w.d(z,{Z6:()=>q,e$:()=>j});var G=w(15861),p=w(65879),Z=w(96814),F=w(56223);const O=new p.OlP("ngx-mask config"),L=new p.OlP("new ngx-mask config"),B=new p.OlP("initial ngx-mask config"),U={suffix:"",prefix:"",thousandSeparator:" ",decimalMarker:[".",","],clearIfNotMatch:!1,showTemplate:!1,showMaskTyped:!1,placeHolderCharacter:"_",dropSpecialCharacters:!0,hiddenInput:void 0,shownMaskExpression:"",separatorLimit:"",allowNegativeNumbers:!1,validation:!0,specialCharacters:["-","/","(",")",".",":"," ","+",",","@","[","]",'"',"'"],leadZeroDateTime:!1,apm:!1,leadZero:!1,triggerOnMaskChange:!1,maskFilled:new p.vpe,patterns:{0:{pattern:new RegExp("\\d")},9:{pattern:new RegExp("\\d"),optional:!0},X:{pattern:new RegExp("\\d"),symbol:"*"},A:{pattern:new RegExp("[a-zA-Z0-9]")},S:{pattern:new RegExp("[a-zA-Z]")},U:{pattern:new RegExp("[A-Z]")},L:{pattern:new RegExp("[a-z]")},d:{pattern:new Re

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	746
Entropy (8bit):	6.177692401719901
Encrypted:	false
SSDEEP:	12:6v/7Sj98DxOI9p33D45QR33P433ygiw5J33CpY33Idp:T58D9NgQ9jVdp
MD5:	E7ACD6FEECD247219A87E1F81440E6EF
SHA1:	93969F6DEA652066F5B3F4648E1A23A8F742CF66
SHA-256:	C115794F7321408ED3D00BD55257B0A0B56B594EF03EF2B423651411BE0F881A
SHA-512:	74E3C7D45153AA8ECAE11FC1953D8C5E53F282C0F91DF8366A9A2142B745DD05D07E577CAC8BF9730367635604027CA2AFEE17A812A3F7824C3B8AD3F9E56454
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...!nTQ...;0..P.(R.5... .nev.mX..i. ..@...T &%....2m.\|...;G.yW......W-.X.P..H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H.....L.....'[....w........".......;:..`..3.. W. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.[...{q8..Le..r[.>.=.._1.. .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. y...mV........q...y.....z&...t._...,O....Vg....X/o>.\..+....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .fz.>}..L..z...A.....K..j..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.........c....1...P.....IEND.B`.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	3.9863290599374346
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGY+MREHJxr/4MRo:YQTiE3/RHk
MD5:	DAC30E0F680C49B2A43F6236AF7C0F7D
SHA1:	437DB2020342C1C9883A7846A3E6435781263633
SHA-256:	77E29A4B09D4A5B26B29AAD4234CCD6104666F1AED61EA67DC68CC96D4719DA2
SHA-512:	C18E5D5E40D2A320B2B30A32083BC8C55F44BC6A212B6ED273190D316C2CA64E3AE17DDBDD3A46678BCCB65B3A6DC348CF5A0715529BB045AC2FF45E074D2E8D
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/G_xgCaSxD/latest/languages.json
Preview:	{"languagesAvailable":["it","en"],"editableLanguages":["it","en"]}

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3156
Entropy (8bit):	7.848108825796091
Encrypted:	false
SSDEEP:	96:szeDBFRqWqKiNhW3cBzQGvry7aaxf3+YNu/Tp:s+v0WqKi/WQQGuNOmG
MD5:	ADF74B3417CB5545B9F29F1D09BEEFAE
SHA1:	65830FCBFE33024C6DC5A15D99468B0376DF33F5
SHA-256:	7433B1986A2C41C8F042A2E0F9A9E01661A79AE1EABD9171CFF404963B25D8FA
SHA-512:	1232BC30164486353FE7AE0FCDF55187DE88EEEED2DA47180D0629D70C57A21A90E84B6C202A64F9B935FAC0CB94B3AB35B2FB0C170A1216800AF867276AB656
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/14xjznio/slovakia-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx....l...../P....:P:P\|..p%..L.!...K..m8'...Qq.j.......E.qB.... ..D.e...8`q..U.X..Zl..`....\............\.Ow..A~..=_....v..S...?..............D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p........i.:.J...'.77.'^.Ds.Vyo.o<(Ia.....].c.7yP..xy.(..E.. j..*..ww.b..U2x.UR:.J.g?.......x?.Q......q...8.&..b......b." ...sk0$......E.Os..B....r.\|.u@.oi..5........: .v...:....x....}.CN3.Z.V..u<.....q...3..Y..7..D!g..R\+.......C....U...w.\\=0......5..{...nE.c!..o..O3..`..]9.d.;...o.VUf.i...)c.,..3....P+pb%N.IJ.w.....k..M...~......w?%...w.....>.....O.~..-../.m.=8...S~..9^....L.bb..es.L}q..Y?.......b...mY.#0 ..D6 ..~..v.)U..u......+j.....v..=....Ad..:.Qhe_.....l...H.(URQ.%...L.V'Nu.T.k..e....;.....D.L.....d@$..t.Cs.8.d..)]....}l...I.Q6nd.4j;.Z1i\|...3!...I.s.=...k..>......V.......H.D..5.r.H......8...."...>.&s.....M...4.\|.L@.......H.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4961 x 3508, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4247276
Entropy (8bit):	7.988785196532871
Encrypted:	false
SSDEEP:	98304:oNspRQi/lEPyZT4n+skfBxz6eKCRa5gW+YQUqzJFqhmiQd4kQmZOls95Tc:kPi/l/yn+VBxpa5H+ZUSFqkQmZOls9Jc
MD5:	13BEE15D925DE763C51BC925044AC75D
SHA1:	74893ECA87032C022CC4D97AEF35F0C02E49DAEF
SHA-256:	B604115A4F53F0A79CBF1887E3E01305684803759D72EBA06B1F25C039E3D7DF
SHA-512:	5FCB39FBEF6B4140A2388CBCE9F4ABC86A400E0B4824C1EFDB87AD04641AAE5D9455CBF6BA832DA4F681D20BD81F65665FE8B153A948EA8BD8768273D8302148
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/wnmdo5pn/synesgy_2.png
Preview:	.PNG........IHDR...a..........6.5....pHYs...#...#.x.?v.. .IDATx..}k.....dHRU.vO.g..q.....+.....mC...Ti..;...eY.........""..4.IH~. ....@D(\....7..G.Y0.2p........m.W.2_.1...i..8.K..".?\|N..R.S.e.z...."...m9.6......<H.c.....x..e.p--.=..0...t+`YqlP......6.H^Z_e.~..1=U.\X;..>..&.1.....f~..K~p(x.IR.U1...SI. ...........+..W..."...#l....G6...8A..c.@..nfG..Z..J.b.,.{...%.....]Cr..}$ua.^.................}@...t=.Hk......).U1.G0......t..K^.^....c...:}.3......%..R...nE....e..O.S.......qo?P.].8..ph.`...\|.m.0...+e~..().....#...hL]aYsO.m...........t..+.<_...Rq...(...'Nx....2.P1....s.M.....g..y.K......N.T...{.E.s+!2......2..............Z...Q.IP.TWz.u..?........)$..:./.tl.$....0...5Y......#'.........$.!.o.IMbj...0v./....I..@...g...7..h".'.....3}T.t..[./o.Q...C#O\'..5F........Oq.8.........'.'.]~ $.}....XpA...p.L..;.#pp...+.....0F.;\.tiF >....Z......#yN#4...@....LH5......!..6..m..m..-8.......<.J...9.A...R..2f)..1.6.}.......... 9.../..Y.......lW...&6

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15306), with CRLF line terminators
Category:	downloaded
Size (bytes):	15577
Entropy (8bit):	5.243408933229694
Encrypted:	false
SSDEEP:	192:3I9mUJbiKneTTzbHZ+SKUP3p/a/AMQfHffxVeesedOJ9A5Pz+c3At2/z:3FUbeTXbHZ+GA/AVfHfS4XYG
MD5:	F2F335ACA8C5A9EF8677C54DB3005B23
SHA1:	8FAB0A73544C34DBD4A731BDF229542540D6F6C2
SHA-256:	7564C2CCDCE15C1B6A0D77395FC08BE47D24EFDD22713D65501445CD0097D1A9
SHA-512:	0AF051EFCDCDDD95AA3E0D1CE0DAED8EE89F3FA0ECC44BA0799AD1F639879696AB61285088DF6D9CB9D651ACB6C9E3AE3716FF98BF2F428ED17FAF3FED81EF6A
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/css/swiper.min.css?v=5
Preview:	/*.. Swiper 7.3.0.. * Most modern mobile touch slider and framework with hardware accelerated transitions.. * https://swiperjs.com.. .. Copyright 2014-2021 Vladimir Kharlampidi.. .. Released under the MIT License.. .. Released on: November 18, 2021.. */....@font-face{font-family:swiper-icons;src:url('data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31760, version 1.0
Category:	downloaded
Size (bytes):	31760
Entropy (8bit):	7.993705341757017
Encrypted:	true
SSDEEP:	768:+xS8OXDDjoCacA7gLnCoPCPn1EDCdPRrgww8AJ86a0b+ayCSrdk:KcXH0COxo6Pn1dPRrHw8AJ3a0OCSrS
MD5:	FDA4D0B623999AF43148BA34C3B1FF73
SHA1:	CA5496AF89720CC3E94E6279132F252B7CD471A6
SHA-256:	33BEFDBBB24930584F5AC94EA3117ADCD56518F20AB1619D05DE83FFD1821D38
SHA-512:	74980AEA5712F65867EB6180387E4C3C208A8D24C6C00C623F7B2DF5445E7FEE9361C29F2699737DFAEA215EFF6A578138C28F0D87FEA9034C670C62908088A5
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/JTUQjIg1_i6t8kCHKm459WxRyS7m.648d743df8e0f781.woff2
Preview:	wOF2......\|.......!...{...........................?...F...?HVAR.q.`?STAT.4'2.../~..... .~..F.0..n.6.$.... ..n.....[..Q.v5.v@....>..w+..D.>.a........^R...........$#2].W.....Wi....Z.b........yO$.(DSn..c/..1.L)x.......]..'m........F.nv..nx.1..Q.....<....7..C...w.$..%]._..j;.n..E....\a..4.r.....?_...>....d"c@..?..s....A/a.6.vE.!.A;zD..V........ ...........7.m\e....l.F.H'.`..mD.^t.@...hW.UX..Qu.........~.a$S.?.............w..d2..x.j.H.F..i.Z...q....HB..@.B...l.un....=Q.z&.2...x.[_./..'..n.x.S.s..ALLL.oP...[;...zg6g..P.%#P...@y....&.E...^w;T....T.j,.S.x.+..Q....(....D".."...>.y.#.......J.....^h9.......r8\|....C..../....dj}..........`.I/o.3i;..RT"..(.%......J..~..Y.'.L........fUR\|.......QO...v(..!1]....p...!.I...........=w..#.R..0.Ye?0ev@e[..$..UPd.."(......N.P..)............f.0..N}u..T.Jh..uf`..:.dIw.x..v.R,_.v.6.)....g.u...~1/?.d.>.}..u..CV5.........=..~.]+...(*.H{@.e...O..'H.KP.(........$]V.3...(.V...2..SN.'..2..r9..%9.r.....i}....<..(%

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/scripts/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24680, version 1.0
Category:	downloaded
Size (bytes):	24680
Entropy (8bit):	7.99070570848298
Encrypted:	true
SSDEEP:	768:S2pXxPBA+H4NP7OLIpH/JtM5xxmrqWnY/P1oqNf:dpXxK4UTOLIpfJt1rbn21F9
MD5:	CB2741A501A12A47CB248EB931DCF482
SHA1:	EF9C82976664EBD8ED0DDE447538DD62828BA629
SHA-256:	980BE638C91B102BCF5B94F4E5C1448B5DB941FC4789560FD2701742101F6EBE
SHA-512:	F1621D6A10F713C8AF8F586471B1A1A84DCC2875C00C1BB69C833454FD74EEB64B16C1CB9EF05D8BCE6B57AFA3D2FAD1BB15C4FE4A3BBCEFB19AECD48F810DAD
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/webfonts/subset-DMSans-Regular.woff2
Preview:	wOF2......`h.........`..........................f.....,.`..L.`...........2..z..6.$..X. ..D..a..=.#.GP.v..n...Tvn.2.a..D..............d...''.9,9.....c...Y.nE.........s.iY..4........v,..$K=.>.-X(.No8$......'.v99...v'z7x...G...............E.....7..p.G..i./&...)..~..[.(..Lu....N..O=.f...EG.b....r?.......DN-z.k..Y..8C+.NI.I.D.L%w.D2.p..G...o.3..3]....e.z0.u\y...C0...}..3........o...Os..6.. Q,...M.B.#X.z.X.$..?.u\N.+F."F.>...u..7W.O~U..B.4.!.....k'...k.9Q'h.,SH.8..w...QA....8....U...o'.7b.Ec.E.(r.X(...xD..(<.s.3.S..Z .......@_. ..u8.).&:.....@Q.).....:pHK....n}[.[..'....yY...7.q.,k.{.^Z...q/.#...F. .G .!.S.L..r4]O...........,....?.Q.......L.h.%.y.-..29...e...i......._./vI.<.(.J....uc.0.]...;.1....O.U.E.r.+...47L.%....._....B.....7h.2(K<..O.3.....o.,....e.....0..."..i...<....c#.O. Ba....?u....u_.S%UI....n..:...?.`.lH,...f...=....K.,.h...>T.K..,@1i..sb...q}....#@x..~..<.'.lsi.B.+=..awZ.F..s........{...5u.;M.....".....N...../...y9...(...d..IE

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	629
Entropy (8bit):	5.371516656999113
Encrypted:	false
SSDEEP:	6:6v/lhPk0LA4ZJ6lYj5ug8gX+33333333333333333RVeQhp:6v/7BAUmYV8gX+33333333333333333x
MD5:	82EF6A4E3A3C2B79607041665B3B2864
SHA1:	9EFD045A51A16C11EBDAA8A4976B91928A282830
SHA-256:	F48AF37B780A51D647B13BA11E3DA65B9FE9EA5C7A790F8A704A9FB79229742A
SHA-512:	B2300DC0CFA49889DD10F5D20102623ACB2A10BB905208C56C7D35FBFBA8252444816B5156FFD8FF5663BE019CF94764732A8C542B67AB9C3EEDC0DEE3CD7C1A
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/p34nnfqq/italy-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........'IDATx...I...E..`.X.e....u..H.NH....&q..TB.......{.y...E<?>..m.......>...9.<lV......H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ...{.q<..g.p.......of....bf..h..N`..s....IEND.B`.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	620
Entropy (8bit):	5.424192393000735
Encrypted:	false
SSDEEP:	12:6v/7hOJiAw9Z+33333LY333330j333331DR7:MU4Z2
MD5:	F4342674CF3EF0D4773C17AA676DF584
SHA1:	0678C644AD6D88CBC48B62702CB8B69DB435A7FF
SHA-256:	8750F5FB528CDBDB5732ECCB93FE4D2A462CC17C3787F367282E617B9FD60D20
SHA-512:	E92FBF26FE33E38DEF3ABDBEA63AAC62D5F6E62C4203C106A13D8A24DF7102DE360E1D4EB1DF6DD661902AD9A0E1A96803591474D3E2FF228128AD6F4965AC1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...!NCQ.D.W.$..2.8.@....]I."....U.. A`H........7.....i...\|.?^..(..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H.......d......y^....X..o?.....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ....v.d.`...{....2.....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....Hs..7..2...DM..)P......IEND.B`.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2920
Entropy (8bit):	4.643122930892692
Encrypted:	false
SSDEEP:	48:cvAJf4KZdiNPxgvgRo7qBfJ2Eaa5uUIU2OqGHFJqFQs+1QMr4qPQ8GcL8DmlPFSi:zJfRG9xgvSo7Yh2EaaEz2JiQs+1QMr4i
MD5:	9DC08A03323F878F98707920AEB59CE3
SHA1:	900DD066942BB26AFD0F358D1AE93B6ABE195EF9
SHA-256:	71A5224B4C2443DDEBA4E5384C5B177AF99EFD9161EF506EB48B8E1C92F5F7DE
SHA-512:	176DE84F39599278C368CF472E46E39D3CAE7DF8C8374F2C240F21A014B5C162510BE3786F3BC32F296424DD9E167D35643453BE7C88E52ABDBA6F097DAE1AFC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="43px" height="43px" viewBox="0 0 43 43" style="enable-background:new 0 0 43 43;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g id="UI_aggiornata">..<g id="C_Home_V1" transform="translate(-180.000000, -2003.000000)">...<g id="Group-5" transform="translate(181.000000, 2004.000000)">....<g id="Stroke-1">.....<path class="st0" d="M20.5,31.2c-1.6,0-3.2-0.4-4.7-1.1c-2.6-1.2-4.5-3.4-5.4-6.1c-0.9-2.7-0.8-5.6,0.5-8.2......c1.2-2.6,3.4-4.5,6.1-5.4l0,0c5.6-1.9,11.7,1.1,13.6,6.6c0.9,2.7,0.8,5.6-0.5,8.2c-1.2,2.6-3.4,4.5-6.1,5.4......C22.9,31,21.7,31.2,20.5,31.2z M17.7,12.3L17.7,12.3c-2.2,0.8-4,2.3-5,4.4c-1,2.1-1.2,4.4-0.4,6.6c0.8,2.2,2.3,4,4.4,5......c2.1,1,4.5,1.2,6.7,0.4c2.2-0.8,4-2.3,5-4.4c1-2.1,1.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3685
Entropy (8bit):	7.848836157809215
Encrypted:	false
SSDEEP:	48:2jqJa666666666663+OxeC293pHkpgWBAnYqkOBX9C/cpMGN5KO0qiZeNZtLljTz:2e5EC4dkSNYsJk/cDNvIGJGklIu6yp1
MD5:	787B91C7A57571C1D43E090B74105260
SHA1:	8BF754299DD00FFCE931AF0FCF19783F5E64C7C7
SHA-256:	BE3EDA832FF062E51A8420D480411B660633E81DE16661C77628A0CC2FC0AA71
SHA-512:	DDDDF258B36440EAA410CF3BD3146632D2AFC9E05FD2E2A3057373DB04EACFEAB278DA1B5DBDB62003F0A5173CFBCAF9D19BDFB07AF6E39982EB126E6DECA5AA
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/0o2jaanu/india-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..].]U..w.`.....F.`.....)%...Ikb....M.>.....h.TJJ..c...0....[}.'D.>PxP:.........i".....=k.sfv[.8w./.t..s......k.....\|z"...8{.6..7EDj(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(.... D......BD.(...2.W.N...H.9g}..s&&&......\...+G...L.....o.GA.2^.}==..P:..h:...i...]. .04.e.z.4........b.....N.m{>=.c4.....3....u...f......1<..tr..).(....9....r....+..;..].....\..}...O{.V.8..l[...\8...~FA.+O.9...n..bx\|.-...Y...>>. ?.........x.Y\5.(....=..[.\._../.H. .2..).y(..n.p}....!.6.8.A$.&..\|......O.z!....k.&..........\|d...w(..c...:..S..........C.G...{Y.C.5C.O{>....O ...^@...F.."J.60\|(!.(..,....= .Dq......\|v.#.y...D....._..=..>....2..\|...d.1..7.]:.s.=.....V........D.. ...2.@..'<_e...).,...H9.I....<o.UV}...3....&.].D...=..@......9%H.j...j.s9.8VtT.P".5X..C...D6...

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16250), with no line terminators
Category:	downloaded
Size (bytes):	16250
Entropy (8bit):	5.362171019541027
Encrypted:	false
SSDEEP:	384:9Sf3oX3vib17dqtzNI9SWQchAwqZ6ybM4Ns8kYfDSjcFeBlNeI5lyNjRhtWeaTXH:9owfW5dqtzNI9SWMwqZfQMs1YfRyNeID
MD5:	0D9C0243F7D59ECBDD15BB9C737D5742
SHA1:	4E73F40BF40E287F34F5EC3C964EDFC9719EBDA0
SHA-256:	32A1CB359596D1554EF023487FECCAD93939A660FCE488AF80C343AA98DB98C0
SHA-512:	27925B0A66EB34BA18F642951F0AD8171CD40D9EA4905EB7AB1C2FEB45E863D34B91D5874E02EF7636D2FC4A790B9EF6C4F76DB5DC2BE89FD9B239E51306E64C
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/132.3ff9f0718ae8740c.js
Preview:	"use strict";(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[132],{90132:(le,v,l)=>{l.r(v),l.d(v,{RegisterModule:()=>ee});var u=l(96814),h=l(56223),C=l(58726),p=l(89515),r=l(51716),e=l(65879),T=l(22096),A=l(65619);const b=new e.OlP("recaptcha-language"),I=new e.OlP("recaptcha-base-url"),E=new e.OlP("recaptcha-nonce-tag"),M=new e.OlP("recaptcha-settings"),w=new e.OlP("recaptcha-v3-site-key"),P_loadScript=function B(s,o,n,t,i){window.ng2recaptchaloaded=()=>{o(grecaptcha)};const a=document.createElement("script");a.innerHTML="",a.src=`${t\|\|"https://www.google.com/recaptcha/api.js"}?render=${s}&onload=ng2recaptchaloaded${n}`,i&&a.setAttribute("nonce",i),a.async=!0,a.defer=!0,document.head.appendChild(a)};let _=(()=>{var s;class o{constructor(t,i,a,c,d){this.platformId=t,this.language=i,this.baseUrl=a,this.nonce=c,this.v3SiteKey=d,this.init(),this.ready=(0,u.NF)(this.platformId)?o.ready.asObservable():(0,T.of)()}init(){if(!o.ready&&(0,u.NF)(this.platformId)){const t

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	603
Entropy (8bit):	5.301409547569903
Encrypted:	false
SSDEEP:	12:6v/7yXC33333EY3333332XEUZ333333Tmy9:lFNXNdmE
MD5:	E82EEED2D58FA561AD7D788A1D1BDF6E
SHA1:	8B540AA6276861780FB4BF76D96FDC58306479AF
SHA-256:	1CAD16359526AE39562E969DEEE2CC720282A15DA8F5EA196C56924BF402E010
SHA-512:	838B58A8C0C6CD0F111DEA5C386087C29E004421CECDF51722BD96C3910DA9B98DFD735D13FE199A67E13EE2CBECBE3223906A006481C828D671925A189AAA95
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...1..Q.E.?.)PA.R......:.!`......9.^q..\.~..o.Q.".@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@Z....<.....[..2.....$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H....q<...\|z...2..2.....$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H...u.q6..e...2..........IEND.B`.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmppztprsul", last modified: Thu Jan 11 12:40:17 2024, max compression, original size modulo 2^32 31507
Category:	downloaded
Size (bytes):	8102
Entropy (8bit):	7.979207399912432
Encrypted:	false
SSDEEP:	192:QzUw/lPHtc7RmLuabLMHsPOJa6l72zhdtvTYaa8jRphX:QwwtSqP8DADvTy8RX
MD5:	05ECA58CBA059996C229E2172431B9EC
SHA1:	F3C65E83A2025311A53B100BEC85E151046B0C29
SHA-256:	A866BFB49176309A3C024ABEE7505EE9F573775BE6352933DDBC778662946177
SHA-512:	AF2A1898953EFD6F98B024023B3615BE14FE1C24F1038C2C0CC6CFEE404984B40F522186B541D21187955F18214076B8FDA2BEDA01F453C7CE34616C8EB1CF39
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/latest/loader.js
Preview:	......e..tmppztprsul..=[{.H...W.:.s.....U..G.I....'..6.'D.=..#.;..../R......~0..TWUWuW.....Kh...>...'...}..4.`T..#..o4..I....".$.4R...u.'..G.O.........[.....S....y...i5..6.-.v...YD.$.-..P..X...i....E.sT..y.9.....]?..?..{.NIt6....qzrq~zt....n/.lC.'.ao!..Og.5...'...........m.A..0..a...\......@.........i.25.u.O?5..L....(.2...'_..@.....; \d......V...A".#.t.........2..$&.'.U?..........A...`......i.._.z(...q...$..A.T.....)...;.....q.s\?;cl..0"...{..;"..x,X..v.M..A2..3hI(4..#.......;.....$^_...M......1..c]. 7...O..U.N.........{U....p.f...".m.3...w_....v..2^w.d:&a_kMG.....c..O(.D.p.V.)"'..Ej.0.WGJ .....`;...o.pi..I..j.7;...f.$.>...[....v].bH.Z...r...........S.#&~.{..g,.y&.R.Cb.$........K2.JC7>...pL.dZ.\.7..CM..Ot.FJ"l..vd.sG~..(...l?...\W....n.a...yG.Fr..M.~...Y'I..r..X..U..$IX..IeY.ZY82..w.Y.L..J#.XQ.s...S0....J!...{.&.o........$...u.Hb.3s.....ZK....$l.X....A.0.5......:oS..pYa=kz]..pt....m.....A...0.w.l(....0U.YU.PH%HW^....9.b^D.....M...2.2.i&}..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpbl0v00vm", last modified: Thu Jan 11 12:39:48 2024, max compression, original size modulo 2^32 5491
Category:	downloaded
Size (bytes):	2448
Entropy (8bit):	7.915379075444638
Encrypted:	false
SSDEEP:	48:X7RvvxBZQkdysZTyAxhqRa5U2Q5yJR/HKcUGm+H2baIjVIOfS35oklcB:LRnxB9gAxtU2Q5SzU7+HSaIqJ3YB
MD5:	70E7D080173BCD040923F9B200ECAA87
SHA1:	B4CBCC8A618FA0A0D798CC14FDB17EBFADD29416
SHA-256:	ED0EA089AEEFB17668A7DF1794C39B1AA7AC19C148C1C38ADD17113E6AD8C9F9
SHA-512:	BAFB87CB1162DCCDA7B0F95B92F41A5BC0918CA9CBF96863811D5813AFB22DDDB2AA6D85AD582C63A79F7D3BFE8A42F9B48855CD48F893ABDCFE418BF0AA6094
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/PrivacyButton-09e27f75.js
Preview:	......e..tmpbl0v00vm..Xi......_A....h..IA1....`.....E.S.G.....K...{.:f..\|..`..bwu....]..m7..7N.;..r.T.7.......F.?s.T....q.T..c......u.]...,.;.n......d.n..YLk=..C....M..x.P..b^m.......e..6..U.d.v..+6.:.^W..]_......u...;.w^...m.G'.....n.rV.\|%.:.+2$...t.Dv..L..j0..M...+X=Y...)...........\|99....j.g.....r..7..l...vS\.w.b.yo......(..Di..I.O.m9..{Y..X.7U.~.....?..p..n.5...M...~.o......4eu....[.Gt...g./......h?..uU.......mW..{=[.Eu].aL.....jh...9.........]...../....n. ..h.9.q..i..e...[o.Z6.Wy.o..W..WHY...S......>..pT......-....E.).Xm.#p4#..Y.j..n6}.a[<.~{{.oC.v..........t.M].l...w\|'...c.[..i.w..:.....YVvu.....3..`...V......VAt.D..?..'....a...:3N..t.i?s\|O..T.. .\.X'...(pL...o.p....?.Y..^...1:2..i..q....I..Of.<r.9.dW..8...'..'8J.....I....D...>..X.!,.u`t.Bb..u$:..E..^.:..4.[.^A.O.r.[............-....4..Az..Y.C.".&.&v.N<.a:M.-M`d..>.h+../...D.T-....VG.T.$P.xD=\|.A.\|.R..z....P...0...j0.b{..eh...0..)...X.^b.......h..BQ.. .[.8..!n>.I.T.^..^"..c

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	4.919947997459575
Encrypted:	false
SSDEEP:	48:c6BIZFTvELC23L0A8WSIVtArpjuwBWlPzN72:fKD4b3L0gtVtqr2PzJ2
MD5:	EB6384E8AE45A9069BFC72A16310ADD5
SHA1:	26A9858C7EDB4205A048C77A95AC1CE253F04D8E
SHA-256:	33298ECE4DDB174B5078081DF67A6400E871219B85F2E3F231F2B5C0677420FC
SHA-512:	D7E4787CA0EA9020416B37A55C6477EF56C76ADAD382728644B0472A2FCC5BB09F205103424ECA2A90B7DC3055B6F666D65B46B1EFAE5CF3B47B5E50A248CD4D
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/chevron-down-orange.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="30px" height="15px" viewBox="0 0 30 15" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 6</title>. <defs>. <polygon id="path-1" points="2.80479648e-15 0 17.239195 0 17.239195 14.2106064 2.80479648e-15 14.2106064"></polygon>. </defs>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Homepage_lista-paesi" transform="translate(-705.000000, -750.000000)">. <g id="Group-6" transform="translate(705.000000, 750.000000)">. <g id="Group-3" transform="translate(12.760390, 0.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>. </mask>. <g id="Clip-2"></g>. <path d="M16.9122411,0.524056841 C16.403816,-0.0838427787 15.4848612,-0.177001422 14.8580141,0.317213074 C14.8327507,0

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2895
Entropy (8bit):	7.827676378713635
Encrypted:	false
SSDEEP:	48:GluahzobBwu1Nd/cowSCS8lIgiPCoBK8TyYXv/DTJAdGHV9wP18opuT:G/zoyocowTplto9yYXvHJAo218mq
MD5:	C484E8E5393151C9B1528B4F68EFD0BB
SHA1:	0ADDF2A858859075D1E964A311C53DCE8F9AE41A
SHA-256:	CC133F128968CB1C24E866D02AF84B95B8CF285C4C70C7BF0912CEF63E77DEEC
SHA-512:	72B773A1527F1DB41761050CEB7138CF7BA2F350BA51DBFE1DA754B8B18DD2CAB60A172AA0307F22A90D7C2FCEF2C6B5C57BAA6F057A6D1E15601253647A0185
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...ol.W...S......("%dP..:....:.F.&b\|..Y....&..8.d..D..>Yb,,...F....X..%...%,H....1:.P.j>.^.BO{.{n.9..~%....-..9.s..T..uc....5.O..............D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p" .8.......N...'...........D@.p.....S..l.}~...-.H.qs..a.3..^....b......[7.o.Z...}f.1z.....0W..l`...]E.Y7..E..j..1u..M...._.....#f..Us..U...XW&.b.vS..3.%...b.a..ft..}\...........U.e}...........]6.B...e...)(....B'.....9UcX...i:\| .p..[....#.a......S.../.....Zg....E.q...d./.....C.+{....6....-i..._[..?.%...yf..V<...j.U-.m8.b.2...>.+}...k.C.4..sV.n....F.......J.........[.w...KA...z...=.L+......VX..B..3.~P....(..(e8h.0.}.\....};.-.2.xP..(....T....8/.}...."?(...Q........VoK8....6.....=..9.h.B..M.....8..SE.r....d..v.V5.`.E.......T.<..aF.8..5}.(F.U..}.eR..(.bY.N.....g......"=..;L./..0[.......x....<_....;.L].cQ<+..]@h#./.9.Po..._.h.>u_<...E...Z..%..V.h..7s.UG..

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1582
Entropy (8bit):	4.998434527336529
Encrypted:	false
SSDEEP:	48:cvAJfGSxisRnSEu8xNrOJ1CvrC1ocZJ3mw00CgI:zJfji6nSEuQOUOZdmeI
MD5:	CE2EEAC93DE03533AFA54F71A0C15520
SHA1:	41EE6B298501FA358E283E964008D8E80C01F1D1
SHA-256:	C7DF226629FC12A827D76C0E4705B6E15D1818329CA5C35EF4729AF4D96168A4
SHA-512:	7B4097DD2E3374A00010C86A10D3D3D7FAA97791C5A65746477A6404E92BD956A44CED5B87861ED2E222EE31B7F9814283018BC4912BDF14A4CAC40EF4EEC436
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/aqddpooa/assicurazioni.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="73px" height="73px" viewBox="0 0 73 73" style="enable-background:new 0 0 73 73;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g>..<path class="st0" d="M73,50.5V37.9c0-0.4-0.3-0.8-0.7-0.9l-16.7-5.8c-0.2-0.1-0.4-0.1-0.7,0l-4.5,1.6V3.2C50.4,1.4,49,0,47.2,0H3.2...C1.5,0,0,1.4,0,3.2v56.8c0,1.8,1.5,3.2,3.2,3.2h39c2.6,3.4,6.5,6.8,12.7,9.6c0.1,0.1,0.3,0.1,0.4,0.1c0.1,0,0.2,0,0.4-0.1l0.1,0...c0,0,0,0,0.1,0C73.8,64.8,73,51,73,50.5z M3.2,61.3c-0.7,0-1.2-0.5-1.2-1.2V3.2C2,2.6,2.6,2,3.2,2h43.9c0.7,0,1.2,0.6,1.2,1.2v30.2...l-10.1,3.5c-0.4,0.1-0.7,0.5-0.7,0.9l0,12.6c0,0.3-0.3,5.2,3.2,10.9H3.2z M55.4,70.9c-16.2-7.5-15.7-19.8-15.7-20.4V38.6l15.6-5.5...L71,38.6l0,12C71,51.1,71.7,63.4,55.4,70.9z"/>..<path c

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	900
Entropy (8bit):	6.822038534655009
Encrypted:	false
SSDEEP:	12:6v/7vyxw79R3FyZQTC3svYGsQT3pNa3wUFHLZ32kzY3pNSJ803w5XdqfRqZU:X2EJ8vYGuAmHLYXe+nmJ
MD5:	3BBA465B971A0967AB13ED5D79A7E17C
SHA1:	DC704FBCD4742BDE55DADE3816C3C464779D7532
SHA-256:	6DC944BF21A5FC6F5ED4E27A865743A03052705D07921E424B2EC921AAD07B31
SHA-512:	171F62C4CFB2AE08057803B97A2D990205C920961191E3C9F541613CD1C163E7F155D07C7613F98BBC71C0557F7C28C0DB4AD5F68FD1BF7A5F497B83A86CCFEE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........6IDATx...?k.e...7..f........Q2.Yl?B'.Tp.+.3.R.I...N......uP7'!R(...:...-]M~..s.........<.rq.6....=.!>...>...i.....K.F......H..$...@.I .$.@.. .....H..$...@.I .$.@.X........hc.d.;.&.....a........w...@.I .$.@.. .....H..$...@.I .$.@.. .....H+.8..3_.].;\|....4.K...g.=.s...?......\,....M .$.@.. .....H..$...@.I .$.@.. .....H.....+.N.v.............m.....t...I:{...d..6....*.j.z{}..~...y0.h..$...@.I .$.@.. .....H..$...@.I .$.@.. M.f.~....7../.\,....V.......^..n0..+....H..$...@.I .$.@.. .....H..$...@.I .$.@.llN....\|.....~....nlN...D.....^y...I..fqiz~ue.....#l.b.I .$.@.. .....H..$...@.I .$.@.. .....H.....+.l.8...gk.;;.6..e...H..$...@.I .$.@.. .....H..$...@.I .$.@.. M>......K..+.8.6..a...H..$...@.I .$.@.. .....H..$...@.I .$.@.. Mn.........VW...<....1@.. .....H..$...@.I .$.@.. .....H..$...@.i2.....2....jah..2K.....IEND.B`.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1000, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21756
Entropy (8bit):	6.897513229857776
Encrypted:	false
SSDEEP:	384:zVG0kCLIrNgMy4YZZVW746DdSz399QbqFRq7siUx8m7A5:z80vLIpf1EIc2g9Q2fq6Lw
MD5:	B170FECB8D805D5636044A27FD8CC347
SHA1:	FAB11B67EA61DF0D360A2AC377C9DD19ABD4DC97
SHA-256:	4C3B474DF2FA0CADC2078AF11393CA2BCB724DEEDB734EBBBA1ACC2398A8C935
SHA-512:	9325B78346ED77C357358C7F61706A08436E12FEDC1EA1A11937C9660EFFB370A440B97DE481EF211BA970C2D2846A92C613F48A8E4EF1C48D8D3207D8279CF9
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/1ezg3lp0/beluxflag.png
Preview:	.PNG........IHDR..............^e...T.IDATx...O...}....4.h,.H.Yxf...X..v6..).6.,....!;...B+..2A...."5r............ZZA...K..!..LH....f.....{.y.....~.....jI..3.<.~.}...g.\|...@e.................ko..._........,.T).........o...^......g.+...\|......,...@uO?u.....r..s..f.^...........,../...U.0.N..^y.x...l7~uP.}..r./..b.....:..U.......x!...E....-H...P.t;...I....!.....y..n..`&.v...f@.....v...l.. ..w..f.n..`2.v...q......J.v..&.l.. ..:...H...0.d;...I...0.t;...I......t...=HJ...0.d;........D....1$....@.........L....D\...0..R.....$........(.....!...@F.....&....^....$.....a.......!...@v.t....n...$.....@..........I......@.....F.v..v.l...5.t..N$....q$...h..;..;I...p..v.................d;...3...p,.v....l.........E.....$.....t...> J......v..zc@.....v..J.l...O.....&....d;..=s......C.v...I....;.:....R.......:&.........R>.....?......G....p.....s..9U~...'e:..z#....GI...t.[_..x...!.v.....t...I...tH....v2...tJ....?....p2.w..NI....E.....s....!.v...H....`.t...H....C.....p...t;.@.$...`<.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2643
Entropy (8bit):	7.692475379318737
Encrypted:	false
SSDEEP:	48:16c60OhlptYqS0gw9oPHSkHmcz5cM7JjVSElTpZFzDpasJoLwlR4444444444448:0l04vbS0L9ZkGcz5cwSsTssKku
MD5:	0CF9DAE47AAEF28C0ACDB45CFC7C7FFB
SHA1:	064FD5F88C7F01C4B3A5D0D2E8A0805004909549
SHA-256:	E04FD58072B0F6B9A63B18B1079EAB11F0770E92FB3741E5543012F6FDA6EB99
SHA-512:	AED1D508A07065ACCA242C5A8C8B37A684FFD2EBC8ECC4BF3E4328BD63DAC7D81ABF651F303552DF4E38C7FB2E7B5CA345303B7D8E9B255AA77DFCC36EC9DA0D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...]..W....a.t..&.K....B..]...Xz.I....&%j.I,.5......j...hLSH...H..M..R...P..].....kh...s.g.}..3...y..~.....3.9.=.......}g...v\8e_..E.3....(.x..........." .............D@l\|.....\|..[6....$.N.r........6\|.....P.]....._..,.....M..BC.f.`......v..+U@h..s.HS...a.SK..C(...H@7)U@.:\|.6.?.pH(...Q.u....m.....T.q..].t...V....C.p....}co.(...)..._...\|.a.:D6..D.Z@U./ 2?.g..\|.a.:D6.,.D@.....y!.j....<.......A.L..(_@..1q....Bb}A.X...(........c.{.t..,=.8s.v>.Jxv\|.m{l.....&.}7..................qlz@.AONNZo.............#.\.09.^+_...&p...j.....C..o.0.....{.p..j..4.P....%/^...(..}U....k...#...z(..5..s..xy,.&.M.8.#v...U.TP.._.x...C.\|2..4.8......uv../.zM.#..,.:...fO.....}.............k.^......h..d..)......B#_...{.w/..BE.V=.F.!OA......o\|m....).K=.......p$.p0....N@..EC.5d5....YhW.~..(....).s..#!(.8tP(x..R8....K.d-565."j...{....#...E.p8...o8.D...U:.b0<.v._$..@;,._..R.d...X..........P....Ps..\..7.....nx\|.g

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	dropped
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 536 x 748, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	880026
Entropy (8bit):	7.996825257299694
Encrypted:	true
SSDEEP:	24576:0nHw+nK21XfYeu9WOXOMDJi68AksnTTYkMTirEyv6q:6Hc21vxOX/Dy2Rbgcd
MD5:	63B1F8DA601A4B691811E743A34A1303
SHA1:	839798BF7ACAD2B9A1236B0C0F01E26D516C812A
SHA-256:	3B712A451A8EFC6C61CD36073528045A5E8E2C9CF246C9E2DC2A1ACEDA6C891D
SHA-512:	E8F9F44D06EB02F037AA71510FA9C6274A09936C75F32F74618F0E338BC25F5AF88029E1B0E72E68065F480BD9C45257FC1AD6511F4F6811DE91C670429F6307
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/qssfso0o/cribis_22-05_visualcard02-supplychain.png
Preview:	.PNG........IHDR.....................gAMA......a....8eXIfMM........i............................................4Uk...@.IDATx...K.uI.....}..2.....d!..2.?.0m..j.XH.-3@mO.n...!.U..!m!7B.1@..FFv#!A.oUYU....y....\|Y.....k.......k.........o.........z\|<~yvv..x8\|.xxx.x .....xxx\|<<>>...p8......"0.....o.'}.......w..@......xvV....p.......}.p...py...x. }..P.3...#.x_.. .....>Y//......yv........D.`.... e.....F. .W9z...D.H.....[....jtU...8..HG.9#..[.Q..a....Hh.DSa..........E.A Z..K.G.U..`.......Uf....$.....-54...`..........._...0;D,...%S.V..A....}.Uw....>.......8...n~.\|....P.......8..GvIZ.?...s.P....F.U..G&0.........6....V.xC.#..j;...pD.t..X.Y......Gf...iE`.m..)s..,.n'.'..)...'..\a.....:.i.ajd1..A..Yd..;q.D.N.GNAF.).................[.......u,./M-$.9.g..Ky...-.,Z..7FU..$..n.L~.qSl2K.......L...8.{.K..z[...V........."X.T.YL...c.I.s"......./.-A<...._`C.#....[...K..9......C..!......................H<q............o....._E....@....9.3N..>.......t1.hX

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1818
Entropy (8bit):	4.86494482264897
Encrypted:	false
SSDEEP:	48:cvAJfOyyVNiMTVVLaahx9wHvtPzWhUB7xxD9cQUwRb7A5d:zJfjoZ3aa/kNzeUBDSQUwRvA5d
MD5:	88CEA7DDD36BF43630B6C9DFE00859A1
SHA1:	5BA4389C9339E5EACD327D61C372FA9DF526547A
SHA-256:	C2597FFD1BC81917A7334A6971101BB23964C4346AB8E68AFDA2B20433212207
SHA-512:	85E7EA6ED9FCA9601FB6556337BB285090AA96855BA39939113EA3B2B0CE0767BA01702023768C3162771ADF288EB9E8118DEAC907D58CC32D53C347C491FFC5
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/mivd1pzi/istituti-finanziari.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="63px" height="72px" viewBox="0 0 63 72" style="enable-background:new 0 0 63 72;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g>..<path class="st0" d="M59.8,17H48.6V9.5c0-1.8-1.4-3.2-3.2-3.2h-4V3.1C41.5,1.4,40,0,38.3,0H24.7c-1.8,0-3.2,1.4-3.2,3.1v3.2h-4...c-1.8,0-3.2,1.4-3.2,3.2V17H3.2C1.4,17,0,18.5,0,20.3v50.3C0,71.3,0.6,72,1.4,72h12.9h0.1h34.1h0.1h12.9c0.8,0,1.4-0.6,1.4-1.4...V20.3C63,18.5,61.6,17,59.8,17z M2,70V20.3C2,19.6,2.5,19,3.2,19h11.2V70H2z M23.5,3.1c0-0.6,0.5-1.1,1.2-1.1h13.5...c0.7,0,1.2,0.5,1.2,1.1v3.2H23.5V3.1z M37.7,70H26.2V57.6h11.5V70z M46.6,70h-7V57.1c0-0.8-0.6-1.4-1.4-1.4H25.7...c-0.8,0-1.4,0.6-1.4,1.4V70h-7.9V9.5c0-0.7,0.5-1.2,1.2-1.2h27.9c0.7,0,1.2,0.5,1.2,1.2V70z M61

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	83253
Entropy (8bit):	5.162515819050137
Encrypted:	false
SSDEEP:	768:Rw/iZOJuTVlHNvNu7MTMtnTbCeNbtj+VBvAQ3+S8QnxyoM+Fos/eAMELlVlXIaCU:R8i4JBGUwVBpL7NV+mB9mydf47qdLP/
MD5:	90146F01D8A2028ED6F2C3D2FBA4AC9B
SHA1:	0363CB58B7A7B60EF7FBF82B8BCEB6305232501A
SHA-256:	7E02C082FEDFC821A8A51FE004DAB6896DD928876A21CCAC8675142C2E2F7B1F
SHA-512:	9942E76B00D57029EC93D6B8686D502D967AADC71EFE34B3106A9491E38BCB46FAAB4F93EACC87AF196C0061FB655A2A0BDDCF774941A9DE9682E3D68A1ED51C
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/scripts/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.6.1 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery")):"function"==typeof define&&define.amd?define(["exports","jquery"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery)}(this,(function(t,e){"use strict";function n(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=n(e);function o(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function r(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),t}function a(){return a=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}retu

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	632
Entropy (8bit):	5.454917031928276
Encrypted:	false
SSDEEP:	12:6v/7tGNHBQqsiL333333333333333333Bqy:jEidv
MD5:	64924DBEEE131B149E97C23208FCFA1C
SHA1:	F8829A716904B011FE03C97E66768681ABE83E82
SHA-256:	935E8FE020E235BB8A15333ACFB9AEFD1458370A3EEA6C21A3CBAC9059E9052C
SHA-512:	7153785FF247E2DFE4B7ECD3C8E8D19073354C237D00C20D66514E26BBAD1D5815C4F32794EEB18AC2E939E36BC686D1D3C82D6729660D39B935C9623E434F68
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/i2girxb4/ireland-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........*IDATx...I...E./"...V.....n...."[..Oi.......'...!9g......<.E.].......zy..~.....;;...&.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@..\|fv.Y....jf>.q.!X]\...............N.,.....IEND.B`.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	5.301409547569903
Encrypted:	false
SSDEEP:	12:6v/7yXC33333EY3333332XEUZ333333Tmy9:lFNXNdmE
MD5:	E82EEED2D58FA561AD7D788A1D1BDF6E
SHA1:	8B540AA6276861780FB4BF76D96FDC58306479AF
SHA-256:	1CAD16359526AE39562E969DEEE2CC720282A15DA8F5EA196C56924BF402E010
SHA-512:	838B58A8C0C6CD0F111DEA5C386087C29E004421CECDF51722BD96C3910DA9B98DFD735D13FE199A67E13EE2CBECBE3223906A006481C828D671925A189AAA95
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/4lijqlun/austria-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...1..Q.E.?.)PA.R......:.!`......9.^q..\.~..o.Q.".@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@Z....<.....[..2.....$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H....q<...\|z...2..2.....$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H...u.q6..e...2..........IEND.B`.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7049
Entropy (8bit):	5.327039520464767
Encrypted:	false
SSDEEP:	192:7lRe1rjU7t+K4K8caBIsKcML42CRNcookG2SXTS785:vroKlX3eSXTS7Y
MD5:	C8252F21AC52425F3868EF4265AD425D
SHA1:	B8448EEA67B66E875ABEDA0EADD20E2627526DB6
SHA-256:	CA61F2ECDD14C962119C00D8EB5F4912E6B400B4817E41FD27A3765FEC580C00
SHA-512:	9AACD8A2F6F92FB553A045E6F3670CC388924460F1893E2FF80AFE8AF2571F471FDF7D0AF27C3E6F2584193C3B9DAC01C50B7CB6B020879D0359FE4086EA6B28
Malicious:	false
Reputation:	low
Preview:	{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur immediately after selection.","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.","THIRD_COUNTRY_TRANSFER":"Data Transfer to Third Countries","VENDORS_OUTSIDE_EU":"This vendor is transferring data outside the EU / EEA."},"labelsAria":{"acceptAllButton":"Accept All","ccpaButton":"Agree to CCPA","ccpaMoreInformation":"More Information","closeButton":"Close Layer","collapse":"Collapse","cookiePolicyButton":"Open Cookie Policy","copyControllerId":"Copy Controller ID","denyAllButton":"Deny all","expand":"Expand","fullscreenButton":"Enter full screen","imprintButton":"Op

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9863290599374346
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGY+MREHJxr/4MRo:YQTiE3/RHk
MD5:	DAC30E0F680C49B2A43F6236AF7C0F7D
SHA1:	437DB2020342C1C9883A7846A3E6435781263633
SHA-256:	77E29A4B09D4A5B26B29AAD4234CCD6104666F1AED61EA67DC68CC96D4719DA2
SHA-512:	C18E5D5E40D2A320B2B30A32083BC8C55F44BC6A212B6ED273190D316C2CA64E3AE17DDBDD3A46678BCCB65B3A6DC348CF5A0715529BB045AC2FF45E074D2E8D
Malicious:	false
Reputation:	low
Preview:	{"languagesAvailable":["it","en"],"editableLanguages":["it","en"]}

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1862
Entropy (8bit):	4.919947997459575
Encrypted:	false
SSDEEP:	48:c6BIZFTvELC23L0A8WSIVtArpjuwBWlPzN72:fKD4b3L0gtVtqr2PzJ2
MD5:	EB6384E8AE45A9069BFC72A16310ADD5
SHA1:	26A9858C7EDB4205A048C77A95AC1CE253F04D8E
SHA-256:	33298ECE4DDB174B5078081DF67A6400E871219B85F2E3F231F2B5C0677420FC
SHA-512:	D7E4787CA0EA9020416B37A55C6477EF56C76ADAD382728644B0472A2FCC5BB09F205103424ECA2A90B7DC3055B6F666D65B46B1EFAE5CF3B47B5E50A248CD4D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="30px" height="15px" viewBox="0 0 30 15" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 6</title>. <defs>. <polygon id="path-1" points="2.80479648e-15 0 17.239195 0 17.239195 14.2106064 2.80479648e-15 14.2106064"></polygon>. </defs>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Homepage_lista-paesi" transform="translate(-705.000000, -750.000000)">. <g id="Group-6" transform="translate(705.000000, 750.000000)">. <g id="Group-3" transform="translate(12.760390, 0.000000)">. <mask id="mask-2" fill="white">. <use xlink:href="#path-1"></use>. </mask>. <g id="Clip-2"></g>. <path d="M16.9122411,0.524056841 C16.403816,-0.0838427787 15.4848612,-0.177001422 14.8580141,0.317213074 C14.8327507,0

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22874), with no line terminators
Category:	downloaded
Size (bytes):	22874
Entropy (8bit):	5.361685083096582
Encrypted:	false
SSDEEP:	384:oJ+5HHfsm5ckUwqU1R77YUEf7p5HHnZCR77YUSg58u5eN8KfD8V5HHYWuv:5HfQkVqUv77YUEfnHnk77YUjw7MHYn
MD5:	CC51DDE882C5A3517AC06CCDFDA8E419
SHA1:	AE9248154198BBB254FE5A7E1AE20CFE85D234C0
SHA-256:	1C25ED7DBC14A78A675C219E5ED6F540787DCC83B76AA6D7354DAD574AE942FD
SHA-512:	6D889C2D4BBB06052535DE4314EDC41212FA48BC61F8D31D008C705D10C3E05207FD361DC3832C11E6D3289F8EE4865E97C7246D00FCDA99C01FAEAF3757A9F4
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/247.bf9c5017c878c676.js
Preview:	"use strict";(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[247],{75247:(wt,x,d)=>{d.r(x),d.d(x,{LoginModule:()=>xt});var a=d(96814),s=d(56223),g=d(58726),_=d(89515),p=d(51716),T=d(10341),f=d(16668),t=d(65879);function C(n,r){if(1&n&&t._UZ(0,"div",10),2&n){const o=t.oxw(2).index,e=t.oxw(2);t.Q6J("innerHTML",e.translation["content_title_"+o],t.oJD)}}function b(n,r){if(1&n&&t._UZ(0,"div",11),2&n){const o=t.oxw(2).index,e=t.oxw(2);t.Q6J("innerHTML",e.translation["content_text_"+o],t.oJD)}}function P(n,r){if(1&n&&(t.TgZ(0,"div",3),t.YNc(1,C,1,1,"div",8),t.YNc(2,b,1,1,"div",9),t.qZA()),2&n){const o=t.oxw().index,e=t.oxw(2);t.xp6(1),t.Q6J("ngIf",e.translation["content_title_"+o]),t.xp6(1),t.Q6J("ngIf",e.translation["content_text_"+o])}}function Z(n,r){if(1&n&&(t.TgZ(0,"div",6),t.YNc(1,P,3,2,"div",7),t.qZA()),2&n){const o=r.index;t.xp6(1),t.Q6J("ngIf",o>0)}}const S=function(){return[""]};function L(n,r){if(1&n&&(t.TgZ(0,"div",1)(1,"div",2)(2,"div",3)(3,"h2",4)(4,"b")

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpjll7zph3", last modified: Thu Jan 11 12:39:47 2024, max compression, original size modulo 2^32 1728
Category:	downloaded
Size (bytes):	757
Entropy (8bit):	7.723147285489436
Encrypted:	false
SSDEEP:	12:XUo8bwK/yrmXqYHEm9Yz23xn07Sf3FuWszKdYnXav1mB5SBEIar4hbfQA3qceG89:XUZwEqYH19YzgR8Sf3FuvzKdYnBB5SB4
MD5:	D2894C1298A33AE8C1E243A29F9A4765
SHA1:	502590288D5D16224C77AFB3548E10217DEBDF78
SHA-256:	86700EBBE523680375AC6DF524B230BA70ED1D387F44638751A2219B1E65029F
SHA-512:	F07EBA7126F128A8282A9A24621566C8F687BA6CE8B14AC6D28FA91E8FE61B1E805ED53C4E4CEC713865DD58BAD16B99254DDD75CC15539DC8A2292AB7C7A4CD
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js
Preview:	......e..tmpjll7zph3..U]o.0.}.H..H.K.4i..O..m.%..d.....lC...}6.....MD.}.....Iv.....E...z`.2=R....(...L...-g.a.!4..v.4../aL......A.&.cV......y$K..(...{.......`..G..I...TJFE;.G.c.....1.....u..T...f...AU....hx3..FA.n....m..A...mJ.NbJk_.;..Ah.5".9.@.\|WFDL.`#..^........Y..c.r..m...L..K@.K'6C.f.......!..r..`.b..j...q....Y.5c$....F...8..(.}...g..N..0>.....a.._.....)...)6.K....1....]h..".W.<[.i.\..5..5.}Q.ZU_.....i...JOb...P..~.i....f7.E......ag/0..n..m/./...A..clU....1.Nw...C.C..qI....B>B.p..0.!^..#.x..P...B$.t}"b/.u...`/.....\`.8.^..jD..l.t..oq..W.G,.". ...$.1.R..a.@<..:......H...,G30f...7.3...\|A....A.`'.D.b...O.T.....S.$m....m,U.5..A.C/0........oY..Wa.v.6...-W..$@.r..\|..Q..._./Fl.@].a....~.......-LcYN>....v.....

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	22085
Entropy (8bit):	4.909721441860394
Encrypted:	false
SSDEEP:	384:82eJi76deaDlZXNyjdjzj0qhLqBTPAGnZ6g4ASelRs4mRkGJGV4W6:82Kg6QaDlZdy1IqhETTUUnYJGVa
MD5:	36B493DFD06C997676CA2AD4D2964C9C
SHA1:	858FFC0F2FE88E416048955A512A83F385E459EC
SHA-256:	511003D0FBBBA4EFC7FA378017CC66FBC76D3F288CE60DC4ECF332738CAD0148
SHA-512:	037F7496A11436DE1675AF968BDF489F40CAFD76B5EF916EC4C3F39D2C8AF9F82C217A7A5BA37786367DBABFA0DD46C4453B2374A61715D773F412A9D10BA112
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/settings/G_xgCaSxD/latest/en.json
Preview:	{"settingsId":"G_xgCaSxD","version":"4.2.49","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"http://img.usercentrics.eu/misc/icon-security.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","privacyButtonIsVisible":true,"chipIsVisible":false,"disableScriptIfBot":false,"consentSharingIFrameIsCustomUrl":false,"consentSharingIFrameIsActive":false,"iabConsentIsActive":false,"resetConsentsOnShowingInitialView":false,"btnMoreInfoIsVisible":true,"isVisibleInIframe":true,"btnDenyIsVisible":true,"showLanguageDropdown":true,"enablePoweredBy":true,"storeUserCounter":false,"useConsentCookie":true,"tagLoggerIsActive":true,"storeConsents":true,"optInCountdownVisible":false,"optInCountdown":0,"op

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	66
Entropy (8bit):	4.046935120543495
Encrypted:	false
SSDEEP:	3:YJELTrzaEIGJJAtMREHJxr/4ALpHRX1:YQTiE3AtRHNF
MD5:	CE93584D45494D968E0AEF35B4857BB1
SHA1:	6EE70A1EBD3D36ED5E7EB794123B4DA8D7C74C2A
SHA-256:	8B69E62166BA3ECC77B2460545E400B23D71C816722043BDADD652EB67ED6D9F
SHA-512:	6D08EB8AD9BFD40B1F98C8B2864591870BF3D325EDB7B43E9D046A49CE0A1F9AB7E94FC23AA25E5B15242B06DDBC5BE693E402157F02661C7A5BEE0A3354A80F
Malicious:	false
Reputation:	low
Preview:	{"languagesAvailable":["tr","en"],"editableLanguages":["en","tr"]}

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	620
Entropy (8bit):	5.424192393000735
Encrypted:	false
SSDEEP:	12:6v/7hOJiAw9Z+33333LY333330j333331DR7:MU4Z2
MD5:	F4342674CF3EF0D4773C17AA676DF584
SHA1:	0678C644AD6D88CBC48B62702CB8B69DB435A7FF
SHA-256:	8750F5FB528CDBDB5732ECCB93FE4D2A462CC17C3787F367282E617B9FD60D20
SHA-512:	E92FBF26FE33E38DEF3ABDBEA63AAC62D5F6E62C4203C106A13D8A24DF7102DE360E1D4EB1DF6DD661902AD9A0E1A96803591474D3E2FF228128AD6F4965AC1A
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/ffgau1n1/netherlands-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...!NCQ.D.W.$..2.8.@....]I."....U.. A`H........7.....i...\|.?^..(..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H.......d......y^....X..o?.....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ....v.d.`...{....2.....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....Hs..7..2...DM..)P......IEND.B`.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2880x1360, components 3
Category:	downloaded
Size (bytes):	1295447
Entropy (8bit):	7.973758565831485
Encrypted:	false
SSDEEP:	24576:InqHlrUotw7q+yCd4pkDPKpBF1GvbdDr5sSk8xDI2uJJ2NX+wtrxbaxrqLLz:CMrftwsFpkDPuBwdRvuJHw7axmfz
MD5:	FE44C09E27BC1864816684A5D94E8B9B
SHA1:	A229CC56591DC57962EE9B7191725D9B739109D4
SHA-256:	C6229506E0F89B637170377DDFDD54CBF7E3D614DF2873E2B781E10AF4731EEC
SHA-512:	A1AE8153EDF1FB4AEAFCD067D502912634530B3B944F160DE4DE0B5B10BCD8F8594A1CB70384166B21692BF1D349A2414CD69EC59186A373F0D52C00BDB3983E
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/w31p5jul/immagine-hero.jpg
Preview:	......JFIF..............Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:523FAF7E707611ECA0D3F366E534E56B" xmpMM:InstanceID="xmp.iid:523FAF7D707611ECA0D3F366E534E56B" xmp:CreatorTool="Adobe Photoshop 2022 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="B72C8F3285CFB042160B2409B8299AE6" stRef:documentID="B72C8F3285CFB042160B2409B8299AE6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C....................................................................C.......................................................................P.@.............

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	4.643122930892692
Encrypted:	false
SSDEEP:	48:cvAJf4KZdiNPxgvgRo7qBfJ2Eaa5uUIU2OqGHFJqFQs+1QMr4qPQ8GcL8DmlPFSi:zJfRG9xgvSo7Yh2EaaEz2JiQs+1QMr4i
MD5:	9DC08A03323F878F98707920AEB59CE3
SHA1:	900DD066942BB26AFD0F358D1AE93B6ABE195EF9
SHA-256:	71A5224B4C2443DDEBA4E5384C5B177AF99EFD9161EF506EB48B8E1C92F5F7DE
SHA-512:	176DE84F39599278C368CF472E46E39D3CAE7DF8C8374F2C240F21A014B5C162510BE3786F3BC32F296424DD9E167D35643453BE7C88E52ABDBA6F097DAE1AFC
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/spsp0w2m/ingranaggio.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="43px" height="43px" viewBox="0 0 43 43" style="enable-background:new 0 0 43 43;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g id="UI_aggiornata">..<g id="C_Home_V1" transform="translate(-180.000000, -2003.000000)">...<g id="Group-5" transform="translate(181.000000, 2004.000000)">....<g id="Stroke-1">.....<path class="st0" d="M20.5,31.2c-1.6,0-3.2-0.4-4.7-1.1c-2.6-1.2-4.5-3.4-5.4-6.1c-0.9-2.7-0.8-5.6,0.5-8.2......c1.2-2.6,3.4-4.5,6.1-5.4l0,0c5.6-1.9,11.7,1.1,13.6,6.6c0.9,2.7,0.8,5.6-0.5,8.2c-1.2,2.6-3.4,4.5-6.1,5.4......C22.9,31,21.7,31.2,20.5,31.2z M17.7,12.3L17.7,12.3c-2.2,0.8-4,2.3-5,4.4c-1,2.1-1.2,4.4-0.4,6.6c0.8,2.2,2.3,4,4.4,5......c2.1,1,4.5,1.2,6.7,0.4c2.2-0.8,4-2.3,5-4.4c1-2.1,1.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4961 x 3508, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7348829
Entropy (8bit):	7.965293385532382
Encrypted:	false
SSDEEP:	196608:EvZOBDxYXsRyliemLyjB3c11fSeG61FDdvN+cIFg2uXfckKwnYWJXDbR7jk1/4dw:aexioybmLmB3mNB50vuXV9JXU/yw
MD5:	C312517D43328733041EBEEE5E2354D4
SHA1:	75622D17C6EF0536533FA876B68FABC698536D82
SHA-256:	76DE7B5575135DA8C6B89660DE2622121A682DC28C42145A50349009ECB2DC8A
SHA-512:	D6EF5CB8D3D13BC6627141B8E31D3D3896AB6DE1281CAEAB8DA799DF73D2C27EB210741CAC21B0958A74BDE50B56CDEE367F39258B9EE4B6A4657162A26B6E65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...a..........6.5....pHYs...#...#.x.?v.. .IDATx..[...$...L.....fM..Y.,........!`...Q.U..$._.3............s..s..s....E.......Trz.-N.9..yv.9..^.^.Q.?S.\|........o.g..\|<;.g...w....`.S\|.......f.Rr)=....<.?.....9.......;.<.\...g....<.v.....G...z...w.....ry.O..3.5..Yxf...u...qun[]......Xt<.k.5.....:.b...g.....^...../W..kun..m_..A!..3...c.R.9/..[<k.....{..T....b..>.}.O.c(.E.i.......:.).^L{r.U...O...w....+d$x.EJ.d...o..9........g)...........:M.e.\|.u.0..2K....J.9.Y...u.W^..(...e2....g.,\|'......T&...V\|/.@......(tX.......X.}.......v..*..=t...\...\....^v.L.'..m\K......X........A.L..).......\.>.m.....z-r..\|..5.L...\._.......\`...;.....k.N.#...~.....N_o.]S\|.....C.w..6.q..9w.u0:.9.n.....]m........c...s.8.}.q........u.KvF..T(.jc..=.B...W.s.^9...73O...6n.....w..q.n/..x....5...].....u..S..9.c..`......kY..\|.g..s.\.>B...)..2...gL.Y...J....R.v.9.C.].1.S}B.Z.2.+.6>\|V}w'.]h{....D]..V..v..;.o....!.f..{&.vf.YN......Gk.e....ct...\|...

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4456
Entropy (8bit):	7.880592240204443
Encrypted:	false
SSDEEP:	96:say6stTBabvfoc6SiYKZ8xiMyycuWsF2uUfWqjdxrt2EN:sayhtTBabfoFSixZ8IMpMNLt2U
MD5:	CB5D7ED18F23944BDDDA4747C8D4B613
SHA1:	8111AF49ACEF4733BAE785CF8F6E7FBEE7ABB58D
SHA-256:	86EBC43B600D33E5CF6506FDAF1053942EF6890B38C2468BE1AE193E3247B517
SHA-512:	9263949F338A590FD95208E1ABDFE853E77C4F8F567ADD3967AFBE7CF0744A37A743ABDB736E79E11FAF7D6CC32EE039D88CBE0718CDB150CD7154F464A3A80B
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/dk2nyoft/hongkong-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..{..U..O.....P."...M...K...!h.j".Am.T.........Bhc....1...5..VH.......-.b.n..(.-./.-.ny.\|............$7].{..9..{.1.w.:n..F.r,...\| ......./...xA ......^.....@....... ......./...xA ......^.....@....... ......./...xA ......^.....@....... ......./...xA ......^..h -......X.n3...kq...A......XA..s...s......7...yp%...!N^..L]x..z...r........@....n\n.g.}..C.@ J.\...o..BD....f.Ue.d...().+n5].\.....Q..Ce.l...(..@.Y.H.!.....+%.A..j.A...\.._)A J.h.AL<...A.A J.h.AL..).c,%.D...t..8.-^T..XJ...G.O.~........+..r.@.0r-d=.3..t .-L.W%VGfA.%.......t-.:.S.T.#...D..T .-..+.:;.......HH.^^r.9....~...J..%.+....7}..,A..>>[QK.....D...d\..Y.........hA.T=.q...P..C.`^^....!....s~r.......^0s_...oY.s~...}R....1..d.9...(.p....<de@y..h0...h.'.Lov-.*u3VR..Z....h.j.S.IZ.j...w.6.^.q T7.....@Td.....3.z...7..N......'J.1...j.4 .Y._e=..F..V..I)7J...}.:..3.u..(Srd[.9..9..........uW...TS.).pr...h.....7.]...{.~..y.K....y.{.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1018
Entropy (8bit):	5.095424605179027
Encrypted:	false
SSDEEP:	24:2dclNlflWMNi9sJKyaba/HpTUsDPhH/LzZVDv9:c4CuJKbbapTUsrhHzzz9
MD5:	2A6170661B35DC695F300AD583F1D1D6
SHA1:	5D6BF9CF645BF3EBECBBE1AA9357EBE0C258F5DF
SHA-256:	4860A417D37D6A8DB9CD90E5D83546D69278329CD5061964DC78C278C8185064
SHA-512:	DA247734E14914C61F500C31D0B35DFDDF1CD391813DAE8DB9CEF0E8EF87FD3E1A09E8AFC2D79CB27B9D1C51B5D408191C1BA28D83DD9CF36FED24AD999D6675
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="28" height="24.89" viewBox="0 0 28 24.89">. <defs>. <style>. .cls-1 {. fill: #f9b233;. fill-rule: evenodd;. }. </style>. </defs>. <g id="UI_aggiornata" data-name="UI aggiornata">. <g id="C_Home_V1" data-name="C Home V1" transform="translate(-1063.000000, -13.000000)">. <g id="linkedin" transform="translate(1063.200000, 13.000000)">. <polygon id="Fill-12" class="cls-1" points="6 20.44 9 20.44 9 9.44 6 9.44 6 20.44"/>. <path id="Fill-14" class="cls-1" d="M17.88,9.44c-1.86,0-3.02,1.07-3.24,1.81v-1.71h-3.64c.05,.91,0,10.9,0,10.9h3.64v-5.9c0-.33-.01-.66,.08-.89,.25-.66,.79-1.34,1.76-1.34,1.27,0,1.84,1.01,1.84,2.48v5.64h3.68v-6.06c0-3.37-1.81-4.94-4.12-4.94"/>. <path id="Fill-15" class="cls-1" d="M7.01,4.44c-1.22,0-2.01,.86-2.01,2s.77,2,1.97,2h.02c1.24,0,2.01-.88,2.01-2-.02-1.14-.77-2-1.99-2"/>. </g>.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2203
Entropy (8bit):	4.901176649639355
Encrypted:	false
SSDEEP:	48:cwESYJHI+TvcZCuvhpd8c0cTsTSQ6iio+hxb+suM:P0VpKppd8RosTJ9+L+w
MD5:	E4676498898D74CB2877B8AEE1810209
SHA1:	0671602FBC698412CA015205439DF30358BBB3F4
SHA-256:	DB4D3AF44A5CC76ED84438B2CD9AD2908962BC73855FA2838FC236EF5C62B719
SHA-512:	41A7B017FC9DF2551044C1410BB9667E7F6A7961DE26BF0650046BE4F542FC52A79FF40E0E08DF4451F2B9DC70B0ABCCEF8E29381CD2F1A95E604C3BDD4451D8
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/play-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="77px" height="77px" viewBox="0 0 77 77" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>4293CAB8-5D5C-45F7-9AFF-DFA378197051</title>. <defs>. <polygon id="path-1" points="0 0 76.2819 0 76.2819 76.2819 0 76.2819"></polygon>. </defs>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Approfondimenti" transform="translate(-381.000000, -1440.000000)">. <g id="Group-10" transform="translate(381.000000, 1440.000000)">. <path d="M50.8875,39.1796 L50.8935,39.1736 L29.2605,17.5406 C28.5805,16.8606 28.5805,15.7576 29.2605,15.0776 C29.9405,14.3966 31.0445,14.3966 31.7245,15.0766 L53.3585,36.7096 L53.3635,36.7046 L55.8275,39.1686 L53.3515,41.6446 L50.8875,39.1796 Z" id="Fill-1" fill="#FFFFFF"></path>. <path d="M28.7507,46.9021 L28.7587,46.9021 L28.7597,16.3091 C28.7597,15.3471 29.5387,14

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2350
Entropy (8bit):	4.8318256645142785
Encrypted:	false
SSDEEP:	48:cHlBTvyCKAhUDN3rASukq9SDjP7XZ2RUJnpe:GBsAhUVUSukq9gXZY8pe
MD5:	D0882DEFE564D549E85250E0B7C79D95
SHA1:	984BEACED435CC8EA1199D1F38FB1E77DB7182E0
SHA-256:	0218380E1503C8A6B98A1B69D41EDD5560316761D19E880384727014F763006E
SHA-512:	52F765A4C781E2AE38EF74A1B50D3D472A941BA2B2706CDD180922D6FBC8760D3974FF60D4DA66BC9064C32F9C2171FC0592793A7948D797C84140E0DD2571E1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 4</title>. <defs>. <polygon id="path-1" points="0 0.000165374568 9.79826102 0.000165374568 9.79826102 8.07706405 0 8.07706405"></polygon>. </defs>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Approfondimenti" transform="translate(-363.000000, -3387.000000)">. <g id="Group-7" transform="translate(191.000000, 3372.000000)">. <g id="Group-4" transform="translate(173.448718, 15.000000)">. <g id="Group-6" transform="translate(12.512532, 8.525449) rotate(-90.000000) translate(-12.512532, -8.525449) translate(3.987083, 4.486917)">. <g id="Group-3" transform="translate(7.252638, 0.000000)">. <mask id="mask-2" fill="white">.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4456
Entropy (8bit):	7.880592240204443
Encrypted:	false
SSDEEP:	96:say6stTBabvfoc6SiYKZ8xiMyycuWsF2uUfWqjdxrt2EN:sayhtTBabfoFSixZ8IMpMNLt2U
MD5:	CB5D7ED18F23944BDDDA4747C8D4B613
SHA1:	8111AF49ACEF4733BAE785CF8F6E7FBEE7ABB58D
SHA-256:	86EBC43B600D33E5CF6506FDAF1053942EF6890B38C2468BE1AE193E3247B517
SHA-512:	9263949F338A590FD95208E1ABDFE853E77C4F8F567ADD3967AFBE7CF0744A37A743ABDB736E79E11FAF7D6CC32EE039D88CBE0718CDB150CD7154F464A3A80B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..{..U..O.....P."...M...K...!h.j".Am.T.........Bhc....1...5..VH.......-.b.n..(.-./.-.ny.\|............$7].{..9..{.1.w.:n..F.r,...\| ......./...xA ......^.....@....... ......./...xA ......^.....@....... ......./...xA ......^.....@....... ......./...xA ......^..h -......X.n3...kq...A......XA..s...s......7...yp%...!N^..L]x..z...r........@....n\n.g.}..C.@ J.\...o..BD....f.Ue.d...().+n5].\.....Q..Ce.l...(..@.Y.H.!.....+%.A..j.A...\.._)A J.h.AL<...A.A J.h.AL..).c,%.D...t..8.-^T..XJ...G.O.~........+..r.@.0r-d=.3..t .-L.W%VGfA.%.......t-.:.S.T.#...D..T .-..+.:;.......HH.^^r.9....~...J..%.+....7}..,A..>>[QK.....D...d\..Y.........hA.T=.q...P..C.`^^....!....s~r.......^0s_...oY.s~...}R....1..d.9...(.p....<de@y..h0...h.'.Lov-.*u3VR..Z....h.j.S.IZ.j...w.6.^.q T7.....@Td.....3.z...7..N......'J.1...j.4 .Y._e=..F..V..I)7J...}.:..3.u..(Srd[.9..9..........uW...TS.).pr...h.....7.]...{.~..y.K....y.{.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 716x1000, components 3
Category:	dropped
Size (bytes):	814048
Entropy (8bit):	7.924691723911
Encrypted:	false
SSDEEP:	24576:fLB+/btNKNq0OyGHwLXar8WPA7e7CsBK2ga6/AiuN2ZP:TsNKJrGQja4Wo77+RsIi8wP
MD5:	682E8C38242EB5CBE830C5281E5B9FE3
SHA1:	AEFD15A467C78C41F9C80336266845C2749F2091
SHA-256:	6609766F4EEBC2620FF23BAB4012775C785EBCDE626A6E0BD6396F20FC6695DF
SHA-512:	C7837AF0DFAF074863116B610CAE05D799BEFCCA228B174BA997D5D1780EA50DAE534667E1A53E426D9EB0B3FDD665EEFD62BB7228178FDDF21D61BF064A1646
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i..........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~........................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................Z............?..Tn.....@.8f...Tw.pH...Zz........../.Y.d.[m.4..]j.[..E.ghn2.9.`0.<zg..c.I..;&..=...<..k.h._....[..........z..98.....h......t.}..........*..).6..p.X.......n.........k.....+zk.Wmuzmm{..`....N..a...@..2... .......-Wmw^...

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6218)
Category:	downloaded
Size (bytes):	205678
Entropy (8bit):	5.555313946771508
Encrypted:	false
SSDEEP:	3072:dxOStJ7HC8S4Ltnlw1ydtkMmYyktV9eQdYbjuK3:3RHv9LAotYktV9eUKjue
MD5:	C74CD1143B627B37742C58511F824C0A
SHA1:	BEAF37C2FB5AE37BCEAD963258CD69919D0A4E02
SHA-256:	1EED9CD9A0FA42FDBEE92E6E2E5074FB98E7F8EA67667256891B5078E335B6C8
SHA-512:	7170DE1F40A6AC777597D7E72412E7D807F4041477FAD17B36099811B967370F38E02272E9F802F4F3910E4AFC24C7EEBA0CD28A748D14CB84E24D0CCFF14B3F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MXJS4VS
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"23",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_defaultValue":"it","vtp_ignoreCase":true,"vtp_map":["list",["map","key","^\\\/it\\\/","value","en"],["map","key","^\\\/en\\\/","value","it"],["map","key","^\\\/de\\\/","value","de"]]},{"function":"__aev","vtp_setDefaultValue":true,"vtp_varType":"ATTRIBUTE","vtp_defaultValue":"undefined","vtp_attribute":"data-tracking"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__jsm","vtp_javascript":["template","(function(){var a=

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	90078
Entropy (8bit):	6.090701847204512
Encrypted:	false
SSDEEP:	1536:TDTFQP1UTtIWcJ2DYD36YK342geeM19ACkiE+Uiy5wE+Uiy5whklCW:pQP1g+z6YIXgY9ACki1py5w1py5whklH
MD5:	EE5EEB13C7717F508AF2020F5593CEF5
SHA1:	1618B290BF6A74DB104A51BC347796F3AF6B34D1
SHA-256:	EE1BFC0BAA2642E6F9AF66E141A753C43D3030C6174A1A7773D87D8179E281E1
SHA-512:	75AEE4B8ECF8BE03B6600E7C2D898C192F213112E867F85B1AF6ED7613AE4AE57B1638BD1C7C131968731F638495C13C4461C1C14031DE88AF341203809D596A
Malicious:	false
Reputation:	low
Preview:	{"v":"4.8.0","meta":{"g":"LottieFiles AE ","a":"","k":"","d":"","tc":""},"fr":25,"ip":0,"op":250,"w":1440,"h":600,"nm":"illu x Walter new","ddd":0,"assets":[{"id":"image_0","w":536,"h":609,"u":"","p":"data:image/png;base64,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

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 683, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5837
Entropy (8bit):	7.703850118069366
Encrypted:	false
SSDEEP:	96:i7IilfgKqTPtkyiXfCj7ZCxtEJ28RsCFRtX9P4ii0nIXp7AWeMFrlGTZUOQTyDPP:InY+zKjOtEJ7RsC4F0ngV1FeX
MD5:	D55B953D66770AE5971DF16F1D482198
SHA1:	4D6879F3E676298B868A781EF1663589C6DDA2D2
SHA-256:	44D9EE101E35BB8A1865E3A76DFA22440CC1965E8AAD2FFE297E7B97B9DF592A
SHA-512:	A13F32EE8F6F110A53F26D12591D15221191978F0665DF575EDF69C1A009EDB5224C4C9FF91F66D2BE6FBA80B952F50B204A2A736088BBB0B1DD8DAFAA0F03BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............X.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE.%..+..e..d......(........`....._......'........(..[..Z......&........V..U............P..O............K..J............E..F............@.....B............<.....=............6........8..\|..{........3........4..w..v........0........1..r..q..................m..l............,..g..f......)........*..b..a.........]..\............W..W.........Q..Q............L..K............E..G............A..C............>............9..:..~..}........5..y..x........2..4..t..s.........o..n.........-..i..h.........c..c.........^..]......Y..X............S..R.........N..M.........I..H............D............?............:..;.............7..z..z........u..u......../..p..o......j..i.........T.............?..k........r.'.....bKGD.........tIME.....5........IDATx.....e..p.Zp...=(...J.k.X.+.`).5.K.j..K..Z..i)V...R......K-+.4...R.J...5...._...rv.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	630
Entropy (8bit):	5.4230574585781115
Encrypted:	false
SSDEEP:	12:6v/7mAnvY5u+33333333333333333Tno21:qnvWfo21
MD5:	DF309043134BA1B7BD4743569BFA617F
SHA1:	907CD18BA8F1F78229563102AF3B6630B3513C75
SHA-256:	312E58B4160C8FA7EC11FFAE2D38BF197F8E43376B0F1E070F8AA1191EE5502F
SHA-512:	EAB4413D0C7A16E7B681981AE09071D27F4BA914FF7A868F2811A91C791289F5B4B4247E73A06A22519D88B2FAEE7B8D9678C3FDCD237288215B00EBF02ABB27
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........(IDATx...M...E..........e..."..E..T0..P`.+..i...=q/.....E.o......\?..l.w'9.8lV......H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ]..{.q8.^...)n;.......w...bfv......C.....IEND.B`.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631), with CRLF line terminators
Category:	downloaded
Size (bytes):	191344
Entropy (8bit):	4.991055832058878
Encrypted:	false
SSDEEP:	1536:vTL3Xq3UvR2stX4uNuh6njVwk763SzTdsj+pjNJzrzyCAm9Kp6Q9VKn3p4GYIeBA:7zX2SzxsyRfHIIeBooD3e0MI8TfIMTX
MD5:	542EA27889C9A81056A2F1EAD83FE857
SHA1:	C7FF3C44D876764AAA121A4C5A0AAD8DCA5863A6
SHA-256:	0F8D69F56381A1C5023ADFBE676F58423EED4F1C6985CCCBEADFCD38442487DB
SHA-512:	6CB95F24B6D6734C62F2B07B932EFEA60B72091B3C02540535020666D1A2DBD0DFEE1881D7F4F0A627C8CAE4EC767798A5F6686EACF06CA8C82D0F12A007B596
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/css/bootstrap.min.css?v=5
Preview:	/!.. Bootstrap v4.6.1 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors.. * Copyright 2011-2021 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..:root {.. --blue: #003b79;.. --indigo: #6610f2;.. --purple: #6f42c1;.. --pink: #e83e8c;.. --red: #dc3545;.. --orange: #ee7d11;.. --yellow: #ffc107;.. --green: #1ba173;.. --teal: #1ceda5;.. --cyan: #17a2b8;.. --white: #fff;.. --gray: #6c757d;.. --gray-dark: #343a40;.. --primary: #003b79;.. --secondary: #6c757d;.. --success: #1ba173;.. --info: #17a2b8;.. --warning: #ffc107;.. --danger: #dc3545;.. --light: #f8f9fa;.. --dark: #343a40;.. --breakpoint-xs: 0;.. --breakpoint-sm: 576px;.. --breakpoint-md: 768px;.. --breakpoint-lg: 992px;.. --breakpoint-xl: 1200px;.. --font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji",

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	5.672529459488271
Encrypted:	false
SSDEEP:	12:6v/7dNqv333333z9lw8A33333L9h333333nz:KNYz9t69F
MD5:	3D12D3D2B6940B7504005692C6C10CF8
SHA1:	4F3DB01914D40EF201400E61A842B917AC477DE1
SHA-256:	E8B4AA8C86ACC062D07F405D52A2A7E69C2DEB4E3860BB4C5A7CB8773B34C744
SHA-512:	3A93725813AF3FC6BFF2C0CCCD3FBD26F7F6C01FE3C7F86827499D100386CD1437684F9E5C23B1500190188CFFFC81EE28F44B1671075789DC96751D2EB25C04
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/mg0lezrl/united-arab-emirates-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........=IDATx...!JDQ....0.X..#........q..1...e.&.m..n.7.i..g........t.31..e.`...+......@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$....i.^...N........@..\|{.].h.tvz1.b.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.i.4..nn?..yi.a.n.............f_. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ...i.~........x....IEND.B`.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.456931454100675
Encrypted:	false
SSDEEP:	24:X2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaalaaaaaaMHaaaf2aaKDBIEqqHyFHiEt:XA/GH10DLcrEwR
MD5:	993A8BCC8FDE9A35C3E3FAA4A9C1A770
SHA1:	ECAF93A38BED1D78F1CF152CAABB4A3242D11DE7
SHA-256:	6BD44E96452CB23BAFCB98E7E517BF64C505592C8FD420D8FDE03E841E593033
SHA-512:	D92FC5CC92BA8CDC6B143C28B6A6B2B2BD77CCADBD0A7343D72C519D08963E59F48ADE321EA9115071FE59D1B2142D7A9A123654B1D290A2182CBFA68E9A8618
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....................................................................................................................................................................................................................................................................................................................................................................................+...M...i.......................................................P.......l....x......................................l........................w..5.......................................b...F...]..._...?...L...'...............................................v...L...z.......!\|............................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16112
Entropy (8bit):	4.77731869694275
Encrypted:	false
SSDEEP:	192:MNxsFh7+46u1oK35+x/snFyi7GSbU/nIe/CG0WjxEItG8lUWlCaHe1angj5jofjG:bA20LSnr
MD5:	09854461A8DE546D144F458937F9143C
SHA1:	3784CB675C50EAC122B92D959AD694A552C1F540
SHA-256:	26A42FD69405D577B35D506499DC10104015D47C11E1A32D65A802EBA80BE3E9
SHA-512:	08FF545F172A7BE353AF17FA033F55F82ED34106C1508E410AEDBF58894DEEAC4D682D71C7A23D656C26C24774AA1811D5A5EF418F865C35603FC27687A990A2
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/css/crif-esg.css?v=5
Preview:	.crif-esg-filiera .container {.. /* display: flex;.. flex-direction: column;.. justify-content: center;.. align-items: center;*/..}.....crif-esg-filiera h2 {.. text-align: center;..}.....crif-esg-filiera .filiera-btn {.. text-align: center;..}.....crif-esg-filiera img {.. margin-bottom: 0;..}....@media (min-width: 992px) {.... .crif-esg-filiera {.. background: unset;.. display: flex;.. justify-content: center;.. align-items: center;.. flex: 1;.. position: relative;.. }.... .crif-esg-filiera .container {.. position: relative;.. }.... .crif-esg-filiera .container .row h2 {.. padding-top: 30px;.. }.... lottie-player {.. position: absolute;.. background-color: #0779B8;.. }..}.....fade-in {.. opacity: 0 !important;.. transition: opacity 2s ease !important;..}.... .fade-in.visible {.. opacity: 1 !important;.. }.....swiper

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpCfWGAE", last modified: Fri May 8 09:06:08 2020, max compression, original size modulo 2^32 489
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	7.343516125324942
Encrypted:	false
SSDEEP:	12:XJjUv/7Cu7oXqejoa3pS/3vgOGUBbxMFHCKlHIEg3JzWiFlpij:XthXqe3ZS/3IFSbxMFHnXuzRjij
MD5:	3702ADA73B8951017B8451CBD6A96523
SHA1:	FBA130B6F83751655F96DF7F947B9591DA67C50B
SHA-256:	A714DEF57C786512C5F2BA2CC4DFA9EFE919CD5F2004D05378D5BE2377F627EF
SHA-512:	574EE82DDDD8DBCD580883CC3D5F792A9DDABAB2C9651BF262276A0FB05FDE6F6E6C12EAC71381C2613891758459A5EFA0CFA3679049C5A738F6149074162A28
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/session/1px.png?settingsId=G_xgCaSxD
Preview:	.....!.^..tmpCfWGAE.......PNG........IHDR....................iCCPsRGB IEC61966-2.1..(.u..+DQ..?f..G....IX!F..2...4F...y.fF..{o.d.l.(..k._.VY+E.deaMl......s>.{.9.{...)%mT.C:c.....}....(.....gg..8>..M.]...G}L5.....).n.O.O......J2..>.......u...._6..P.\..../..b%.....t.S9.t..%.jf~Nb.X;.!...2.....`D...........g.J."^#..*..........y....j..}N..?.<Y.[..nA.`Y...U<..#\d.....~..P.:..i....Zt..7..A....-..............9...\|....A..oZ....g...`h....pHYs...#...#.x.?v....IDAT..c````........N.....IEND.B`....f....

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	5.343764964211959
Encrypted:	false
SSDEEP:	6:6v/lhPk0T2bGhcz0maR33333333333333333SETSd/bp:6v/79hC0mk33333333333333333a1
MD5:	223B200F3772D16BA770A04301E895D0
SHA1:	919009BFBFB1487ABD8FC673254CD769C7F158B3
SHA-256:	BA62CFEDD5C0FDA616EA73A132A1CFF69B670E31FCF84430A9302A0A84F40DA1
SHA-512:	F457E6F18FAB15AAC518CECF82F861960BA4F0ED4B76245DD7B3FFAF3334AD70D0AA4F372BD00DF60ED8D27DAF0854610BF9BBCF0289294D1151EC6017401463
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/3sidauet/romania-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q......... IDATx...IDQ.E.;b...4..##;.,D.,Q,@..LL....H..V....pu..3,...~\|......o...~...swq..... .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .t93..Y..{.ff?.m..v3.~..23.....c.......IEND.B`.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 186, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23023
Entropy (8bit):	7.973268599455137
Encrypted:	false
SSDEEP:	384:Dw8CM/cFOykEvB7wTmOLSQp76QuiMyVWKc/pYuLloVLu+SkVy7J6FcEpKxfsH6Lf:DweqO1wB6GIuB9/VALwSDpyw6LKq
MD5:	58E50EB31D2DACBC229A5516CD3A2A2D
SHA1:	CB2EB7F485980A6A2A1BE4ABCB43080C870B1AB6
SHA-256:	73665C1013B832333D1B2F92041291BF49F35EE76604C35021551F2FC4A213AD
SHA-512:	F3B23C3DE58849A6AB4176E9ADF4897FB7AADF86557C95766EC8517BECC9123F91390E6BBD93480A3E8FBA6EDDB383DE0CF23FC5C628CE9CF07E3030E7D5156A
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/synesgy-logo.png
Preview:	.PNG........IHDR...............PQ....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 23.2 (Windows)" xmpMM:InstanceID="xmp.iid:867366D89EC611ECACC2C061237525B4" xmpMM:DocumentID="xmp.did:867366D99EC611ECACC2C061237525B4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:867366D69EC611ECACC2C061237525B4" stRef:documentID="xmp.did:867366D79EC611ECACC2C061237525B4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....V`IDATx..}...U......}-//=@.=.K.0T.A.)*(......"V....v.t....J.N.$..HB.i...ef....3..6./...k.\|n...;...=.s..4".

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 2880x1000, components 3
Category:	dropped
Size (bytes):	3947829
Entropy (8bit):	7.965969618053065
Encrypted:	false
SSDEEP:	49152:QWqACMPmtXUteFL30fP4n/LHrkdnk+FX9YF9lKADklEMMVgpELgtgf28fT2A1:QWPZP8Ete5kgn/3g9FXpykGJZ1
MD5:	19FFDFF278F46907BF27A6A420DB163D
SHA1:	02CC8FB8BAF353635F4A882A22DE98E958FF6934
SHA-256:	4A89FC612068DA11C0855E2F06B173E7EBA1B90CB3C3DD437B5CFDAF0517970B
SHA-512:	62F814589B0F16A3AF5B1054C13D1BAEDD77761AE2EC61ACADBF4C769888274DAC2E1CB45D5AEB61BAE1D151413BE8935EB1D7CCABDD94C3BB590E53CCB7606C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C.........................................................................@..............................................S........................!.."..1.2A.#Q.Ba.3R.$qb..Cr..%4.S.......&5Dc.....T'6s.......................................O......................!.."1..A.2Q.#Ba.3Rq.b...$Cr...S.......4c...%..Ds5..&T.............?....\|............W......t?...Q..U-h..g....mtE.@..?..9.0s...9.#...~G.v.,F....._..uc.xc.b@.H.....7.'...'..6...?..v..8......rZ...... .?..V,.kB..u...F...P..Ys.......O.8?.?<\|z.....x...^~\|..+...n....j..h..+y.>.O..1..\|c..89.>.w.Cu......: ..2...MV......@....^..rN9....2..>q.X...............z...LI..?......U..>..R..........2~q...j.._..........D.2...I?44..G.Y.{.?..9.s.....?.F.?......[.......b?.G..}...........4I...S.g.'.....H.?..drpH......]........VQ@.y.Uk.../-..n.d...q....q.......).../..........@J.]b..7d

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6524), with no line terminators
Category:	downloaded
Size (bytes):	6524
Entropy (8bit):	5.540560155534514
Encrypted:	false
SSDEEP:	96:Wlnex9KosXeNPZ/A8KUOIHe8nj2lIkvMFrTvqi/mHkOW+Ku2EKDUdUi8TkUWdkUd:W6sI1AEHeA+MtXOHkuhJ7dn8TkPkNDA
MD5:	A857C419443D0B90E7F3E202980A3899
SHA1:	97BF6D9BA0286404AE4E7F29E9F183ED42DF3E3B
SHA-256:	6082935BD40F9216CD9703CB031E83BE99E48B0CB7411EA826842BDD15C49292
SHA-512:	5F33F8930F1F95A915C2F57BEBFE04CF235C9E13158DF725CD800099AB3136F96CAD68D91BDA4C0EA0716DBEC455678336E1AA80F5032ACD5CC92DEC8E77CAD4
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/common.fcfcd26bbe174ae3.js
Preview:	"use strict";(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[592],{40048:(p,M,t)=>{t.d(M,{i:()=>r});var c=t(96814),o=t(56223),l=t(58726),u=t(89515),_=t(51716),s=t(33693),i=t(16668),a=t(65879);const m=[];let d=(()=>{var e;class n{}return(e=n).\u0275fac=function(E){return new(E\|\|e)},e.\u0275mod=a.oAB({type:e}),e.\u0275inj=a.cJS({imports:[i.Bz.forChild(m),i.Bz]}),n})(),r=(()=>{var e;class n{}return(e=n).\u0275fac=function(E){return new(E\|\|e)},e.\u0275mod=a.oAB({type:e}),e.\u0275inj=a.cJS({imports:[c.ez,o.UX,l.IJ,s.q,d,o.u5,_.P9w,u.aw]}),n})()},10341:(p,M,t)=>{t.d(M,{f:()=>i});var c=t(96814),o=t(56223),l=t(58726),u=t(89515),_=t(51716),s=t(65879);let i=(()=>{var a;class m{}return(a=m).\u0275fac=function(r){return new(r\|\|a)},a.\u0275mod=s.oAB({type:a}),a.\u0275inj=s.cJS({imports:[c.ez,o.u5,o.UX,_.P9w,u.aw,l.IJ]}),m})()},91272:(p,M,t)=>{t.d(M,{Y:()=>i});var c=t(51716),o=t(65879),l=t(56223),u=t(58726),_=t(89515),s=t(96814);let i=(()=>{var a;class m{constructor(r,e,n,v,

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 536 x 748, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	854572
Entropy (8bit):	7.996978372280195
Encrypted:	true
SSDEEP:	12288:+XCQrwU21UCv0FkYsXuoHhW+tt8LEUsOBwlxfodYqWna7a64pmBW4a2xB37/Ta+D:+XChvM2F5W+tt8+OijTa76uWXo5iyOI
MD5:	6396E99EEA56FC06B9A6C4E8A7C3F2FA
SHA1:	35A94ECA7B480BC08C484C3BBD8DEDB8D6571B27
SHA-256:	A07536D8F3AFA44D74BF78626F075DB41B32A9BC7835745607811B4E18478ACE
SHA-512:	D82887F4DA3F048668A170314E37A1505F2FF996AB78432837FE2216E2BAFF85AFCB8BF171D88C19631693EA4C834199644560072D8AC26BA94243FA0B49BAA2
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/ogwbmvul/cribis_22-05_visualcard01-network.png
Preview:	.PNG........IHDR.....................gAMA......a....8eXIfMM........i............................................4Uk...@.IDATx...K.n[v...{.s.<NC.eK)A..T=..S..M...`:t.....4(..K.,...B.$..i.H.Y.....}...y.k.>...sG.5...x.e.5...."..........y............G........G..._<?>>.....\|......t..{............}.q.....JP.AZ.`..:...5..^....#.bh..a8..6..>><.xxzz.0..x....j.#cr...F....Y.(W,.~k..~j..d.d.b..j..J....i.b. ...@..K.>d.:.."8.J?.kj..x.N..s....p....~H,....z..F....f...F}h.`..=5..E.{G....4.b...n>..lz.F..{H&.SO;9..1...\|^=...uuL]Z.rg.....q.......-..2..._...._......B........_..../.~.....<..m0.....=.I:O..?.';.....5e.....Y.q..Y..0.9.....I.3....`4.W."'.W.....qs.}..O....}........9.y.`>$6.d.....).......u........o......M..zx.$.....>...o.~...._.}.9./..Ku..yH.F."l)....K.B.8z.2b.2..h1...'v+'....k....[j..\|+'..M.y..6.8....o..&.(..FW.......u........{<~.....\..{.X......d.._.....$...P...?.a.n.......<PL........e..p.Y..f`5.,...v.4N...83)....O_..'..O..~.....~...............+.....

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25904, version 1.0
Category:	downloaded
Size (bytes):	25904
Entropy (8bit):	7.992205849646859
Encrypted:	true
SSDEEP:	768:DiXKcpHjMG7xyMP6OloCp7NwhEb80DVr5ZmOj5q:UKcpDb1y46p0blrzDjg
MD5:	49B88E088A56D09D7FB43452FF333207
SHA1:	86360C1C9AE6962248A23A857D66CA480F566F7E
SHA-256:	9DF5F24278928433DF82AF2998CFB1054B856839BB9FF9A9D845F954D8E10138
SHA-512:	B644082567182E8C20BDFBC9AD6A15ABD57223764442C8EF37BF10760995444C76E23F2569519291271B6D202BE262AA9A9C7C8F80052231A64DE9D01D7A0535
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.ee049c891ee3e790.woff2
Preview:	wOF2......e0.......@..d...........................@..l...?HVAR...`?STAT.4'2.../~.....0.8....0..2.6.$.... ..n..d...g.GP.v.].m.:.....l[..!9?...p.z..i.......L.X.ew...eZ.oH."..2Q.Z....1....q..............:..9..V..x..d..Do.n.a...i.F4..WI...m..\|......;].....]...y..k..87.N.#7>i.o.m.0..wT..Iw..s....?....w'y#-..C....#..%..(.G......JV..@.9......K5.o.fE.^}.95",..O.6....r.2r..)\|.....<9Q....[.......~.y...s...\1M........rw.!....}.A.Q.E.j.".\..wVMVe.....1#1.+77.."R.,....!{f...:.X..-.Pg.P....G..KB...x7.S.T...;/'j_O..r.6k.QS...4...I ...._.Nn^.J).8f.......H$j..M......#N.+.-U...v....7......6.:k...\|[.....(.e[........U.m..u..`.....I...~......A.Y...Lr...o.....DM.2......C.._.F..bt.Q.QHB?.`w"k.E....c/..G?..Cp...IW!(t....e.*d..1.....KM..E... ......].=..so0jw.!H.M.\|.................y......,}^c6..~.....k2).;CJ;.TH..i&..9}...-.q.!...G..t.UwD...G...-.`43.....i...w@.'...3v......_~EH...Q .K.n...6 ..fu....?7.R........l]U...ETW..\W......e........t]v.m.....t4VzA9\.-Y.......v).

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2111
Entropy (8bit):	4.946732082507182
Encrypted:	false
SSDEEP:	48:cvrc4FdZP3zTX7rdZmffGHph3FdZ0iBYVu/LiW/12vm:47TYGHFgiB35v
MD5:	C654FF26B07D3E5BB27966D68B0D9292
SHA1:	94528D08AF968814F4FFA4356C35546FCFE4B510
SHA-256:	AA3922762E72C62A95EDB27308FB8BE21693038C0708991144AF1D42036ACEED
SHA-512:	18444621E819062118BE41A529225FB41FF48560220FEF546FCCDFF27525DD92E5C85241E0EFA458AA28A711BD0EC81739B6B320EDA4AB866115DA13C5BEF4EA
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/n4gfog2a/icona-aziende.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="345px" height="345px" viewBox="0 0 345 345" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 17</title>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round">. <g id="A-chi-ci-rivolgiamo" transform="translate(-922.000000, -1402.000000)" stroke="#0779B8">. <g id="Group-16" transform="translate(923.000000, 1403.000000)">. <polyline id="Stroke-1" stroke-linejoin="round" points="71.6305221 343 60.6104418 71.6305221 11.0200803 71.6305221 0 343"></polyline>. <line x1="38.5702811" y1="110.889558" x2="61.9879518" y2="110.889558" id="Stroke-3" stroke-linejoin="round"></line>. <line x1="38.5702811" y1="143.949799" x2="63.3654618" y2="143.949799" id="Stroke-4" stroke-linejoin="round"></line>. <polyline id="Stroke-5" stroke-linejoin="round" points="88.849

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1893 x 1412, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	144983
Entropy (8bit):	7.846686670638701
Encrypted:	false
SSDEEP:	3072:zxzRy9QWGmNR6EHRKTQpgP2ee8xKlJoj1Z5VgJIC6pXaZ:1zk9QWGAR6ARKTj2h06Joj1TuJIZhO
MD5:	43928D18533CAEC139BEA47E3D751A52
SHA1:	F90DD9C1BDF68CB9101F404068D622A00E826F18
SHA-256:	E766AF3D615CC6F0853F9063BB917C0B32464C01F22E95E88A7B2A5A1C1B98A2
SHA-512:	3A3FC2592856E1AED9124ECBCE65AB2C820FBA8AC001BD80C63D6BE9F26AA6E9AFF3F5B370BE08ACC3D445B5306B638CA24D9799790B15D2F26BF8A9D787D290
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...e..........g......pHYs...#...#.x.?v.. .IDATx......g}...]]I..-...6....%H@2.].\.L...$@&.7/.f...m.......I.\|.2.3.A..1`....>.93..&X.$..../`.".Mo...S}.....z..........j..V...'..X.....h..w..v.0.m..>..._9...a.".....}C(......D....f..G...3....#..@..r..xy.e.......#......."..w...#l......Y..O.n...#i.{,^^.V.......B(.....s$.r.B...+zq.Q.cN.c.}J.........`"........T...l...m..}.................C.......P.....z....5.\|..\|.5..9Hh..$..?Bgk...Z.Z..............F.k..i9.6.Z...Q....n..da.a...H........B(......S`.....h..5T...f.JV..S%...m.}....=\k......T......@...=J.......S..J..E..E.....k.@.'.-.l............0..e.... .h0....m... \|..]...>....7.-.l...j....Q......B(........ak..e.o..$h]h..j.........,.-.k...G..6.i.U.........,....T..#.&t.[7..._}..!.B...Zk8Z.....u....V.k./.h.i.....{.......!...Q..+?f.l...6._}...k.u....k.?.V.r}B.&am...~H{.......]......`.V.fA..*?F.B...,\|..^...m..}Q5...n..............'.......,......a..A..J..g..:.-._}..a.Z{..j.Y...e.m.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/polyfills.f041c72229936a68.js
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1018
Entropy (8bit):	5.095424605179027
Encrypted:	false
SSDEEP:	24:2dclNlflWMNi9sJKyaba/HpTUsDPhH/LzZVDv9:c4CuJKbbapTUsrhHzzz9
MD5:	2A6170661B35DC695F300AD583F1D1D6
SHA1:	5D6BF9CF645BF3EBECBBE1AA9357EBE0C258F5DF
SHA-256:	4860A417D37D6A8DB9CD90E5D83546D69278329CD5061964DC78C278C8185064
SHA-512:	DA247734E14914C61F500C31D0B35DFDDF1CD391813DAE8DB9CEF0E8EF87FD3E1A09E8AFC2D79CB27B9D1C51B5D408191C1BA28D83DD9CF36FED24AD999D6675
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/social/linkedin.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="28" height="24.89" viewBox="0 0 28 24.89">. <defs>. <style>. .cls-1 {. fill: #f9b233;. fill-rule: evenodd;. }. </style>. </defs>. <g id="UI_aggiornata" data-name="UI aggiornata">. <g id="C_Home_V1" data-name="C Home V1" transform="translate(-1063.000000, -13.000000)">. <g id="linkedin" transform="translate(1063.200000, 13.000000)">. <polygon id="Fill-12" class="cls-1" points="6 20.44 9 20.44 9 9.44 6 9.44 6 20.44"/>. <path id="Fill-14" class="cls-1" d="M17.88,9.44c-1.86,0-3.02,1.07-3.24,1.81v-1.71h-3.64c.05,.91,0,10.9,0,10.9h3.64v-5.9c0-.33-.01-.66,.08-.89,.25-.66,.79-1.34,1.76-1.34,1.27,0,1.84,1.01,1.84,2.48v5.64h3.68v-6.06c0-3.37-1.81-4.94-4.12-4.94"/>. <path id="Fill-15" class="cls-1" d="M7.01,4.44c-1.22,0-2.01,.86-2.01,2s.77,2,1.97,2h.02c1.24,0,2.01-.88,2.01-2-.02-1.14-.77-2-1.99-2"/>. </g>.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpruh__8ua", last modified: Thu Jan 11 12:39:46 2024, max compression, original size modulo 2^32 473
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	7.112246703903668
Encrypted:	false
SSDEEP:	6:XW0hMHA6RQv98lnIQh0z8AuiUAJS6rYcyyln:XWQ6Hlnjh0Q36pYD2n
MD5:	D0FBCA31EB9CCF81195B677B3FDEEEE6
SHA1:	65D30C88288E1ED8E74F2087F847F596F44114A1
SHA-256:	BF6E77EB1E0A517592B4AB9DD7FB9A0C1A45761B0B240EFA5F41C5CC87478200
SHA-512:	E7B9D51D37A90C63A08F23685E200800E41C43BB9D66E0F6F42D3C97D488EFCF5CE9391E321819B465B367E372B06ACD8791E42ABFB06FE2C8C10DAB8C078AB7
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/ButtonsCustomization-bc97adad-cb7c10c6.js
Preview:	......e..tmpruh__8ua...Mj.0...=.....f.#...r.U....3A.....^.D-t.....{\|.`..p...8<.#7.......C.^..M}......2...'..(Q....V..o;.j..V[..EL.a..)r"x..q.%...1%.e.oWF(........E.C.=z..B._b..w..+..=...FV5..=x.=..+nH.d.h.+..=...P.n.f...hi.]....

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2350
Entropy (8bit):	4.8318256645142785
Encrypted:	false
SSDEEP:	48:cHlBTvyCKAhUDN3rASukq9SDjP7XZ2RUJnpe:GBsAhUVUSukq9gXZY8pe
MD5:	D0882DEFE564D549E85250E0B7C79D95
SHA1:	984BEACED435CC8EA1199D1F38FB1E77DB7182E0
SHA-256:	0218380E1503C8A6B98A1B69D41EDD5560316761D19E880384727014F763006E
SHA-512:	52F765A4C781E2AE38EF74A1B50D3D472A941BA2B2706CDD180922D6FBC8760D3974FF60D4DA66BC9064C32F9C2171FC0592793A7948D797C84140E0DD2571E1
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/arrow-right-white.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 4</title>. <defs>. <polygon id="path-1" points="0 0.000165374568 9.79826102 0.000165374568 9.79826102 8.07706405 0 8.07706405"></polygon>. </defs>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Approfondimenti" transform="translate(-363.000000, -3387.000000)">. <g id="Group-7" transform="translate(191.000000, 3372.000000)">. <g id="Group-4" transform="translate(173.448718, 15.000000)">. <g id="Group-6" transform="translate(12.512532, 8.525449) rotate(-90.000000) translate(-12.512532, -8.525449) translate(3.987083, 4.486917)">. <g id="Group-3" transform="translate(7.252638, 0.000000)">. <mask id="mask-2" fill="white">.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5097
Entropy (8bit):	7.940530362039193
Encrypted:	false
SSDEEP:	96:oTvTvTvTvmpmHOuOKjYvBLNLPPsmJYEvkETnrxZEedbbl4zCPRU69T81TvTvY:ojjjjmpqOYMBLNLPvCIrjEedbblNPRUI
MD5:	35E0D236E4C6670AC17D6953E09C85DD
SHA1:	A392D4A1BB7F113B9D673D0394A0F6B2B7AF84C9
SHA-256:	BCBDF840DC247A18B4E150751FF4EF429651C20245E705BAED0447563C22C4B6
SHA-512:	3684475BCC87E9450519827A9B11FDA100186B10FF11A0EDAB27EC9759641549992971665FE134D8E90E0BFCEDD3F146FE8626CE2EE5C1B63B1CE54839827987
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/lcvfsmur/germany-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx....xT...7.0..L.....A.A..f...5...E.r]-..[DT@W..v....]A...>.[Q`.iQk...`W..(Q..$...A.}..p..d..!d..y........;..\|'.@...:Z...BD:..".b@.........D.. "-...i1 .H..ADZ..".b@.........D.. "-...i1 .H..ADZ..".b@.........D.. "-...i1 .H..ADZ..".b@.........D.. "-...i1 .H..ADZ..".b@..V....p;..r..J....n.....G....Q....g...).<.3...c..r..h.c@..3.T..S.........F..[oHC.;..o.....[G..._..........K......;0gZ/.M.bPP+vRZ...d.@.z.....k..../{......p.r...m...o..i.:.7.SL,....*.....O....f...k..1s....1u\|F.7...=......Vv.T.......\...C.C.H....g....^...........VR.~..!6..g.v!.=..q...c(...R.).;b....%L6l.`Oi=6.....cW....._.<..............\|mH...+P.u.<.5..^.GV..]w...U.....pX..Y..h..qi...2.......a.E.zE\| ..f..R.u...T..b7.p...^.._p.......}..(-.....N.C....;.7t.x...0 ,Bj.2...#...w.....e..\..+..`..=..-..T.........F.. ....-.ys..z.......o...#....\|..oj.z}.......1fr.zL.................!......xn.u.d-.AX.4..}.D....G.~....CF.....8.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	585
Entropy (8bit):	5.125561689392954
Encrypted:	false
SSDEEP:	6:6v/lhPk0a1lmm8XDd4333333334+o73g+33333333ITp:6v/7Gmm+u33333333roB33333333I9
MD5:	F64FB7B06291A6CDF9F52358A5A2E244
SHA1:	891A8E45E09EA650A9BCC9D50E47EF14939A0D2A
SHA-256:	40F4B93F53CCFD5510F40DCB543126FA6B766EF2DF53DF11A0C52584BEA2A57F
SHA-512:	68635F77951F2C4AF978FAE7BD0FBE42F044CC2D7B255A8A8DCDAE5B99E8C54C28C2E475D6F3E0C7A2251962AA0524FB3282EE18305EAE745ACDCB63B9EA15DD
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/yemlaspa/poland-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx......P.D.(..B/b9.d...4!.\|....L.{x..1..~=.F..@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@._...<...~=..^,..m..q1.$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@...i...$...s.....IEND.B`.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1191
Entropy (8bit):	4.96769440968878
Encrypted:	false
SSDEEP:	24:2dvAWKLfndSuIc+J6p+SV1Asy1n/jjKFloOFi0H8VXEG:cvAJfdShc+IgSV1Af1//y1wc8FEG
MD5:	CA255E7B606CEEDBEC3845245B490753
SHA1:	F906C26829C877D31247F4C125777E7D4D84B9A3
SHA-256:	7F5E14BB3B5567259C0EC040D8FEED3869C089E6D90A59386F47CB095870858C
SHA-512:	F7E57FD365BB1DC01AD30F490B79C490B9A38938A259C3CD2E92E73B5CCA9898ED44488CF2DA684E02D96A8566270ACD3F4D2A0C898AD6BA6624CC3F09B72E69
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"..width="31px" height="47px" viewBox="0 0 31 47" style="enable-background:new 0 0 31 47;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<path class="st0" d="M31,23C31,12.1,17.2,0.9,16.6,0.4c-0.6-0.5-1.5-0.5-2.2,0C13.8,0.9,0,12.1,0,23c0,8.2,6.4,14.9,14.5,15.4v7.4..c0,0.6,0.4,1,1,1c0.6,0,1-0.4,1-1v-7.4C24.6,37.9,31,31.2,31,23z M16.5,36.4v-6.6c2.8-0.3,5.3-1.8,6.9-4.1c0.3-0.5,0.2-1.1-0.3-1.4..c-0.5-0.3-1.1-0.2-1.4,0.3c-1.2,1.8-3.1,3-5.2,3.2v-6.5c2-0.3,3.7-1.4,4.9-3.1c0.3-0.5,0.2-1.1-0.3-1.4c-0.5-0.3-1.1-0.2-1.4,0.3..c-0.8,1.1-1.9,1.9-3.2,2.1v-5.1c0-0.6-0.4-1-1-1c-0.6,0-1,0.4-1,1v5.1c-1.3-0.3-2.5-1-3.2-2.1c-0.3-0.5-0.9-0.6-1.4-0.3..c-0.5,0.3-0.6,0.9-0.3,1.4c1.1,1.7,2.9,2.8,4.9,3.1v6.5c-2.1-0.3-4-1.5-5.2-3

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Macintosh), datetime=2017:04:18 11:58:03], baseline, precision 8, 783x367, components 4
Category:	dropped
Size (bytes):	780600
Entropy (8bit):	7.2892817022896415
Encrypted:	false
SSDEEP:	12288:A4E0p1RE70zxntT/ylTyaaSMn2fSFeJE6xkP4svMrIJTd:A4HyUt7yQaaPXT6xU4sEr4
MD5:	50A6C896056409ACD5F991DFFE14EAD2
SHA1:	4E0FF0E58858A862938D9EED341022FA44D89E53
SHA-256:	D720E0EADC2D7A19D018AA2600B7FE8AC70622FAF2D70408831B65731F0440CA
SHA-512:	885A6EE758C1814FEB76D49B52654BD75AE220C292CEB3F330ADABB83446755405F60AE6A96E9D104D647C7A3AD797CFAFE82687CEBAB3D4E8D9183B9E28076E
Malicious:	false
Reputation:	low
Preview:	....+.Exif..MM..............................b...........j.(...........1..... ...r.2...........i....................'.......'.Adobe Photoshop CS6 (Macintosh).2017:04:18 11:58:03........................................o..............................."............(.....................2..................H.......H..........ICC_PROFILE.......appl....mntrRGB XYZ ...........acspAPPL...................................-appl................................................desc...P...bdscm........cprt...d...#wtpt........rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt........ndin.......>chad...X...,mmod.......(bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc......."....hrHR........koKR........nbNO........id..........huHU........csCZ........daDK........ukUA........ar..........itIT........roRO........esES........heIL........nlNL........fiFI........zhTW........viVN........skSK..

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7063
Entropy (8bit):	7.9094571145228185
Encrypted:	false
SSDEEP:	192:qWD1ojkboLqEtPzHvcFiP2NKb8NC1QJPw88gCxzbY:qW+j1qYvcM0u8g1Aw82o
MD5:	9855E90B6942D02AC6FC56FA19C2F99A
SHA1:	98D72124B87A31978243896DB1373DD26B3C0E5F
SHA-256:	F838663FAF0FCEF50D2D9C6774DBAF2C30A74E01590674BE2E9C608570FDB352
SHA-512:	16F45DBDB68C920C036AC7A1B67A9DD638B6C6ACAFB2D615073768ABCB64332FB516B7B152F0FEE5039F42A510F9767CFA85C13897D3CC8D7F9F525D91EDE20A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........IIDATx....\|.......M..NH.....1..G....Q....j...Uk..g...w.Zm.?.V@...[.`.FE.FH .B8r.s.s....1...1..\|<...vfd.~g..(.3JC.!z..IN...................................................................................................................................................e.e...!D...J.e.593B..v.@.\b.!.I@.!.I@.!.I@.!.I@.!.I@.!.I@.!.I@..-.Q........`Y...d8..q.......J.}a..8(R.8....(...>.q0$ ....f]m..Jllh..'.Y..%...P,i`IE...3.@.......bb..-...P....-.@..F.{.eG".......1..g...\|7....Q'w.v"'^0.k.d~4..N.x.k..B0l......A....:.!....qDv..K...3...X..{W....yORYY..G..e..FY.>.......W).0.....M.l.S.&......5...%L..(.L.M/J.B.I._P.?"..~...shi.cw...Y...\|.v.(.{.=...x...n...f...&'...m...n..VG....2....4..].6D.u....k.zX..W$...0....j.k7>F:+..t..=@/QT.o.dz.[8t.UV....2.......u,. .!V..Y..&..s.1)l..`H..T..Rh.>...P0.$n..V..D..>.g@..wD.D........,..@2R.t...Pq:.Vn.....;...Dqa.1.L0.B..+..]Xts....

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.456931454100675
Encrypted:	false
SSDEEP:	24:X2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaalaaaaaaMHaaaf2aaKDBIEqqHyFHiEt:XA/GH10DLcrEwR
MD5:	993A8BCC8FDE9A35C3E3FAA4A9C1A770
SHA1:	ECAF93A38BED1D78F1CF152CAABB4A3242D11DE7
SHA-256:	6BD44E96452CB23BAFCB98E7E517BF64C505592C8FD420D8FDE03E841E593033
SHA-512:	D92FC5CC92BA8CDC6B143C28B6A6B2B2BD77CCADBD0A7343D72C519D08963E59F48ADE321EA9115071FE59D1B2142D7A9A123654B1D290A2182CBFA68E9A8618
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/favicon.ico
Preview:	............ .h.......(....... ..... .....................................................................................................................................................................................................................................................................................................................................................................................+...M...i.......................................................P.......l....x......................................l........................w..5.......................................b...F...]..._...?...L...'...............................................v...L...z.......!\|............................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2207190
Entropy (8bit):	5.572659577947271
Encrypted:	false
SSDEEP:	49152:wTQs1cpWJ47uzOr/D06IGUsgBhmpSIFOvo0Glr+jkU1EALhJ4S0+AMF2Iqj7Husn:OQs1cpWJ47uzOr/kBED
MD5:	240AD0F858BCD8BC369C1F48932F4141
SHA1:	DD840CEAB62B99BBBEB3812BD79CB3A90327D33F
SHA-256:	622CF3598E96BA1003889F12D0A72D646544751ECDA04BBBD5E37D4E11D10506
SHA-512:	6052E1AC8AD907B537A582F36B087E938484F2DD8BA3F0CE5F0C3A258D41E6D5DA8D927829D2E25989882DB59C562E72B8DEF60B0682A6CEA5535F3C53E035E9
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/main.8629d25c67ff3df4.js
Preview:	(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[179],{80139:(Ye,ke,S)=>{"use strict";S.d(ke,{n:()=>e});var n=S(56223);class e{constructor(){this.totalRecords=0,this.currentPageNumber=1}applyFilters(){this.form.controls.CurrentPageNumber.setValue(1),this.searchList(),this.scrollToTopOfList()}changePage(c){this.form.controls.CurrentPageNumber.setValue(c),this.searchList(),this.scrollToTopOfList()}changePageSize(c){this.form.controls.PageSize.setValue(c),this.searchList(),this.scrollToTopOfList()}resetFilters(){this.form.reset(),this.buildSearch()}refreshSearch(c=1){this.form.controls.CurrentPageNumber.setValue(c),this.buildSearch()}scrollToTopOfList(){const c=document.querySelector(".list");c&&window.scroll({top:this.getTopOffset(c),left:0})}getTopOffset(c){return c.getBoundingClientRect().top+window.scrollY-80}hasBusinessIdValue(){this.form.get("BusinessIdValue").valueChanges.subscribe(c=>{c?this.form.get("BusinessIdType").setValidators(n.kI.required):this.form.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6180
Entropy (8bit):	7.905504126396578
Encrypted:	false
SSDEEP:	96:hxJLgww6LJhCWFge3zGM/bXlO7rQ5kEyoPQ8S5uD0zjaam0lzuE:PdFLG0g6zGMjXlerNEyV7b2amyzuE
MD5:	759C6C2696D50179AEECEDF5F9CBFB67
SHA1:	844341FD34362CCEC6ECDDB2EAA4DD9B01FF344F
SHA-256:	479EB45E759FC93A8D14B1B284B454657B6D72D32635E6F1C262E9552C314776
SHA-512:	869903E85F9932F8D4569864E7FDB68C27C5F443B4853818B9F767B281EC91D4D5B0E5C7BA0E7FB8B01269D2ED02A371F65D8BDAEC9C784E1CB3A0A2D79AC1FF
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/2cwb4kxf/united-kingdom-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..apV...i... l.....N..Z..../..lU......E..:....d7I..N-...J.q....ZP.-../A....\|.].0cgM....w..?....{.{.sn...7.~.z...y.....<....q%...gU..V.F$.KBX.T..{z}.t>.F..x}....>...{/..).n.".i..?ov..^8..zks...x}.?..n.@......b..g.k..v.O[.kf....R. Q...F....a..Y5........C.....;t...K+........5.....$............w..O.h..T..>...]."P...?..f54.Um....B.@.....:./]R..P.k].t..........Y5\|O.z}..{....cf....W..........$[$..8..X...X....C.d......._.S._..{#.P.a.D.......:.".F........?).....)......B&J"....O...[..X.........K...IH8H.H.H.q:.. .:.. ...V5>......V.B..L.c..H.. d..T.....$K$M$O$.8......-@N....c.j:.j.V.?...!..`_3.e....S..E...=U...m.c.a.......%......c5.U. .c...S.oy.7V...-.z...{.......'.{..?....Q...G*./.hT].n.r@....N..!..WM.......Y.O..Y/.LRT....h+@"1.....E.<...?....j:...$ L$.......2q.{.d...I....._..$t..w....n...Z.. .a......_F+.^2.P.$y....[........?. m.....B}.}:.@Wp.....f......pd.hE.....\...$X$

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	504368
Entropy (8bit):	1.0866248265596103
Encrypted:	false
SSDEEP:	768:KBkjf5WVwL7YZQVSCeCSbNvOme4tqbb4CKcFKnEsorT9FibV+WI+f:KB2kVO7wCBSbom5tCb6cmEv39Fib7
MD5:	B2380DEA46B9EE1E8866D6ED40687511
SHA1:	2DA1DCE88B430FD6B7985D11855E814054AED3C9
SHA-256:	CD9D2711EC2714E947C19B5B8DCCBE767148F2D74C6C9F456BA96FE29A5E6B6F
SHA-512:	05964CB4F8F249AB987AD47FA7BC125A18041E9867F8684046C561B20B18932E32FD30B67B1564982E3C8D2F0277CADD295330E7EB303A4209FF4D628B08DE68
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4:2f6d92bf02c6d0:15
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4533
Entropy (8bit):	4.663128189025364
Encrypted:	false
SSDEEP:	96:AYfkzR6Qz/GrjN0zVbU9Xys/4Y6GEDlO0ae:721iN0zVc/4rGEDlO0N
MD5:	E1367C73858CBE32FE2ABD67F540787F
SHA1:	6169275ACE7584617BABC7D1229B147EC974D879
SHA-256:	C58AFE4EFABCA4BFB363300F1B6AEEB69B398FAD438885511DDBFB85D417417F
SHA-512:	A989A6C6DE93A5919AD560B5B87F60D25BA1285A1345C5147E172AC12550A1FC87E9A1D4236C68977406035A1500A0F6FB599A5B68F346F2DFF0C20A6A702508
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/5f3fl3vq/icona_bancheassicurazioni.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="288px" height="401px" viewBox="0 0 288 401" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 27</title>. <g id="Nuove-pagine" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="A-chi-ci-rivolgiamo2" transform="translate(-923.000000, -1414.000000)" stroke="#0779B8">. <g id="Group-25" transform="translate(924.000000, 1415.000000)">. <path d="M201.392925,322.381795 C199.995638,314.397883 193.053003,308.287315 184.650917,308.287315 L151.538477,308.285905 C142.10644,308.285905 133.580025,305.666889 124.544992,302.895637 C115.014057,299.97356 105.153933,296.944353 93.7298093,296.944353 C74.6481596,296.944353 65.4647802,301.648151 52.7535702,308.163271 C47.4978514,310.856996 41.5978833,313.863649 34.0957687,317.023947 L34.0957687,308.285905 L0,308.285905 L0,399 L34.0957687,399 L34.0957687,386.543463 C50.9112429,381.848122 70.2

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 716x1000, components 3
Category:	downloaded
Size (bytes):	814048
Entropy (8bit):	7.924691723911
Encrypted:	false
SSDEEP:	24576:fLB+/btNKNq0OyGHwLXar8WPA7e7CsBK2ga6/AiuN2ZP:TsNKJrGQja4Wo77+RsIi8wP
MD5:	682E8C38242EB5CBE830C5281E5B9FE3
SHA1:	AEFD15A467C78C41F9C80336266845C2749F2091
SHA-256:	6609766F4EEBC2620FF23BAB4012775C785EBCDE626A6E0BD6396F20FC6695DF
SHA-512:	C7837AF0DFAF074863116B610CAE05D799BEFCCA228B174BA997D5D1780EA50DAE534667E1A53E426D9EB0B3FDD665EEFD62BB7228178FDDF21D61BF064A1646
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/ipddiko2/cribis_22-05_visualcard03-sostenibilit%C3%A0.jpg
Preview:	......JFIF.....H.H.....LExif..MM........i..........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~........................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................Z............?..Tn.....@.8f...Tw.pH...Zz........../.Y.d.[m.4..]j.[..E.ghn2.9.`0.<zg..c.I..;&..=...<..k.h._....[..........z..98.....h......t.}..........*..).6..p.X.......n.........k.....+zk.Wmuzmm{..`....N..a...@..2... .......-Wmw^...

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	746
Entropy (8bit):	6.177692401719901
Encrypted:	false
SSDEEP:	12:6v/7Sj98DxOI9p33D45QR33P433ygiw5J33CpY33Idp:T58D9NgQ9jVdp
MD5:	E7ACD6FEECD247219A87E1F81440E6EF
SHA1:	93969F6DEA652066F5B3F4648E1A23A8F742CF66
SHA-256:	C115794F7321408ED3D00BD55257B0A0B56B594EF03EF2B423651411BE0F881A
SHA-512:	74E3C7D45153AA8ECAE11FC1953D8C5E53F282C0F91DF8366A9A2142B745DD05D07E577CAC8BF9730367635604027CA2AFEE17A812A3F7824C3B8AD3F9E56454
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/eqlpzy03/switzeland-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx...!nTQ...;0..P.(R.5... .nev.mX..i. ..@...T &%....2m.\|...;G.yW......W-.X.P..H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H.....L.....'[....w........".......;:..`..3.. W. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.[...{q8..Le..r[.>.=.._1.. .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. y...mV........q...y.....z&...t._...,O....Vg....X/o>.\..+....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .fz.>}..L..z...A.....K..j..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.........c....1...P.....IEND.B`.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10977)
Category:	downloaded
Size (bytes):	12258
Entropy (8bit):	5.593084429374509
Encrypted:	false
SSDEEP:	192:wCszZEsQiWsrg6yWiRDWSdhgW9MwgWgPngWzO2gW9f/5o:e5rr9xmnsF95o
MD5:	E7BEC6138C1F7109698C37F8E3393B49
SHA1:	C1AD74259FD795B7B01A8EDD2D8200FCF6E4DA33
SHA-256:	D052D9E9D406D8A094D98064722077AE86484362E2D08777B5FA36CB43181185
SHA-512:	F5BD7DD91393C0E64FDA525CCDBDBFD2340973B45826D9D7B8BB8186FC2594F240CB9AE82FB72E60219433F1AEDB0CCF3D72759B31FB47A62F417ED30162B7EC
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en
Preview:	<!DOCTYPE html>.<html lang="en" class="h-100" data-critters-container>. <head>. <meta charset="utf-8">. <title>Synesgy</title>. <base href="/" id="baseHref">. <script>. const urls = ['http://localhost:4200/'];. const url = urls.find((url) => window.location.href.includes(url));. const lang = window.location.search.substring(1).split('&').find(singleSearch => singleSearch.includes("lang="));. if(lang){. document.documentElement.setAttribute("lang", lang.replace("lang=", ""));. }. if (!url) {. document.getElementById('baseHref').href = '/' + window.location.pathname.split('/')[1] + '/';. }. </script>. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="icon" id="app-logo" type="image/x-icon">. <link rel="preconnect" href="//app.usercentrics.eu">. <link rel="preconnect" href="//api.usercentrics.eu">. <style>@charset "UTF-8";:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f4

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26028)
Category:	downloaded
Size (bytes):	361069
Entropy (8bit):	5.293251897957818
Encrypted:	false
SSDEEP:	6144:B66EgFPI0DwqbMFS0srGu/B/QOuThBurbvpSdCmaU3:7PIC/AkTrGURqB
MD5:	F1002EED94722DD2F5EF94184E027A5E
SHA1:	4472CA168A6E6BA4AA19FF8E627C889665A54C3C
SHA-256:	3311C585E85479BAC42FE4A3106CD3AFBE811D949A6D26D0666FFACFB210D5BC
SHA-512:	67713807584108AF9F482DC4FEEDFFC6DB07EEE8B3D71D6D88598AC34F40A9E3A63B759A31A30E18A2A31425BEDA851B314863A6C59C7A02C7670772B83BD386
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/scripts/lottie-player.js
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";function _typeof(t){return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}var REACT_ELEMENT_TYPE;function _jsx(t,e,r,i){REACT_ELEMENT_TYPE\|\|(REACT_ELEMENT_TYPE="function"==typeof Symbol&&Symbol.for&&Symbol.for("react.element")\|\|60103);var a=t&&t.defaultProps,s=arguments.length-3;if(e\|\|0===s\|\|(e={children:void 0}),1===s)e.children=i;else if(s>1){for(var n=new Array(s),o=0;o<s;o++)n[o]=arguments[o+3];e.children=n}if(e&&a)for(var h in a)void 0===e[h]&&(e[h]=a[h]);else e\|\|(e=a\|\|{});return{$$typeof:REACT_ELEMENT_TYPE,type:t,key:void 0===r?null:""+r,ref:null,props:e,_owner:null}

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAksbcLuKOJlXRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1696
Entropy (8bit):	7.571105314075939
Encrypted:	false
SSDEEP:	48:44vvMqO9BhjjIwOg6qFwhSJWpVcbaRCFDrb7KXqWCM:4i0qO3hAwOg6qqS78CFDrboH
MD5:	D54616D04C458E55AB57EC426B1D2E03
SHA1:	C8AA8367C3D9DDE9501E9F311F254C393C8CA06E
SHA-256:	C5127FC4B90C2B75C1B6514DB64C57E395CA8321B662A34B7ED7AC373682EEE2
SHA-512:	824050A044427D0FA2C983F19EE59723DC8AADDDA703B254950BABB03D937BDDD06C446D016B18A3CBE6CDE69DCEE75B6AE287999C4AFD8A1B41EFF661E53EB4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........RIDATx...M..c...g44.N..b...j.2&...cK>.,P...-.ZX...,,\|..EivhH..#e..\.$..k........}>~...s.t.s..\|.....W..j8.^.G.b8......=.....SA(..........D"...@$B..Z7..P@{..D"........o.@$B...9..P@}:.D".P.......on.H...5.@$B...-..P@9z.D".........k.@$B...&..P@>..D".0.l.....'.@$B..+&..P@...D".0...".........t..@$B.....P...D".0......L..@$B..k...P....D".0Z.H.....U...#.#............................DG....D.R(.......U.n.G .(F..PP,..PP*..PP....PP....P.;..P.+..P....P......n...?l.......D.....DA....D.....D...y......".....&....."....f%.....%....&%.....%.....#...#....[6/..y.....B.j...\...a..fp$u8.......Ww?.N......y.......].=.....FF..;..#.M.l]..p...Q}.(.:.g..+N/.Q..F..)..P.+.@..c[......O..n.q..q.p..........o<.<...B... ...p...,....b8..a....D8..q..}.?.....o.~..FQ....G.._.j........E.._..#..f.......a.Q."v1&}...Z.O(.SD .(b..0,..G........F.\|..G.vL.ge(.._.l...2.;.J....a....?~..w,=>.x0........R..v1..)...7x...h\......

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37973), with no line terminators
Category:	downloaded
Size (bytes):	37973
Entropy (8bit):	5.376441200223522
Encrypted:	false
SSDEEP:	768:bMLcORN9Ltqgup998cUfyXI6oxyTKlcWyyYyGVUj9bpmBQjix90ix974icz063:ub6zhBQjix90ix9l63
MD5:	7EF65F8759BA02FE2A6AEEDCB8E69B26
SHA1:	7D429CD479E44FCE0B0F860978E2E823370E2B5F
SHA-256:	B9807EDFC8396CB89AA2B5428BF0EB07CDD5977BDF8E8BB25C89948E8EB47159
SHA-512:	7F53ECFC9876E010DD0A46B8227486EC22FD9836581928BE2A089B6F95FF085A3D21F219B95FE2C7DD8B162013E7D036332CC30C26816F9B4CFCED93AC9964D6
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/652.300c955acbc570b5.js
Preview:	"use strict";(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[652],{60652:(ee,C,p)=>{p.d(C,{W:()=>te});var t=p(65879),r=p(56223),s=p(51716),T=p(78645),c=p(96814),b=p(43735),m=p(89515);function y(n,l){1&n&&(t.TgZ(0,"b",9),t._uU(1,"*"),t.qZA())}const v=function(n){return{"is-invalid":n}};function w(n,l){if(1&n){const e=t.EpF();t.TgZ(0,"input",10),t.NdJ("keyup",function(o){t.CHM(e);const a=t.oxw(2);return t.KtG(a.onTileChanges(o))}),t.qZA()}if(2&n){const e=t.oxw(2);let i;t.Q6J("type",e.type)("mask",e.mask)("readonly",e.tile.behaviour===e.TileBehaviour.Disabled)("id",e.tile.name)("formControlName",e.tile.name)("ngClass",t.VKq(6,v,e.submitted&&(null==e.form\|\|null==(i=e.form.get(e.tile.name))?null:i.errors)))}}function Z(n,l){if(1&n&&(t.TgZ(0,"p"),t._uU(1),t.ALo(2,"translate"),t.qZA()),2&n){const e=t.oxw(2);t.xp6(1),t.hij(" ",t.lcZ(2,1,e.tile.translationToken\|\|e.controlValue)," ")}}function k(n,l){if(1&n&&(t.TgZ(0,"small",11),t._uU(1),t.ALo(2,"translate"),t.qZA()),2&n

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	106131
Entropy (8bit):	7.879736241945392
Encrypted:	false
SSDEEP:	1536:1ewNzh1LHVbCEUGK3NDjcfUfofd2G6dqJ/3Ce/kOEgh+RHDXqzdL4ugHr3flgkH8:LHh0GcDjEUgnhJ3C2auXzt4XDH8
MD5:	06A22E86C5B9FBA9370C370B50D12E4A
SHA1:	97065D9BE7C924F9B61B5EB4A6AEAEF74D789B22
SHA-256:	5FFC984BF8B3A423531D50850BFC461E4E8FF6DB406AAE072ADF8ECFA10F10C6
SHA-512:	8C97EF4CF2AABA6663D7999B30D0D5B60FE479555153BF1E5931A3BE6DE7B31B8FC6398F3319AB9E01A9228935368B7D400AE28F6B5EAC7C9A37EECD57BF6800
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4:2f6d92bf02c6d0:0
Preview:	... ftypisom....isomiso2avc1mp41....free.V.)mdat..Lavc60.3.100.B4..0.......W.}..R.j.!(.T.......9q+.....Z....v.y..a9.s......j....u.J.C..3.!`9..7.....<.b....q...S....c&. .S...w.K..a(v.`....p9XJ.....a..Z.j...V.J.]fqP...!i,.4K........TP=m.n.w.g...+...5.....n.$.I_.N_......4.f...Vj...x\|.`$.3.s<.!.{.. .$..#...."K...a..G....U....Q.E...H..,. .#..x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=0 ref=1 deblock=0:0:0 analyse=0:0 me=dia subme=0 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=0 8x8dct=0 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=0 threads=12 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=0 weightp=0 keyint=250 keyint_min=25 scenecut=0 intra_refresh=0 rc=crf mbtree=0 crf=32.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=0......e..:&(..R.9999999999999999999999999999999999999999999999999999999

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1893 x 1412, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	144983
Entropy (8bit):	7.846686670638701
Encrypted:	false
SSDEEP:	3072:zxzRy9QWGmNR6EHRKTQpgP2ee8xKlJoj1Z5VgJIC6pXaZ:1zk9QWGAR6ARKTj2h06Joj1TuJIZhO
MD5:	43928D18533CAEC139BEA47E3D751A52
SHA1:	F90DD9C1BDF68CB9101F404068D622A00E826F18
SHA-256:	E766AF3D615CC6F0853F9063BB917C0B32464C01F22E95E88A7B2A5A1C1B98A2
SHA-512:	3A3FC2592856E1AED9124ECBCE65AB2C820FBA8AC001BD80C63D6BE9F26AA6E9AFF3F5B370BE08ACC3D445B5306B638CA24D9799790B15D2F26BF8A9D787D290
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/global/assets/imgs/logos/Logo_Synesgy_Color_Pos.png
Preview:	.PNG........IHDR...e..........g......pHYs...#...#.x.?v.. .IDATx......g}...]]I..-...6....%H@2.].\.L...$@&.7/.f...m.......I.\|.2.3.A..1`....>.93..&X.$..../`.".Mo...S}.....z..........j..V...'..X.....h..w..v.0.m..>..._9...a.".....}C(......D....f..G...3....#..@..r..xy.e.......#......."..w...#l......Y..O.n...#i.{,^^.V.......B(.....s$.r.B...+zq.Q.cN.c.}J.........`"........T...l...m..}.................C.......P.....z....5.\|..\|.5..9Hh..$..?Bgk...Z.Z..............F.k..i9.6.Z...Q....n..da.a...H........B(......S`.....h..5T...f.JV..S%...m.}....=\k......T......@...=J.......S..J..E..E.....k.@.'.-.l............0..e.... .h0....m... \|..]...>....7.-.l...j....Q......B(........ak..e.o..$h]h..j.........,.-.k...G..6.i.U.........,....T..#.&t.[7..._}..!.B...Zk8Z.....u....V.k./.h.i.....{.......!...Q..+?f.l...6._}...k.u....k.?.V.r}B.&am...~H{.......]......`.V.fA..*?F.B...,\|..^...m..}Q5...n..............'.......,......a..A..J..g..:.-._}..a.Z{..j.Y...e.m.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1818
Entropy (8bit):	4.86494482264897
Encrypted:	false
SSDEEP:	48:cvAJfOyyVNiMTVVLaahx9wHvtPzWhUB7xxD9cQUwRb7A5d:zJfjoZ3aa/kNzeUBDSQUwRvA5d
MD5:	88CEA7DDD36BF43630B6C9DFE00859A1
SHA1:	5BA4389C9339E5EACD327D61C372FA9DF526547A
SHA-256:	C2597FFD1BC81917A7334A6971101BB23964C4346AB8E68AFDA2B20433212207
SHA-512:	85E7EA6ED9FCA9601FB6556337BB285090AA96855BA39939113EA3B2B0CE0767BA01702023768C3162771ADF288EB9E8118DEAC907D58CC32D53C347C491FFC5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="63px" height="72px" viewBox="0 0 63 72" style="enable-background:new 0 0 63 72;" xml:space="preserve">.<style type="text/css">...st0{fill:#1BA173;}.</style>.<g>..<path class="st0" d="M59.8,17H48.6V9.5c0-1.8-1.4-3.2-3.2-3.2h-4V3.1C41.5,1.4,40,0,38.3,0H24.7c-1.8,0-3.2,1.4-3.2,3.1v3.2h-4...c-1.8,0-3.2,1.4-3.2,3.2V17H3.2C1.4,17,0,18.5,0,20.3v50.3C0,71.3,0.6,72,1.4,72h12.9h0.1h34.1h0.1h12.9c0.8,0,1.4-0.6,1.4-1.4...V20.3C63,18.5,61.6,17,59.8,17z M2,70V20.3C2,19.6,2.5,19,3.2,19h11.2V70H2z M23.5,3.1c0-0.6,0.5-1.1,1.2-1.1h13.5...c0.7,0,1.2,0.5,1.2,1.1v3.2H23.5V3.1z M37.7,70H26.2V57.6h11.5V70z M46.6,70h-7V57.1c0-0.8-0.6-1.4-1.4-1.4H25.7...c-0.8,0-1.4,0.6-1.4,1.4V70h-7.9V9.5c0-0.7,0.5-1.2,1.2-1.2h27.9c0.7,0,1.2,0.5,1.2,1.2V70z M61

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17042), with no line terminators
Category:	downloaded
Size (bytes):	17042
Entropy (8bit):	5.531136625767756
Encrypted:	false
SSDEEP:	384:kEwsyBuJhxxE/zb3wwNzrsCpxtn8iqy0buhCYsNH:rwwJhXmvA4z5tDqy0buBe
MD5:	17FD211C2A919C7CAF8DF394B4B052E0
SHA1:	B3CA2562D778E462638FD3CF891A47C01860FC75
SHA-256:	D02AA6C3AE2F5437578C6644A1237636315CEACF8000379A2757F7CA85D49760
SHA-512:	E9AEBB85B5E3282D7C7D1E0699304BE5BA2216A41DE0DA3306DB25FBE234A11D47EC6C18481DA76DFFA4E0AC237402C148AA755CD64006095A9ED0855B4DE534
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/0Cqmw64vVDdXjGZEoSN2NjFc6s-AADeaJ1f3yoXUl2A.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var c=this\|\|self,L=function(f){return f},P=function(f,F){if(!(F=(f=null,c.trustedTypes),F)\|\|!F.createPolicy)return f;try{f=F.createPolicy("bg",{createHTML:L,createScript:L,createScriptURL:L})}catch(r){c.console&&c.console.error(r.message)}return f};(0,eval)(function(f,F){return(F=P())&&1===f.eval(F.createScript("1"))?function(r){return F.createScript(r)}:function(r){return""+r}}(c)(Array(7824Math.random()\|0).join("\n")+'(function(){var FF=function(F,f,c,L,Y){function a(){}return Y=(L=(F=fp(F,function(r){a&&(f&&X(f),c=r,a(),a=void 0)},!!(c=void 0,f)),F)[1],F[0]),{invoke:function(r,P,p,m){function M(){c(function(B){X(function(){r(B)})},p)}if(!P)return P=Y(p),r&&r(P),P;c?M():(m=a,a=function(){X((m(),M))})},pe:function(r){L&&L(r)}}},Y7=function(F,f,c,L,Y){if((Y=F[0],Y)==v)f.P_=25,f.K(F);else if(Y==d){L=F[1];try{c=f.v\|\|f.K(F)}catch(a){R(a,f),c=f.v}L(c)}else if(Y==rJ)f.K(F);else if(Y==V)f.K

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1224 x 1029, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	13997
Entropy (8bit):	6.642772734380257
Encrypted:	false
SSDEEP:	384:puWh7Q1xxxIxxxxxBBxxxxZxxxxxZrtxxxYxxxxxxxx+znEmGGSymbVq+1:puWFQI7fzzGGSvRv
MD5:	5B484213E8ECD001A658BD0AE2F54B98
SHA1:	C3BB9B9B2D5F003B3C4B27502F070B54D7A3EEC8
SHA-256:	EF458EDE0258105C95FD7E419906E55550BFED13C23EE2E9FA7D5931840269C9
SHA-512:	7A6D4F18FB94356C8F7CD06C083AE29A51819654F51B6B664046A5DBD8BCCB2CC7B8443194AE5AEFEEBD6E0E6B685AF518A010AC34439C2502DDB6B0E98F0ADD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............3.......tEXtSoftware.Adobe ImageReadyq.e<..6OIDATx...=R.@....0C.o.'.;J..k..q..`K......-...86.a.>..I....OL......Ey!E...2..tM.I..o......R...@d..........!2.."#..n{.aK..@d....G.....z7ML8.\|...f=-._..q.c...e'...oc..B"K9.c....N......._.D....^F.U..bd....k..@...W...;..J"Cd..D..........."..!2va.....1.............P.../?..X..."Cd 2D..@d..D.......!2....."Cd 2.G6...Xo.,.^.\|.s2.E.....d..D..@d......."..!2.."Cdp...\|.yCa.T.Y..Dew..@d......."...i...^A_..n..}..0K\|nF..z.[...D.;.KD..@d..........!2..`.>.`..m..........c.K'..q.....9...;5....y./....<...H..u.5..W.H...\|........!2.."..!2D..D.{@.......!2.'....]&S\|.L.....4.I.=..D...1.u2Ef...........pR.w.....)..&:......fD.....Y....!2.."Cd 2D."Cd..D......".]..X3.1D.5f5..`l/k.K\|&Cd 2D..@d..D.......!2.e@8.!2D."Cd 2D..@d..........E......"..!2D6......;Ttc.J..[n.p+\|.C..W.:........."..!2.."Cd 2D..@d....C.H...Q..D.r..@d......."3.........s....p...o.o.XTd..1~........."..!2.."Cd..@Q...w.8..q..CB..7....n.=..@G&q......l....

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34338), with no line terminators
Category:	downloaded
Size (bytes):	34338
Entropy (8bit):	5.420941269968398
Encrypted:	false
SSDEEP:	768:9OfPMe6PR5oCjxwxqjou5woBHbUXq00s/0RWzI9meOdXDqpQxkoqKahWDJ+vHbsB:uGgqpMkazZVtOTC
MD5:	685AF9EA2BF5AC7B852007F82336B87A
SHA1:	D115FEB29BCB07578FBD33D08E0CCC574102B6D3
SHA-256:	F82D9E84323B6F6A8FF83EE5FA50E0CA77351EEC37BCCC91C37E3D0F0271E6E9
SHA-512:	A2826CF7B5ABC9B0FDE487B2FCB6C8CDB7699F7CE24FF37B4C214FA0129E421D3757AA302013B06B5AFB5CA5840BE7B50E2DC062B87AA073F90B26DC566EBBDE
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/polyfills.f041c72229936a68.js
Preview:	"use strict";(self.webpackChunkesg_frontend=self.webpackChunkesg_frontend\|\|[]).push([[429],{1253:(Te,Re,Ce)=>{const ke=":";const Fe=function(s,...o){if(Fe.translate){const e=Fe.translate(s,o);s=e[0],o=e[1]}let a=Pe(s[0],s.raw[0]);for(let e=1;e<s.length;e++)a+=o[e-1]+Pe(s[e],s.raw[e]);return a},dt=":";function Pe(s,o){return o.charAt(0)===dt?s.substring(function ze(s,o){for(let a=1,e=1;a<s.length;a++,e++)if("\\"===o[e])e++;else if(s[a]===ke)return a;throw new Error(`Unterminated $localize metadata block in "${o}".`)}(s,o)+1):s}globalThis.$localize=Fe,Ce(48332)},48332:()=>{!function(e){const t=e.performance;function r(U){t&&t.mark&&t.mark(U)}function i(U,E){t&&t.measure&&t.measure(U,E)}r("Zone");const c=e.__Zone_symbol_prefix\|\|"__zone_symbol__";function u(U){return c+U}const T=!0===e[u("forceDuplicateZoneCheck")];if(e.Zone){if(T\|\|"function"!=typeof e.Zone.__symbol__)throw new Error("Zone already loaded.");return e.Zone}let g=(()=>{class E{static assertZonePatched(){if(e.Promise!==de.Zone

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.228069983123551
Encrypted:	false
SSDEEP:	3:A2S18tTNHRKBT+o/JhifFDAXJHFFF6NM+NZMBE+aZMnAV//07:lS18tKJa1UWNM+4u+NnAS7
MD5:	2302118415E6F76DAF177F954D0A3BC5
SHA1:	14A68A1EFDB15404DED1F57AB7BFC1CF5AEC72A4
SHA-256:	41B990E06233D99690ABB2EF56D55C3FF9B7FB98A143B2E542E9FCF286CE9D13
SHA-512:	93E74E963E4A079DA7FC6CE132EFA8EBC29E5ECAD4981E26AF72DCA68A228A4B706E79AA0A80B4EEDA4F8368979FEAEDB5E859FFD7E1E8EAB3C4057EB7A66374
Malicious:	false
Reputation:	low
Preview:	{. "version": "1.0.0",. "toggles": [. {. "name": "Footer",. "enabled": true,. "ForTenants": [. ],. "ForSurveys": [. ]. }. ].}

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7615
Entropy (8bit):	4.911604385766585
Encrypted:	false
SSDEEP:	192:/1Ys2TayIX/p8PXv3cp0zsrUy070bGBtA3d7MG:/18Tahvp8PXv3cp00Uy070bGBoMG
MD5:	C5DA3BEB358C4A98612325900D7557F7
SHA1:	022A386877937819DA6A2DFED01ED53662497142
SHA-256:	63A7A8F68273D4F97735123ACEE643F272BECB47E1D745B80E71D79AAC4ADF20
SHA-512:	A284C90727D665D1B6AF0923586BFAF7E888CD1A9DACEC9BC6C41DCB4D35BF7AD9B23B422FB3D28444F786B0DB386BA1D7CB09385BE2653F610F00D6BCB29879
Malicious:	false
Reputation:	low
URL:	"https://aggregator.service.usercentrics.eu/aggregate/en?templates=H1Vl5NidjWX@40.17.44,zqWojrT0P@15.7.10"
Preview:	{"templates":[{"adminSettingsId":[],"dataAttributes":[],"dataProcessors":["Matomo"],"dataProcessor":"Matomo","dataPurposes":[],"domAttributes":[],"domElements":[],"domKeys":[],"nameOfProcessingCompany":"InnoCraft","addressOfProcessingCompany":"150 Willis St, 6011 Wellington, New Zealand","descriptionOfService":"This is an open source web analytics service.","technologyUsed":["Cookies"],"languagesAvailable":["en","nl","de","zh","hr","cs","da","fi","fr","hu","it","no","pl","pt","ro","ru","sk","sl","es","sv","tr","zh_tw","bg","lt","lv","uk","bs","sr","el","et","is","ja","ko","th","sq","be","hi","ur","ar","zh_hk","vi","sr_latn","nb","nn","mk","ca","mn","pt_br","id","ka","kk","he","fa","cy","uz_latn","az_latn","af","hy","gl","ms"],"dataCollectedList":["Anonymised IP address","Browser information","Date and time of visit","Device information","Files clicked or downloaded","Geographic location","Links to outside domain clicked","Number of visits","Page title","Referrer URL","Screen resolution

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7615
Entropy (8bit):	4.911604385766585
Encrypted:	false
SSDEEP:	192:/1Ys2TayIX/p8PXv3cp0zsrUy070bGBtA3d7MG:/18Tahvp8PXv3cp00Uy070bGBoMG
MD5:	C5DA3BEB358C4A98612325900D7557F7
SHA1:	022A386877937819DA6A2DFED01ED53662497142
SHA-256:	63A7A8F68273D4F97735123ACEE643F272BECB47E1D745B80E71D79AAC4ADF20
SHA-512:	A284C90727D665D1B6AF0923586BFAF7E888CD1A9DACEC9BC6C41DCB4D35BF7AD9B23B422FB3D28444F786B0DB386BA1D7CB09385BE2653F610F00D6BCB29879
Malicious:	false
Reputation:	low
Preview:	{"templates":[{"adminSettingsId":[],"dataAttributes":[],"dataProcessors":["Matomo"],"dataProcessor":"Matomo","dataPurposes":[],"domAttributes":[],"domElements":[],"domKeys":[],"nameOfProcessingCompany":"InnoCraft","addressOfProcessingCompany":"150 Willis St, 6011 Wellington, New Zealand","descriptionOfService":"This is an open source web analytics service.","technologyUsed":["Cookies"],"languagesAvailable":["en","nl","de","zh","hr","cs","da","fi","fr","hu","it","no","pl","pt","ro","ru","sk","sl","es","sv","tr","zh_tw","bg","lt","lv","uk","bs","sr","el","et","is","ja","ko","th","sq","be","hi","ur","ar","zh_hk","vi","sr_latn","nb","nn","mk","ca","mn","pt_br","id","ka","kk","he","fa","cy","uz_latn","az_latn","af","hy","gl","ms"],"dataCollectedList":["Anonymised IP address","Browser information","Date and time of visit","Device information","Files clicked or downloaded","Geographic location","Links to outside domain clicked","Number of visits","Page title","Referrer URL","Screen resolution

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpx151jhu_", last modified: Thu Jan 11 12:39:50 2024, max compression, original size modulo 2^32 159653
Category:	downloaded
Size (bytes):	48576
Entropy (8bit):	7.995614636029558
Encrypted:	true
SSDEEP:	768:nqL5yNREugSmwz8snLKhFAyxHSG+dkJAkuRJPrp7dDb8rcvD7S6AGAX2ofjL:nqL8NWugSmvsLK5xHSG+dmHuRJl7dDbQ
MD5:	F36B35ADB97D85763D2F35BA47AF859F
SHA1:	E7403B5FF4CAD453ABF6B43F7A9339EFE65E2139
SHA-256:	B619DE1FE7BF9C28766C74F1F6BABB17B3A7F2F3C8FCA2D6109A57D4D6EE1F5F
SHA-512:	BDEB14205D539DB0FBC552F1E53E89D90B8501D003784CB1C58FD8F52C54DE43397EE4B0C7EEF25FFEB5EE1C003E636F682C3BBB31272697149CC7E1618B9166
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/VirtualServiceItem-b5710e81.js
Preview:	......e..tmpx151jhu_...b..(.+2W...)1....8N...m...r(......\|...x.e....S.K.@.."E.Nw.9...Xd..(...P(.b....bG...v.7f.K.u....6z..>....!....f.>.z..........;f.!........;.......1.=.^..U7e#.n.F....."..d#.....WWlD.o1....1.5....5..lj.^..6......Q{.l.........l......#...'.}.F.........=e.S.}..m.}.l..5.=..l\..oll..+6n..{6n...6n..G6...7l...Ol....l.../l...?.M....;.....i.`.h.1<,h..f.C.)4s...6M....)#.4x.......l...Ap...B.!..;......rh..aJ...g4..@.t..i.......7.Cx8.I...f...h.....#..4....L...k....7.!......@.....}x........4A..;.i.\(.3.8..E0Yx..-R......c.1s5.[J8...b9..\U6..QcM.......l+TU.a1........U_U..J`.z.cG..../B..9...KM[j.88I..9.N.\......v._0/....K.")..\....[.~.L...L...y.B...\|i......-p...n.s...h......c...a..q.2[Z..(..cE..2T...{...X\|.F..^....gY..--...]..R.tg..MG..?......<...8.X......[..-.....`.j.!@..:..@.>xN.}....*uw.(0Y.ju.?.!.'.[.37..@.C]rx..M.L..T..4cI3..f&I3.=.N....R@...3k....zxw.x...p....LQT.....F..,...Xp....%".....:. ....Q....yC.".t....v..O.....W...P.l

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	918
Entropy (8bit):	5.078585448130612
Encrypted:	false
SSDEEP:	24:Y6O3Xw+g/cTaajqxnHAJHHgidg+1Cf1Ca:jSwvkqOHTdhwD
MD5:	5C4BA76BFA669577C6B671B3D9412D26
SHA1:	84D433DB381363C4A22E0FFDC9BCC181A31CAD68
SHA-256:	4458412D207CE829ACE8781D19F318F682A9620AF7453D62CAEFDFDB2BAC06C1
SHA-512:	26DF0A988C9BAB75B27946CC69D9F14AF803CB52D39C6BC6E9FC8DE0A36E1E93591E899EE4AC343B9FA03294E0B0C63CEB64C1B3B6DF7B27F3B477E2E318199F
Malicious:	false
Reputation:	low
Preview:	{. "production": false,. "protocol": "https://",. "apiUrl": "api.synesgy.com/",. "apiProviderPath": "provider-api/",. "apiPortfolioPath": "portfolio-api/",. "apiSurveyPath": "survey-api/",. "apiReminderPath": "reminder-api/",. "apiSurveyCertificationPath": "surveycertification-api/",. "apiDataExportPath": "esg-data-export-engine/",. "apiPowerBIPath": "powerbi-api/",. "apiPaymentPath": "payment-api/",. "apiNotificationsHubPath": "notifications-hub/",. "partnerId": "a36dc9f5-6ef7-4c48-887d-1db93bafa934",. "domainCode": "TR",. "userCentricsId": "o_tc3l2da",. "staticFolder": "./assets",. "logoMain": "Logo_Main.png",. "logoFooter": "Logo_Footer.png",. "logoTab": "favicon.png",. "logoMainLink": "https://www.synesgy.com/",. "reCaptchaPublicKey": "6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9",. "Name": "esg-web-app-TR",. "Component": "web-app",. "Version": "4.3.0",. "ConfigVersion": "4.3.0".}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpaz81ptqh", last modified: Thu Jan 11 12:39:47 2024, max compression, original size modulo 2^32 4399
Category:	downloaded
Size (bytes):	1696
Entropy (8bit):	7.890069503155516
Encrypted:	false
SSDEEP:	48:XUc4MqpzPgSR1RR9iuLHGsbRZSGi0hDScRitYx:9rqpLgSnRRMkHGs3DvitE
MD5:	28599832C0333BA743B2AC6ED97A55ED
SHA1:	8E94D4AB0E449C2651228F91643208F6ED0FA17F
SHA-256:	40D3AEDD76E274594E69B43628DF15C955427D517AC7EF186F706EA08D0A00D7
SHA-512:	9B78CC51A7AA96B4736AAA42EAAA1D7A5FB6292F54E42DE5F916AC25DE30997ADAB7F94953B5361CA33987D5C6B04D7B3BFBE1F6AD9615E5DF8F65CE59A24ADE
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/DefaultTabs-738dacba.js
Preview:	......e..tmpaz81ptqh..X.o.:...?EA.Q......RyF4.#v....i.4j.b ..l.J.\|.woB ..vW.z......`...N...W...C....j.7....!...B.+...-...?......{"..K.].r.sX.$.o...G.c.....\|....z..7.%x.p.^......l&.e... ..cs..I(.?U.2(b.7.. ...`Q...5..<.L ....."..H...{_.&x.<Mw.H.P.{.y.>@....N..M.....B....i.lx.~k..?...8R.....i...e..B..>.Dh.V.."..5.\|(.P..;s.V..@M..x.........y...Vk....a;.3{...b..bk..MmZ.....[.c^3..\/>.?.!..Mn......o.....\|jY.NC.....r;L.V.R0...]P..1.&...l;..b...Q{...D.I`o2...i].33.\Q.s..Vf......6....,)t"..(..]z....y....~.{wd..e9...o.u.S.......z2m...5.@.:HL..hx....,\|j...y.].Z.K..T+>."5=.D3...'.eN.D....eZ..6.t..jn...Cw....D.u..v%..c.J).r3dC..4..,..]..L.1..S(>.V.(....vfaB!..MH..6._.F...B..+....Al._Wf....q.^..%2. ..EG../......^... _h..#sB.9.t\....j...Tg...@.D.^8.......6R.-.A..........9;..xX..b[>?.6M%.RH.M.m7.<k3.Y..\|....V.u..?.k./.2e~+....k... .B^m.@.y...w$?.wL.Q.aZ.M7.d..i%.[......2E...268H..(....D...,...c...a..H./=...G.4;j..I."I;.&.....s*HGS....P.9!.Y..&\

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 184 x 82, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6513
Entropy (8bit):	7.902108824767374
Encrypted:	false
SSDEEP:	96:x3f2aI3vW/VJ+j8gsba13Q7HVLdag2jiUMuXRvRuLESouwvPe+4N2TK+eDnYZKbR:Ye/VkJs37Vd4jUuuLESsvPDI+jiPbj
MD5:	15B95E28998D10E5E7A8518D84B8A988
SHA1:	03B81C4AA60F59A0B4C419B72057889EA61FF431
SHA-256:	AC872563D7CB4C74753A530C118854BB4E36C4B1551DE352DE0580449669B3BA
SHA-512:	8602C4E1234FBFB1B10B09261A760B855E807B125C1321F1B503B45FCF4209ABB9D9C9F40F52ACA7D8B1884886788DDE65C69BCCD59BE2D8336D29E5CD5229E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R........#....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:B025FA174E3E11E68A18C06F34FF1DD6" xmpMM:DocumentID="xmp.did:B025FA184E3E11E68A18C06F34FF1DD6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B025FA154E3E11E68A18C06F34FF1DD6" stRef:documentID="xmp.did:B025FA164E3E11E68A18C06F34FF1DD6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...u....IDATx..].....`E..*.....b.'.Q..._\.`........"1"...AV......."J... ....5...D........ \...........^..}gg...

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10977)
Category:	downloaded
Size (bytes):	12258
Entropy (8bit):	5.593084429374509
Encrypted:	false
SSDEEP:	192:wCszZEsQiWsrg6yWiRDWSdhgW9MwgWgPngWzO2gW9f/5o:e5rr9xmnsF95o
MD5:	E7BEC6138C1F7109698C37F8E3393B49
SHA1:	C1AD74259FD795B7B01A8EDD2D8200FCF6E4DA33
SHA-256:	D052D9E9D406D8A094D98064722077AE86484362E2D08777B5FA36CB43181185
SHA-512:	F5BD7DD91393C0E64FDA525CCDBDBFD2340973B45826D9D7B8BB8186FC2594F240CB9AE82FB72E60219433F1AEDB0CCF3D72759B31FB47A62F417ED30162B7EC
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/cookie-policy
Preview:	<!DOCTYPE html>.<html lang="en" class="h-100" data-critters-container>. <head>. <meta charset="utf-8">. <title>Synesgy</title>. <base href="/" id="baseHref">. <script>. const urls = ['http://localhost:4200/'];. const url = urls.find((url) => window.location.href.includes(url));. const lang = window.location.search.substring(1).split('&').find(singleSearch => singleSearch.includes("lang="));. if(lang){. document.documentElement.setAttribute("lang", lang.replace("lang=", ""));. }. if (!url) {. document.getElementById('baseHref').href = '/' + window.location.pathname.split('/')[1] + '/';. }. </script>. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="icon" id="app-logo" type="image/x-icon">. <link rel="preconnect" href="//app.usercentrics.eu">. <link rel="preconnect" href="//api.usercentrics.eu">. <style>@charset "UTF-8";:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f4

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.808422338341125
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtA1r1sLqo40RWUnYN:VKEctKonR3evtTA8612LrwUnG
MD5:	592337512AAB0D789B8E2E8B1F533CD1
SHA1:	0B948D718AF3CE5BA467D4E1DCAEBE5C307CA624
SHA-256:	5FD687C2312BA529D13BFF2FF2FAE6392F1D30668E061731D08D59A889A67487
SHA-512:	FFFBB532EC9AC5BB2A5FE9C4760D7EB87A848CE85CAFD52EF42E732D61218FEFF6AD834F9152716E77336B36219704D30B378A21D9F3D54D7B9971469ABA0163
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-LtGrwKHyZsog7+2ZMGnttLhLm1n43xtnbr1O6ZcI

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	327745
Entropy (8bit):	4.809543001253309
Encrypted:	false
SSDEEP:	3072:Nkg7225jNrER/9BboN2Aj11uBoJshLOw3/158cggzfeRul7x+5yivB:eoN2AVJ2LOw3/n86e+NivB
MD5:	C3D28EC4C6E0EA588DA3D134A637EFEC
SHA1:	063AB20C456844A2A545FD29803B6F86F80365C1
SHA-256:	96ED125371803E49E32AD2076D3A2863368116E251C3874116572B3CBB57F746
SHA-512:	2F89EB9628B5EF69B1CBE6A14E4933F2EAB64893809B9EA5633983D3495BF5936EB1A4FFE79F0A1A59B2F6EE687451D432F2AFF870073010E8E1CC67AC77117A
Malicious:	false
Reputation:	low
URL:	https://api.synesgy.com/surveycertification-api/api/Localization/Frontend/TR/ENG
Preview:	{"group":"Frontend","localization":{"account_activation":{"activation_toast":"Activation successfully completed","title1":"Activation in progress.","title2":"Loading.","pagination_model_plural":"users found","pagination_model_singular":"user found"},"admin":{"location":"Location","role":"Role","title":"Admin console","pagination_model_plural":"companies","pagination_model_singular":"company","settings_btn_toast":"Configuration successfully updated","send_test_toast":"Test email successfully sent"},"company_information":{"company_name":"COMPANY NAME","edit_btn":"Edit","macro_industry":"MACRO-INDUSTRY","save_toast":"Company information successfully updated","submit_btn":"Save and submit","surname":"SURNAME","title":"Company information","work_phone":"WORK PHONE","work_role":"WORK ROLE","business_id":"BUSINESS ID","company_type":"COMPANY TYPE","country_code":"COUNTRY","email":"EMAIL ADDRESS","name":"FIRST NAME","reference_number":"REFERENCE NUMBER","company_size":"COMPANY SIZE"},"comp

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5097
Entropy (8bit):	7.940530362039193
Encrypted:	false
SSDEEP:	96:oTvTvTvTvmpmHOuOKjYvBLNLPPsmJYEvkETnrxZEedbbl4zCPRU69T81TvTvY:ojjjjmpqOYMBLNLPvCIrjEedbblNPRUI
MD5:	35E0D236E4C6670AC17D6953E09C85DD
SHA1:	A392D4A1BB7F113B9D673D0394A0F6B2B7AF84C9
SHA-256:	BCBDF840DC247A18B4E150751FF4EF429651C20245E705BAED0447563C22C4B6
SHA-512:	3684475BCC87E9450519827A9B11FDA100186B10FF11A0EDAB27EC9759641549992971665FE134D8E90E0BFCEDD3F146FE8626CE2EE5C1B63B1CE54839827987
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx....xT...7.0..L.....A.A..f...5...E.r]-..[DT@W..v....]A...>.[Q`.iQk...`W..(Q..$...A.}..p..d..!d..y........;..\|'.@...:Z...BD:..".b@.........D.. "-...i1 .H..ADZ..".b@.........D.. "-...i1 .H..ADZ..".b@.........D.. "-...i1 .H..ADZ..".b@.........D.. "-...i1 .H..ADZ..".b@..V....p;..r..J....n.....G....Q....g...).<.3...c..r..h.c@..3.T..S.........F..[oHC.;..o.....[G..._..........K......;0gZ/.M.bPP+vRZ...d.@.z.....k..../{......p.r...m...o..i.:.7.SL,....*.....O....f...k..1s....1u\|F.7...=......Vv.T.......\...C.C.H....g....^...........VR.~..!6..g.v!.=..q...c(...R.).;b....%L6l.`Oi=6.....cW....._.<..............\|mH...+P.u.<.5..^.GV..]w...U.....pX..Y..h..qi...2.......a.E.zE\| ..f..R.u...T..b7.p...^.._p.......}..(-.....N.C....;.7t.x...0 ,Bj.2...#...w.....e..\..+..`..=..-..T.........F.. ....-.ys..z.......o...#....\|..oj.z}.......1fr.zL.................!......xn.u.d-.AX.4..}.D....G.~....CF.....8.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6180
Entropy (8bit):	7.905504126396578
Encrypted:	false
SSDEEP:	96:hxJLgww6LJhCWFge3zGM/bXlO7rQ5kEyoPQ8S5uD0zjaam0lzuE:PdFLG0g6zGMjXlerNEyV7b2amyzuE
MD5:	759C6C2696D50179AEECEDF5F9CBFB67
SHA1:	844341FD34362CCEC6ECDDB2EAA4DD9B01FF344F
SHA-256:	479EB45E759FC93A8D14B1B284B454657B6D72D32635E6F1C262E9552C314776
SHA-512:	869903E85F9932F8D4569864E7FDB68C27C5F443B4853818B9F767B281EC91D4D5B0E5C7BA0E7FB8B01269D2ED02A371F65D8BDAEC9C784E1CB3A0A2D79AC1FF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..apV...i... l.....N..Z..../..lU......E..:....d7I..N-...J.q....ZP.-../A....\|.].0cgM....w..?....{.{.sn...7.~.z...y.....<....q%...gU..V.F$.KBX.T..{z}.t>.F..x}....>...{/..).n.".i..?ov..^8..zks...x}.?..n.@......b..g.k..v.O[.kf....R. Q...F....a..Y5........C.....;t...K+........5.....$............w..O.h..T..>...]."P...?..f54.Um....B.@.....:./]R..P.k].t..........Y5\|O.z}..{....cf....W..........$[$..8..X...X....C.d......._.S._..{#.P.a.D.......:.".F........?).....)......B&J"....O...[..X.........K...IH8H.H.H.q:.. .:.. ...V5>......V.B..L.c..H.. d..T.....$K$M$O$.8......-@N....c.j:.j.V.?...!..`_3.e....S..E...=U...m.c.a.......%......c5.U. .c...S.oy.7V...-.z...{.......'.{..?....Q...G*./.hT].n.r@....N..!..WM.......Y.O..Y/.LRT....h+@"1.....E.<...?....j:...$ L$.......2q.{.d...I....._..$t..w....n...Z.. .a......_F+.^2.P.$y....[........?. m.....B}.}:.@Wp.....f......pd.hE.....\...$X$

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3868
Entropy (8bit):	7.840747944005885
Encrypted:	false
SSDEEP:	96:AmIVTc8SmVByyqSDcEPJbKffRiq8y1RBkg3:ALcRy9qSLKffRioT
MD5:	BFE75913A5D408770806A5098C6EAD43
SHA1:	C2D075A0E75B2EB91DFB7FB6E3949CD0AA5EB4E3
SHA-256:	793E7643608752727CB836F955164367F7F6FBC4641A3EF7118EDE8BB73D5D04
SHA-512:	E0E426A0275723BEC0CD05732C4C61FA44FCB2AF803186C970416CCCC92B99482001EF969B73B74F963B6F8F684A510ED6661930659C2FE51B22C07810A40461
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/xmkhy0e1/cyprus-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q..........IDATx..}l..... .T..E....-.DH.d..R..J.6..d..?S..i...%......)$K....u..]&..,.C.(.B5.`....J. .]...s=.......y..4...yn{...v~......P...R. ....A.....@.@..... ....... ....A . ....A.....@.@..... ....... ....A . ....A.....@.@..... ....... ....A . ....A.....@........;:........1...@.(..F+....3....k....rO..u..O.......08Zf,..`....-'..6.{...B.=..7....>.s...q...0.....1G....R....L.M..1..K....r...4.....K...z.C.e.-.......A...Wq9.....z-....@@.K....{.En..0r.....M.8.z...0..K....g.......4......).m.....@@fPfb(q.;y...h...@ ..z...v.3}.?;.P%..,y.q....R...G^X5.0....q....R..J..2Z...e.B.....> ....N..3..X...~......H...Y.'...t8r%&}........DQ.C.k..)...NH..q .PW......;......{wVl....!.....-...K.r....#.qH.."...*+...M..0..........N..j....D. ..W..~...y....X..h....Sj."A.m\.......i..A...A...$....8...M.B..U/L...X..... l.6oH.E.s..1.Q.6._.K....O..g......g....6....%>.2$.........M.m.G.EK..Y...A4Q.i.8$D.CA.S..\.H.....t.@@..zP.iH'.D.Q.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3049
Entropy (8bit):	4.636302392868559
Encrypted:	false
SSDEEP:	48:cFbqMmhdE+gcDHoyQqhIs9jdHwsK4KFMxNg05qnHkDwy2wukDE8/jXFmIM1rSTqa:OshnbMcIKhHlKTqwywjs/jXFmRPWd
MD5:	6AC2945803275A977FE0384BFEF7BB87
SHA1:	4F78483AE6B96F010CE817D8E5911BF3DA7E931D
SHA-256:	6288FEA0C7F88153C1EAA9B88DAFCA1C5E486531BA789583117134E81908F16B
SHA-512:	06535C9ED16C88EA442EB055BD0753297FC757203EEE4150BC9B7B064D512FEA0A5D8C9B7CCDED5CA4D5C486B1465F24BB3798B9B0409CC02570E18F2C73185D
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/img/bg-world-leaf.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="672px" height="672px" viewBox="0 0 672 672" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 13 Copy 2</title>. <g id="UI_aggiornata" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group-13-Copy-2" transform="translate(1.000000, 1.000000)" stroke="#48c0f0">. <path d="M453.308242,163 L433.020313,163 C425.442699,163 418.631482,167.620284 415.816862,174.664191 L402.51286,207.965363 C398.259897,218.608228 404.569179,230.529102 415.754795,232.979744 L460.599807,242.809331 C463.805721,243.51183 466.768762,245.054627 469.183992,247.28101 L479.705757,256.972799 C483.52155,260.485296 485.691209,265.437916 485.691209,270.628306 L485.691209,274.138101 C485.691209,284.386486 477.395772,292.692189 467.160056,292.692189 L436.884681,292.692189 C434.893128,292.692189 432.915069,292.370661 431.026062,

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	629
Entropy (8bit):	5.371516656999113
Encrypted:	false
SSDEEP:	6:6v/lhPk0LA4ZJ6lYj5ug8gX+33333333333333333RVeQhp:6v/7BAUmYV8gX+33333333333333333x
MD5:	82EF6A4E3A3C2B79607041665B3B2864
SHA1:	9EFD045A51A16C11EBDAA8A4976B91928A282830
SHA-256:	F48AF37B780A51D647B13BA11E3DA65B9FE9EA5C7A790F8A704A9FB79229742A
SHA-512:	B2300DC0CFA49889DD10F5D20102623ACB2A10BB905208C56C7D35FBFBA8252444816B5156FFD8FF5663BE019CF94764732A8C542B67AB9C3EEDC0DEE3CD7C1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........'IDATx...I...E..`.X.e....u..H.NH....&q..TB.......{.y...E<?>..m.......>...9.<lV......H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. ...{.q<..g.p.......of....bf..h..N`..s....IEND.B`.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 2880x1000, components 3
Category:	downloaded
Size (bytes):	4443719
Entropy (8bit):	7.985559198630412
Encrypted:	false
SSDEEP:	98304:e5o3f2qgWg5Vzbqu7xO9DrcXtaZfRJ9f+i5zzNs521CKSbpje:l3+ocVHDOtrAKP9Wi5I4CRp6
MD5:	C6168BD9BB580A0A5F6A2FC141B5FAEB
SHA1:	3900306E4FF17A31A7D6B0B873D54E8CC50E8407
SHA-256:	3FDF47F781BFC217BFD5755B64F112D3FC81AD2C4E710FA79960A1277CE550E6
SHA-512:	0C0B95B42C4002F4FC45759B3D56E4C0ABFF66C3978E483E64CE4B096C03C2D1F479B4FAD3E8C3FE44E29D74C4BFC0FF2F509E499C031D01836A3D049B09A969
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/0ptncnah/cribis_22-05_visualhero_achicirivolgiamo.jpg
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C.........................................................................@..............................................U..........................!..."1..A2Q..#BaRq.$b.%3..Cr...&4..S....'5.Tc.....6s..DU....................................Y........................!.1.."AQ.2a.qB....#R..b...$3r.....%C...4.S..5D.&cs..E...6T................?..4<.B.7v.....E=.C....O!ZRV......F.<k... !.~9..P..e..h..+..Z&..}.......+.r9....x.y.l..e....X?Q....(B..........M..G.\|l.(..R..,...J.^.....[.C......{.....p.6.........]...y`..p.T5.Q. .(........I.........kwr..I.\(Q....0jou.j.........@....vG....... ..@=M.....k=..........6....B......................:.u.gC]...m..J.=..........&u.....k..z ........B....= ...R{..I....{.......#....$.n.$.d.XY...8......P..6....{.....l{..v..... .z..Sc..TsW.%AL...`;....m..........T.........lv...@.TA>.@.O.<....

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46578), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	46623
Entropy (8bit):	5.075618225143871
Encrypted:	false
SSDEEP:	768:iA03KRPV+BPVMSErZ04gVH9HI2GdqVqypVR:qKRPV+BPVMPypVR
MD5:	6A55BD9EBF215712770B98706698342E
SHA1:	A39F1F635D931771DB4D78E10BFCCDA7BA7AC77A
SHA-256:	6EA4DDD06E6303BAEB93B05D42BE41D59568CE2B95852EDAFF9370B5FD49ED32
SHA-512:	8F11F24E395637BF633BF79399190BABA862E8351FD928316C4EAD117F614C690273F23B6BD16181FEBF8AFCF4223214467141184CC7822E69A1575F2B5BCEFF
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/assets/css/custom.min.css?v=5
Preview:	@font-face{font-family:'DM Sans';src:url("../webfonts/subset-DMSans-Regular.woff2") format("woff2"),url("../webfonts/subset-DMSans-Regular.woff") format("woff");font-weight:normal;font-style:normal}@font-face{font-family:'DM Sans';src:url("../webfonts/subset-DMSans-Italic.woff2") format("woff2"),url("../webfonts/subset-DMSans-Italic.woff") format("woff");font-weight:normal;font-style:italic}@font-face{font-family:'DM Sans';src:url("../webfonts/subset-DMSans-Bold.woff2") format("woff2"),url("../webfonts/subset-DMSans-Bold.woff") format("woff");font-weight:bold;font-style:normal}@font-face{font-family:'DM Sans';src:url("../webfonts/subset-DMSans-BoldItalic.woff2") format("woff2"),url("../webfonts/subset-DMSans-BoldItalic.woff") format("woff");font-weight:bold;font-style:italic}*{-webkit-box-sizing:border-box;box-sizing:border-box;margin:0;padding:0;border:0;font-size:100%;font:inherit;vertical-align:baseline}html{scroll-behavior:smooth}body{background-color:#fff;font-family:'DM Sans', sa

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2, software=paint.net 4.2.12], baseline, precision 8, 1731x1287, components 3
Category:	dropped
Size (bytes):	118073
Entropy (8bit):	7.275083999134084
Encrypted:	false
SSDEEP:	1536:hiJxZ7Kvjk2dibgBeWE1fZ54TEe/Tz4KDjRDf5f6yDyjQxPhF+2eI2R+envc0me3:AJz7KQ2d9BG1fg/EKDjrfldxPpeI27B3
MD5:	069FB8965BC81B4750592563E7355523
SHA1:	97B9AF69A09E354A36480B28B915741005A1E053
SHA-256:	6384C317F5210B060FEF046E216BF1F7CC96E3B8F58E737B2FA05D990E98DB21
SHA-512:	2EF0E2A5003EF437E1BF8FB4143A81607602AC09082683A7A1B76E61EB303F7C3758FC7A366143444ECA4EAAE9814FFFED2C034AC80745F3C249BC596D8CBE3D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....tExif..MM..............................J...........R.(...........1.........Z.......`.......`....paint.net 4.2.12.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	918
Entropy (8bit):	5.078585448130612
Encrypted:	false
SSDEEP:	24:Y6O3Xw+g/cTaajqxnHAJHHgidg+1Cf1Ca:jSwvkqOHTdhwD
MD5:	5C4BA76BFA669577C6B671B3D9412D26
SHA1:	84D433DB381363C4A22E0FFDC9BCC181A31CAD68
SHA-256:	4458412D207CE829ACE8781D19F318F682A9620AF7453D62CAEFDFDB2BAC06C1
SHA-512:	26DF0A988C9BAB75B27946CC69D9F14AF803CB52D39C6BC6E9FC8DE0A36E1E93591E899EE4AC343B9FA03294E0B0C63CEB64C1B3B6DF7B27F3B477E2E318199F
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/config.json
Preview:	{. "production": false,. "protocol": "https://",. "apiUrl": "api.synesgy.com/",. "apiProviderPath": "provider-api/",. "apiPortfolioPath": "portfolio-api/",. "apiSurveyPath": "survey-api/",. "apiReminderPath": "reminder-api/",. "apiSurveyCertificationPath": "surveycertification-api/",. "apiDataExportPath": "esg-data-export-engine/",. "apiPowerBIPath": "powerbi-api/",. "apiPaymentPath": "payment-api/",. "apiNotificationsHubPath": "notifications-hub/",. "partnerId": "a36dc9f5-6ef7-4c48-887d-1db93bafa934",. "domainCode": "TR",. "userCentricsId": "o_tc3l2da",. "staticFolder": "./assets",. "logoMain": "Logo_Main.png",. "logoFooter": "Logo_Footer.png",. "logoTab": "favicon.png",. "logoMainLink": "https://www.synesgy.com/",. "reCaptchaPublicKey": "6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9",. "Name": "esg-web-app-TR",. "Component": "web-app",. "Version": "4.3.0",. "ConfigVersion": "4.3.0".}

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	622
Entropy (8bit):	5.343764964211959
Encrypted:	false
SSDEEP:	6:6v/lhPk0T2bGhcz0maR33333333333333333SETSd/bp:6v/79hC0mk33333333333333333a1
MD5:	223B200F3772D16BA770A04301E895D0
SHA1:	919009BFBFB1487ABD8FC673254CD769C7F158B3
SHA-256:	BA62CFEDD5C0FDA616EA73A132A1CFF69B670E31FCF84430A9302A0A84F40DA1
SHA-512:	F457E6F18FAB15AAC518CECF82F861960BA4F0ED4B76245DD7B3FFAF3334AD70D0AA4F372BD00DF60ED8D27DAF0854610BF9BBCF0289294D1151EC6017401463
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q......... IDATx...IDQ.E.;b...4..##;.,D.,Q,@..LL....H..V....pu..3,...~\|......o...~...swq..... .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .t93..Y..{.ff?.m..v3.~..23.....c.......IEND.B`.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	327745
Entropy (8bit):	4.809543001253309
Encrypted:	false
SSDEEP:	3072:Nkg7225jNrER/9BboN2Aj11uBoJshLOw3/158cggzfeRul7x+5yivB:eoN2AVJ2LOw3/n86e+NivB
MD5:	C3D28EC4C6E0EA588DA3D134A637EFEC
SHA1:	063AB20C456844A2A545FD29803B6F86F80365C1
SHA-256:	96ED125371803E49E32AD2076D3A2863368116E251C3874116572B3CBB57F746
SHA-512:	2F89EB9628B5EF69B1CBE6A14E4933F2EAB64893809B9EA5633983D3495BF5936EB1A4FFE79F0A1A59B2F6EE687451D432F2AFF870073010E8E1CC67AC77117A
Malicious:	false
Reputation:	low
Preview:	{"group":"Frontend","localization":{"account_activation":{"activation_toast":"Activation successfully completed","title1":"Activation in progress.","title2":"Loading.","pagination_model_plural":"users found","pagination_model_singular":"user found"},"admin":{"location":"Location","role":"Role","title":"Admin console","pagination_model_plural":"companies","pagination_model_singular":"company","settings_btn_toast":"Configuration successfully updated","send_test_toast":"Test email successfully sent"},"company_information":{"company_name":"COMPANY NAME","edit_btn":"Edit","macro_industry":"MACRO-INDUSTRY","save_toast":"Company information successfully updated","submit_btn":"Save and submit","surname":"SURNAME","title":"Company information","work_phone":"WORK PHONE","work_role":"WORK ROLE","business_id":"BUSINESS ID","company_type":"COMPANY TYPE","country_code":"COUNTRY","email":"EMAIL ADDRESS","name":"FIRST NAME","reference_number":"REFERENCE NUMBER","company_size":"COMPANY SIZE"},"comp

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7049
Entropy (8bit):	5.327039520464767
Encrypted:	false
SSDEEP:	192:7lRe1rjU7t+K4K8caBIsKcML42CRNcookG2SXTS785:vroKlX3eSXTS7Y
MD5:	C8252F21AC52425F3868EF4265AD425D
SHA1:	B8448EEA67B66E875ABEDA0EADD20E2627526DB6
SHA-256:	CA61F2ECDD14C962119C00D8EB5F4912E6B400B4817E41FD27A3765FEC580C00
SHA-512:	9AACD8A2F6F92FB553A045E6F3670CC388924460F1893E2FF80AFE8AF2571F471FDF7D0AF27C3E6F2584193C3B9DAC01C50B7CB6B020879D0359FE4086EA6B28
Malicious:	false
Reputation:	low
URL:	https://api.usercentrics.eu/translations/translations-en.json
Preview:	{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur immediately after selection.","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all subservices.","THIRD_COUNTRY_TRANSFER":"Data Transfer to Third Countries","VENDORS_OUTSIDE_EU":"This vendor is transferring data outside the EU / EEA."},"labelsAria":{"acceptAllButton":"Accept All","ccpaButton":"Agree to CCPA","ccpaMoreInformation":"More Information","closeButton":"Close Layer","collapse":"Collapse","cookiePolicyButton":"Open Cookie Policy","copyControllerId":"Copy Controller ID","denyAllButton":"Deny all","expand":"Expand","fullscreenButton":"Enter full screen","imprintButton":"Op

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	69485
Entropy (8bit):	3.453052036862988
Encrypted:	false
SSDEEP:	384:thPyrOZZZxjME7Mh4yysMVz56qxc+berbzhdwtBiz8N:thpZZDKhEVzo+SdwtBiz8N
MD5:	19B228A4B5C7E5B33F9D4C611574252F
SHA1:	D9F948D5188A35FF9C387B76B10CEB8D647BC744
SHA-256:	12C24ADED1A467C47FA26129659CBDBB608704CA6FEB68F9DB69F58A1505EB9F
SHA-512:	6F2B9F081EC8B8F13F6D55F8BC00F15E02BACCDE257BC67F545716ACA7FB217C8074EF83798A8303E42606DB884A634A8F089BA005259E425357621BD2D2FDC3
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/en/
Preview:	........<!doctype html>..<html lang="en">....<head>.. <title> Synesgy \| The ESG platform for companies </title>.. <meta name="description" content="Synesgy is the partner that supports, through its services, firm's transformation process toward an environmental, social and governmental sustainability.">.... .... <link rel="alternate" hreflang="x-default" href="https://www.synesgy.com/">.. <link rel="alternate" hreflang="en-tr" href="https://www.synesgy.tr/en/" />.. <link rel="alternate" hreflang="en-gr" href="https://www.synesgy.gr/en/" />.. <link rel="alternate" hreflang="en-ro" href="https://www.synesgy.ro/en/" />.. <link rel="alternate" hreflang="en-bg" href="https://www.synesgy.bg/en/" />.. <link rel="alternate" hreflang="en-ch" href="https://www.synesgy.ch/en/" />.. <link rel="alternate" hreflang="en-ie" href="https://www.synesgy.ie/" />.. <link rel="alternate" hreflang="en-ae" href="https://www.synesgy.ae/" />..

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpq40frslm", last modified: Thu Jan 11 12:39:53 2024, max compression, original size modulo 2^32 5050
Category:	downloaded
Size (bytes):	2057
Entropy (8bit):	7.910596446126478
Encrypted:	false
SSDEEP:	48:XGA4R8ezyFE1yRlt1Ma1ZjO9nFpVpl4CN3yRz2e:2naxEoRtV1ZjOLxCl2e
MD5:	7CA81D69C21A5C1DF1CE4A01B83F377E
SHA1:	76EFA70B1C963E44BDBD23D4C0B118FD6B529567
SHA-256:	A90A6E1183CAC4B197D91F6535D7A56A35D2967CF8FE73FA09E6611DC0CFD9B9
SHA-512:	CF1748C922EC6309AE58B4C7F7234B1124A96B321E2907579D83E71C49D373D89402A6D392BB9ECA0B8CBCC3715F9A3E65F507793C7A1040C822674E541FC679
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.js
Preview:	......e..tmpq40frslm..X{O.....~..]U....TU../....H...R......x}.kH.....C..-:..`....y..a.,..Z....{...........`..J`CM.`#M3`.5.!.k....i..X....MC......>..}.......4._i:..B...kMg.~j:..?._jz.....\|s~.....i.)&..5...$.3.a...C6.....N...9wk....\)......-....C8.d...30.....W.\.&Wk.7<S9.G......g-......A]..x.>t....j.\|...._!.\|f...H.7........b.%-NR..`.0k.\.1[.<.y..I....e.OZJ.n...W_..3.b~..e-..g.ba{.EG.,.I..L.3.K....p.AY.....w.n....cxz....@."3:MD.Z..D.6.....{.{,W.9.s.(.+.H{..Z.".X:]8..G.X.......Hd..!.bp...@$...XDQ....5.e3d...J.....Z..[.6...-$y.......<t..8........^..TJ.&g1.....%=6....o.xNk........C....h....Z.A..H.nXx.a.Q.H7.......u{...>n.O...o..-....d.[..Z...PXsX..... t.....)...v...fLq....(.y....,t.K;$eq...A...1V.....T<....{l....`....mG..4..0g.......9q.2.&...V)...J/)....]>..).K.V+....r......g.^....r.3...G,I03.eQh.f....O..-..Zh..bkW.R...Y.+/....n..K..*.N=..3Rn.d.Ig...".$.Y..Sz@7..N.`.:.HFo'.,.3'`.;.JO...vs.>v.54..Lw..(..s..B&..S..$].....^..<.......N).1<.,.$....

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/scripts.a031a3392433bc9f.js
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3049
Entropy (8bit):	4.636302392868559
Encrypted:	false
SSDEEP:	48:cFbqMmhdE+gcDHoyQqhIs9jdHwsK4KFMxNg05qnHkDwy2wukDE8/jXFmIM1rSTqa:OshnbMcIKhHlKTqwywjs/jXFmRPWd
MD5:	6AC2945803275A977FE0384BFEF7BB87
SHA1:	4F78483AE6B96F010CE817D8E5911BF3DA7E931D
SHA-256:	6288FEA0C7F88153C1EAA9B88DAFCA1C5E486531BA789583117134E81908F16B
SHA-512:	06535C9ED16C88EA442EB055BD0753297FC757203EEE4150BC9B7B064D512FEA0A5D8C9B7CCDED5CA4D5C486B1465F24BB3798B9B0409CC02570E18F2C73185D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="672px" height="672px" viewBox="0 0 672 672" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Group 13 Copy 2</title>. <g id="UI_aggiornata" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group-13-Copy-2" transform="translate(1.000000, 1.000000)" stroke="#48c0f0">. <path d="M453.308242,163 L433.020313,163 C425.442699,163 418.631482,167.620284 415.816862,174.664191 L402.51286,207.965363 C398.259897,218.608228 404.569179,230.529102 415.754795,232.979744 L460.599807,242.809331 C463.805721,243.51183 466.768762,245.054627 469.183992,247.28101 L479.705757,256.972799 C483.52155,260.485296 485.691209,265.437916 485.691209,270.628306 L485.691209,274.138101 C485.691209,284.386486 477.395772,292.692189 467.160056,292.692189 L436.884681,292.692189 C434.893128,292.692189 432.915069,292.370661 431.026062,

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp8n4fltln", last modified: Thu Jan 11 12:39:54 2024, max compression, original size modulo 2^32 366430
Category:	downloaded
Size (bytes):	105636
Entropy (8bit):	7.997611180400407
Encrypted:	true
SSDEEP:	3072:iS43qkay3hl/Du5Q89eL/nUpRaMdhikujIhJU8qdouPUY:ijaShA5f9eL/nyRBDWwrqSq
MD5:	73B306E974DC041282AC795A04F209FE
SHA1:	B7FE745C8C84557B1617205E54947DABF0A4D201
SHA-256:	2E65D0AB822829BD0C604A86F08847BF032EB0DE851E5699C7CA8BDA5E1D0140
SHA-512:	919554945442C1EC26A1D12A59A9AA55F6D80759D948EBFD20598FB94DB3F893F518885BC72FBDBE87587091ED5FFADE4ED62C2FA2893A85FB39D0DAEFA5545C
Malicious:	false
Reputation:	low
URL:	https://app.usercentrics.eu/browser-ui/3.34.1/index.module.js
Preview:	......e..tmp8n4fltln...{.6.(.Wd.]/Y..\..j.Yq..VKN/..ZZ.,6.........gfp!x....9....2I..`0...3../.p...7>J....?.}..~.{3..^.,.Q.}?....?..i..V.b.\|.F.[....Z.Z..>.Zk.~..'..}.g.~2p.~[Q.lki1+..2.*...t,g=......Q..I%.R...6g......\|......j.o..\.rU.h.0.........."..<..~.m..X...QQhT.9u.b.rU...o....lqP.Z..<..f.^.....U..xqe^.@..u...^.7..W....!.......O...f%.c..7..G..H...Fj.8...{...s.$.Q...g..lK.p.(Q...E5D..".sX..(.#..m.D......g\|\IB9V..W.\|.o....9k(6..1....m..uS...W.......1...J.....".J...8.7@.....~..FM~....m.c..Qr.._..X.... .d{..:.g..l[O..W.@).C.0...6Vy.}......9,.....;=........]...O....~=x.E...:..u2..;;.'..,g.-W......R._...4....w..S....L.l......H...a...\|..\f.9 .=V....6mhPY.w..........<E..e...N\]%.X5. ..QY!Uhm.8..I..V.z.u.b.......%U..<...Ko..).&...-......7.a-......3.....#UMTO.Qx[...41A.....2_".....B...fK^..^.C$..\[......r~.#.......N]..b.....K.IM..![.....hl..{jD-`..m.1....z..o#?..k..i.`.8....~..62o.+?..T3GY...WR._.._.1..A].......,.0.......(...9p.....c.$.%+H.~.tMN

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2, software=paint.net 4.2.12], baseline, precision 8, 1731x1287, components 3
Category:	downloaded
Size (bytes):	118073
Entropy (8bit):	7.275083999134084
Encrypted:	false
SSDEEP:	1536:hiJxZ7Kvjk2dibgBeWE1fZ54TEe/Tz4KDjRDf5f6yDyjQxPhF+2eI2R+envc0me3:AJz7KQ2d9BG1fg/EKDjrfldxPpeI27B3
MD5:	069FB8965BC81B4750592563E7355523
SHA1:	97B9AF69A09E354A36480B28B915741005A1E053
SHA-256:	6384C317F5210B060FEF046E216BF1F7CC96E3B8F58E737B2FA05D990E98DB21
SHA-512:	2EF0E2A5003EF437E1BF8FB4143A81607602AC09082683A7A1B76E61EB303F7C3758FC7A366143444ECA4EAAE9814FFFED2C034AC80745F3C249BC596D8CBE3D
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/vefajzik/swisscleantech-logo-titelbild.jpg
Preview:	......JFIF.....`.`.....tExif..MM..............................J...........R.(...........1.........Z.......`.......`....paint.net 4.2.12.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10977)
Category:	downloaded
Size (bytes):	12258
Entropy (8bit):	5.593084429374509
Encrypted:	false
SSDEEP:	192:wCszZEsQiWsrg6yWiRDWSdhgW9MwgWgPngWzO2gW9f/5o:e5rr9xmnsF95o
MD5:	E7BEC6138C1F7109698C37F8E3393B49
SHA1:	C1AD74259FD795B7B01A8EDD2D8200FCF6E4DA33
SHA-256:	D052D9E9D406D8A094D98064722077AE86484362E2D08777B5FA36CB43181185
SHA-512:	F5BD7DD91393C0E64FDA525CCDBDBFD2340973B45826D9D7B8BB8186FC2594F240CB9AE82FB72E60219433F1AEDB0CCF3D72759B31FB47A62F417ED30162B7EC
Malicious:	false
Reputation:	low
URL:	https://service.synesgy.com/tr/privacy-policy
Preview:	<!DOCTYPE html>.<html lang="en" class="h-100" data-critters-container>. <head>. <meta charset="utf-8">. <title>Synesgy</title>. <base href="/" id="baseHref">. <script>. const urls = ['http://localhost:4200/'];. const url = urls.find((url) => window.location.href.includes(url));. const lang = window.location.search.substring(1).split('&').find(singleSearch => singleSearch.includes("lang="));. if(lang){. document.documentElement.setAttribute("lang", lang.replace("lang=", ""));. }. if (!url) {. document.getElementById('baseHref').href = '/' + window.location.pathname.split('/')[1] + '/';. }. </script>. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="icon" id="app-logo" type="image/x-icon">. <link rel="preconnect" href="//app.usercentrics.eu">. <link rel="preconnect" href="//api.usercentrics.eu">. <style>@charset "UTF-8";:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f4

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	632
Entropy (8bit):	5.454917031928276
Encrypted:	false
SSDEEP:	12:6v/7tGNHBQqsiL333333333333333333Bqy:jEidv
MD5:	64924DBEEE131B149E97C23208FCFA1C
SHA1:	F8829A716904B011FE03C97E66768681ABE83E82
SHA-256:	935E8FE020E235BB8A15333ACFB9AEFD1458370A3EEA6C21A3CBAC9059E9052C
SHA-512:	7153785FF247E2DFE4B7ECD3C8E8D19073354C237D00C20D66514E26BBAD1D5815C4F32794EEB18AC2E939E36BC686D1D3C82D6729660D39B935C9623E434F68
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........*IDATx...I...E./"...V.....n...."[..Oi.......'...!9g......<.E.].......zy..~.....;;...&.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@.I .$.@.. .....H..$...@..\|fv.Y....jf>.q.!X]\...............N.,.....IEND.B`.

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4961 x 3508, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7348829
Entropy (8bit):	7.965293385532382
Encrypted:	false
SSDEEP:	196608:EvZOBDxYXsRyliemLyjB3c11fSeG61FDdvN+cIFg2uXfckKwnYWJXDbR7jk1/4dw:aexioybmLmB3mNB50vuXV9JXU/yw
MD5:	C312517D43328733041EBEEE5E2354D4
SHA1:	75622D17C6EF0536533FA876B68FABC698536D82
SHA-256:	76DE7B5575135DA8C6B89660DE2622121A682DC28C42145A50349009ECB2DC8A
SHA-512:	D6EF5CB8D3D13BC6627141B8E31D3D3896AB6DE1281CAEAB8DA799DF73D2C27EB210741CAC21B0958A74BDE50B56CDEE367F39258B9EE4B6A4657162A26B6E65
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/tkccxelm/synesgy_3.png
Preview:	.PNG........IHDR...a..........6.5....pHYs...#...#.x.?v.. .IDATx..[...$...L.....fM..Y.,........!`...Q.U..$._.3............s..s..s....E.......Trz.-N.9..yv.9..^.^.Q.?S.\|........o.g..\|<;.g...w....`.S\|.......f.Rr)=....<.?.....9.......;.<.\...g....<.v.....G...z...w.....ry.O..3.5..Yxf...u...qun[]......Xt<.k.5.....:.b...g.....^...../W..kun..m_..A!..3...c.R.9/..[<k.....{..T....b..>.}.O.c(.E.i.......:.).^L{r.U...O...w....+d$x.EJ.d...o..9........g)...........:M.e.\|.u.0..2K....J.9.Y...u.W^..(...e2....g.,\|'......T&...V\|/.@......(tX.......X.}.......v..*..=t...\...\....^v.L.'..m\K......X........A.L..).......\.>.m.....z-r..\|..5.L...\._.......\`...;.....k.N.#...~.....N_o.]S\|.....C.w..6.q..9w.u0:.9.n.....]m........c...s.8.}.q........u.KvF..T(.jc..=.B...W.s.^9...73O...6n.....w..q.n/..x....5...].....u..S..9.c..`......kY..\|.g..s.\.>B...)..2...gL.Y...J....R.v.9.C.].1.S}B.Z.2.+.6>\|V}w'.]h{....D]..V..v..;.o....!.f..{&.vf.YN......Gk.e....ct...\|...

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 264 x 154, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7063
Entropy (8bit):	7.9094571145228185
Encrypted:	false
SSDEEP:	192:qWD1ojkboLqEtPzHvcFiP2NKb8NC1QJPw88gCxzbY:qW+j1qYvcM0u8g1Aw82o
MD5:	9855E90B6942D02AC6FC56FA19C2F99A
SHA1:	98D72124B87A31978243896DB1373DD26B3C0E5F
SHA-256:	F838663FAF0FCEF50D2D9C6774DBAF2C30A74E01590674BE2E9C608570FDB352
SHA-512:	16F45DBDB68C920C036AC7A1B67A9DD638B6C6ACAFB2D615073768ABCB64332FB516B7B152F0FEE5039F42A510F9767CFA85C13897D3CC8D7F9F525D91EDE20A
Malicious:	false
Reputation:	low
URL:	https://www.synesgy.com/media/odiemvmj/spain-33-33x.png
Preview:	.PNG........IHDR.............U/......pHYs..q...q.........IIDATx....\|.......M..NH.....1..G....Q....j...Uk..g...w.Zm.?.V@...[.`.FE.FH .B8r.s.s....1...1..\|<...vfd.~g..(.3JC.!z..IN...................................................................................................................................................e.e...!D...J.e.593B..v.@.\b.!.I@.!.I@.!.I@.!.I@.!.I@.!.I@.!.I@..-.Q........`Y...d8..q.......J.}a..8(R.8....(...>.q0$ ....f]m..Jllh..'.Y..%...P,i`IE...3.@.......bb..-...P....-.@..F.{.eG".......1..g...\|7....Q'w.v"'^0.k.d~4..N.x.k..B0l......A....:.!....qDv..K...3...X..{W....yORYY..G..e..FY.>.......W).0.....M.l.S.&......5...%L..(.L.M/J.B.I._P.?"..~...shi.cw...Y...\|.v.(.{.=...x...n...f...&'...m...n..VG....2....4..].6D.u....k.zX..W$...0....j.k7>F:+..t..=@/QT.o.dz.[8t.UV....2.......u,. .!V..Y..&..s.1)l..`H..T..Rh.>...P0.$n..V..D..>.g@..wD.D........,..@2R.t...Pq:.Vn.....;...Dqa.1.L0.B..+..]Xts....

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2024 15:01:54.536076069 CET	192.168.2.8	1.1.1.1	0x694a	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.536241055 CET	192.168.2.8	1.1.1.1	0x3cc2	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 15, 2024 15:01:54.536642075 CET	192.168.2.8	1.1.1.1	0xb3ae	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.536936045 CET	192.168.2.8	1.1.1.1	0x41ea	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 15, 2024 15:01:55.738082886 CET	192.168.2.8	1.1.1.1	0x9b83	Standard query (0)	service.synesgy.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:55.738358021 CET	192.168.2.8	1.1.1.1	0x1780	Standard query (0)	service.synesgy.com	65	IN (0x0001)	false
Jan 15, 2024 15:01:56.817719936 CET	192.168.2.8	1.1.1.1	0xebfd	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:56.818042994 CET	192.168.2.8	1.1.1.1	0xfb29	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:01:56.819781065 CET	192.168.2.8	1.1.1.1	0x5be9	Standard query (0)	api.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:56.820111990 CET	192.168.2.8	1.1.1.1	0x73cc	Standard query (0)	api.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:01:58.802561998 CET	192.168.2.8	1.1.1.1	0x2cb8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.802943945 CET	192.168.2.8	1.1.1.1	0xd3f0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:00.446340084 CET	192.168.2.8	1.1.1.1	0xa7a0	Standard query (0)	api.synesgy.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:00.446727991 CET	192.168.2.8	1.1.1.1	0x9326	Standard query (0)	api.synesgy.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:00.587589025 CET	192.168.2.8	1.1.1.1	0xc09b	Standard query (0)	service.synesgy.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:00.587976933 CET	192.168.2.8	1.1.1.1	0x35c5	Standard query (0)	service.synesgy.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:02.882496119 CET	192.168.2.8	1.1.1.1	0xf698	Standard query (0)	api.synesgy.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:02.883217096 CET	192.168.2.8	1.1.1.1	0x2f28	Standard query (0)	api.synesgy.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:03.768877029 CET	192.168.2.8	1.1.1.1	0xcc59	Standard query (0)	api.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:03.769252062 CET	192.168.2.8	1.1.1.1	0x338e	Standard query (0)	api.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:02:08.898730993 CET	192.168.2.8	1.1.1.1	0xe740	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.899640083 CET	192.168.2.8	1.1.1.1	0x27bb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:09.163927078 CET	192.168.2.8	1.1.1.1	0xd8a4	Standard query (0)	app.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:09.166789055 CET	192.168.2.8	1.1.1.1	0x2d76	Standard query (0)	app.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:02:09.208622932 CET	192.168.2.8	1.1.1.1	0x2000	Standard query (0)	www.synesgy.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:09.208760977 CET	192.168.2.8	1.1.1.1	0x9339	Standard query (0)	www.synesgy.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:11.520293951 CET	192.168.2.8	1.1.1.1	0x7b76	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.520637035 CET	192.168.2.8	1.1.1.1	0xf9f2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:11.643049955 CET	192.168.2.8	1.1.1.1	0xbfe1	Standard query (0)	consent-api.service.consent.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.643779993 CET	192.168.2.8	1.1.1.1	0xb1f1	Standard query (0)	consent-api.service.consent.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:02:13.198066950 CET	192.168.2.8	1.1.1.1	0xe6c	Standard query (0)	uct.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:13.199659109 CET	192.168.2.8	1.1.1.1	0xc6f5	Standard query (0)	uct.service.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:02:13.392296076 CET	192.168.2.8	1.1.1.1	0xccf8	Standard query (0)	www.synesgy.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:13.392934084 CET	192.168.2.8	1.1.1.1	0xf24f	Standard query (0)	www.synesgy.com	65	IN (0x0001)	false
Jan 15, 2024 15:02:13.838907003 CET	192.168.2.8	1.1.1.1	0xc5e6	Standard query (0)	uct.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:13.838907003 CET	192.168.2.8	1.1.1.1	0x1632	Standard query (0)	uct.service.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:02:19.503608942 CET	192.168.2.8	1.1.1.1	0x5dc8	Standard query (0)	aggregator.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:19.504045963 CET	192.168.2.8	1.1.1.1	0x496c	Standard query (0)	aggregator.service.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:02:20.676043987 CET	192.168.2.8	1.1.1.1	0x2c67	Standard query (0)	aggregator.service.usercentrics.eu	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:20.676268101 CET	192.168.2.8	1.1.1.1	0xfbef	Standard query (0)	aggregator.service.usercentrics.eu	65	IN (0x0001)	false
Jan 15, 2024 15:03:23.780055046 CET	192.168.2.8	1.1.1.1	0xa213	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.780201912 CET	192.168.2.8	1.1.1.1	0x3ad8	Standard query (0)	clients1.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2024 15:01:54.632384062 CET	1.1.1.1	192.168.2.8	0x694a	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:01:54.632384062 CET	1.1.1.1	192.168.2.8	0x694a	No error (0)	clients.l.google.com		172.253.122.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.632384062 CET	1.1.1.1	192.168.2.8	0x694a	No error (0)	clients.l.google.com		172.253.122.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.632384062 CET	1.1.1.1	192.168.2.8	0x694a	No error (0)	clients.l.google.com		172.253.122.138	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.632384062 CET	1.1.1.1	192.168.2.8	0x694a	No error (0)	clients.l.google.com		172.253.122.100	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.632384062 CET	1.1.1.1	192.168.2.8	0x694a	No error (0)	clients.l.google.com		172.253.122.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.632384062 CET	1.1.1.1	192.168.2.8	0x694a	No error (0)	clients.l.google.com		172.253.122.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.632527113 CET	1.1.1.1	192.168.2.8	0xb3ae	No error (0)	accounts.google.com		142.251.167.84	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:54.633145094 CET	1.1.1.1	192.168.2.8	0x3cc2	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:01:55.954071999 CET	1.1.1.1	192.168.2.8	0x1780	No error (0)	service.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:01:56.052038908 CET	1.1.1.1	192.168.2.8	0x9b83	No error (0)	service.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:01:56.912667990 CET	1.1.1.1	192.168.2.8	0xebfd	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:56.914820910 CET	1.1.1.1	192.168.2.8	0x5be9	No error (0)	api.usercentrics.eu		35.241.3.184	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.897906065 CET	1.1.1.1	192.168.2.8	0x2cb8	No error (0)	www.google.com		142.251.163.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.897906065 CET	1.1.1.1	192.168.2.8	0x2cb8	No error (0)	www.google.com		142.251.163.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.897906065 CET	1.1.1.1	192.168.2.8	0x2cb8	No error (0)	www.google.com		142.251.163.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.897906065 CET	1.1.1.1	192.168.2.8	0x2cb8	No error (0)	www.google.com		142.251.163.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.897906065 CET	1.1.1.1	192.168.2.8	0x2cb8	No error (0)	www.google.com		142.251.163.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.897906065 CET	1.1.1.1	192.168.2.8	0x2cb8	No error (0)	www.google.com		142.251.163.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:01:58.898173094 CET	1.1.1.1	192.168.2.8	0xd3f0	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2024 15:02:00.682182074 CET	1.1.1.1	192.168.2.8	0x9326	No error (0)	api.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:00.684628010 CET	1.1.1.1	192.168.2.8	0xa7a0	No error (0)	api.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:00.821825981 CET	1.1.1.1	192.168.2.8	0xc09b	No error (0)	service.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:00.847747087 CET	1.1.1.1	192.168.2.8	0x35c5	No error (0)	service.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:03.075746059 CET	1.1.1.1	192.168.2.8	0x2f28	No error (0)	api.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:03.084851980 CET	1.1.1.1	192.168.2.8	0xf698	No error (0)	api.synesgy.com	synesgy.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:03.863784075 CET	1.1.1.1	192.168.2.8	0xcc59	No error (0)	api.usercentrics.eu		35.241.3.184	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.995239973 CET	1.1.1.1	192.168.2.8	0xe740	No error (0)	www.google.com		142.250.31.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.995239973 CET	1.1.1.1	192.168.2.8	0xe740	No error (0)	www.google.com		142.250.31.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.995239973 CET	1.1.1.1	192.168.2.8	0xe740	No error (0)	www.google.com		142.250.31.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.995239973 CET	1.1.1.1	192.168.2.8	0xe740	No error (0)	www.google.com		142.250.31.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.995239973 CET	1.1.1.1	192.168.2.8	0xe740	No error (0)	www.google.com		142.250.31.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.995239973 CET	1.1.1.1	192.168.2.8	0xe740	No error (0)	www.google.com		142.250.31.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:08.996243954 CET	1.1.1.1	192.168.2.8	0x27bb	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2024 15:02:09.258469105 CET	1.1.1.1	192.168.2.8	0xd8a4	No error (0)	app.usercentrics.eu		35.190.14.188	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:09.400504112 CET	1.1.1.1	192.168.2.8	0x2000	No error (0)	www.synesgy.com		212.7.67.30	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.616163015 CET	1.1.1.1	192.168.2.8	0x7b76	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.616163015 CET	1.1.1.1	192.168.2.8	0x7b76	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.616163015 CET	1.1.1.1	192.168.2.8	0x7b76	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.616163015 CET	1.1.1.1	192.168.2.8	0x7b76	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.616163015 CET	1.1.1.1	192.168.2.8	0x7b76	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.616163015 CET	1.1.1.1	192.168.2.8	0x7b76	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:11.616683960 CET	1.1.1.1	192.168.2.8	0xf9f2	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2024 15:02:11.739320993 CET	1.1.1.1	192.168.2.8	0xbfe1	No error (0)	consent-api.service.consent.usercentrics.eu		35.201.111.240	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:13.005980968 CET	1.1.1.1	192.168.2.8	0x663a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:13.005980968 CET	1.1.1.1	192.168.2.8	0x663a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:13.294275045 CET	1.1.1.1	192.168.2.8	0xe6c	No error (0)	uct.service.usercentrics.eu		34.95.108.180	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:13.491192102 CET	1.1.1.1	192.168.2.8	0xccf8	No error (0)	www.synesgy.com		212.7.67.30	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:13.933598042 CET	1.1.1.1	192.168.2.8	0xc5e6	No error (0)	uct.service.usercentrics.eu		34.95.108.180	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:19.599786997 CET	1.1.1.1	192.168.2.8	0x5dc8	No error (0)	aggregator.service.usercentrics.eu		34.120.28.121	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:20.771099091 CET	1.1.1.1	192.168.2.8	0x2c67	No error (0)	aggregator.service.usercentrics.eu		34.120.28.121	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:27.251637936 CET	1.1.1.1	192.168.2.8	0x41de	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:27.251637936 CET	1.1.1.1	192.168.2.8	0x41de	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:02:48.908890009 CET	1.1.1.1	192.168.2.8	0xe615	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:02:48.908890009 CET	1.1.1.1	192.168.2.8	0xe615	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875026941 CET	1.1.1.1	192.168.2.8	0xa213	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875026941 CET	1.1.1.1	192.168.2.8	0xa213	No error (0)	clients.l.google.com		172.253.122.138	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875026941 CET	1.1.1.1	192.168.2.8	0xa213	No error (0)	clients.l.google.com		172.253.122.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875026941 CET	1.1.1.1	192.168.2.8	0xa213	No error (0)	clients.l.google.com		172.253.122.100	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875026941 CET	1.1.1.1	192.168.2.8	0xa213	No error (0)	clients.l.google.com		172.253.122.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875026941 CET	1.1.1.1	192.168.2.8	0xa213	No error (0)	clients.l.google.com		172.253.122.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875026941 CET	1.1.1.1	192.168.2.8	0xa213	No error (0)	clients.l.google.com		172.253.122.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 15:03:23.875133991 CET	1.1.1.1	192.168.2.8	0x3ad8	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jan 15, 2024 15:02:11.917956114 CET	23.206.229.226	443	192.168.2.8	49703	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
Jan 15, 2024 15:02:11.917956114 CET	23.206.229.226	443	192.168.2.8	49703	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49705	172.253.122.113	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:01:54 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:01:55 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-XFPPRdSYCiRSDNoEUpEfJw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 14:01:55 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6223 X-Daystart: 21715 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 14:01:55 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 32 33 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 31 37 31 35 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6223" elapsed_seconds="21715"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-15 14:01:55 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-15 14:01:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49707	142.251.167.84	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:01:54 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
2024-01-15 14:01:54 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-15 14:01:55 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 14:01:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-D7LNz8BOfLac5h1KZNmPNw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 14:01:55 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-15 14:01:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49723	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:01:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-15 14:02:00 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dce/26AC) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=191988 Date: Mon, 15 Jan 2024 14:01:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49724	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-15 14:02:00 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=191969 Date: Mon, 15 Jan 2024 14:02:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-15 14:02:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49718	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:01 UTC	549	OUT	GET /browser-ui/latest/loader.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:01 UTC	1009	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrdJvxK8mn-IQarugmSqT-XRYxp7X_u1q2ZlkOH35LPn8SuORYvheypsBmawficowWhnwkWnL-mKA x-goog-generation: 1704976817820544 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 8102 Content-Encoding: gzip x-goog-hash: crc32c=MGZXgQ== x-goog-hash: md5=BeyljLoFmZbCKeIXJDG57A== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 8102 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Access-Control-Expose-Headers: Content-Length Access-Control-Expose-Headers: Transfer-Encoding Server: UploadServer Date: Mon, 15 Jan 2024 13:07:33 GMT Expires: Mon, 15 Jan 2024 14:07:33 GMT Cache-Control: public, max-age=3600, no-transform Age: 3268 Last-Modified: Thu, 11 Jan 2024 12:40:17 GMT ETag: "05eca58cba059996c229e2172431b9ec" Content-Type: text/javascript Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:01 UTC	243	IN	Data Raw: 1f 8b 08 08 b1 e1 9f 65 02 ff 74 6d 70 70 7a 74 70 72 73 75 6c 00 e5 3d 5b 7b da 48 b2 ef e7 57 c8 3a e7 73 a4 89 cc c5 ce 55 8e cc 47 08 49 bc e3 db 1a 27 b3 b3 36 cb 27 44 03 3d 16 12 23 09 3b 8c cd f9 ed a7 aa 2f 52 0b 04 c6 c6 d9 f3 b0 7e 30 ad be 54 57 55 57 75 57 df aa b7 fa 93 c0 4b 68 18 18 e6 9d 3e 89 89 16 27 11 f5 12 7d ff c6 8d 34 e2 60 54 e4 91 00 23 e3 1d 6f 34 d6 ad c4 49 8b 10 f3 2e 22 c9 24 0a 34 52 aa 1f 9f 75 9a 27 f5 8f 47 cd 4f 8e ee 8e c6 cd c0 ed fa a4 a7 5b 90 f4 fd f4 f0 53 e7 ec bc f9 b9 79 d1 f8 da 69 35 cf bf 1f 36 9a 2d c8 76 13 d2 de 59 44 fa 24 f1 86 2d 12 dd 50 8f c4 58 e2 e3 d1 69 e3 d7 ce a7 fa 45 bd 73 54 ff bd 79 de 39 fb d6 fa ea e8 5d 3f f4 ae 3f b9 89 7b e4 4e 49 74 36 89 87 98 b9 Data Ascii: etmppztprsul=[{HW:sUGI'6'D=#;/R~0TWUWuWKh>'}4`T#o4I."$4Ru'GO[Syi56-vYD$-PXiEsTy9]??{NIt6
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 71 7a 72 71 7e 7a 74 04 d9 0e a1 6e 2f 04 6c 43 df 27 d1 61 6f 21 b9 95 4f 67 95 35 8e 0e 9b 27 17 1d c8 f7 f9 f0 0b a4 fb 14 e8 6d 84 41 9f 0e 30 f9 d3 61 0b a9 ea 5c 9c d7 1b bf 1e 9e 40 8e 1e 8d 91 b6 8b c8 f5 ae 69 c0 32 35 bf 75 8e 4f 3f 35 1d 9d 4c 8e c3 1e c1 28 c4 85 32 0c 8e ea 27 5f be d5 bf 40 aa ef 06 83 89 3b 20 2a 5c 64 07 e0 06 d5 b7 00 8d 56 0a 1e f9 41 22 c0 23 06 74 18 a2 e7 df 8e 9a ad e6 05 a3 32 9a f8 24 26 09 27 b1 55 3f f9 f4 f1 f4 1f c0 ff ef 8e 1e bb 41 af 1b fe 60 f1 cd 8b 0b c0 b8 d5 69 d4 1b 5f a1 7a 28 90 00 c2 71 c3 f5 86 24 97 01 41 ca 54 01 f3 e2 f4 bc 29 db 0a d2 3b 17 a7 9d 93 fa 71 b3 73 5c 3f 3b 63 6c 88 93 30 22 a2 d5 0e 7b 17 e1 89 3b 22 c7 ee 78 2c 58 d2 fa 76 06 4d de 82 ca 41 32 80 d8 33 68 49 28 34 19 8f 23 12 c7 Data Ascii: qzrq~ztn/lC'ao!Og5'mA0a\@i25uO?5L(2'_@; *\dVA"#t2$&'U?A`i_z(q$AT);qs\?;cl0"{;"x,XvMA23hI(4#
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: f7 69 e0 2e 6b 36 50 8a 08 54 fe df de 70 5b 46 55 b4 dc f6 36 b6 d9 87 d7 a9 d2 cd 25 bc a9 e9 8d c9 d8 73 af 89 6e e7 93 0e 1c 48 fb 14 06 93 44 b7 77 f3 85 76 6b 7a d3 f3 5d 1a a9 29 3c 54 6d d7 f4 cf 51 38 0d e7 0b 1d 40 a1 2f 30 92 90 a8 0b 23 55 4f b7 f7 44 72 4d ff 1a 06 64 ea 85 a3 ae 6e bf ca 57 54 ad e9 87 1e d1 1a 50 62 a4 b5 60 a6 70 4b bd e1 42 ae 57 35 fd 6f c4 f7 a7 da 47 02 ad 3d 97 7a e0 40 f2 af 34 f9 d5 05 3a 5e a7 75 1e c1 94 8a 8e c3 b1 6e bf 49 e3 8e 81 af c3 11 f4 f6 e1 ad 6e bf 4d a3 4f c2 c9 00 0b bf 4b 63 4e 23 02 f4 bd 4f bf cf 28 70 8f f7 ed a2 e1 45 8b c3 64 d1 a3 18 28 9e 84 2a ed ce 7b 56 2c 0d 8c 80 06 26 02 82 32 3c 40 3f 8a 16 14 af 07 ea 0e c0 90 08 9c ad aa 29 c6 93 c2 8a a1 bb 85 21 a6 38 09 cc b8 d0 81 31 60 08 92 f6 Data Ascii: i.k6PTp[FU6%snHDwvkz])<TmQ8@/0#UODrMdnWTPb`pKBW5oG=z@4:^unInMOKcN#O(pEd(*{V,&2<@?)!81`
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 17 a9 2e 83 4c 1d be 64 ea 90 d3 19 7b 4e a5 2c 0a d8 2e ea 8b 25 d5 c3 ce 74 c6 1a 49 45 39 96 8a 82 6a 61 cf 6b 8b 35 fa cb 56 35 c5 62 da 60 17 aa 8a 15 72 15 39 e5 2a a2 e8 84 9d 53 17 2b d5 0a 5b 4f 75 05 62 85 82 9c 09 05 91 6a 61 eb 52 55 20 ee 4f f8 fa 7b 56 23 57 10 35 4e 3b 62 1a 13 0b 8d 69 09 8d 89 53 8d 69 a5 1a 33 af 11 f6 6a 15 b2 52 25 81 8c 52 75 20 36 d5 97 56 aa 2f 31 d7 97 16 d7 97 84 eb cb 05 d7 97 09 34 b2 a2 32 d6 8d d4 96 ef 52 5b 98 72 d8 73 3a 63 71 1d c1 e8 06 d3 15 ae 19 f6 bc ca a0 76 e4 c7 a4 bb 04 17 d1 a0 24 ff 85 26 0d bb d4 07 a6 f1 5f dd ea 91 f8 3a 09 c7 b6 2e 02 80 f1 0d e4 be 61 b0 c4 40 77 27 56 43 ce 40 54 a0 a8 f8 d2 d8 27 e8 31 ff 4c e3 b1 1f f6 4e 5b d8 0b c3 0f c8 25 86 29 86 ea 73 1a 89 7d 40 17 53 d9 4f 7e e8 Data Ascii: .Ld{N,.%tIE9jak5V5b`r9*S+[OubjaRU O{V#W5N;biSi3jR%Ru 6V/142R[rs:cqv$&_:.a@w'VC@T'1LN[%)s}@SO~
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 65 f7 38 b8 1e ef cb 53 2e 40 c5 5e 9b 65 e0 9d 3f d8 fd e9 d6 59 8f 99 fc fd f5 eb 4b db 31 ad b5 cf 6b f5 17 6b ed cf d5 ea cb 5a fd d9 0c b7 2d 25 fd e3 1c fd b1 69 0d e6 f1 19 2f c5 47 8a 1e 81 09 8d c4 28 ad 70 60 aa a2 9a df be 86 c6 1a b4 cd 19 ca 4b 0a 65 7e fb 71 61 6e b6 2f ce 20 e5 8d 47 ec 03 8d b9 2e 8d ed 36 e6 63 a8 42 55 e1 96 96 11 a8 6a 4c d9 26 3a cd 03 41 b8 8e c3 0c f8 3c 39 05 a2 7e 59 69 83 a4 e3 9a c2 56 15 2a 9f 43 5a b2 81 71 6c 41 98 a9 e0 9c 7e c0 e6 a0 00 0a 7a e2 0f 32 5c 83 69 3c 29 c5 93 2e 14 33 70 41 c5 e1 29 55 48 09 70 e2 ad 24 c3 3c db 06 5c da 56 06 aa 26 8e 83 80 92 88 d0 4e 15 72 49 28 90 21 07 de d6 ff 57 26 f0 73 05 39 f8 55 ec bd 4a 14 17 40 4f fb 46 c6 e1 b9 c3 0a b8 b1 6b 05 a6 79 b0 53 e5 4d ae 9a e2 a4 c0 7c Data Ascii: e8S.@^e?YK1kkZ-%i/G(p`Ke~qan/ G.6cBUjL&:A<9~YiV*CZqlA~z2\i<).3pA)UHp$<\V&NrI(!W&s9UJ@OFkySM\|
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: e5 81 3a 77 aa 78 81 b9 c4 2f c3 19 fa d5 95 a1 9b b5 f2 bf 8c d2 2f 28 43 f0 ff 52 bb 4a da 57 06 06 cb b6 9a a0 95 05 06 1c ed 65 a8 26 80 aa 25 b0 b3 97 ce fa 30 d7 6c 36 6b 2b db d4 e1 92 6d ea bd 9f bf 4d cd fd f7 28 fb d1 78 b5 e9 aa fc e9 fb 59 79 25 33 97 6a 65 5a 7e 07 d5 92 cf 7d 54 85 e4 2c 94 b7 44 4a 98 3d e5 19 34 67 d6 9e b7 e2 d2 d8 18 2f 8d 3d d0 b4 cb 0d 46 15 88 86 db 0d b1 59 03 8b 48 99 98 fd b2 0a 3d f5 1e db 6a 34 9f 8a a1 bc 1b 67 18 27 17 f7 ff 38 33 0d ed aa 77 d5 ab 01 6a 72 ca 38 af 1c 8b 9e 86 8c 64 35 fa 19 e6 32 84 a5 ec 68 96 5b a0 f7 28 cc c6 e2 21 08 7c cd d4 3e ff a0 a7 2d 16 bc 2a 97 d7 50 e5 b4 4a 28 b6 7a d1 c3 f8 2e 0f 46 e0 9a 11 cc 47 4a 6d 90 90 b5 17 b5 24 9a 4f e5 37 00 d0 c2 58 fb a1 15 8e 1a a5 88 40 8f ea 11 Data Ascii: :wx//(CRJWe&%0l6k+mM(xYy%3jeZ~}T,DJ=4g/=FYH=j4g'83wjr8d52h[(!\|>-*PJ(z.FGJm$O7X@
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: cc d4 00 e7 04 3d 4c b5 88 37 89 68 32 d5 ce 42 60 dc d4 d2 40 0a d1 d3 3c be 70 e5 87 6e 8f 44 a5 3f 62 e6 fc 80 b8 3d 2d ec c3 6c 12 a7 7d 18 09 c8 84 51 0f 81 01 6e c3 24 19 c7 76 b9 dc 0b bd b8 a4 be 85 85 17 75 cb ff 5d 16 67 59 76 26 b4 46 7b 0e 1d 41 35 e8 14 99 8d e2 e9 53 43 13 47 df 2b ed bd 2a 55 75 cb 73 f4 b4 26 dd ea c9 af 8e 4f 06 ae 37 65 91 7d 47 67 d7 82 71 1d 61 22 32 fa ce dc 20 c4 3c 78 c5 e1 04 f0 c9 42 a5 71 08 5a 01 9c 04 d6 49 9d 5a b8 22 4d 4a 3d 37 71 59 47 85 01 e6 0a c2 4c a2 e9 5d e4 fc ad 75 7a 22 7c 6a f1 44 73 e6 89 47 2b 84 98 e3 fd f7 cc 41 80 83 1e cf f1 15 8b 4e 27 f1 fa ee 98 36 5c df 97 be a9 f3 b1 fb dc 76 4b e3 0c 8a 0c 1c 81 f5 6a 51 a9 96 ca 65 79 ee 97 9d 3f dc 23 8b f0 c7 30 6c 81 c9 77 f6 aa 4a 64 c5 13 26 3b Data Ascii: =L7h2B`@<pnD?b=-l}Qn$vu]gYv&F{A5SCG+*Uus&O7e}Ggqa"2 <xBqZIZ"MJ=7qYGL]uz"\|jDsG+AN'6\vKjQey?#0lwJd&;
2024-01-15 14:02:01 UTC	347	IN	Data Raw: ad a9 75 e6 2c 1b fd 39 5e 99 1b e9 61 09 46 7b 9c 80 18 67 3c e4 88 18 18 62 8d 16 8c c8 b9 66 d4 7f 0f 27 1a d8 81 62 a6 e6 6a 82 c1 9a 90 0d 36 8b c3 e7 61 61 96 0d f3 dc ee 54 03 1b 25 cf 18 98 4c 96 b4 cf 61 04 93 c8 08 12 61 9a 11 a0 33 1f be 66 0a b2 a9 e1 04 0c e7 c9 e8 3a 49 db 39 b8 0a 34 f6 27 67 71 b9 09 9c 9b f8 e8 91 cd 0d 4a d0 77 96 6f e9 35 2d c7 63 17 18 56 6e fd fa b1 3c 06 e1 8c cb bb 7b af de be d9 ab bc a9 be 2a 7f 1b 03 bf c8 cb 30 78 d9 92 38 be 14 6b 86 b1 8e 04 77 41 46 8c ba b3 66 d7 67 c9 17 31 a0 ab 30 b8 eb 64 63 ea d4 73 be 5d 01 20 4f 71 8c 8e 33 e5 1e 08 ef ef 53 87 44 9d 1a 0f da 9d 39 67 5b db db d2 41 3e e4 aa 17 7b 5c 64 5e 32 b7 b7 59 da 67 90 da c4 a8 cf bb 24 4d e7 65 d5 8a 89 43 bf 59 3b 2b 81 4c 43 23 c3 ff f4 a0 Data Ascii: u,9^aF{g<bf'bj6aaT%Laa3f:I94'gqJwo5-cVn<{*0x8kwAFfg10dcs] Oq3SD9g[A>{\d^2Yg$MeCY;+LC#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49738	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:01 UTC	589	OUT	GET /browser-ui/3.34.1/index.module.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:01 UTC	1009	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqjAAMA0kx5u3tTGOl-OSK5LnMlMEJ0cwlOusJn2rsry7IBa8_bvcdMv0UpvxVLvTgFN_PWeTnMVA x-goog-generation: 1704976794821043 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 105636 Content-Encoding: gzip x-goog-hash: crc32c=A8MN8A== x-goog-hash: md5=c7MG6XTcBBKCrHlaBPIJ/g== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 105636 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:20 GMT Expires: Fri, 10 Jan 2025 12:40:20 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:54 GMT ETag: "73b306e974dc041282ac795a04f209fe" Content-Type: text/javascript Age: 350501 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:01 UTC	243	IN	Data Raw: 1f 8b 08 08 9a e1 9f 65 02 ff 74 6d 70 38 6e 34 66 6c 74 6c 6e 00 ec bd 0b 7b db 36 d2 28 fc 57 64 be 5d 2f 59 c3 8a ed 5c da 95 c2 6a 15 59 71 d4 fa 56 4b 4e 2f fa b4 5a 5a 82 2c 36 12 a9 92 94 1d d7 d2 f9 ed 67 66 70 21 78 91 ed a4 e9 ee 39 cf f9 fa a4 32 49 00 03 60 30 18 0c 06 33 83 1b 2f aa 70 f7 ec ea 37 3e 4a aa 93 88 f3 3f b8 7d ef 07 7e e2 7b 33 ff 0f 5e 9b 2c 83 51 e2 87 81 7d 3f 0f c7 cb 19 3f f7 92 69 8d bb 56 d5 62 fe 7c 11 46 c9 5b 99 e1 d4 9b f3 5a e2 5a c3 a1 f8 3e 1c 5a 6b f7 7e ed dc 27 d1 dd 7d cc 67 93 7e 32 70 03 7e 5b 51 05 6c 6b 69 31 2b e2 c9 32 0a 2a a2 8c bd 74 2c 67 3d f2 92 d1 d4 0e 9c fb 51 18 c4 49 25 a2 52 97 17 c7 36 67 b3 10 12 a1 ac c3 7c 97 bb df dd c3 d7 6a c4 6f c2 0f 5c f4 80 72 55 Data Ascii: etmp8n4fltln{6(Wd]/Y\jYqVKN/ZZ,6gfp!x92I`03/p7>J?}~{3^,Q}??iVb\|F[ZZ>Zk~'}g~2p~[Qlki1+2*t,g=QI%R6g\|jo\rU
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: e3 68 e4 30 0e 09 f3 f0 86 db ce ba ae aa 87 22 08 eb 3c 0a e7 7e cc 6d db 0e 58 ec 00 18 51 51 68 54 14 39 75 7f 62 cb 72 55 d1 f5 13 6f d1 0f 07 8e 6c 71 50 9e 5a 17 b0 3c 82 f5 66 16 5e d9 fd 7f 8b ce 55 be ae 78 71 65 5e 99 40 ed 95 bf 7f 75 1f ae ff 5e ff 37 fb f7 57 f7 c9 da 00 21 12 06 ee bc fe ef 01 bb 4f ee 16 bc 66 25 fc 63 f2 ec 37 ef c6 8b 47 91 bf 48 ac b5 c3 46 6a c8 bc 38 f6 af 03 7b 1c 8e 96 73 1e 24 d5 51 c4 bd 84 b7 67 1c df 6c 4b 96 70 14 28 51 91 c5 00 45 35 44 9e c8 9e 22 cf 73 58 18 f0 28 0a 23 db b9 8f 6d ec 44 9b de fe fd d6 f3 67 7c 5c 49 42 39 56 b5 ca 57 f7 7c fd 6f 07 86 c2 1e 39 6b 28 36 0b bd 31 94 da 80 18 91 6d ed d4 75 53 a7 dc 1b 57 bd c5 82 07 e3 d6 d4 9f 8d 31 1d c0 15 4a 03 15 ad b1 a0 22 c5 4a 02 03 94 38 f7 37 40 ba Data Ascii: h0"<~mXQQhT9ubrUolqPZ<f^Uxqe^@u^7W!Of%c7GHFj8{s$QglKp(QE5D"sX(#mDg\|\IB9VW\|o9k(61muSW1J"J87@
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 3e e8 29 cc 9d 9d 7d 87 9a a5 99 6b 00 1c 99 53 26 83 1b 4b b0 5b ae 0d eb 2b 26 a2 90 a2 f0 10 c0 07 bd 0a d3 8b 5a ab 4a 68 aa 8a 0f d8 1e 51 6d da 81 5b 3d 9f 58 50 4f eb e3 54 9f 93 92 22 8c a1 98 a7 f8 28 52 47 d5 2b 2f e6 24 8b b1 04 18 d7 e7 75 e0 be 08 90 fa 72 05 42 fa 07 c5 a8 b0 95 c6 08 9e 61 a3 ed 2d 2c 33 c6 55 06 ff ba 20 e0 6d 6f cf 48 d6 84 e4 ed ed ad 63 f8 0c 1c 74 b5 1a 83 f0 e1 c1 84 b8 0a 01 00 bf 00 d1 9b e3 c2 8d 3c d1 1e 97 a6 ac 56 0b c7 3e 36 26 c7 b1 2d b0 a4 a7 08 b0 10 e2 9b 34 80 b3 6a 8c 1b b9 89 53 e7 2e 3c 4f fd 49 62 3b 75 47 b5 2f 81 8f 02 29 2c 72 25 b9 fb ea 21 56 0f 9e 6b 87 84 27 07 8a dd e0 0f 67 f6 88 b0 71 ee 90 64 0e fc d8 c7 1f 3b 76 87 36 70 e8 d0 a1 ac 6e 88 bf 3b fb ec 8d 3d 82 46 c5 0c 8b 04 4c cb 5d a3 6a Data Ascii: >)}kS&K[+&ZJhQm[=XPOT"(RG+/$urBa-,3U moHct<V>6&-4jS.<OIb;uG/),r%!Vk'gqd;v6pn;=FL]j
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 55 02 e1 42 5a 12 1e 87 b7 3c 6a 81 f0 68 0b 35 4c ee 5b 35 9e f9 50 f6 00 27 9b 7a 04 a9 7c 06 13 14 7e 51 61 8f 6f fd 64 27 46 6d 4b d0 88 70 92 78 e3 71 fb 06 26 cd b1 1f 27 1c e4 27 18 d5 b8 f1 b6 f6 91 c5 30 a0 72 ab b9 29 43 5d 77 6c ec 05 d7 3c 0a 97 f1 ec ae cb 93 4e 00 f9 de f5 4e 8e 61 e8 5d b1 6f f0 9d 4c f7 3e c2 04 fc 60 bf 5b c1 02 0e 3d 9c 5a 4e 9a 14 e3 69 03 f6 3b b6 8c 0a 6e fd 71 32 25 70 80 ba 29 f7 af a7 89 7e c3 3d ac 7c 9e 41 23 d5 33 0c d1 5c 3d 27 de 55 07 77 25 ea 7d 0c b2 22 ea b4 d5 7b 14 de 76 17 5e a0 5e 47 e1 cc 78 a5 71 e6 0e 1e 76 e4 49 3c 10 02 3c 6c dd c5 c9 06 b0 bc 75 d9 ca 01 43 a0 59 db 16 8a 26 40 5f 30 af 10 7e ff 05 ce 2b 81 e8 66 02 d4 7a b5 4c 80 5d 21 f6 61 b2 19 5f 60 2e 9a bb 83 8f c6 fe 8e f6 6d b3 be 60 57 Data Ascii: UBZ<jh5L[5P'z\|~Qaod'FmKpxq&''0r)C]wl<NNa]oL>`[=ZNi;nq2%p)~=\|A#3\='Uw%}"{v^^GxqvI<<luCY&@_0~+fzL]!a_`.m`W
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: b5 ba 76 aa 1b b6 0b 0c b5 6b 9b d2 b6 46 1a 61 6a e4 26 78 80 87 63 3c 7f 0d 1b 19 35 4a 99 c1 9c f4 cd 14 18 8b 6a 00 c3 85 27 47 d9 af 24 ce d5 ed c5 6a 35 46 62 47 ad de 18 27 28 d0 7a 32 07 44 8c e5 d3 6a 95 7e 73 51 c5 20 9b e7 10 4a f4 ab 98 dd aa 08 6e e1 88 93 17 28 5a ed 73 f5 a9 57 e0 58 6a d6 23 c5 02 ba e4 91 1d 3e 8a 43 bc d5 0a 37 ca b1 d4 9e f6 e3 01 5a 34 19 67 7c 3e ee 7d 0a 3a 3e 3c d4 03 60 9b 81 5b 84 02 f5 32 9a f2 d1 07 3e 96 af 58 0b ed 56 11 86 a8 1d 9f 55 ed 6b ad 34 1d 01 ff 76 12 a9 a8 d6 bb 37 c1 f8 e6 6a 7e 6a be e6 34 e6 35 40 be 42 86 d8 b3 c1 de 2e 38 53 f6 11 ee 0d cd f9 b8 11 c3 a6 b9 46 ac 62 7b bb 67 07 0c e6 30 32 82 cc 44 9e bb e9 d0 a7 fa 3c 1c de ed ed 2b 9b 26 74 7d 04 e3 24 7b 0a c8 02 c6 a8 f7 21 36 ea 78 29 05 Data Ascii: vkFaj&xc<5Jj'G$j5FbG'(z2Dj~sQ Jn(ZsWXj#>C7Z4g\|>}:><`[2>XVUk4v7j~j45@B.8SFb{g02D<+&t}${!6x)
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 7e 19 be b9 ec f5 ce 4e 5d 2b fb 8e 39 ba ed d6 d9 e9 a1 2a 6e be 41 ea da 46 d2 fe a1 bc 25 ad 93 f3 61 f7 dd d9 4f 00 56 3f 22 c4 66 ab d5 3e ef 0d 9b c7 c7 ae 95 3e 63 ca 61 fb f4 17 f1 5d 3d 51 0b 9a ef db 50 33 fc e2 5b eb ec ec 87 4e 7b 78 7e 76 dc 81 76 1e 77 4e 7f 00 f0 85 6f 98 b3 73 02 bd 39 ed c9 3c e6 1b a6 9e 9c 5d b4 87 9d d3 b7 67 17 27 cd 5e e7 ec 54 66 2b fd 6c 62 2a 53 71 c9 47 aa f9 b4 d7 3e ba a0 f2 5d 55 7d fe 13 f5 a5 75 de 1c f6 ce 8e 8e 8e db dd 21 a2 3f f7 a1 98 e7 ed db 7c a6 b7 6f f5 38 fc 5e 3e 0e 0f 8d ff e9 d9 29 e0 16 7f bf 18 35 fc bc 81 2e 4f 9b c7 bf f4 3a ad ae a2 4e a4 89 f6 fb f6 69 4f 60 ac d3 eb 34 8f 3b bf b6 0f 55 ba f1 09 73 bc ef b4 7f 1a b6 de 35 4f 8f d2 2c e6 37 5d ff 8f e5 f5 77 db 17 ef 3b ad f6 f0 a4 d3 ed Data Ascii: ~N]+9nAF%aOV?"f>>ca]=QP3[N{x~vvwNos9<]g'^Tf+lbSqG>]U}u!?\|o8^>)5.O:NiO`4;Us5O,7]w;
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 76 7c 0c d9 70 8a e3 62 12 85 b3 19 8f 3a e3 42 72 37 9b 1e 17 44 21 48 37 04 1f 9a f7 9d 2e f6 6a 08 33 ae f5 03 2c a8 c0 01 fc 18 fb d6 8b bc d1 07 29 bd b5 2f 87 27 67 38 c0 7c 79 12 8e 85 7c 04 6d 11 bc e6 18 64 c7 cb a6 98 07 c1 f5 52 0a 35 0a 2e a2 03 da 06 d5 77 a1 19 5d 0d 1e f1 c1 23 54 6f a0 de 0b 4b 5c 5c 82 30 de ee 51 2f a3 e5 8c c3 1e 4f 74 b1 db 3c 3d 7c 73 f6 33 e0 ff 3d 8c b9 17 8c af c2 8f 82 20 7a 3d 68 71 77 d8 6a b6 de b5 91 1c 92 04 1a 1c b7 bc d1 94 67 32 10 6f 94 a9 12 66 0f 37 29 4a a0 85 f1 eb 9d 0d 4f 9b 27 20 db 36 cf cf 09 0d 28 a0 71 39 6a 9d 71 2f c4 d3 d1 13 6f b1 90 28 e9 5e 9e c3 90 77 bb 24 83 43 67 cf 61 24 a1 d0 72 b1 c0 f3 95 d6 7c 71 e8 c7 8b 99 77 a7 44 58 4d 3c c9 68 62 10 0f e0 a6 db c1 7d 02 20 23 16 12 15 6c e1 Data Ascii: v\|pb:Br7D!H7.j3,)/'g8\|y\|mdR5.w]#ToK\\0Q/Ot<=\|s3= z=hqwjg2of7)JO' 6(q9jq/o(^w$Cga$r\|qwDXM<hb} #l
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: 98 96 de 14 c8 49 b6 a2 32 0e b9 d0 6e 2e c4 c9 64 c5 ab fc dd da 09 76 ac bf 57 04 2c f4 eb 19 d7 85 c3 d9 0c a6 7a da 03 01 dd e4 c5 38 bb 32 6e 5b 1b 1a e4 d3 d0 e5 11 25 6a 89 45 aa 9a 29 c8 64 88 56 ec a4 4f 87 44 cb 59 72 4a b6 71 f2 80 58 7a cb b9 c2 7f f1 38 1c 31 03 29 89 26 61 03 37 82 69 9b 38 76 8a 6d 71 6a 71 ed 89 f8 d4 b8 14 ad d3 0a e7 a0 22 d7 9b 32 f0 66 8c 04 1d 44 03 25 15 e8 41 8d f7 f7 06 eb fa 3e 59 3f 50 d3 49 2e 81 14 97 a3 27 16 3b 48 53 40 fc 83 f5 eb 4e a4 1d 60 68 12 6f 02 ed 11 ef cf 07 f2 50 11 e0 b6 71 37 cc 63 75 5a 98 8b c0 60 9e 8a c3 5c 81 ef 78 28 5b 17 06 aa ae 16 98 b0 17 09 af 10 1a 98 99 db 0c c3 d0 d4 c7 8b 69 b5 6e 5f f5 cd a2 ed f8 1a ad ab 94 04 d1 a2 46 ca a6 46 b8 35 b4 b7 f6 9c 4c 5c 07 e2 1b 68 e3 66 51 b8 Data Ascii: I2n.dvW,z82n[%jE)dVODYrJqXz81)&a7i8vmqjq"2fD%A>Y?PI.';HS@N`hoPq7cuZ`\x([in_FF5L\hfQ
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: e4 04 5e 02 0c 02 63 2c af 99 5a 70 49 87 52 db a0 b8 cf 2e cd f7 6a ff 5a c3 7d 16 4b b7 d8 35 28 23 b6 d4 b5 60 cd b4 b2 ca a0 14 35 f4 e6 ea 81 b8 35 42 44 76 b9 21 d8 75 f9 e6 53 15 74 62 cc 85 75 95 31 6c 55 fb 1a 65 5a 65 b9 41 58 d7 ca e4 48 d3 c5 ac 50 5d 66 47 01 fd d2 df b7 d4 73 2a 32 35 54 db 6a ba 42 46 3d 33 34 46 3c 1b 57 4d 1c 3b 88 55 0b f7 a9 c0 04 60 a1 f2 e4 f9 52 ee a0 a1 42 d8 c3 b6 af 3d 21 fc 26 f6 c8 a9 e5 6d 63 47 8e 52 b8 fa a6 02 c1 44 b1 21 c1 a4 b4 cc 0c f7 84 ba a1 e9 d5 61 c8 75 29 23 de 24 57 91 61 51 97 a7 2b 0b b1 2e e8 6b 4c fd c4 d8 63 4a 09 6e b4 c8 2b 66 52 2a 6b 67 1d da 4a e6 ca 04 0a 69 73 cd 10 b7 ec cc 59 51 e2 38 a5 e1 86 5b 5e 80 5b 5f 5c 50 2a 5e 65 34 f3 e2 18 e3 9b 7b 1a 07 96 d1 a4 26 cf 45 37 85 89 1c a4 Data Ascii: ^c,ZpIR.jZ}K5(#`55BDv!uStbu1lUeZeAXHP]fGs25TjBF=34F<WM;U`RB=!&mcGRD!au)#$WaQ+.kLcJn+fRkgJisYQ8[^[_\P*^e4{&E7
2024-01-15 14:02:01 UTC	1252	IN	Data Raw: a3 d9 1c b5 d2 c1 6e 50 3a 6b 48 6a 20 92 c5 20 71 00 0d 83 9c e6 02 87 eb 4e dd 07 e4 a2 1b 88 71 47 e7 52 df 34 4a 55 fa c2 fb b8 06 32 51 ad c4 ef fd 3b 8d a0 c6 bd 32 2d aa c9 a7 7d 26 37 14 fd 68 67 67 80 6a 93 5a d6 41 57 38 3a b3 49 6d c3 31 70 d9 94 12 38 e0 ff d9 39 45 0a 03 16 e2 46 d8 73 41 9c d6 58 31 1d e7 f5 4d 43 20 21 64 70 25 0e 57 02 79 ca a7 55 b0 ae 38 cb a2 53 d1 0c 62 3c ac 27 76 09 33 26 d3 01 f1 3c 54 d1 3e 02 69 5e 83 21 9a e5 b6 16 e6 bd 50 1c 92 59 96 32 02 5b 9b 56 3f 47 fc bf 78 ff 52 7a cb d1 7f ec ee a5 8a bc 34 49 70 f2 a7 dd ae 84 ad 7e c7 cb dd b2 df 6d d8 17 ae 56 f7 7a 97 57 eb 0f d6 86 72 87 a6 e5 f6 76 16 5c 66 53 b8 ce 9a 6a 17 2e a8 79 92 30 90 88 5b 77 f4 65 36 40 83 ef e4 46 33 d5 6d 7d f5 e7 54 11 2d d2 40 01 11 Data Ascii: nP:kHj qNqGR4JU2Q;2-}&7hggjZAW8:Im1p89EFsAX1MC !dp%WyU8Sb<'v3&<T>i^!PY2[V?GxRz4Ip~mVzWrv\fSj.y0[we6@F3m}T-@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49742	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:02 UTC	551	OUT	OPTIONS /settings/o_tc3l2da/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://service.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:03 UTC	628	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqrxunCp-0cppW5jWhym-KoGHnFbCawlJ3lp_S8N8MH4G_9MHu0l4X9NYJQwaR8mTpY0Qod8roNFA Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type Date: Mon, 15 Jan 2024 14:02:03 GMT Expires: Mon, 15 Jan 2024 14:02:03 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49749	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:03 UTC	627	OUT	GET /settings/o_tc3l2da/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://service.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:03 UTC	1130	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpjgaUT_aiSnaDT5kUY83FaiCuGUxF4Hdr08KzhBWJNfFi0hxRmTV0NWRMMI0jo09qrmtM Date: Mon, 15 Jan 2024 14:02:03 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 15 Jan 2024 14:03:03 GMT Last-Modified: Thu, 19 Oct 2023 11:35:36 GMT ETag: W/"ae2846a8136234c16e018a3b71369e4a" Vary: Accept-Encoding x-goog-generation: 1697715336135376 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 71 Content-Type: application/json x-goog-hash: crc32c=9FiGMQ== x-goog-hash: md5=rihGqBNiNMFuAYo7cTaeSg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:03 UTC	77	IN	Data Raw: 34 32 0d 0a 7b 22 6c 61 6e 67 75 61 67 65 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 22 74 72 22 2c 22 65 6e 22 5d 2c 22 65 64 69 74 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 22 2c 22 74 72 22 5d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 42{"languagesAvailable":["tr","en"],"editableLanguages":["en","tr"]}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49753	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:03 UTC	544	OUT	OPTIONS /settings/o_tc3l2da/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://service.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:04 UTC	628	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqtgvZ-rcBvTfu7CMBDeQWchCd1j15KDwsIazLsKBI5BWqR3dcehmWV7lZin8Telcwvf2K1rOQyCg Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type Date: Mon, 15 Jan 2024 14:02:04 GMT Expires: Mon, 15 Jan 2024 14:02:04 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49756	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:04 UTC	383	OUT	GET /settings/o_tc3l2da/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:04 UTC	998	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpdENOpXsfC2NUL54LH_MedZPVzqeFeOJdY9ZWNER3d_8-BEpHqxTmnqggEtmTL1ehKwqRsl1l_tg Date: Mon, 15 Jan 2024 14:02:04 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 15 Jan 2024 14:03:04 GMT Last-Modified: Thu, 19 Oct 2023 11:35:36 GMT ETag: W/"ae2846a8136234c16e018a3b71369e4a" Vary: Accept-Encoding x-goog-generation: 1697715336135376 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 71 Content-Type: application/json x-goog-hash: crc32c=9FiGMQ== x-goog-hash: md5=rihGqBNiNMFuAYo7cTaeSg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:04 UTC	72	IN	Data Raw: 34 32 0d 0a 7b 22 6c 61 6e 67 75 61 67 65 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 22 74 72 22 2c 22 65 6e 22 5d 2c 22 65 64 69 74 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 22 2c 22 74 72 22 5d 7d 0d 0a Data Ascii: 42{"languagesAvailable":["tr","en"],"editableLanguages":["en","tr"]}
2024-01-15 14:02:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49758	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:04 UTC	620	OUT	GET /settings/o_tc3l2da/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://service.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:05 UTC	1132	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpMOeYaBEnqHpmJpV-dmD3zfvWIeV9SsMc8VgrPXdc7V2eQGq3Z_diAG3_xpIFrCBk20u8 Date: Mon, 15 Jan 2024 14:02:04 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 15 Jan 2024 14:03:04 GMT Last-Modified: Thu, 19 Oct 2023 11:35:36 GMT ETag: W/"130f5cec78150f12dca9cca082dd4a79" Vary: Accept-Encoding x-goog-generation: 1697715336143820 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 6903 Content-Type: application/json x-goog-hash: crc32c=eJ2lNg== x-goog-hash: md5=Ew9c7HgVDxLcqcyggt1KeQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:05 UTC	120	IN	Data Raw: 31 39 64 61 0d 0a 7b 22 73 65 74 74 69 6e 67 73 49 64 22 3a 22 6f 5f 74 63 33 6c 32 64 61 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 35 2e 36 35 22 2c 22 69 73 4c 61 74 65 73 74 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 44 69 73 70 6c 61 79 4c 6f 63 61 74 69 6f 6e 22 3a 22 62 6c 22 2c 22 6d 6f 72 65 49 6e 66 6f 42 75 74 74 6f 6e 55 72 6c 22 3a 22 22 2c 22 Data Ascii: 19da{"settingsId":"o_tc3l2da","version":"7.5.65","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 61 63 74 69 6f 6e 43 6c 69 63 6b 4f 6e 56 69 65 77 43 6f 6e 73 65 6e 74 49 6e 53 65 61 72 63 68 41 70 70 22 3a 22 22 2c 22 6c 61 79 6f 75 74 22 3a 31 2c 22 70 72 69 76 61 63 79 4d 6f 64 61 6c 22 3a 31 2c 22 75 72 6c 43 6f 6e 73 65 6e 74 49 6e 66 6f 22 3a 22 22 2c 22 73 74 79 6c 65 73 43 73 73 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 43 6c 6f 73 65 49 63 6f 6e 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 75 73 65 72 63 65 6e 74 72 69 63 73 2e 65 75 2f 6d 69 73 63 2f 69 63 6f 6e 2d 73 65 63 75 72 69 74 79 2e 73 76 67 22 2c 22 62 61 6e 6e 65 72 4d 6f 62 69 6c 65 44 65 73 63 72 Data Ascii: actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"http://img.usercentrics.eu/misc/icon-security.svg","bannerMobileDescr
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 2c 22 77 68 69 74 65 4c 69 73 74 52 65 66 65 72 72 65 72 44 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 73 68 6f 77 45 72 72 6f 72 4f 6e 55 6e 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 22 3a 66 61 6c 73 65 2c 22 74 72 61 63 6b 69 6e 67 50 72 6f 76 69 64 65 72 55 73 65 64 54 6f 47 65 74 54 72 61 63 6b 69 6e 67 45 76 65 6e 74 73 22 3a 5b 5d 2c 22 64 61 74 61 53 63 6f 70 65 73 22 3a 5b 22 64 61 74 61 4c 61 79 65 72 22 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 64 6f 77 6e 46 6f 72 53 68 6f 77 69 6e 67 50 72 69 6d 61 72 79 56 69 65 77 41 67 61 69 6e 22 3a 30 2c 22 62 61 6e 6e 65 72 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 63 6f 72 6e 65 72 4d 6f 64 61 6c 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 6c 61 6e 67 75 61 67 65 53 65 6c 65 63 74 6f Data Ascii: ,"whiteListReferrerDomains":[],"showErrorOnUnallowedDomain":false,"trackingProviderUsedToGetTrackingEvents":[],"dataScopes":["dataLayer"],"language":"en","countdownForShowingPrimaryViewAgain":0,"bannerPlacement":1,"cornerModalPlacement":1,"languageSelecto
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 61 74 65 46 75 6e 63 74 69 6f 6e 73 4f 6e 45 76 65 6e 74 73 22 3a 5b 7b 22 65 76 65 6e 74 22 3a 22 6f 6e 42 61 6e 6e 65 72 4f 70 65 6e 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 37 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 7d 5d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 4f 76 65 72 6c 61 79 22 3a 5b 5d 2c 22 64 61 74 61 45 78 63 68 61 6e 67 65 4f 6e 50 61 67 65 22 3a 5b 7b 22 74 79 70 65 22 3a 31 2c 22 65 76 65 6e 74 73 22 3a 5b 22 63 6f 6e 73 65 6e 74 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 5f 73 74 6f 72 61 67 65 22 2c 22 73 70 65 63 69 66 69 63 5f 63 6f 6e 73 65 6e 74 73 5f 63 68 61 6e 67 65 64 22 2c 22 63 6f 6e 73 65 6e 74 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 5f 73 65 74 74 69 6e 67 22 5d 2c 22 6e 61 6d 65 73 22 3a 5b 22 64 61 74 61 4c 61 79 65 72 22 5d 7d 5d Data Ascii: ateFunctionsOnEvents":[{"event":"onBannerOpen","function":"7","params":[]}],"backgroundOverlay":[],"dataExchangeOnPage":[{"type":1,"events":["consents_initialized_storage","specific_consents_changed","consents_initialized_setting"],"names":["dataLayer"]}]
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 6b 6f 5f 71 4e 73 75 69 2d 51 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 34 2e 35 2e 31 35 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 65 73 73 65 6e 74 69 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 73 75 62 Data Ascii: nt Management Platform"}},{"type":"predefined","templateId":"Hko_qNsui-Q","version":"14.5.15","categorySlug":"essential","description":"","isHidden":false,"isShared":false,"isDeactivated":false,"isAutoUpdateAllowed":false,"defaultConsentStatus":false,"sub
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 6c 20 64 61 74 61 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 69 6d 70 72 6f 76 65 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 73 61 6c 65 20 6f 66 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 79 6f 75 20 6d 61 79 20 65 78 65 72 63 69 73 65 20 79 6f 75 72 20 63 6f 6e 73 75 6d 65 72 20 72 69 67 68 74 20 74 6f 20 6f 70 74 2d 6f 75 74 20 62 79 20 61 63 74 69 76 61 74 69 6e 67 20 74 68 65 20 74 6f 67 67 6c 65 20 27 44 6f 20 4e 6f 74 20 53 65 6c 6c 20 4d 79 20 50 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 27 20 62 65 6c 6f 77 2e 20 46 6f 72 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 Data Ascii: l data in order to improve your experience. In case of sale of your personal information you may exercise your consumer right to opt-out by activating the toggle 'Do Not Sell My Personal Information' below. For detailed information about the categories of
2024-01-15 14:02:05 UTC	246	IN	Data Raw: 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 79 6f 75 20 6d 61 79 20 65 78 65 72 63 69 73 65 20 79 6f 75 72 20 63 6f 6e 73 75 6d 65 72 20 72 69 67 68 74 20 74 6f 20 6f 70 74 2d 6f 75 74 20 62 79 20 61 63 74 69 76 61 74 69 6e 67 20 74 68 65 20 74 6f 67 67 6c 65 20 27 44 6f 20 4e 6f 74 20 53 65 6c 6c 20 4d 79 20 50 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 27 20 62 65 6c 6f 77 2e 22 2c 22 66 69 72 73 74 4c 61 79 65 72 56 61 72 69 61 6e 74 22 3a 22 42 41 4e 4e 45 52 22 2c 22 66 69 72 73 74 4c 61 79 65 72 48 69 64 65 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 72 55 73 65 53 68 6f 72 74 4d 65 73 73 61 67 65 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 0d 0a Data Ascii: al information you may exercise your consumer right to opt-out by activating the toggle 'Do Not Sell My Personal Information' below.","firstLayerVariant":"BANNER","firstLayerHideLanguageSwitch":false,"firstLayerUseShortMessage":false,"firstLaye
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 33 61 61 64 0d 0a 72 53 68 6f 72 74 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 54 69 74 6c 65 22 3a 22 50 72 69 76 61 63 79 20 53 65 74 74 69 6e 67 73 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 48 65 72 65 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 63 6f 6c 6c 65 63 74 20 61 6e 64 20 74 68 65 20 70 75 72 70 6f 73 65 73 20 66 6f 72 20 77 68 69 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 61 79 20 62 65 20 75 73 65 64 20 61 6e 64 20 77 68 69 63 68 20 44 61 74 61 20 50 72 6f 63 65 73 Data Ascii: 3aadrShortMessage":"","secondLayerTitle":"Privacy Settings","secondLayerDescription":"Here you can find detailed information about the categories of personal information we collect and the purposes for which information may be used and which Data Proces
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 4c 61 79 65 72 41 64 64 69 74 69 6f 6e 61 6c 49 6e 66 6f 22 3a 22 22 2c 22 66 69 72 73 74 4c 61 79 65 72 48 69 64 65 54 6f 67 67 6c 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 54 69 74 6c 65 22 3a 22 50 72 69 76 61 63 79 20 53 65 74 74 69 6e 67 73 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 59 6f 75 20 63 61 6e 20 61 63 63 65 73 73 20 6d 6f 72 65 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 6c 6f 77 20 72 65 67 61 72 64 69 6e 67 20 61 6c 6c 20 70 75 72 70 6f 73 65 73 20 61 6e 64 20 74 68 69 72 64 2d 70 61 72 74 79 20 76 65 6e 64 6f 72 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 2e 20 59 6f 75 20 63 61 6e 20 61 64 6a 75 73 74 Data Ascii: LayerAdditionalInfo":"","firstLayerHideToggles":false,"secondLayerTitle":"Privacy Settings","secondLayerDescription":"You can access more detailed information below regarding all purposes and third-party vendors implemented on this website. You can adjust
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 6e 61 67 65 20 53 65 74 74 69 6e 67 73 22 2c 22 6c 69 6e 6b 73 56 65 6e 64 6f 72 4c 69 73 74 4c 69 6e 6b 4c 61 62 65 6c 22 3a 22 56 65 6e 64 6f 72 6c 69 73 74 22 2c 22 74 61 62 73 50 75 72 70 6f 73 65 4c 61 62 65 6c 22 3a 22 50 75 72 70 6f 73 65 73 22 2c 22 74 61 62 73 56 65 6e 64 6f 72 73 4c 61 62 65 6c 22 3a 22 56 65 6e 64 6f 72 73 22 2c 22 70 75 62 6c 69 73 68 65 72 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 44 45 22 2c 22 70 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 65 6c 65 63 74 65 64 56 65 6e 64 6f 72 49 64 73 22 3a 5b 5d 2c 22 67 64 70 72 41 70 70 6c 69 65 73 22 3a 74 72 75 65 2c 22 63 6d 70 49 64 22 3a 6e 75 6c 6c 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 73 65 6e 73 75 44 6f 6d Data Ascii: nage Settings","linksVendorListLinkLabel":"Vendorlist","tabsPurposeLabel":"Purposes","tabsVendorsLabel":"Vendors","publisherCountryCode":"DE","purposeOneTreatment":false,"selectedVendorIds":[],"gdprApplies":true,"cmpId":null,"cmpVersion":null,"consensuDom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49761	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:05 UTC	639	OUT	GET /browser-ui/3.34.1/DefaultData-6c4a9f0c-136e5ec3.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:05 UTC	1003	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPotmxdNlbwW3HTWk4CjmCmBsykXp-8v74DTij8bP8ub0fneHuLzoVbMq1Y1nZomG0rMSwwQxQfNMg x-goog-generation: 1704976787060273 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 969 Content-Encoding: gzip x-goog-hash: crc32c=F3cFEg== x-goog-hash: md5=2nP7cYMRg/phGtOMUzTx6g== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 969 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:21 GMT Expires: Fri, 10 Jan 2025 12:40:21 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:47 GMT ETag: "da73fb71831183fa611ad38c5334f1ea" Content-Type: text/javascript Age: 350504 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:05 UTC	249	IN	Data Raw: 1f 8b 08 08 92 e1 9f 65 02 ff 74 6d 70 35 35 6f 63 78 64 73 6a 00 95 56 db 6e db 38 10 7d df af 50 f2 10 90 c0 40 8d d3 f4 45 06 61 a4 a9 db 0a bb 68 17 95 b1 2f 86 11 c8 12 2d b3 a0 49 2f 29 3a 2d 14 fd fb 0e ad 4b a4 38 0e b0 48 80 21 87 c3 b9 9c 33 1c 59 ec f6 da 94 d5 5d 90 da 80 43 e6 85 85 9d 17 0a 36 5e 94 50 78 61 60 ee 85 00 e1 85 83 8f 5e a4 f0 dd 8b 0c 1e bd d0 f0 c9 0b 09 ff 7a 91 c3 17 2f 36 f0 a7 17 07 f8 e9 45 01 0f 5e 6c eb 8d d1 bb cb f0 9d 50 39 ff 15 ee 74 ee 24 0f 7f da cb e9 21 35 41 c2 36 4e 65 a5 d0 8a 58 5a 75 eb 40 11 0e 09 c4 b4 f2 36 6b 66 c3 2c 95 92 94 5b 61 51 f9 f4 e4 17 53 c3 4b 67 54 b0 c6 b3 92 17 da fc 4e a4 2b 18 1f 6d 01 4f b5 b2 5c 95 4c 78 97 14 15 22 47 a3 92 ef f6 12 0d e3 dc 6b ec dc 7a 1b 91 4a Data Ascii: etmp55ocxdsjVn8}P@Eah/-I/):-K8H!3Y]C6^Pxa`^z/6E^lP9t$!5A6NeXZu@6kf,[aQSKgTN+mO\Lx"GkzJ
2024-01-15 14:02:05 UTC	720	IN	Data Raw: 96 0c 77 c7 b3 af 22 cf b9 62 17 17 49 bf 79 7a e2 fd 1a 6d f6 46 67 dc 5a 6d e2 9c 5d 5e fa 88 98 03 71 24 25 94 fa 88 d6 ad 13 6e 0e 02 8d d8 72 35 56 fc c5 55 51 6e 31 23 d4 dd 37 a9 da d9 68 17 ca a3 49 74 8d 17 9d e5 76 b1 15 26 bf d7 4e 95 e6 37 de 7b a9 42 ab 03 37 16 51 c4 c3 76 85 ba 0d 2f b3 6d 32 48 a4 c7 9d 56 2d 92 19 59 c3 41 8b 3c b8 ee 04 19 18 79 26 2c 08 70 90 42 06 31 ac 61 07 7b 36 64 42 37 04 3d 5f d2 b4 b2 8f 02 e3 12 1d ca 74 cd 25 ad b2 d4 f2 e0 3a 12 1b 62 59 1e 16 bc 8c 95 2d 53 95 71 42 41 b0 cd 0b 8d 1b e3 02 17 24 65 07 e2 28 6d 31 a1 4d e4 e5 0d 2c 57 ab 69 cc 94 93 12 da 58 6c 32 3d 06 9b 44 5d 7a 21 a2 63 c3 bd b3 5b b2 9c c0 2d c0 87 15 85 e5 2d d8 06 9c bb a2 30 bc c0 9e c8 3b 8c 48 0a 17 13 ba 6a fc dc 74 7e 32 a6 43 9f Data Ascii: w"bIyzmFgZm]^q$%nr5VUQn1#7hItv&N7{B7Qv/m2HV-YA<y&,pB1a{6dB7=_t%:bY-SqBA$e(m1M,WiXl2=D]z!c[--0;Hjt~2C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49762	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:05 UTC	376	OUT	GET /settings/o_tc3l2da/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:05 UTC	1000	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrF7rA_O_lcdG6h0Wmk9-pv5955hoe-g7u2kfJlauSD1a5MM55a6ApRDILNK0B-5WCEUy00PtaHNw Date: Mon, 15 Jan 2024 14:02:05 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 15 Jan 2024 14:03:05 GMT Last-Modified: Thu, 19 Oct 2023 11:35:36 GMT ETag: W/"130f5cec78150f12dca9cca082dd4a79" Vary: Accept-Encoding x-goog-generation: 1697715336143820 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 6903 Content-Type: application/json x-goog-hash: crc32c=eJ2lNg== x-goog-hash: md5=Ew9c7HgVDxLcqcyggt1KeQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:05 UTC	252	IN	Data Raw: 61 35 65 0d 0a 7b 22 73 65 74 74 69 6e 67 73 49 64 22 3a 22 6f 5f 74 63 33 6c 32 64 61 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 35 2e 36 35 22 2c 22 69 73 4c 61 74 65 73 74 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 44 69 73 70 6c 61 79 4c 6f 63 61 74 69 6f 6e 22 3a 22 62 6c 22 2c 22 6d 6f 72 65 49 6e 66 6f 42 75 74 74 6f 6e 55 72 6c 22 3a 22 22 2c 22 61 63 74 69 6f 6e 43 6c 69 63 6b 4f 6e 56 69 65 77 43 6f 6e 73 65 6e 74 49 6e 53 65 61 72 63 68 41 70 70 22 3a 22 22 2c 22 6c 61 79 6f 75 74 22 3a 31 2c 22 70 72 69 76 61 63 79 4d 6f 64 61 6c 22 3a 31 2c 22 75 72 6c 43 6f 6e 73 65 6e 74 49 6e 66 6f 22 3a 22 22 2c 22 73 74 79 6c 65 73 43 73 73 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 22 3a 22 22 2c 22 62 75 Data Ascii: a5e{"settingsId":"o_tc3l2da","version":"7.5.65","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","bu
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 74 74 6f 6e 50 72 69 76 61 63 79 43 6c 6f 73 65 49 63 6f 6e 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 75 73 65 72 63 65 6e 74 72 69 63 73 2e 65 75 2f 6d 69 73 63 2f 69 63 6f 6e 2d 73 65 63 75 72 69 74 79 2e 73 76 67 22 2c 22 62 61 6e 6e 65 72 4d 6f 62 69 6c 65 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 63 6f 6e 73 65 6e 74 53 68 61 72 69 6e 67 49 46 72 61 6d 65 55 72 6c 22 3a 22 22 2c 22 62 61 6e 6e 65 72 4d 6f 62 69 6c 65 44 65 73 63 72 69 70 74 69 6f 6e 49 73 41 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 49 64 43 6f 6f 6b 69 65 22 3a 22 22 2c 22 63 68 69 70 44 69 73 70 6c 61 79 4c 6f 63 61 74 69 6f 6e 22 3a 22 72 6d 22 2c 22 70 Data Ascii: ttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"http://img.usercentrics.eu/misc/icon-security.svg","bannerMobileDescription":"","consentSharingIFrameUrl":"","bannerMobileDescriptionIsActive":false,"controllerIdCookie":"","chipDisplayLocation":"rm","p
2024-01-15 14:02:05 UTC	1157	IN	Data Raw: 65 72 22 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 64 6f 77 6e 46 6f 72 53 68 6f 77 69 6e 67 50 72 69 6d 61 72 79 56 69 65 77 41 67 61 69 6e 22 3a 30 2c 22 62 61 6e 6e 65 72 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 63 6f 72 6e 65 72 4d 6f 64 61 6c 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 6c 61 6e 67 75 61 67 65 53 65 6c 65 63 74 6f 72 54 79 70 65 22 3a 32 2c 22 63 6f 6e 73 65 6e 74 49 6e 66 6f 41 63 74 69 6f 6e 53 65 6c 65 63 74 69 6f 6e 22 3a 31 2c 22 62 74 6e 4d 6f 72 65 49 6e 66 6f 41 63 74 69 6f 6e 53 65 6c 65 63 74 69 6f 6e 22 3a 31 2c 22 75 73 65 4f 76 65 72 6c 61 79 22 3a 66 61 6c 73 65 2c 22 61 6c 6c 6f 77 49 6d 70 6c 69 63 69 74 43 6f 6e 73 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 61 63 63 65 70 74 41 6c 6c 4f 6e 54 Data Ascii: er"],"language":"en","countdownForShowingPrimaryViewAgain":0,"bannerPlacement":1,"cornerModalPlacement":1,"languageSelectorType":2,"consentInfoActionSelection":1,"btnMoreInfoActionSelection":1,"useOverlay":false,"allowImplicitConsents":false,"acceptAllOnT
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 61 6e 6e 65 72 4f 70 65 6e 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 37 22 2c 22 70 61 72 61 6d 73 22 3a 5b 5d 7d 5d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 4f 76 65 72 6c 61 79 22 3a 5b 5d 2c 22 64 61 74 61 45 78 63 68 61 6e 67 65 4f 6e 50 61 67 65 22 3a 5b 7b 22 74 79 70 65 22 3a 31 2c 22 65 76 65 6e 74 73 22 3a 5b 22 63 6f 6e 73 65 6e 74 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 5f 73 74 6f 72 61 67 65 22 2c 22 73 70 65 63 69 66 69 63 5f 63 6f 6e 73 65 6e 74 73 5f 63 68 61 6e 67 65 64 22 2c 22 63 6f 6e 73 65 6e 74 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 5f 73 65 74 74 69 6e 67 22 5d 2c 22 6e 61 6d 65 73 22 3a 5b 22 64 61 74 61 4c 61 79 65 72 22 5d 7d 5d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 6f 6e 50 72 65 6d 69 73 65 73 22 3a 66 61 6c 73 Data Ascii: 1000annerOpen","function":"7","params":[]}],"backgroundOverlay":[],"dataExchangeOnPage":[{"type":1,"events":["consents_initialized_storage","specific_consents_changed","consents_initialized_setting"],"names":["dataLayer"]}],"features":{"onPremises":fals
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 6b 6f 5f 71 4e 73 75 69 2d 51 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 34 2e 35 2e 31 35 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 65 73 73 65 6e 74 69 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 73 75 62 43 6f 6e 73 65 6e 74 73 22 3a 5b 5d 2c 22 6c 65 67 61 6c 42 61 73 69 73 4c 69 73 74 22 3a Data Ascii: pe":"predefined","templateId":"Hko_qNsui-Q","version":"14.5.15","categorySlug":"essential","description":"","isHidden":false,"isShared":false,"isDeactivated":false,"isAutoUpdateAllowed":false,"defaultConsentStatus":false,"subConsents":[],"legalBasisList":
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 72 20 65 78 70 65 72 69 65 6e 63 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 73 61 6c 65 20 6f 66 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 79 6f 75 20 6d 61 79 20 65 78 65 72 63 69 73 65 20 79 6f 75 72 20 63 6f 6e 73 75 6d 65 72 20 72 69 67 68 74 20 74 6f 20 6f 70 74 2d 6f 75 74 20 62 79 20 61 63 74 69 76 61 74 69 6e 67 20 74 68 65 20 74 6f 67 67 6c 65 20 27 44 6f 20 4e 6f 74 20 53 65 6c 6c 20 4d 79 20 50 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 27 20 62 65 6c 6f 77 2e 20 46 6f 72 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 63 6f 6c 6c 65 Data Ascii: r experience. In case of sale of your personal information you may exercise your consumer right to opt-out by activating the toggle 'Do Not Sell My Personal Information' below. For detailed information about the categories of personal information we colle
2024-01-15 14:02:05 UTC	348	IN	Data Raw: 65 20 79 6f 75 72 20 63 6f 6e 73 75 6d 65 72 20 72 69 67 68 74 20 74 6f 20 6f 70 74 2d 6f 75 74 20 62 79 20 61 63 74 69 76 61 74 69 6e 67 20 74 68 65 20 74 6f 67 67 6c 65 20 27 44 6f 20 4e 6f 74 20 53 65 6c 6c 20 4d 79 20 50 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 27 20 62 65 6c 6f 77 2e 22 2c 22 66 69 72 73 74 4c 61 79 65 72 56 61 72 69 61 6e 74 22 3a 22 42 41 4e 4e 45 52 22 2c 22 66 69 72 73 74 4c 61 79 65 72 48 69 64 65 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 72 55 73 65 53 68 6f 72 74 4d 65 73 73 61 67 65 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 72 53 68 6f 72 74 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 54 69 74 6c 65 22 3a 22 50 72 69 Data Ascii: e your consumer right to opt-out by activating the toggle 'Do Not Sell My Personal Information' below.","firstLayerVariant":"BANNER","firstLayerHideLanguageSwitch":false,"firstLayerUseShortMessage":false,"firstLayerShortMessage":"","secondLayerTitle":"Pri
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 33 61 32 39 0d 0a 61 74 65 67 6f 72 69 65 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 65 20 63 6f 6c 6c 65 63 74 20 61 6e 64 20 74 68 65 20 70 75 72 70 6f 73 65 73 20 66 6f 72 20 77 68 69 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 61 79 20 62 65 20 75 73 65 64 20 61 6e 64 20 77 68 69 63 68 20 44 61 74 61 20 50 72 6f 63 65 73 73 69 6e 67 20 53 65 72 76 69 63 65 73 20 6d 61 79 20 68 61 76 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 56 61 72 69 61 6e 74 22 3a 22 43 45 4e 54 45 52 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 53 69 64 65 22 3a 22 4c 45 46 54 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 48 69 64 65 4c 61 6e 67 75 61 67 65 53 Data Ascii: 3a29ategories of personal information we collect and the purposes for which information may be used and which Data Processing Services may have access to this information.","secondLayerVariant":"CENTER","secondLayerSide":"LEFT","secondLayerHideLanguageS
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 20 6d 6f 72 65 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 6c 6f 77 20 72 65 67 61 72 64 69 6e 67 20 61 6c 6c 20 70 75 72 70 6f 73 65 73 20 61 6e 64 20 74 68 69 72 64 2d 70 61 72 74 79 20 76 65 6e 64 6f 72 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 2e 20 59 6f 75 20 63 61 6e 20 61 64 6a 75 73 74 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 73 65 74 74 69 6e 67 73 20 62 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 63 20 70 75 72 70 6f 73 65 73 20 61 6e 64 2f 6f 72 20 61 74 20 61 20 76 65 6e 64 6f 72 20 6c 65 76 65 6c 20 61 74 20 61 6e 79 20 74 69 6d 65 2e 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 48 69 64 65 54 6f 67 67 6c 65 73 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4c 65 67 69 74 69 6d Data Ascii: more detailed information below regarding all purposes and third-party vendors implemented on this website. You can adjust your privacy settings based on specific purposes and/or at a vendor level at any time.","secondLayerHideToggles":false,"hideLegitim
2024-01-15 14:02:05 UTC	1252	IN	Data Raw: 6f 64 65 22 3a 22 44 45 22 2c 22 70 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 73 65 6c 65 63 74 65 64 56 65 6e 64 6f 72 49 64 73 22 3a 5b 5d 2c 22 67 64 70 72 41 70 70 6c 69 65 73 22 3a 74 72 75 65 2c 22 63 6d 70 49 64 22 3a 6e 75 6c 6c 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 73 65 6e 73 75 44 6f 6d 61 69 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 73 65 6e 73 75 53 63 72 69 70 74 50 61 74 68 22 3a 6e 75 6c 6c 2c 22 73 65 6c 65 63 74 65 64 53 74 61 63 6b 73 22 3a 5b 5d 2c 22 73 63 6f 70 65 22 3a 22 53 45 52 56 49 43 45 22 2c 22 61 70 70 4c 61 79 65 72 4e 6f 74 65 52 65 73 75 72 66 61 63 65 22 3a 22 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 73 65 74 74 69 Data Ascii: ode":"DE","purposeOneTreatment":false,"selectedVendorIds":[],"gdprApplies":true,"cmpId":null,"cmpVersion":null,"consensuDomain":null,"consensuScriptPath":null,"selectedStacks":[],"scope":"SERVICE","appLayerNoteResurface":"You can change your privacy setti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49765	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:05 UTC	618	OUT	GET /session/1px.png?settingsId=o_tc3l2da HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:06 UTC	817	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqd87CrpG7lOuvsezUql0DQOa0HHFHBfEv7D_Pajiv02uieNyCcKN1IVo2Vkga9Qu8XfN4 x-goog-generation: 1588928773413784 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 522 Content-Encoding: gzip x-goog-hash: crc32c=pFwm0Q== x-goog-hash: md5=NwKtpzuJUQF7hFHL1qllIw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 522 Server: UploadServer Date: Mon, 15 Jan 2024 13:50:23 GMT Expires: Mon, 15 Jan 2024 14:20:23 GMT Cache-Control: public,max-age=1800,no-transform Age: 703 Last-Modified: Fri, 08 May 2020 09:06:13 GMT ETag: "3702ada73b8951017b8451cbd6a96523" Content-Type: image/png Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:06 UTC	435	IN	Data Raw: 1f 8b 08 08 00 21 b5 5e 02 ff 74 6d 70 43 66 57 47 41 45 00 01 e9 01 16 fe 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 01 82 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 cf 2b 44 51 14 c7 3f 66 c8 e4 47 14 0b 0b 8b 49 58 21 46 89 94 32 93 86 92 34 46 f9 b5 99 79 f3 66 46 cd 8f d7 7b 6f d2 64 ab 6c a7 28 b1 f1 6b c1 5f c0 56 59 2b 45 a4 64 65 61 4d 6c 98 9e f3 bc a9 91 cc bd 9d 73 3e f7 7b ef 39 dd 7b 2e b8 c2 29 25 6d 54 f7 43 3a 63 ea a1 a0 df bb b0 b8 e4 ad 7d a6 06 8f d8 28 83 11 c5 d0 c6 67 67 a7 a9 38 3e ee a8 b2 e3 4d af 5d ab f2 b9 7f 47 7d 4c 35 14 a8 f2 08 8f 29 9a 6e 0a 4f 0a 4f af 99 9a cd db c2 ad 4a 32 12 13 3e 15 ee d1 e5 82 c2 b7 b6 1e 75 f8 c5 Data Ascii: !^tmpCfWGAEPNGIHDRiCCPsRGB IEC61966-2.1(u+DQ?fGIX!F24FyfF{odl(k_VY+EdeaMls>{9{.)%mTC:c}(gg8>M]G}L5)nOOJ2>u
2024-01-15 14:02:06 UTC	87	IN	Data Raw: ba 7c d5 15 ec ee 41 b7 9c 6f 5a f9 06 8c 92 67 f7 99 b6 60 68 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 09 a2 9e 66 e9 01 00 00 Data Ascii: \|AoZg`hpHYs.#.#x?vIDATc````NIENDB`f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49764	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:05 UTC	544	OUT	OPTIONS /translations/translations-en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://service.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:06 UTC	628	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPoitD9REtKeRUz1WM7N_d2aPacw3-de579NrikCRECvZldZtTXx6kOtQadPI73eN7ea0KfzrJ7Prw Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type Date: Mon, 15 Jan 2024 14:02:06 GMT Expires: Mon, 15 Jan 2024 14:02:06 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49767	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:08 UTC	620	OUT	GET /translations/translations-en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://service.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:08 UTC	1136	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrChVUsM0RLrD1jyOGpBgxYGsGwlMf32wP_lLxOF_PMssq5oOJszp5GQGB6zjIGnBBQJBM Date: Mon, 15 Jan 2024 14:02:08 GMT Cache-Control: public, max-age=86400, s-maxage=86400 Expires: Tue, 16 Jan 2024 14:02:08 GMT Last-Modified: Mon, 11 Sep 2023 07:33:50 GMT ETag: W/"3d054eecf556c1878bee9e30149c27e6" Vary: Accept-Encoding x-goog-generation: 1694417630850337 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2360 Content-Type: application/json x-goog-hash: crc32c=cuU6lQ== x-goog-hash: md5=PQVO7PVWwYeL7p4wFJwn5g== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:08 UTC	116	IN	Data Raw: 39 61 36 0d 0a 7b 22 6c 61 62 65 6c 73 22 3a 7b 22 41 4c 4c 22 3a 22 41 6c 6c 22 2c 22 42 41 43 4b 22 3a 22 42 61 63 6b 22 2c 22 43 49 44 5f 54 49 54 4c 45 22 3a 22 49 44 20 74 6f 20 72 65 71 75 65 73 74 20 63 6f 6e 73 65 6e 74 20 64 61 74 61 22 2c 22 43 4e 49 4c 5f 44 45 4e 59 5f 4c 49 4e 4b 5f 54 45 58 54 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 Data Ascii: 9a6{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue w
2024-01-15 14:02:08 UTC	1252	IN	Data Raw: 69 74 68 6f 75 74 20 61 63 63 65 70 74 69 6e 67 22 2c 22 43 4f 4f 4b 49 45 5f 52 45 46 52 45 53 48 22 3a 22 43 6f 6f 6b 69 65 20 72 65 66 72 65 73 68 22 2c 22 43 4f 4f 4b 49 45 5f 53 54 4f 52 41 47 45 22 3a 22 43 6f 6f 6b 69 65 20 73 74 6f 72 61 67 65 22 2c 22 44 45 54 41 49 4c 53 22 3a 22 44 65 74 61 69 6c 73 22 2c 22 4c 41 4e 47 55 41 47 45 5f 54 4f 4f 4c 54 49 50 22 3a 22 43 68 61 6e 67 65 73 20 6f 63 63 75 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 61 66 74 65 72 20 73 65 6c 65 63 74 69 6f 6e 2e 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 22 3a 22 53 75 62 73 65 72 76 69 63 65 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 22 3a 22 53 75 62 73 65 72 76 69 63 65 73 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 5f 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 42 Data Ascii: ithout accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Changes occur immediately after selection.","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"B
2024-01-15 14:02:08 UTC	1109	IN	Data Raw: 50 48 65 61 64 65 72 22 3a 22 48 65 61 64 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 6c 61 6e 67 75 61 67 65 20 73 65 6c 65 63 74 69 6f 6e 20 61 6e 64 20 65 78 74 65 72 6e 61 6c 20 6c 69 6e 6b 73 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 43 4d 50 55 49 22 3a 22 43 6f 6e 73 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 20 49 6e 74 65 72 66 61 63 65 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 43 61 72 64 22 3a 22 43 61 72 64 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 4c 69 73 74 22 3a 22 4c 69 73 74 22 2c 22 76 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 54 6f 67 67 6c 65 22 3a 22 43 6f 6e 73 65 6e 74 22 2c 22 76 65 6e 64 6f 72 44 65 74 61 69 6c 65 64 53 74 6f 72 61 67 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 22 44 65 74 61 69 6c 65 64 20 Data Ascii: PHeader":"Header including language selection and external links","usercentricsCMPUI":"Consent Management Platform Interface","usercentricsCard":"Card","usercentricsList":"List","vendorConsentToggle":"Consent","vendorDetailedStorageInformation":"Detailed
2024-01-15 14:02:08 UTC	1252	IN	Data Raw: 31 31 65 33 0d 0a 4e 53 45 4e 54 5f 32 30 31 33 5f 4a 55 53 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 31 33 2e 35 20 4c 61 77 20 32 39 37 33 33 20 2f 20 41 72 74 2e 20 31 31 20 44 2e 53 2e 20 30 30 33 2d 32 30 31 33 2d 4a 55 53 22 2c 22 43 4f 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 39 20 61 6e 64 20 31 32 20 4c 61 77 20 31 35 38 31 20 6f 66 20 32 30 31 32 22 2c 22 44 50 5f 4c 41 57 5f 41 32 41 33 22 3a 22 43 6f 6e 73 65 6e 74 3a 20 41 72 74 2e 20 32 20 61 6e 64 20 41 72 74 20 33 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 4c 61 77 22 2c 22 44 53 47 5f 45 4b 44 5f 32 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 32 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 33 22 3a 22 41 Data Ascii: 11e3NSENT_2013_JUS":"Consent, Art.13.5 Law 29733 / Art. 11 D.S. 003-2013-JUS","CO_CONSENT":"Consent, Art. 9 and 12 Law 1581 of 2012","DP_LAW_A2A3":"Consent: Art. 2 and Art 3 Personal Data Protection Law","DSG_EKD_2":"Art. 6 Nr. 2 DSG-EKD","DSG_EKD_3":"A
2024-01-15 14:02:08 UTC	1252	IN	Data Raw: 66 20 4d 4f 43 49 20 52 65 67 2e 20 32 30 2f 32 30 31 36 22 2c 22 4a 50 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 32 33 20 28 31 29 20 61 6e 64 20 41 72 74 2e 20 32 34 20 6f 66 20 74 68 65 20 41 63 74 20 6f 6e 20 74 68 65 20 50 72 6f 74 65 63 74 69 6f 6e 20 6f 66 20 50 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 66 20 4a 61 70 61 6e 20 28 41 63 74 20 4e 6f 2e 20 35 37 20 6f 66 20 32 30 30 33 2c 20 61 73 20 61 6d 65 6e 64 65 64 29 22 2c 22 4b 44 47 5f 31 5f 41 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 61 20 4b 44 47 22 2c 22 4b 44 47 5f 31 5f 44 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 64 20 4b 44 47 22 2c 22 4b 44 47 5f 31 5f 45 22 3a 22 c2 a7 20 36 20 70 61 72 Data Ascii: f MOCI Reg. 20/2016","JP_CONSENT":"Consent, Art. 23 (1) and Art. 24 of the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003, as amended)","KDG_1_A":" 6 para. 1 lit. a KDG","KDG_1_D":" 6 para. 1 lit. d KDG","KDG_1_E":" 6 par
2024-01-15 14:02:08 UTC	1252	IN	Data Raw: 65 20 4c 61 77 20 6f 6e 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 54 65 63 68 6e 6f 6c 6f 67 79 20 4e 6f 2e 20 36 37 2f 32 30 30 36 2f 51 48 31 31 2e 22 2c 22 50 44 50 4f 5f 44 50 50 22 3a 22 4c 61 77 66 75 6c 20 70 75 72 70 6f 73 65 3a 20 20 44 50 50 20 31 28 31 29 2c 20 53 63 68 2e 20 31 2c 20 50 44 50 4f 22 2c 22 50 44 50 4f 5f 44 50 50 5f 34 38 36 22 3a 22 4c 61 77 66 75 6c 20 70 75 72 70 6f 73 65 3a 20 20 44 50 50 20 31 28 31 29 2c 20 53 63 68 2e 20 31 2c 20 50 44 50 4f 22 2c 22 50 44 50 5f 4c 41 57 5f 41 33 22 3a 22 43 6f 6e 73 65 6e 74 3a 20 41 72 74 2e 20 33 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 4c 61 77 22 2c 22 50 49 50 41 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 33 39 2d 33 Data Ascii: e Law on Information Technology No. 67/2006/QH11.","PDPO_DPP":"Lawful purpose: DPP 1(1), Sch. 1, PDPO","PDPO_DPP_486":"Lawful purpose: DPP 1(1), Sch. 1, PDPO","PDP_LAW_A3":"Consent: Art. 3 Personal Data Protection Law","PIPA_CONSENT":"Consent, Art. 39-3
2024-01-15 14:02:08 UTC	836	IN	Data Raw: 20 70 61 72 61 2e 20 31 20 73 2e 20 31 20 54 54 44 53 47 22 2c 22 54 54 44 53 47 5f 32 5f 31 22 3a 22 c2 a7 20 32 35 20 70 61 72 61 2e 20 32 20 6e 6f 2e 20 31 20 54 54 44 53 47 22 2c 22 54 54 44 53 47 5f 32 5f 32 22 3a 22 c2 a7 20 32 35 20 70 61 72 61 2e 20 32 20 6e 6f 2e 20 32 20 54 54 44 53 47 22 2c 22 54 57 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 31 39 28 31 29 20 6e 6f 2e 20 35 20 6f 66 20 74 68 65 20 50 44 50 41 22 2c 22 55 41 5f 43 4f 4d 50 4c 49 41 4e 43 45 5f 4c 41 57 22 3a 22 43 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 61 20 6c 65 67 61 6c 20 6f 62 6c 69 67 61 74 69 6f 6e 2c 20 41 72 74 2e 20 31 31 20 28 31 29 20 28 33 29 20 4c 61 77 20 6f 66 20 55 6b 72 61 69 6e 65 20 27 4f 6e 20 50 65 72 73 6f 6e 61 6c 20 Data Ascii: para. 1 s. 1 TTDSG","TTDSG_2_1":" 25 para. 2 no. 1 TTDSG","TTDSG_2_2":" 25 para. 2 no. 2 TTDSG","TW_CONSENT":"Consent, Art. 19(1) no. 5 of the PDPA","UA_COMPLIANCE_LAW":"Compliance with a legal obligation, Art. 11 (1) (3) Law of Ukraine 'On Personal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49770	142.250.31.99	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:09 UTC	864	OUT	GET /recaptcha/api.js?render=explicit&onload=ng2recaptchaloaded&hl=ENG HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
2024-01-15 14:02:09 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 15 Jan 2024 14:02:09 GMT Date: Mon, 15 Jan 2024 14:02:09 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:09 UTC	724	IN	Data Raw: 35 30 35 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 505/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-01-15 14:02:09 UTC	568	IN	Data Raw: 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 Data Ascii: VhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js'
2024-01-15 14:02:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49772	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:09 UTC	637	OUT	GET /browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:09 UTC	1003	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrbK91kAaoBZD8OMZC0_kXFFeSATMk4g4Vc96IJ07kAdnTPfDkjv4L0e3FO2If68AjZ1UzHSjFL8Q x-goog-generation: 1704976787520111 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 757 Content-Encoding: gzip x-goog-hash: crc32c=y3e66w== x-goog-hash: md5=0olMEpijOujB4kOin5pHZQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 757 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:21 GMT Expires: Fri, 10 Jan 2025 12:40:21 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:47 GMT ETag: "d2894c1298a33ae8c1e243a29f9a4765" Content-Type: text/javascript Age: 350508 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:09 UTC	249	IN	Data Raw: 1f 8b 08 08 93 e1 9f 65 02 ff 74 6d 70 6a 6c 6c 37 7a 70 68 33 00 9d 55 5d 6f 9b 30 14 7d df af 48 d8 0b 48 0e 4b d4 34 69 89 d0 94 4f a9 12 6d a5 25 db eb 64 8c 03 de c0 8e 6c 43 cb 02 ff 7d 36 09 09 b4 a9 16 4d 44 b1 7d ef b9 e7 de cb b1 0d 49 76 8c cb fd b4 03 45 07 83 9f 7a 60 00 32 3d 52 a0 fe d4 8f 00 28 f5 c8 01 4c f5 08 cb 2d 67 89 61 7f 21 34 c0 af 76 c2 82 34 c6 f6 2f 61 4c c8 81 ac 8a 92 00 ea 41 80 2a 26 a8 63 56 84 0b e9 c1 1c f3 79 2a 24 4b c8 1f 28 09 a3 bd 7b 7f e4 df dc 0c 07 bd 60 b0 f5 47 fd e1 b8 49 18 d7 d1 b3 54 4a 46 45 3b d4 47 f7 63 18 c0 a0 87 fc 31 1a f4 d1 a8 19 ca 75 f6 14 54 0d a0 9a 66 8d 11 a3 41 55 c5 f7 87 de 68 78 33 1a 8c 46 41 ef 6e e8 8f f1 dd dd 6d 15 9f 41 de 09 dd 6d 4a 91 4e 62 4a 6b 5f cf 3b a1 Data Ascii: etmpjll7zph3U]o0}HHK4iOm%dlC}6MD}IvEz`2=R(L-ga!4v4/aLA&cVy$K({`GITJFE;Gc1uTfAUhx3FAnmAmJNbJk_;
2024-01-15 14:02:09 UTC	508	IN	Data Raw: 89 41 68 ed 35 22 03 39 f0 40 04 7c 57 46 44 4c d4 60 23 18 c7 a6 5e 01 8d 2a 8a ca a1 b1 89 1b da a8 59 f9 84 63 99 72 da f1 6d ff d0 97 cb 4c fd ec 4b 40 f1 4b 27 36 43 cb aa 66 a2 9a ed 13 c6 b1 b3 f7 21 fa 1d 72 96 d2 60 ce 62 c6 1d 6a 12 93 a6 71 ec ba ae 99 b9 87 59 f2 35 63 24 e8 f4 9d c4 46 1a a4 ca 38 18 14 28 ab 7d 99 ad 09 67 92 ce 4e 8c 16 30 3e f7 fb c3 db e9 ad 61 01 89 5f e5 fb 14 f9 15 29 f2 da 97 d7 29 36 8a 4b 93 af a6 fa 31 ac 12 08 98 5d 68 e6 9c c7 bb 22 8f 57 fb 3c 5b d3 bd 69 e5 5c ff 99 35 ba 82 35 aa 7d 51 cd 5a 55 5f 96 16 f0 ed ed 69 ff b6 c5 4a 4f 62 05 07 b1 50 cc 04 7e de 69 9d 9d b0 11 66 37 1c 45 a1 ab 01 11 09 f0 61 67 2f 30 cd 1d 6e b6 f0 6d 2f e8 86 b6 2f ab e9 83 f8 41 04 f1 63 6c 55 0c 1b 16 86 31 16 4e 77 00 88 98 43 Data Ascii: Ah5"9@\|WFDL`#^*YcrmLK@K'6Cf!r`bjqY5c$F8(}gN0>a_))6K1]h"W<[i\55}QZU_iJObP~if7Eag/0nm//AclU1NwC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49774	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:09 UTC	376	OUT	GET /translations/translations-en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:09 UTC	1004	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpy1SieHxCOoZH3LJ7-epjv-wxGBWHHMalRNM466EVRBrXfPhb9TJnGPQ8kKljGMyDpNG7-9xMnjQ Date: Mon, 15 Jan 2024 14:02:09 GMT Cache-Control: public, max-age=86400, s-maxage=86400 Expires: Tue, 16 Jan 2024 14:02:09 GMT Last-Modified: Mon, 11 Sep 2023 07:33:50 GMT ETag: W/"3d054eecf556c1878bee9e30149c27e6" Vary: Accept-Encoding x-goog-generation: 1694417630850337 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2360 Content-Type: application/json x-goog-hash: crc32c=cuU6lQ== x-goog-hash: md5=PQVO7PVWwYeL7p4wFJwn5g== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:09 UTC	248	IN	Data Raw: 61 32 61 0d 0a 7b 22 6c 61 62 65 6c 73 22 3a 7b 22 41 4c 4c 22 3a 22 41 6c 6c 22 2c 22 42 41 43 4b 22 3a 22 42 61 63 6b 22 2c 22 43 49 44 5f 54 49 54 4c 45 22 3a 22 49 44 20 74 6f 20 72 65 71 75 65 73 74 20 63 6f 6e 73 65 6e 74 20 64 61 74 61 22 2c 22 43 4e 49 4c 5f 44 45 4e 59 5f 4c 49 4e 4b 5f 54 45 58 54 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 61 63 63 65 70 74 69 6e 67 22 2c 22 43 4f 4f 4b 49 45 5f 52 45 46 52 45 53 48 22 3a 22 43 6f 6f 6b 69 65 20 72 65 66 72 65 73 68 22 2c 22 43 4f 4f 4b 49 45 5f 53 54 4f 52 41 47 45 22 3a 22 43 6f 6f 6b 69 65 20 73 74 6f 72 61 67 65 22 2c 22 44 45 54 41 49 4c 53 22 3a 22 44 65 74 61 69 6c 73 22 2c 22 4c 41 4e 47 55 41 47 45 5f 54 4f 4f 4c 54 49 50 22 3a 22 43 68 61 6e 67 65 Data Ascii: a2a{"labels":{"ALL":"All","BACK":"Back","CID_TITLE":"ID to request consent data","CNIL_DENY_LINK_TEXT":"Continue without accepting","COOKIE_REFRESH":"Cookie refresh","COOKIE_STORAGE":"Cookie storage","DETAILS":"Details","LANGUAGE_TOOLTIP":"Change
2024-01-15 14:02:09 UTC	1252	IN	Data Raw: 73 20 6f 63 63 75 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 61 66 74 65 72 20 73 65 6c 65 63 74 69 6f 6e 2e 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 22 3a 22 53 75 62 73 65 72 76 69 63 65 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 22 3a 22 53 75 62 73 65 72 76 69 63 65 73 22 2c 22 53 55 42 5f 53 45 52 56 49 43 45 53 5f 44 45 53 43 52 49 50 54 49 4f 4e 22 3a 22 42 65 6c 6f 77 20 79 6f 75 20 63 61 6e 20 66 69 6e 64 20 61 6c 6c 20 74 68 65 20 73 65 72 76 69 63 65 73 20 74 68 61 74 20 61 72 65 20 73 75 62 6f 72 64 69 6e 61 74 65 20 74 6f 20 74 68 69 73 20 73 65 72 76 69 63 65 2e 20 54 68 65 20 63 75 72 72 65 6e 74 20 63 6f 6e 73 65 6e 74 20 73 74 61 74 75 73 20 6f 66 20 74 68 69 73 20 73 65 72 76 69 63 65 20 61 70 70 6c 69 65 73 20 74 6f 20 61 6c 6c 20 73 Data Ascii: s occur immediately after selection.","SUB_SERVICE":"Subservice","SUB_SERVICES":"Subservices","SUB_SERVICES_DESCRIPTION":"Below you can find all the services that are subordinate to this service. The current consent status of this service applies to all s
2024-01-15 14:02:09 UTC	1109	IN	Data Raw: 65 6e 74 72 69 63 73 43 61 72 64 22 3a 22 43 61 72 64 22 2c 22 75 73 65 72 63 65 6e 74 72 69 63 73 4c 69 73 74 22 3a 22 4c 69 73 74 22 2c 22 76 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 54 6f 67 67 6c 65 22 3a 22 43 6f 6e 73 65 6e 74 22 2c 22 76 65 6e 64 6f 72 44 65 74 61 69 6c 65 64 53 74 6f 72 61 67 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 22 44 65 74 61 69 6c 65 64 20 53 74 6f 72 61 67 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 76 65 6e 64 6f 72 4c 65 67 49 6e 74 54 6f 67 67 6c 65 22 3a 22 4c 65 67 69 74 69 6d 61 74 65 20 49 6e 74 65 72 65 73 74 22 7d 2c 22 6c 65 67 61 6c 42 61 73 69 73 22 3a 7b 22 41 44 47 4d 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 31 30 28 31 29 28 61 29 20 44 49 46 43 20 4c 61 77 20 4e 6f 2e 20 35 Data Ascii: entricsCard":"Card","usercentricsList":"List","vendorConsentToggle":"Consent","vendorDetailedStorageInformation":"Detailed Storage Information","vendorLegIntToggle":"Legitimate Interest"},"legalBasis":{"ADGM_CONSENT":"Consent, Art. 10(1)(a) DIFC Law No. 5
2024-01-15 14:02:09 UTC	1252	IN	Data Raw: 31 31 35 66 0d 0a 5f 4c 41 57 5f 41 32 41 33 22 3a 22 43 6f 6e 73 65 6e 74 3a 20 41 72 74 2e 20 32 20 61 6e 64 20 41 72 74 20 33 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 4c 61 77 22 2c 22 44 53 47 5f 45 4b 44 5f 32 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 32 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 33 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 33 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 34 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 34 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 35 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 35 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 4b 44 5f 36 22 3a 22 41 72 74 2e 20 36 20 4e 72 2e 20 36 20 44 53 47 2d 45 4b 44 22 2c 22 44 53 47 5f 45 Data Ascii: 115f_LAW_A2A3":"Consent: Art. 2 and Art 3 Personal Data Protection Law","DSG_EKD_2":"Art. 6 Nr. 2 DSG-EKD","DSG_EKD_3":"Art. 6 Nr. 3 DSG-EKD","DSG_EKD_4":"Art. 6 Nr. 4 DSG-EKD","DSG_EKD_5":"Art. 6 Nr. 5 DSG-EKD","DSG_EKD_6":"Art. 6 Nr. 6 DSG-EKD","DSG_E
2024-01-15 14:02:09 UTC	1252	IN	Data Raw: 63 74 20 4e 6f 2e 20 35 37 20 6f 66 20 32 30 30 33 2c 20 61 73 20 61 6d 65 6e 64 65 64 29 22 2c 22 4b 44 47 5f 31 5f 41 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 61 20 4b 44 47 22 2c 22 4b 44 47 5f 31 5f 44 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 64 20 4b 44 47 22 2c 22 4b 44 47 5f 31 5f 45 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 65 20 4b 44 47 22 2c 22 4b 44 47 5f 31 5f 46 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 66 20 4b 44 47 22 2c 22 4b 44 47 5f 31 5f 47 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 67 20 4b 44 47 22 2c 22 4b 44 47 5f 42 22 3a 22 c2 a7 20 36 20 70 61 72 61 2e 20 31 20 6c 69 74 2e 20 62 20 4b 44 47 22 2c 22 4b 44 47 5f 43 22 3a 22 Data Ascii: ct No. 57 of 2003, as amended)","KDG_1_A":" 6 para. 1 lit. a KDG","KDG_1_D":" 6 para. 1 lit. d KDG","KDG_1_E":" 6 para. 1 lit. e KDG","KDG_1_F":" 6 para. 1 lit. f KDG","KDG_1_G":" 6 para. 1 lit. g KDG","KDG_B":" 6 para. 1 lit. b KDG","KDG_C":"
2024-01-15 14:02:09 UTC	1252	IN	Data Raw: 73 65 3a 20 20 44 50 50 20 31 28 31 29 2c 20 53 63 68 2e 20 31 2c 20 50 44 50 4f 22 2c 22 50 44 50 5f 4c 41 57 5f 41 33 22 3a 22 43 6f 6e 73 65 6e 74 3a 20 41 72 74 2e 20 33 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 20 4c 61 77 22 2c 22 50 49 50 41 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 41 72 74 2e 20 33 39 2d 33 28 31 29 20 6f 66 20 74 68 65 20 50 49 50 41 22 2c 22 50 4f 50 49 41 5f 43 4f 4e 53 45 4e 54 22 3a 22 43 6f 6e 73 65 6e 74 2c 20 53 65 63 74 69 6f 6e 20 31 31 28 31 29 28 61 29 20 6f 66 20 50 4f 50 49 41 22 2c 22 50 4f 50 49 41 5f 43 4f 4e 54 52 41 43 54 22 3a 22 43 6f 6e 74 72 61 63 74 75 61 6c 20 6e 65 63 65 73 73 69 74 79 2c 20 53 65 63 74 69 6f 6e 20 31 31 28 31 29 28 62 29 20 6f 66 20 50 Data Ascii: se: DPP 1(1), Sch. 1, PDPO","PDP_LAW_A3":"Consent: Art. 3 Personal Data Protection Law","PIPA_CONSENT":"Consent, Art. 39-3(1) of the PIPA","POPIA_CONSENT":"Consent, Section 11(1)(a) of POPIA","POPIA_CONTRACT":"Contractual necessity, Section 11(1)(b) of P
2024-01-15 14:02:09 UTC	704	IN	Data Raw: 31 29 20 6e 6f 2e 20 35 20 6f 66 20 74 68 65 20 50 44 50 41 22 2c 22 55 41 5f 43 4f 4d 50 4c 49 41 4e 43 45 5f 4c 41 57 22 3a 22 43 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 61 20 6c 65 67 61 6c 20 6f 62 6c 69 67 61 74 69 6f 6e 2c 20 41 72 74 2e 20 31 31 20 28 31 29 20 28 33 29 20 4c 61 77 20 6f 66 20 55 6b 72 61 69 6e 65 20 27 4f 6e 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 27 22 2c 22 55 41 5f 50 44 50 22 3a 22 43 6f 6e 73 65 6e 74 3a 20 41 72 74 2e 20 31 31 20 28 31 29 20 28 31 29 20 4c 61 77 20 6f 66 20 55 6b 72 61 69 6e 65 20 27 4f 6e 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 50 72 6f 74 65 63 74 69 6f 6e 27 22 2c 22 55 4b 47 44 50 52 5f 31 5f 41 22 3a 22 41 72 74 2e 20 36 20 70 61 72 61 2e 20 31 20 73 2e 20 31 Data Ascii: 1) no. 5 of the PDPA","UA_COMPLIANCE_LAW":"Compliance with a legal obligation, Art. 11 (1) (3) Law of Ukraine 'On Personal Data Protection'","UA_PDP":"Consent: Art. 11 (1) (1) Law of Ukraine 'On Personal Data Protection'","UKGDPR_1_A":"Art. 6 para. 1 s. 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49775	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:09 UTC	379	OUT	GET /session/1px.png?settingsId=o_tc3l2da HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:09 UTC	817	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqd87CrpG7lOuvsezUql0DQOa0HHFHBfEv7D_Pajiv02uieNyCcKN1IVo2Vkga9Qu8XfN4 x-goog-generation: 1588928773413784 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 522 Content-Encoding: gzip x-goog-hash: crc32c=pFwm0Q== x-goog-hash: md5=NwKtpzuJUQF7hFHL1qllIw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 522 Server: UploadServer Date: Mon, 15 Jan 2024 13:50:23 GMT Expires: Mon, 15 Jan 2024 14:20:23 GMT Cache-Control: public,max-age=1800,no-transform Age: 706 Last-Modified: Fri, 08 May 2020 09:06:13 GMT ETag: "3702ada73b8951017b8451cbd6a96523" Content-Type: image/png Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:09 UTC	435	IN	Data Raw: 1f 8b 08 08 00 21 b5 5e 02 ff 74 6d 70 43 66 57 47 41 45 00 01 e9 01 16 fe 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 01 82 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 cf 2b 44 51 14 c7 3f 66 c8 e4 47 14 0b 0b 8b 49 58 21 46 89 94 32 93 86 92 34 46 f9 b5 99 79 f3 66 46 cd 8f d7 7b 6f d2 64 ab 6c a7 28 b1 f1 6b c1 5f c0 56 59 2b 45 a4 64 65 61 4d 6c 98 9e f3 bc a9 91 cc bd 9d 73 3e f7 7b ef 39 dd 7b 2e b8 c2 29 25 6d 54 f7 43 3a 63 ea a1 a0 df bb b0 b8 e4 ad 7d a6 06 8f d8 28 83 11 c5 d0 c6 67 67 a7 a9 38 3e ee a8 b2 e3 4d af 5d ab f2 b9 7f 47 7d 4c 35 14 a8 f2 08 8f 29 9a 6e 0a 4f 0a 4f af 99 9a cd db c2 ad 4a 32 12 13 3e 15 ee d1 e5 82 c2 b7 b6 1e 75 f8 c5 Data Ascii: !^tmpCfWGAEPNGIHDRiCCPsRGB IEC61966-2.1(u+DQ?fGIX!F24FyfF{odl(k_VY+EdeaMls>{9{.)%mTC:c}(gg8>M]G}L5)nOOJ2>u
2024-01-15 14:02:09 UTC	87	IN	Data Raw: ba 7c d5 15 ec ee 41 b7 9c 6f 5a f9 06 8c 92 67 f7 99 b6 60 68 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 09 a2 9e 66 e9 01 00 00 Data Ascii: \|AoZg`hpHYs.#.#x?vIDATc````NIENDB`f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49776	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:10 UTC	638	OUT	GET / HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:10 UTC	258	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Cache-Control: private Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 14:02:09 GMT Connection: close Set-Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2; path=/ Content-Length: 69482
2024-01-15 14:02:10 UTC	4237	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 20 53 79 6e 65 73 67 79 20 7c 20 54 68 65 20 45 53 47 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 20 63 6f 6d 70 61 6e 69 65 73 20 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 79 6e 65 73 67 79 20 69 73 20 74 68 65 20 70 61 72 74 6e 65 72 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 2c 20 74 68 72 6f 75 67 68 20 69 74 73 20 73 65 72 76 69 63 65 73 2c 20 66 69 72 6d 26 23 33 39 3b 73 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 20 74 6f 77 61 72 64 20 Data Ascii: <!doctype html><html lang="en"><head> <title> Synesgy \| The ESG platform for companies </title> <meta name="description" content="Synesgy is the partner that supports, through its services, firm's transformation process toward
2024-01-15 14:02:10 UTC	8760	IN	Data Raw: 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 6f 6c 6c 61 70 73 69 62 6c 65 20 77 72 61 70 70 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 6c 61 70 73 65 20 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 72 6f 77 20 75 73 65 72 2d 6d 65 6e 75 20 6d 65 6e 75 20 6e 61 76 62 61 72 2d 6e 61 76 20 6d 65 2d 61 75 74 6f 20 70 73 2d 6c 67 2d 30 20 70 72 2d 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: </button>--> ... Collapsible wrapper --> <div class="collapse navbar-collapse d-flex justify-content-end"> <ul class="row user-menu menu navbar-nav me-auto ps-lg-0 pr-0">
2024-01-15 14:02:10 UTC	1460	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 63 6f 75 6e 74 72 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 78 6d 6b 68 79 30 65 31 2f 63 79 70 72 75 73 2d 33 33 2d 33 33 78 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li class="single-country"> <img src="/media/xmkhy0e1/cyprus-33-33x.png" />
2024-01-15 14:02:10 UTC	4380	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 72 6f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 22 3e 52 6f 6d Data Ascii: <a href="https://service.synesgy.com/ro" target="_blank" class="streched-link">Rom
2024-01-15 14:02:10 UTC	16383	IN	Data Raw: 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 61 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 22 3e 55 6e 69 74 65 64 20 41 72 61 62 20 45 6d 69 72 61 74 65 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ref="https://service.synesgy.com/ae" class="streched-link">United Arab Emirates</a>
2024-01-15 14:02:10 UTC	26	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-01-15 14:02:10 UTC	6275	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 62 6c 75 72 62 2d 68 20 6e 6f 2d 62 6f 72 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 77 72 61 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 66 69 6c 69 65 72 61 2d 69 63 6f 6e 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 68 73 65 6e 74 6b 6f 69 2f 61 6c 74 2e 73 76 67 22 20 61 6c 74 3d 22 41 6c 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="col-12 blurb-h no-border"> <div class="icon-wrap"> <img class="filiera-icon" src="/media/hsentkoi/alt.svg" alt="Alt"> </div>
2024-01-15 14:02:10 UTC	15266	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2f 66 61 71 2f 22 3e 46 41 51 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 Data Ascii: </li> <li class="nav-item"> <a class="nav-link" href="/en/faq/">FAQ</a> </li> <li class="nav-item">
2024-01-15 14:02:10 UTC	12695	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 63 6f 75 6e 74 72 79 20 6d 79 2d 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 66 6c 61 67 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 64 6b 32 6e 79 6f 66 74 2f 68 6f 6e 67 6b 6f 6e 67 2d 33 33 2d 33 Data Ascii: </li> <li class="single-country my-2"> <img class="mobile-flag" src="/media/dk2nyoft/hongkong-33-3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49778	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:10 UTC	666	OUT	GET /browser-ui/3.34.1/FirstLayerCustomization-9b6b3341-d1fb6047.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:10 UTC	1005	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPogDZ98z_POPSoXNAZOZOqEjHtjsPx9GJQZ0Q2iyOmRCB-t9XaN0pR7tBxKmUyIpP_J25HGTPYJHQ x-goog-generation: 1704976788003355 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1075 Content-Encoding: gzip x-goog-hash: crc32c=vpniAw== x-goog-hash: md5=mqLbrOyiy3LgaFW0FQqzhQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1075 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:22 GMT Expires: Fri, 10 Jan 2025 12:40:22 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:48 GMT ETag: "9aa2dbaceca2cb72e06855b4150ab385" Content-Type: text/javascript Age: 350508 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:10 UTC	247	IN	Data Raw: 1f 8b 08 08 93 e1 9f 65 02 ff 74 6d 70 67 72 70 79 78 67 68 62 00 8d 56 db 6e e3 36 10 7d ef 57 68 5d 20 88 80 89 ea 45 92 6e eb 40 0d 7c c1 62 8d a6 c9 22 89 fb d0 37 5a 1a c9 ac 25 52 20 29 c7 8a ed 7f 2f 49 89 b6 9c 38 5b 59 41 68 f1 0c cf 5c c8 39 26 cd 0b 2e d4 86 70 8f 48 8f 83 fe a7 ff 32 20 2b 33 52 20 2f 66 64 40 d6 66 14 40 2a 33 2a 20 af 66 8c 77 89 e0 79 2f f8 85 b2 18 d7 41 ce e3 32 c3 e0 5f d9 bb 59 11 e1 61 98 94 2c 52 94 b3 f3 cc df 98 19 16 66 41 54 4a c5 73 fa 4a 0c 70 a3 16 54 06 24 a3 29 cb 91 a9 f0 9c 95 59 16 86 ec 76 c5 69 ec f5 07 2c 98 97 4a 71 36 74 16 fe 76 ab 82 6f 0f 8f d3 7f 1e ee 9f 87 77 60 d7 cf b9 88 51 3c 92 98 96 32 a4 e7 fc 04 4b cb 62 64 19 a1 77 55 ac 7b be 5f 33 48 8c 38 8b ef 48 85 42 87 98 Data Ascii: etmpgrpyxghbVn6}Wh] En@\|b"7Z%R )/I8[YAh\9&.pH2 +3R /fd@f@3 fwy/A2_Ya,RfATJsJpT$)Yvi,Jq6tvow`Q<2KbdwU{_3H8HB
2024-01-15 14:02:10 UTC	828	IN	Data Raw: 73 81 53 96 f0 da 72 26 b2 20 43 96 aa c5 1f fd db 13 e0 c0 78 db 01 09 7b 3f 27 f6 d3 83 f2 90 b9 82 b8 ce 1d a1 04 09 2b 88 20 85 04 2a 58 c0 18 72 98 c3 08 0a 58 c2 14 66 30 09 e3 53 d5 a9 a7 c6 52 ba ea 84 e7 a8 2d 13 24 aa 14 28 75 45 ea 34 35 80 2e 63 3c ac f2 cf ce e2 a0 94 38 63 92 24 38 76 d3 67 67 86 ec 93 26 92 aa ca 50 ea a9 db d6 77 9b 54 5d 1b 64 64 9e e1 77 41 57 24 aa ea ac 43 15 14 ed f7 a9 fc 9b 4a aa ad ea 15 09 d7 5b b9 49 48 4e b3 6a c0 f7 51 97 61 fd 6d e2 a2 9c 58 cb 76 02 a5 83 ca a0 5e 0e bd 51 46 d9 f2 2f 12 3d 55 52 61 fe 55 2f 00 ef 82 14 45 86 17 d2 4e 81 f7 84 29 47 6f 36 05 ef 91 cf b9 e2 e0 3d ac ab 14 d9 c5 13 61 12 bc d9 bc 64 aa 04 6f 4c 98 22 02 75 5e de 57 2a 88 57 a3 13 61 3c d6 df bf 61 b6 42 45 23 e2 dd 63 89 ad 77 Data Ascii: sSr& Cx{?'+ XrXf0SR-$(uE45.c<8c$8vgg&PwT]ddwAW$CJ[IHNjQamXv^QF/=URaU/EN)Go6=adoL"u^WWa<aBE#cw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49779	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:10 UTC	663	OUT	GET /browser-ui/3.34.1/ButtonsCustomization-bc97adad-cb7c10c6.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:10 UTC	1021	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqgN9BFV-1_A5uM1DGduS2zT0GpuAsbNmUsFimMKf4fWLHormUxWe0ZIuVMVzKUj5ojFra09XNkUmm86zsAn5IgVTT8w0Q0 x-goog-generation: 1704976786311695 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 236 Content-Encoding: gzip x-goog-hash: crc32c=spZYTw== x-goog-hash: md5=0PvKMeucz4EZW2d7P97u5g== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 236 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:22 GMT Expires: Fri, 10 Jan 2025 12:40:22 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:46 GMT ETag: "d0fbca31eb9ccf81195b677b3fdeeee6" Content-Type: text/javascript Age: 350508 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:10 UTC	231	IN	Data Raw: 1f 8b 08 08 92 e1 9f 65 02 ff 74 6d 70 72 75 68 5f 5f 38 75 61 00 8d 91 4d 6a c3 30 10 85 f7 3d 85 c9 ca 06 a1 66 1d 23 0a e9 15 72 01 55 a3 a4 93 ca 33 41 1e 05 a7 8e ef 5e ff 44 2d 74 11 0c b3 18 de 7b 7c f3 60 b0 b9 70 94 de b6 c5 38 3c 1c 23 37 1b fd 8a 04 be d3 0d 43 0a 5e 9f db 4d 7d b5 b1 08 e6 98 c8 09 32 95 a1 ea 27 85 14 28 51 a8 a2 09 da a5 56 b8 c1 6f 3b 05 6a f9 c4 56 5b e7 fc 45 4c ff 61 dd d7 29 72 22 78 e7 c0 71 c7 25 a5 10 8c 31 25 99 65 8b 6f 57 46 28 b6 bb a8 dd 14 a9 ee f7 45 18 43 94 3d 7a 00 f7 42 fb 5f 62 a5 c4 77 f2 9f 0b 2b b8 90 3d f8 e3 1e 46 56 35 a8 b9 3d 78 ba 3d eb 2e 2b 6e 48 f6 64 c6 ad 68 8e 2b a8 98 3d cc d4 a5 f7 50 fb 6e fe 66 18 ea 97 1f 68 69 ea Data Ascii: etmpruh__8uaMj0=f#rU3A^D-t{\|`p8<#7C^M}2'(QVo;jV[ELa)r"xq%1%eoWF(EC=zB_bw+=FV5=x=.+nHdh+=Pnfhi
2024-01-15 14:02:10 UTC	5	IN	Data Raw: 5d d9 01 00 00 Data Ascii: ]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49781	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:10 UTC	656	OUT	GET /browser-ui/3.34.1/SecondLayerUI-6436166d-84b7e885.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/DefaultUI-d53163c6-b49891fd.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:10 UTC	1015	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrZjSd-BDLdhZ2xuWeLNmLxxiMoNQt0ayFOtcL95PTLp7c1yQTuvrGF7ENoP1RX0wvxSxxFMbtYffDTAvqK6Cb6Jg x-goog-generation: 1704976789009612 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 318 Content-Encoding: gzip x-goog-hash: crc32c=8OIf/w== x-goog-hash: md5=ikQZPvXhkKnpOPZpc4Z0LQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 318 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:21 GMT Expires: Fri, 10 Jan 2025 12:40:21 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:49 GMT ETag: "8a44193ef5e190a9e938f6697386742d" Content-Type: text/javascript Age: 350509 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:10 UTC	237	IN	Data Raw: 1f 8b 08 08 94 e1 9f 65 02 ff 74 6d 70 69 6d 63 5f 72 67 69 30 00 75 92 41 6f c2 30 0c 85 ef fb 15 85 53 2b 45 19 bb ae 8a 26 c6 76 98 34 69 93 86 76 37 8d 81 4c 69 3c c5 69 81 41 ff fb d2 42 45 25 e0 64 2b 9f df f3 53 12 53 fe 92 0f 7b 98 26 c0 09 0a a0 b6 82 00 df 56 16 f0 dc 56 23 da 43 4e a8 59 7a 2a c7 f2 de 38 8d 5b 59 92 ae 2c ca 1f 1e e7 75 14 78 b5 ac 5c 11 0c b9 14 b2 7d 58 1b 96 86 3f 6a f4 16 76 af 0e 16 16 b5 c2 88 1a 11 ce 93 98 ed 3b ad 08 79 a7 d0 b8 84 ca 86 6f 83 1b 05 29 4a c6 82 9c 7e 87 1d fa 21 13 2c 67 d3 79 26 3a cd da 68 7c 81 00 9f 9e 0a 64 36 6e f5 85 be 36 b1 bf b0 b8 3d 2a 46 0f 27 bb 8b d0 26 a6 3c 22 5e d3 66 06 01 57 e4 0d f2 1c 16 17 0b 02 2c f8 3c f1 c6 27 0f 31 9a 0c Data Ascii: etmpimc_rgi0uAo0S+E&v4iv7Li<iABE%d+SS{&VV#CNYz8[Y,ux\}X?jv;yo)J~!,gy&:h\|d6n6=F'&<"^fW,<'1
2024-01-15 14:02:10 UTC	81	IN	Data Raw: 2c fa 9d b7 0c 7a 7e 45 1e f1 8c 2c f9 a8 a3 d4 55 d6 2a a5 d2 a0 fa ce 2b 94 45 c5 81 4a f3 07 ed 05 67 87 43 4d 46 27 93 48 fd d3 b1 7d f4 b2 68 3d 86 2c f4 2c 0c d3 c4 80 99 68 bd b3 26 c7 6d f7 53 e2 4b 35 f9 dd 3f e5 bb 31 fd 37 02 00 00 Data Ascii: ,z~E,U*+EJgCMF'H}h=,,h&mSK5?17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49777	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:10 UTC	622	OUT	GET /assets/css/bootstrap.min.css?v=5 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:10 UTC	240	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/css Date: Mon, 15 Jan 2024 14:02:09 GMT Accept-Ranges: bytes ETag: "065303346e5d71:0" Connection: close Last-Modified: Mon, 29 Nov 2021 17:26:10 GMT Content-Length: 191344
2024-01-15 14:02:10 UTC	14402	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 20 20 2d 2d 62 6c 75 65 3a 20 23 30 30 33 62 37 39 3b 0d 0a 20 20 2d 2d 69 6e Data Ascii: /! Bootstrap v4.6.1 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root { --blue: #003b79; --in
2024-01-15 14:02:10 UTC	16383	IN	Data Raw: 2e 6f 66 66 73 65 74 2d 73 6d 2d 33 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 20 7d 0d 0a 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 34 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 20 7d 0d 0a 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 35 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 3b 20 7d 0d 0a 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 36 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 30 25 3b 20 7d 0d 0a 0d 0a 20 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 37 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 20 7d 0d 0a 0d 0a 20 20 2e 6f 66 Data Ascii: .offset-sm-3 { margin-left: 25%; } .offset-sm-4 { margin-left: 33.33333333%; } .offset-sm-5 { margin-left: 41.66666667%; } .offset-sm-6 { margin-left: 50%; } .offset-sm-7 { margin-left: 58.33333333%; } .of
2024-01-15 14:02:10 UTC	26	IN	Data Raw: 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 35 72 65 6d 3b 0d 0a 20 Data Ascii: font-size: 1.25rem;
2024-01-15 14:02:11 UTC	10794	IN	Data Raw: 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 20 7d 0d 0a 0d 0a 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 73 6d 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 63 61 6c 63 28 30 2e 32 35 72 65 6d 20 2b 20 31 70 78 29 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 30 2e 32 35 72 65 6d 20 2b 20 31 70 78 29 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 72 65 6d 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 20 7d 0d 0a 0d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 33 37 35 72 65 6d 20 30 Data Ascii: line-height: 1.5; }.col-form-label-sm { padding-top: calc(0.25rem + 1px); padding-bottom: calc(0.25rem + 1px); font-size: 0.875rem; line-height: 1.5; }.form-control-plaintext { display: block; width: 100%; padding: 0.375rem 0
2024-01-15 14:02:11 UTC	11444	IN	Data Raw: 65 2d 6c 61 62 65 6c 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 63 33 35 34 35 3b 0d 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 32 32 30 2c 20 35 33 2c 20 36 39 2c 20 30 2e 32 35 29 3b 20 7d 0d 0a 0d 0a 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 20 77 72 61 70 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 20 7d 0d 0a 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 7d 0d 0a 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 Data Ascii: e-label { border-color: #dc3545; box-shadow: 0 0 0 0.2rem rgba(220, 53, 69, 0.25); }.form-inline { display: flex; flex-flow: row wrap; align-items: center; } .form-inline .form-check { width: 100%; } @media (min-width: 576px)
2024-01-15 14:02:11 UTC	15266	IN	Data Raw: 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 20 2e 73 68 6f 77 20 3e 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 72 65 6d 20 72 67 62 61 28 31 30 38 2c 20 31 31 37 2c 20 31 32 35 2c 20 30 2e 35 29 3b 20 7d 0d 0a 0d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 62 61 31 37 33 3b 0d Data Ascii: ot(.disabled):active:focus, .btn-outline-secondary:not(:disabled):not(.disabled).active:focus, .show > .btn-outline-secondary.dropdown-toggle:focus { box-shadow: 0 0 0 0.2rem rgba(108, 117, 125, 0.5); }.btn-outline-success { color: #1ba173;
2024-01-15 14:02:11 UTC	16383	IN	Data Raw: 20 3e 20 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 0d 0a 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 3e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 20 7d 0d 0a 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 3e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 34 3b 20 7d 0d 0a 20 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 3e 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 2c 0d 0a 20 20 2e Data Ascii: > .custom-select:focus, .input-group > .custom-file .custom-file-input:focus ~ .custom-file-label { z-index: 3; } .input-group > .custom-file .custom-file-input:focus { z-index: 4; } .input-group > .form-control:not(:first-child), .
2024-01-15 14:02:11 UTC	26	IN	Data Raw: 30 2e 35 72 65 6d 20 31 72 65 6d 3b 20 7d 0d 0a 20 20 2e 6e 61 76 2d 6c 69 6e Data Ascii: 0.5rem 1rem; } .nav-lin
2024-01-15 14:02:11 UTC	16383	IN	Data Raw: 6b 3a 68 6f 76 65 72 2c 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0d 0a 20 20 2e 6e 61 76 2d 6c 69 6e 6b 2e 64 69 73 61 62 6c 65 64 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0d 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 20 7d 0d 0a 0d 0a 2e 6e 61 76 2d 74 61 62 73 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 20 7d 0d 0a 20 20 2e 6e 61 76 2d 74 61 62 73 20 2e 6e 61 76 2d 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 70 Data Ascii: k:hover, .nav-link:focus { text-decoration: none; } .nav-link.disabled { color: #6c757d; pointer-events: none; cursor: default; }.nav-tabs { border-bottom: 1px solid #dee2e6; } .nav-tabs .nav-link { margin-bottom: -1p
2024-01-15 14:02:11 UTC	26	IN	Data Raw: 72 75 6d 62 2d 69 74 65 6d 20 2b 20 2e 62 72 65 61 64 63 72 75 6d 62 2d 69 74 Data Ascii: rumb-item + .breadcrumb-it

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49782	142.250.31.99	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:10 UTC	811	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
2024-01-15 14:02:10 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 15 Jan 2024 14:02:10 GMT Date: Mon, 15 Jan 2024 14:02:10 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:10 UTC	724	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-01-15 14:02:10 UTC	505	IN	Data Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 4c 74 47 72 77 4b 48 79 5a 73 6f 67 37 2b Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-LtGrwKHyZsog7+
2024-01-15 14:02:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49784	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:11 UTC	619	OUT	GET /assets/css/swiper.min.css?v=5 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:11 UTC	239	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/css Date: Mon, 15 Jan 2024 14:02:10 GMT Accept-Ranges: bytes ETag: "02bc7f713e2d71:0" Connection: close Last-Modified: Thu, 25 Nov 2021 15:49:02 GMT Content-Length: 15577
2024-01-15 14:02:11 UTC	4183	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 77 69 70 65 72 20 37 2e 33 2e 30 0d 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 31 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4e 6f 76 65 6d 62 65 72 20 31 38 2c Data Ascii: /** * Swiper 7.3.0 * Most modern mobile touch slider and framework with hardware accelerated transitions * https://swiperjs.com * * Copyright 2014-2021 Vladimir Kharlampidi * * Released under the MIT License * * Released on: November 18,
2024-01-15 14:02:11 UTC	10220	IN	Data Raw: 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 74 6f 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 Data Ascii: a(0,0,0,0))}.swiper-3d .swiper-slide-shadow-right{background-image:linear-gradient(to right,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-3d .swiper-slide-shadow-top{background-image:linear-gradient(to top,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-3d .swiper-slide-sh
2024-01-15 14:02:11 UTC	1174	IN	Data Raw: 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 77 69 70 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 63 75 62 65 2d 73 68 61 64 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 2e 36 3b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 73 77 69 70 65 72 2d 63 75 62 65 20 2e 73 77 69 70 65 72 2d 63 75 62 65 2d 73 68 61 64 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 Data Ascii: -backface-visibility:hidden;backface-visibility:hidden}.swiper-cube .swiper-cube-shadow{position:absolute;left:0;bottom:0px;width:100%;height:100%;opacity:.6;z-index:0}.swiper-cube .swiper-cube-shadow:before{content:'';background:#000;position:absolute;le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49783	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:11 UTC	619	OUT	GET /assets/css/custom.min.css?v=5 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:11 UTC	239	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/css Date: Mon, 15 Jan 2024 14:02:10 GMT Accept-Ranges: bytes ETag: "0d28316d354d81:0" Connection: close Last-Modified: Wed, 20 Apr 2022 16:24:20 GMT Content-Length: 46623
2024-01-15 14:02:11 UTC	2723	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 44 4d 20 53 61 6e 73 27 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 77 65 62 66 6f 6e 74 73 2f 73 75 62 73 65 74 2d 44 4d 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 2e 2e 2f 77 65 62 66 6f 6e 74 73 2f 73 75 62 73 65 74 2d 44 4d 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 44 4d 20 53 61 6e 73 27 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 77 65 62 66 6f 6e 74 73 2f 73 75 62 Data Ascii: @font-face{font-family:'DM Sans';src:url("../webfonts/subset-DMSans-Regular.woff2") format("woff2"),url("../webfonts/subset-DMSans-Regular.woff") format("woff");font-weight:normal;font-style:normal}@font-face{font-family:'DM Sans';src:url("../webfonts/sub
2024-01-15 14:02:11 UTC	16383	IN	Data Raw: 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 31 30 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 20 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 32 70 78 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 23 44 38 44 38 44 38 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d Data Ascii: display:block;width:40px;height:32px;overflow:hidden;text-indent:-1000px;position:relative}.contact-form .form-check label::before{content:"";position:absolute;top:2px;left:0;display:block;width:30px;height:30px;border:solid 1px #D8D8D8;border-radius:4px}
2024-01-15 14:02:11 UTC	26	IN	Data Raw: 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: decoration:none !important
2024-01-15 14:02:11 UTC	16383	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 61 72 72 6f 77 2d 72 69 67 68 74 2d 6f 72 61 6e 67 65 2e 73 76 67 29 20 62 6f 74 74 6f 6d 20 33 30 70 78 20 6c 65 66 74 20 34 39 25 2f 31 38 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 62 69 67 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 62 69 67 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 62 69 67 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f Data Ascii: ;background:transparent url(../img/arrow-right-orange.svg) bottom 30px left 49%/18px no-repeat;-webkit-transition:all 0.2s ease;transition:all 0.2s ease;margin-bottom:15px}.big-nav .nav-link:hover,.big-nav .nav-link:focus,.big-nav .nav-link:active{backgro
2024-01-15 14:02:11 UTC	26	IN	Data Raw: 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 63 6f Data Ascii: ground-repeat:no-repeat;co
2024-01-15 14:02:11 UTC	11082	IN	Data Raw: 6c 6f 72 3a 23 66 66 66 7d 2e 63 72 69 66 2d 65 73 67 2d 66 69 6c 69 65 72 61 20 2e 68 32 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 46 39 42 32 33 33 7d 2e 63 72 69 66 2d 65 73 67 2d 66 69 6c 69 65 72 61 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 35 70 78 7d 2e 63 72 69 66 2d 65 73 67 2d 66 69 6c 69 65 72 61 20 2e 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 39 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 63 72 69 66 2d 65 73 67 2d 66 69 6c 69 65 72 61 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: lor:#fff}.crif-esg-filiera .h2{margin-bottom:20px;color:#F9B233}.crif-esg-filiera img{border-radius:10px;margin-bottom:35px}.crif-esg-filiera .h3{font-size:22px;line-height:29px;color:#fff;margin-bottom:10px}.crif-esg-filiera p{font-size:18px;line-height:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49785	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:11 UTC	617	OUT	GET /assets/css/crif-esg.css?v=5 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:11 UTC	238	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: text/css Date: Mon, 15 Jan 2024 14:02:10 GMT Accept-Ranges: bytes ETag: "047e442bf5da1:0" Connection: close Last-Modified: Mon, 23 Oct 2023 14:43:18 GMT Content-Length: 16112
2024-01-15 14:02:11 UTC	1264	IN	Data Raw: 2e 63 72 69 66 2d 65 73 67 2d 66 69 6c 69 65 72 61 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 2f 2a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 63 72 69 66 2d 65 73 67 2d 66 69 6c 69 65 72 61 20 68 32 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 72 69 66 2d 65 73 67 2d 66 69 6c 69 65 72 61 20 2e 66 69 6c 69 65 72 61 2d 62 74 6e 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 Data Ascii: .crif-esg-filiera .container { /* display: flex; flex-direction: column; justify-content: center; align-items: center;*/}.crif-esg-filiera h2 { text-align: center;}.crif-esg-filiera .filiera-btn { text-align: c
2024-01-15 14:02:11 UTC	14600	IN	Data Raw: 73 75 6c 74 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 33 42 37 39 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 65 73 74 2d 70 61 64 64 69 6e 67 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 0d 0a 2e 74 65 73 74 2d 74 69 74 6f 6c 6f 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 75 74 74 6f 6e 2d 73 63 6f 70 72 69 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 36 39 70 78 3b 0d 0a 7d 0d 0a 2a 2f 0d 0a 2e 6e 6f 2d 62 6f 72 64 65 72 20 7b 0d 0a 20 20 Data Ascii: sult { color: #003B79; margin-bottom: 10px !important;}.test-padding { padding: 0px !important;}/.test-titolo{ padding-top: 50px;}.button-scopri{ position: absolute; bottom: 69px;}/.no-border {
2024-01-15 14:02:11 UTC	248	IN	Data Raw: 72 6f 75 6e 64 3a 20 75 72 6c 28 22 2e 2e 2f 69 6d 67 2f 69 63 6f 6e 65 2f 73 6d 61 6c 6c 2f 67 6c 6f 62 65 2e 73 76 67 22 29 20 63 65 6e 74 65 72 20 6c 65 66 74 20 38 70 78 2f 61 75 74 6f 20 37 30 25 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6c 61 6e 67 75 61 67 65 73 20 61 3a 6e 6f 74 28 2e 69 74 65 6d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 2e 35 70 78 20 73 6f 6c 69 64 20 23 46 39 42 32 33 33 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a Data Ascii: round: url("../img/icone/small/globe.svg") center left 8px/auto 70% no-repeat; } .languages a:not(.item) { border: 1.5px solid #F9B233; border-radius: 2px; text-decoration: none; width: 100%; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49787	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:11 UTC	637	OUT	GET /browser-ui/3.34.1/Taglogger-36e26749-73e4c0ca.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:11 UTC	1003	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpW4UaEJUm_Ntvjj80lW8MvuHZOxHARvN40Hlylmg7e8mRcJcx8onYP0nYbXYQa3YIBGTMEySvW9g x-goog-generation: 1704976789477031 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 689 Content-Encoding: gzip x-goog-hash: crc32c=5H7JKw== x-goog-hash: md5=3Sok/dSSDflVy0nk5eElpA== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 689 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:22 GMT Expires: Fri, 10 Jan 2025 12:40:22 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:49 GMT ETag: "dd2a24fdd4920df955cb49e4e5e125a4" Content-Type: text/javascript Age: 350509 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:11 UTC	249	IN	Data Raw: 1f 8b 08 08 95 e1 9f 65 02 ff 74 6d 70 68 37 7a 79 75 67 72 66 00 6d 54 4d 6f 1a 31 10 bd f7 57 6c 7c 40 b6 b2 98 d0 9c 0a da e6 d0 e6 50 29 52 2a 25 55 0e 64 2b 99 dd d9 c5 e9 ae bd b5 c7 21 14 f1 df 3b 06 16 c8 87 84 f0 da 7e 6f 3c f3 e6 43 b7 9d 75 b8 ae 12 e5 13 4c eb b8 40 fa 37 2e 66 53 39 db 32 39 d2 a6 84 17 d9 da 32 34 20 9f 3c 9b 3e 2b 97 a8 ac 0a a6 40 6d 0d 17 eb fe 33 51 b4 c1 85 f6 52 75 fa 87 f1 a8 4c 01 99 91 35 60 bf e3 62 e3 00 83 23 ac ec 9c 45 8b ab 0e 22 e0 5e 39 fa f7 47 b3 46 ac 77 0f 45 83 d3 3d c9 48 07 65 20 33 fc 88 4b 9d 58 eb 8a b3 56 b9 3f ec 2c cb 9c 04 83 6e 75 4f 86 07 03 d6 82 f2 c1 c1 fb 8b 4e 69 83 ef 8e cf 9c 34 aa 05 49 de 3a f4 0f 1a 17 9c 95 0a d5 84 09 ba 9c b1 67 ed f5 bc 01 96 4b 6d 8a 26 94 e0 Data Ascii: etmph7zyugrfmTMo1Wl\|@P)R*%Ud+!;~o<CuL@7.fS92924 <>+@m3QRuL5`b#E"^9GFwE=He 3KXV?,nuONi4I:gKm&
2024-01-15 14:02:11 UTC	440	IN	Data Raw: f9 8e 11 af 47 bf 17 88 9d 9f 3c 8e 1e 47 7c a6 86 ff 2e 86 5f 64 7e 2e 64 f0 e0 8a f8 8a 2e fc a3 84 30 92 08 1e 7b e6 2e 50 9d ed b6 a9 cd 94 84 17 74 aa c0 bb 30 2f 6d 4b 8e 72 2d a6 14 e3 70 9c 65 a4 e7 36 23 b7 15 b7 42 ec 75 41 8e 7c 96 a7 40 aa a5 67 63 91 ce 6c 1e d7 5e 6b b3 a1 a3 5c 6c d2 53 d1 b5 d1 a4 7a 7d 63 eb 1a dc 69 3a a3 37 b8 93 7d 49 4f d9 a5 54 65 79 fd 4c fe df 68 8f 60 c0 71 36 87 ca 3a 08 a6 b1 aa 64 29 3f 61 97 b6 08 2d 61 3f 20 6d c5 d3 8d c6 55 b1 50 a6 86 d7 44 b6 d0 65 09 86 51 88 07 1b 47 c6 1d 2a a4 fc a0 0c 1d e5 03 c8 6b 2a 25 b1 fd bd 8a ea ad 72 c7 c0 70 17 19 a4 26 43 e9 3b 32 ca d9 88 89 be b4 f0 20 2b 9b 8c e8 fc eb 70 7c c5 21 63 4c 16 d6 14 0a b9 99 7d ce 45 6a 66 97 f9 60 c0 e1 3c 23 f2 f1 ea 32 17 42 4c de e0 2f Data Ascii: G<G\|._d~.d.0{.Pt0/mKr-pe6#BuA\|@gcl^k\lSz}ci:7}IOTeyLh`q6:d)?a-a? mUPDeQGk%rp&C;2 +p\|!cL}Ejf`<#2BL/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49786	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:11 UTC	610	OUT	GET /assets/scripts/jquery-3.6.0.min.js HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:12 UTC	253	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/javascript Date: Mon, 15 Jan 2024 14:02:10 GMT Accept-Ranges: bytes ETag: "0f3831f8758d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 09:30:38 GMT Content-Length: 89501
2024-01-15 14:02:12 UTC	16130	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-01-15 14:02:12 UTC	26	IN	Data Raw: 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f Data Ascii: Sibling"}return!0}if(u=[m?
2024-01-15 14:02:12 UTC	9913	IN	Data Raw: 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 64 26 26 61 3d 3d 3d 65 29 7b 69 5b 68 5d 3d 5b 6b 2c 73 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d Data Ascii: c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];break}}else if(p&&(d=s=
2024-01-15 14:02:12 UTC	15523	IN	Data Raw: 28 3f 3a 70 61 72 65 6e 74 73 7c 70 72 65 76 28 3f 3a 55 6e 74 69 6c 7c 41 6c 6c 29 29 2f 2c 48 3d 7b 63 68 69 6c 64 72 65 6e 3a 21 30 2c 63 6f 6e 74 65 6e 74 73 3a 21 30 2c 6e 65 78 74 3a 21 30 2c 70 72 65 76 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 29 7b 77 68 69 6c 65 28 28 65 3d 65 5b 74 5d 29 26 26 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 20 65 7d 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 28 65 2c 74 68 69 73 29 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 6e 3b 65 2b 2b 29 69 66 28 53 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 Data Ascii: (?:parents\|prev(?:Until\|All))/,H={children:!0,contents:!0,next:!0,prev:!0};function O(e,t){while((e=e[t])&&1!==e.nodeType);return e}S.fn.extend({has:function(e){var t=S(e,this),n=t.length;return this.filter(function(){for(var e=0;e<n;e++)if(S.contains(thi
2024-01-15 14:02:12 UTC	15266	IN	Data Raw: 69 73 74 65 6e 65 72 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 61 29 29 2c 66 2e 61 64 64 26 26 28 66 2e 61 64 64 2e 63 61 6c 6c 28 74 2c 63 29 2c 63 2e 68 61 6e 64 6c 65 72 2e 67 75 69 64 7c 7c 28 63 2e 68 61 6e 64 6c 65 72 2e 67 75 69 64 3d 6e 2e 67 75 69 64 29 29 2c 69 3f 70 2e 73 70 6c 69 63 65 28 70 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2b 2b 2c 30 2c 63 29 3a 70 2e 70 75 73 68 28 63 29 2c 53 2e 65 76 65 6e 74 2e 67 6c 6f 62 61 6c 5b 64 5d 3d 21 30 29 7d 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 2c 70 2c 64 2c 68 2c 67 2c 76 3d 59 2e 68 61 73 44 61 74 61 28 65 29 26 26 59 2e 67 65 74 28 65 29 3b 69 66 28 76 26 26 28 75 3d 76 Data Ascii: istener&&t.addEventListener(d,a)),f.add&&(f.add.call(t,c),c.handler.guid\|\|(c.handler.guid=n.guid)),i?p.splice(p.delegateCount++,0,c):p.push(c),S.event.global[d]=!0)}},remove:function(e,t,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Y.hasData(e)&&Y.get(e);if(v&&(u=v
2024-01-15 14:02:12 UTC	16383	IN	Data Raw: 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 46 65 28 79 2e 72 65 6c 69 61 62 6c 65 4d 61 72 67 69 6e 4c 65 66 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 28 70 61 72 73 65 46 6c 6f 61 74 28 57 65 28 65 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 29 29 7c 7c 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 2d 4d 65 28 65 2c 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 6c 65 66 74 7d 29 29 2b 22 70 78 22 7d 29 2c 53 2e 65 61 63 68 28 7b 6d 61 72 67 69 6e 3a 22 22 2c 70 61 64 64 69 6e 67 3a 22 22 2c 62 6f 72 64 65 72 3a 22 57 69 64 74 68 22 7d 2c 66 75 6e 63 74 69 Data Ascii: .marginLeft=Fe(y.reliableMarginLeft,function(e,t){if(t)return(parseFloat(We(e,"marginLeft"))\|\|e.getBoundingClientRect().left-Me(e,{marginLeft:0},function(){return e.getBoundingClientRect().left}))+"px"}),S.each({margin:"",padding:"",border:"Width"},functi
2024-01-15 14:02:12 UTC	26	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 7c 7c 43 74 2e 74 65 73 74 28 Data Ascii: ,function(e,t){r\|\|Ct.test(
2024-01-15 14:02:12 UTC	16234	IN	Data Raw: 6e 29 3f 69 28 6e 2c 74 29 3a 41 74 28 6e 2b 22 5b 22 2b 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 74 3f 65 3a 22 22 29 2b 22 5d 22 2c 74 2c 72 2c 69 29 7d 29 3b 65 6c 73 65 20 69 66 28 72 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 77 28 65 29 29 69 28 6e 2c 65 29 3b 65 6c 73 65 20 66 6f 72 28 74 20 69 6e 20 65 29 41 74 28 6e 2b 22 5b 22 2b 74 2b 22 5d 22 2c 65 5b 74 5d 2c 72 2c 69 29 7d 53 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6d 28 74 29 3f 74 28 29 3a 74 3b 72 5b 72 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 Data Ascii: n)?i(n,t):At(n+"["+("object"==typeof t&&null!=t?e:"")+"]",t,r,i)});else if(r\|\|"object"!==w(e))i(n,e);else for(t in e)At(n+"["+t+"]",e[t],r,i)}S.param=function(e,t){var n,r=[],i=function(e,t){var n=m(t)?t():t;r[r.length]=encodeURIComponent(e)+"="+encodeURI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49790	172.253.62.147	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:11 UTC	1140	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
2024-01-15 14:02:12 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 14:02:12 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-V6D5ha6NU8Rzu36462grEg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:12 UTC	361	IN	Data Raw: 32 61 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a58<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 61 36 4e 55 38 52 7a 75 33 36 34 36 32 67 72 45 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 56 36 44 35 68 Data Ascii: a6NU8Rzu36462grEg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js" nonce="V6D5h
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 65 79 2d 50 4d 6f 76 53 52 50 59 34 45 78 72 4e 57 4d 74 76 75 66 41 37 71 54 68 79 43 75 6f 44 48 4a 44 6c 44 37 77 39 4c 47 48 6e 4e 52 76 77 66 39 75 4a 67 7a 64 47 6a 46 6b 64 75 34 4e 6f 6c 64 61 6a 49 2d 76 34 4d 4e 58 72 4b 42 66 37 34 71 71 6d 73 46 7a 70 37 68 68 38 47 69 52 79 36 52 5a 45 50 6e 45 57 50 54 46 4a 43 2d 72 78 69 64 42 54 43 31 39 34 33 56 65 34 52 57 42 43 74 53 64 67 32 52 64 55 32 41 32 59 33 35 61 5a 4f 36 73 33 4a 68 5a 64 41 63 38 45 67 53 4c 6c 77 32 37 63 52 66 4d 62 5f 31 37 50 67 4e 73 67 38 34 59 58 2d 6b 37 37 47 6c 79 51 47 71 55 32 53 4b 46 33 69 45 35 56 70 69 7a 65 58 54 38 34 67 55 4a 4b 30 49 65 55 33 37 63 78 5a 43 6d 63 38 72 52 53 55 63 39 75 67 4a 6d 6b 4f 66 6c 6a 42 4b 2d 6c 65 73 62 4e 78 6b 6e 71 4a 54 64 Data Ascii: ey-PMovSRPY4ExrNWMtvufA7qThyCuoDHJDlD7w9LGHnNRvwf9uJgzdGjFkdu4NoldajI-v4MNXrKBf74qqmsFzp7hh8GiRy6RZEPnEWPTFJC-rxidBTC1943Ve4RWBCtSdg2RdU2A2Y35aZO6s3JhZdAc8EgSLlw27cRfMb_17PgNsg84YX-k77GlyQGqU2SKF3iE5VpizeXT84gUJK0IeU37cxZCmc8rRSUc9ugJmkOfljBK-lesbNxknqJTd
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 77 51 33 46 74 64 7a 59 30 64 6c 5a 45 5a 46 68 71 52 31 70 46 62 31 4e 4f 4d 6b 35 71 52 6d 4d 32 63 79 31 42 51 55 52 6c 59 55 6f 78 5a 6a 4e 35 62 31 68 56 62 44 4a 42 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 59 31 6c 43 55 45 52 77 5a 79 74 33 59 55 55 35 64 33 42 68 56 54 41 79 4e 6a 4e 31 61 6c 68 36 51 31 52 4e 4e 58 55 33 52 7a 52 78 64 46 46 76 4e 48 68 4a 4c 31 42 73 4b 32 59 33 52 45 35 5a 64 56 4a 53 4d 57 31 4a 56 6e 6f 7a 55 45 5a 72 63 6e 46 61 62 47 78 6b 61 30 6c 36 5a 6c 46 77 4f 45 5a 78 54 7a 5a 34 5a 46 42 50 52 57 64 79 55 56 4a 68 61 79 74 57 52 32 5a 69 62 45 46 4a 56 56 70 6b 54 6e 42 4b 62 31 64 51 5a 32 Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy8wQ3FtdzY0dlZEZFhqR1pFb1NOMk5qRmM2cy1BQURlYUoxZjN5b1hVbDJBLmpz\x22,\x22\x22,\x22Y1lCUERwZyt3YUU5d3BhVTAyNjN1alh6Q1RNNXU3RzRxdFFvNHhJL1BsK2Y3RE5ZdVJSMW1JVnozUEZrcnFabGxka0l6ZlFwOEZxTzZ4ZFBPRWdyUVJhaytWR2ZibEFJVVpkTnBKb1dQZ2
2024-01-15 14:02:12 UTC	471	IN	Data Raw: 53 5a 55 77 30 63 48 67 32 59 7a 5a 5a 64 55 4e 52 4c 31 64 34 52 6b 74 44 56 56 6c 33 54 32 74 76 62 44 56 6f 54 46 49 78 4e 32 64 76 62 32 4e 73 54 54 6c 4b 4e 55 78 42 59 54 56 52 56 6d 46 54 64 46 67 30 55 45 74 33 4d 55 74 4e 52 57 6c 53 61 55 74 4e 4e 6b 68 6a 4e 58 41 72 56 48 4e 73 51 31 64 4b 56 6b 5a 4d 63 44 4a 6b 62 33 52 46 62 47 39 54 56 6b 35 53 62 6b 45 33 56 45 5a 7a 4f 54 51 30 53 33 4e 55 55 6e 46 32 65 6d 68 69 53 47 6b 34 5a 30 68 47 52 58 5a 53 53 32 31 4f 52 6b 4a 70 4e 44 4a 50 62 57 46 36 64 48 68 6f 64 46 4e 61 53 47 31 61 56 32 46 77 54 32 35 6b 54 33 46 42 65 58 5a 34 56 57 6c 7a 64 31 4d 30 59 56 5a 6c 64 45 63 32 56 6d 6f 33 64 32 4a 4d 4d 47 78 34 5a 47 70 36 62 56 56 61 5a 46 4e 34 55 47 45 32 52 58 5a 73 64 44 68 33 54 44 Data Ascii: SZUw0cHg2YzZZdUNRL1d4RktDVVl3T2tvbDVoTFIxN2dvb2NsTTlKNUxBYTVRVmFTdFg0UEt3MUtNRWlSaUtNNkhjNXArVHNsQ1dKVkZMcDJkb3RFbG9TVk5SbkE3VEZzOTQ0S3NUUnF2emhiSGk4Z0hGRXZSS21ORkJpNDJPbWF6dHhodFNaSG1aV2FwT25kT3FBeXZ4VWlzd1M0YVZldEc2Vmo3d2JMMGx4ZGp6bVVaZFN4UGE2RXZsdDh3TD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49791	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:11 UTC	632	OUT	GET /browser-ui/3.34.1/PrivacyButton-09e27f75.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:12 UTC	1017	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqXQXdwBe03CYh2nXwYNJxwxsONTTKDwtXNfjHlS0KOxnFAJAZRmnABXtfGpP94rxWK3IQ1jo2mujGor8ebGaNEfw x-goog-generation: 1704976788253772 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2448 Content-Encoding: gzip x-goog-hash: crc32c=Ndu93g== x-goog-hash: md5=cOfQgBc7zQQJI/myAOyqhw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 2448 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:22 GMT Expires: Fri, 10 Jan 2025 12:40:22 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:48 GMT ETag: "70e7d080173bcd040923f9b200ecaa87" Content-Type: text/javascript Age: 350510 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:12 UTC	235	IN	Data Raw: 1f 8b 08 08 94 e1 9f 65 02 ff 74 6d 70 62 6c 30 76 30 30 76 6d 00 d5 58 69 8f db c8 11 fd 9e 5f 41 13 bb 0b 09 68 b6 d9 bc 49 41 31 e2 c1 02 09 60 c7 ce fa 00 82 45 10 53 12 47 e2 9a 12 05 92 9a 4b d0 7f cf 7b d5 3a 66 c7 8e e1 7c 08 90 60 86 ec 62 77 75 1d af 0e 8a 5d af b7 6d 37 ec cb 37 4e d9 3b b5 2a df 72 1c 54 f9 37 8e ad ba e7 d0 a8 f2 8a e3 46 95 3f 73 ac 54 f9 0b c7 b9 2a df 71 ec 54 f9 9e 63 a9 ca 0f 1c fb c3 75 d7 ae 5d fd bc de 2c aa 3b bd 6e 17 bb a6 d2 bf f5 ee 64 de 6e fa c1 59 4c 6b 3d db 0d 43 bb 19 fd ea 96 4d bd dc 78 f5 50 ad fb 62 5e 6d 86 aa 9b cc ca f9 e7 65 d7 ee 36 8b c2 55 ee 64 d6 76 8b aa 2b 36 ed a6 3a d2 5e 57 2e ea 5d 5f c4 fe 8f 98 81 a0 75 11 f9 db 3b d0 77 5e bf Data Ascii: etmpbl0v00vmXi_AhIA1`ESGK{:f\|`bwu]m77N;rT7F?sTqTcu],;ndnYLk=CMxPb^me6Udv+6:^W.]_u;w^
2024-01-15 14:02:12 UTC	1252	IN	Data Raw: 2a 17 ed 6d 81 47 27 c4 15 e3 f2 0c 6e dd 72 56 8e 7c 25 7f 3a 18 2b 32 24 b8 8c ff 74 d1 44 76 95 bb 4c f6 c5 6a 30 86 1b 4d db 15 b7 2b 58 3d 59 d4 fd b6 29 ef 8b eb a6 ba 9b fc b6 eb 87 fa fa de 83 9f 03 7c 39 39 b4 aa ea e5 6a 10 67 9a ea da 12 db 72 b1 a8 37 cb c2 9f 6c db be 1e ea 76 53 5c d7 77 d5 62 d2 9d 79 6f eb c5 b0 12 ea c1 13 28 8b c0 44 69 94 85 49 e4 4f da 6d 39 af 87 7b 59 fe a9 58 b5 37 55 a7 7e 2a ae db f9 ae df 3f 01 f0 70 9c f7 6e ea be 9e 35 d5 be dd 0d 4d bd a9 bc 7e b8 6f aa a2 dc 0d ed e4 34 65 75 02 b5 c9 01 5b f7 47 74 83 08 13 67 d3 2f 16 1e dc 7f a8 d1 68 3f ac aa 75 55 d4 87 f1 f4 8f b5 de 9d 82 db eb 6d 57 df 94 f3 7b 3d 5b ea 45 75 5d ee 9a 61 4c f6 ba 7f dd ce 6a 68 ae 95 dd 39 c8 ce 17 c3 d7 f6 ae 85 f5 5d fd 00 b6 af ad Data Ascii: mG'nrV\|%:+2$tDvLj0M+X=Y)\|99jgr7lvS\wbyo(DiIOm9{YX7U~?pn5M~o4eu[Gtg/h?uUmW{=[Eu]aLjh9]
2024-01-15 14:02:12 UTC	961	IN	Data Raw: 42 bc a0 c2 8f c6 00 cc 98 61 0c 99 8a c6 67 61 63 2b 3b 1f 3a 3e d3 ca c9 91 95 11 de 4c 9e 09 3e 62 0f 42 05 31 f2 0a 32 4c 04 ea 62 c3 09 a1 8b 3d c6 a0 36 63 e3 d9 b6 6b 4e 04 6a cb 7f 58 33 a2 0e 6b 38 7c 85 ae e1 a0 e4 d9 d7 51 92 a7 0b 49 60 6b 31 32 c7 29 16 5a 70 24 22 74 be 57 c6 a7 04 93 36 b1 ce 32 8f b7 f9 bf 61 75 58 43 f2 ef 58 b9 32 df f0 9d 94 3b bc 51 77 76 52 6b 47 ee b3 59 b0 fa 9f c9 82 ae 9a 0f b0 e0 51 c4 cf aa 1e 09 05 f9 65 22 e0 6d a1 4c 80 90 f9 0c 83 cf 56 e9 23 98 a4 f8 98 64 0d 8b 45 fc 9e 63 01 53 21 3e 8f 62 72 65 09 bf b1 b8 86 c8 b2 c4 d8 0f f0 1b ca 67 f7 f2 d9 63 7d e6 81 6f cb dc ce 05 4e c3 9e 1a 63 67 6e c8 1a a6 9e 08 f1 d9 c2 7c db 7c 4c 6a 35 73 85 cd 38 34 57 08 68 a6 f8 0e 52 a0 c2 54 05 0a a9 91 61 5c b1 77 86 Data Ascii: Bagac+;:>L>bB12Lb=6ckNjX3k8\|QI`k12)Zp$"tW62auXCX2;QwvRkGYQe"mLV#dEcS!>bregc}oNcgn\|\|Lj5s84WhRTa\w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49793	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	624	OUT	GET /browser-ui/3.34.1/index-23e52cb8.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:12 UTC	1015	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqkXiDiiFiXoXfjjosvuUCWTNGbUAeYkdDA_4l0V-oS6zckGXvDaDqJHn24ZOW9EzdhSytjh7DhU4eb7FqXFxiUXw x-goog-generation: 1704976793465205 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 808 Content-Encoding: gzip x-goog-hash: crc32c=8+HJeg== x-goog-hash: md5=Iumv1mQZrqW9+kFa2szBRg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 808 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:22 GMT Expires: Fri, 10 Jan 2025 12:40:22 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:53 GMT ETag: "22e9afd66419aea5bdfa415adaccc146" Content-Type: text/javascript Age: 350510 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:12 UTC	237	IN	Data Raw: 1f 8b 08 08 99 e1 9f 65 02 ff 74 6d 70 34 7a 78 37 77 39 38 35 00 95 55 db 6e db 48 0c 7d ef 57 b8 7d 28 46 00 57 db db b6 88 0c 17 10 64 b9 d1 c6 37 58 8e 81 45 51 18 b4 44 db 4a 46 23 43 23 f9 12 49 ff be 33 8a dc 24 6e 1c b4 4f 87 e6 9c 21 cf d0 24 15 c5 9b 24 cd 0a 74 5a 28 5b 08 d8 d5 48 b0 d6 c0 01 5d 8d 02 b0 a7 31 01 fc a6 31 03 bc d4 28 e1 a0 21 00 f4 34 46 80 ff 6a 4c 01 af 34 da 80 7d 8d 21 e0 40 63 0e 38 d4 e8 54 cb 34 89 df 98 7f 47 22 a4 bd 19 27 61 ce c9 bc 91 6f da 41 22 64 d6 5a 75 88 31 66 74 be 86 07 81 71 14 78 b5 c4 71 c2 0f cb 88 73 76 bc f8 d7 7b bc f8 f2 f9 63 70 a1 af 42 54 93 cc 98 32 34 f3 94 1b 86 01 9b df 8c 43 5f 3e 2c 10 e9 9f 73 71 e2 df 8c b3 f8 fc ee d3 c7 4f 17 74 26 Data Ascii: etmp4zx7w985UnH}W}(FWd7XEQDJF#C#I3$nO!$$tZ([H]11(!4FjL4}!@c8T4G"'aoA"dZu1ftqxqsv{cpBT24C_>,sqOt&
2024-01-15 14:02:12 UTC	571	IN	Data Raw: 4e 7b 8b 69 eb d0 41 15 ab c0 20 a0 4d 66 73 de a5 25 e6 3c b3 54 e5 8f ae a9 d3 b3 08 42 12 87 47 e7 87 a3 43 9f f6 40 ae 93 9d 4f aa 5c 61 1f 0f 94 5a 1e 24 c2 e1 89 24 ab af ac 3e 8a 55 8e 2b 72 d6 ca 20 6b 0a d7 8e e5 56 ea 01 45 5d e0 ef 3e 2c 7f 74 38 7b fd de 80 22 8f ac 6e d5 11 4c 99 b8 98 92 cc 66 98 46 28 32 6b 0d 91 b4 e3 8d 2b 70 c1 29 b4 76 20 29 f3 a4 27 7a 39 e7 7e 90 12 09 6b a8 7d 53 5c cc 22 da 59 23 fd a3 b6 16 90 47 c7 28 13 d8 6a d7 6d d5 49 54 8a ef 7b 28 78 82 61 24 56 d6 ac fa d1 c9 98 6b 92 c8 28 d5 41 65 1d 54 a5 04 57 31 1f 88 f3 86 f8 b3 40 3e a5 db 28 20 79 c2 1b 9f f2 7a 49 aa aa 75 c2 1a 9c b2 7e 4d 78 dd 50 9a 8a 9f 49 77 f3 94 f5 6c b2 ed 53 4e 93 ea ae a3 9b a9 98 95 e5 9e 19 66 b6 26 c1 18 ca 83 08 6a 37 ee 30 ca 5a 0b Data Ascii: N{iA Mfs%<TBGC@O\aZ$$>U+r kVE]>,t8{"nLfF(2k+p)v )'z9~k}S\"Y#G(jmIT{(xa$Vk(AeTW1@>( yzIu~MxPIwlSNf&j70Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	49796	35.201.111.240	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	589	OUT	OPTIONS /consent/uw/3 HTTP/1.1 Host: consent-api.service.consent.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: access-control-allow-origin,content-type,x-request-id Origin: https://service.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:12 UTC	583	IN	HTTP/1.1 204 No Content vary: Origin, Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE access-control-allow-headers: access-control-allow-origin,content-type,x-request-id access-control-max-age: 86400 X-Cloud-Trace-Context: 8dffe0b45ba6cb48af714a32a15191bf Date: Mon, 15 Jan 2024 14:02:12 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	49794	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	668	OUT	GET /media/w31p5jul/immagine-hero.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:12 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:02:11 GMT Accept-Ranges: bytes ETag: "8dd7fddf15dd81:0" Connection: close Last-Modified: Wed, 19 Jan 2022 09:21:01 GMT Content-Length: 1295447
2024-01-15 14:02:12 UTC	1259	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 Data Ascii: JFIFDuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:r
2024-01-15 14:02:12 UTC	2920	IN	Data Raw: 97 f1 0f eb 85 d8 7d 16 03 52 e5 f2 2b 10 c3 d2 d8 36 35 49 0d 94 24 97 04 35 bd f1 99 63 59 32 57 e6 1d 11 4d 58 ad fc 2d d8 e1 a1 e4 49 a7 93 54 cf 7a 4e a7 2b 6b 85 d6 be e3 15 87 22 c8 53 c9 4e 75 69 23 71 c8 38 a6 db 12 d0 13 52 8d ce 37 60 c1 1e 5a 5f a5 be b8 dd 81 54 89 32 e9 6d f0 d9 91 27 a1 02 b1 c4 6d f4 c5 94 59 f0 43 92 b0 f6 17 f6 c6 e0 cd 87 c1 98 37 0c 36 e3 19 a9 b9 82 c2 1a 80 ca 0f 18 43 49 30 fb f3 85 99 00 80 90 b7 18 50 31 24 f4 9c 06 66 07 ac 9a 6e 4e 0c b1 a6 79 cb cf a4 1c 36 a1 b2 98 d5 49 1f 1c e0 f2 6e da 95 f5 d4 ff 00 3c d6 bd 81 c5 53 a1 85 25 75 e8 e4 20 96 3f 5f 6c 56 27 24 c8 eb 5d a5 b9 bd f1 45 51 76 09 0a 89 b4 d9 ae 4f 6c 6c a8 c2 fa a0 9a c7 70 6d 8c 03 2b 64 d4 00 b6 dd b1 91 e0 08 52 6b 56 24 71 6c 54 c8 50 d4 79 Data Ascii: }R+65I$5cY2WMX-ITzN+k"SNui#q8R7`Z_T2m'mYC76CI0P1$fnNy6In<S%u ?_lV'$]EQvOllpm+dRkV$qlTPy
2024-01-15 14:02:12 UTC	4380	IN	Data Raw: 32 0a 4a 81 87 85 27 32 43 a8 a8 ec a3 0e aa 61 1e 45 32 2d ad ff 00 bc 02 30 d6 53 a6 c7 f9 62 86 08 b1 e9 dc 06 bf eb 8c d8 02 2d 3b 4d c0 b6 31 9b 06 62 07 7e c9 2d 61 7b 0c 1c c3 43 47 95 85 fc 7b df 9c 2e e3 e9 24 85 a1 48 e3 3a 56 c2 fc e3 36 1b 42 2d 44 21 5b 6d 3b 6e 31 aa c2 61 46 c6 c3 47 b9 e4 60 18 92 2f e5 83 7b db 8f a6 15 85 f7 04 ff 00 5d c1 c2 8c 39 7b 5c 73 be 03 26 44 6a c5 5d b0 fa 9a 0e 4a ad 4b 60 17 04 40 0c 59 8e 9d d6 e3 03 0a c6 34 9a 76 b5 b0 9e 41 45 a5 86 5c c2 a5 62 85 09 2d c1 3c 6f cd f1 cf 79 73 4a da 93 56 ac d8 48 8c e4 ad 3a 6c ed aa 89 9c 53 a6 53 26 9d 66 67 b7 31 8b db e9 c8 c7 e6 95 3f 8b dc 21 2a cd 3e bd 0e d7 e1 95 61 36 2b 3a a7 34 a0 e8 5c 8e 4c d3 37 a8 7a 7a 38 85 f5 6d aa 43 6b 85 1b f3 8f 6a db e3 cb 2b ba Data Ascii: 2J'2CaE2-0Sb-;M1b~-a{CG{.$H:V6B-D![m;n1aFG`/{]9{\s&Dj]JK`@Y4vAE\b-<oysJVH:lSS&fg1?!*>a6+:4\L7zz8mCkj+
2024-01-15 14:02:12 UTC	1460	IN	Data Raw: 38 a0 9b 10 e6 cc 93 bb 0f d7 1b 10 64 b1 0e 6c e1 35 10 1b 0f 09 22 6c 45 9b 38 50 a6 cc 2f 6c 56 29 0a cc 52 d6 67 05 a6 6f 55 8f d3 1d 0b 48 9c bb 48 d5 cf 25 5b df 7f a5 b0 72 d4 5d e4 22 75 03 ef 71 a4 63 79 66 ef 20 e4 cf 24 91 b6 72 07 f7 c3 2d 35 0d e4 67 ed 89 54 6c db 8c 6f 2d 4c d8 11 cc a4 91 b5 6a 63 86 54 53 25 86 79 cf 26 fe ad f0 6a 2c 78 06 13 d5 61 8d 34 4f 21 99 b7 36 b6 1b 61 58 76 92 ab 6e d7 c1 d0 51 7c b3 a8 1f d7 1a ba 81 8a a2 36 17 36 07 03 00 c9 98 cd e9 06 f7 38 d5 e8 00 e4 a1 75 b9 03 0d ba 89 a9 23 27 a1 6d 45 d8 5b db 13 ad 54 ad 38 2f a0 90 22 83 6d f1 c8 c7 4f 6c 0f 9b 34 0b 6d ec 6d 8c d4 19 d4 87 51 9b 33 5e c6 ff 00 43 87 d0 4d c0 7c c3 cd 71 6e 3d b1 ba 93 02 b4 f2 33 0f c5 73 ce 29 b0 13 29 e9 6f 1e ff 00 d7 0a 00 e4 Data Ascii: 8dl5"lE8P/lV)RgoUHH%[r]"uqcyf $r-5gTlo-LjcTS%y&j,xa4O!6aXvnQ\|668u#'mE[T8/"mOl4mmQ3^CM\|qn=3s))o
2024-01-15 14:02:12 UTC	7300	IN	Data Raw: 84 f9 72 b1 8b ea dc 5c df 1d 3b 0b a9 b1 74 ac 32 d0 d0 d4 54 38 1f 27 25 81 d7 c4 87 e9 8f cd bf 88 9c 4f 86 db 59 72 f8 84 e7 3e c7 a3 c3 51 a1 f6 f6 34 7c d3 a9 72 69 3a 8a 5a 39 a9 7c a8 b7 63 2e e1 6e 7b 0c 7f 30 55 a4 af 56 6e 2d d7 b2 7c 41 ea d6 ad 4a 3d 40 28 72 3a 2a e6 a8 55 cb d2 38 52 cc ad 62 59 fd b7 b9 e7 09 73 7f 85 55 5c 41 cc ad 9f 4a f4 3a 0f 4b f4 9d 3f 4e d2 a5 55 4d 32 21 22 f1 a1 1c b1 e0 91 f4 c7 d7 7f 0f be 13 af c6 6f be 6a e1 67 94 9f ea 25 67 54 50 95 15 46 49 19 8e ee 77 bf 18 fe ac a3 45 69 af 2d 7a 44 1e 7b 31 a6 f8 a5 e3 46 47 e1 0e 5a 66 cd 6a d3 e7 5a 33 24 14 8a 6f 24 be d6 03 7b 13 8f 37 89 f1 6a 76 6b ab 79 2d 4a 83 6d dd e0 e1 de 17 fc 3f ff 00 f2 c6 71 37 5c f5 f3 4c f2 56 ca 6a 29 28 99 ca 02 80 dd 75 28 de d8 fc Data Ascii: r\;t2T8'%OYr>Q4\|ri:Z9\|c.n{0UVn-\|AJ=@(r:*U8RbYsU\AJ:K?NUM2!"ojg%gTPFIwEi-zD{1FGZfjZ3$o${7jvky-Jm?q7\LVj)(u(
2024-01-15 14:02:12 UTC	1460	IN	Data Raw: fb e2 90 82 6c 02 4a 86 d4 3e 98 a4 40 a1 3e 71 95 74 db 06 a5 06 49 30 56 df 6c 68 05 82 65 91 82 a9 df 00 bb 13 e9 72 f1 32 8d 5e a1 f5 c2 4b 8f 89 26 c7 97 c7 0a da c8 3f ae 11 9d 85 85 12 a2 95 4e f7 b1 fa 60 89 34 ae a8 4b b1 20 df 14 50 01 f2 e7 49 62 0a 83 86 c8 b2 aa 0f 6f bf b6 1e 18 49 80 7a bd 37 f7 e7 0d b2 8b a8 ab 19 fb ef b0 c1 3e 4c 1f 26 5e cc a1 ca 37 b5 ed 82 1c dd 46 54 65 e2 48 40 09 a4 af 7f 7c 6e e1 2a 06 3a 14 4d cf 6c 6e 60 c1 f2 c2 19 6c 2d 7c 66 c0 44 6a 32 b7 ff 00 37 6c 6e 60 5d 47 d3 d3 97 5b b1 5f a6 34 60 d1 d3 af f1 69 36 e3 19 3e 0c cc 05 5d 3a 78 b1 1d 86 17 32 68 df 2c 30 37 ef ff 00 6e 37 60 1d 47 4e b0 dc db 8e 30 4c 81 2b 50 d3 6b 80 70 8a 6b 02 a8 b2 fd 71 a6 09 4b 93 8a cf 53 f1 db 19 2f 81 d6 9e 4b 2c af 23 8a 9f Data Ascii: lJ>@>qtI0Vlher2^K&?N`4K PIboIz7>L&^7FTeH@\|n*:Mln`l-\|fDj27ln`]G[_4`i6>]:x2h,07n7`GN0L+PkpkqKS/K,#
2024-01-15 14:02:12 UTC	1460	IN	Data Raw: 6c 37 38 06 53 34 9e 0f 18 06 32 36 d2 dc 5e f8 00 7e a6 1e 9d 4a 08 c3 6a 02 37 ab 62 2f f5 c1 a8 9e 01 bb 6a 20 5a df 7c 29 80 e6 ed bf 18 a1 93 e0 6c 6b a9 4d 8d f7 db 01 9b 2c 8e f2 ca 2e e3 01 b8 81 b2 4a 23 50 35 0c 6e 24 9c b3 0c 6a a0 57 6d 46 dc 9c 18 92 a3 96 a1 9a fa 43 7f 4c 60 0e f2 df 4d d8 a8 3d 86 01 5f 61 81 9d 77 07 1b 11 b0 b9 61 9f 31 da ca 4f be 37 50 11 66 f4 f3 f7 1f e9 83 51 75 31 a4 0d b6 ff 00 7c 1a 86 a3 95 8a b5 b1 9a a9 45 65 08 be ab 5f f2 c1 3e 4d 9f 03 95 74 b1 3c 7f 7c 61 a6 48 02 b1 23 01 99 81 92 2f 37 da dc 60 34 4d b4 7b db 00 19 a8 37 06 e4 f0 31 93 d0 0d 83 a2 fa 12 b3 aa 2b 12 c9 a6 99 48 2e ce 6d df b7 7c 7c 4f c5 ff 00 19 d9 f0 7b 36 a8 cf 1b e3 a1 e8 d9 f0 f6 b8 75 56 5e 87 6a c9 f2 17 cb 63 48 69 e0 82 0a 68 d0 Data Ascii: l78S426^~Jj7b/j Z\|)lkM,.J#P5n$jWmFCL`M=_awa1O7PfQu1\|Ee_>Mt<\|aH#/7`4M{71+H.m\|\|O{6uV^jcHih
2024-01-15 14:02:12 UTC	1460	IN	Data Raw: 45 4b 49 23 d5 3d 6d 54 d3 24 8d b5 ee f6 d4 7f 4c 7e d5 c4 78 4d 04 b1 e4 d1 f0 72 d2 a3 9a 75 6a 1c 17 3e f8 88 e9 7c c7 c3 ba fc af 35 ab 99 a6 ab 43 0c 91 53 21 2c c0 91 b8 26 c0 58 63 e5 e8 fc 37 c4 69 de a5 c5 ba c4 44 7b c9 e2 5a bb d3 9d 98 8d e1 9f c4 67 85 7e 11 f4 cc ff 00 2c b5 f2 56 2a 6a f2 12 9b 79 58 70 0b 12 07 f2 c7 e9 dc 1f 83 da bd 55 ba e2 cb 2e fe d1 d3 11 27 0b 25 7a 95 fb a3 a1 a5 f5 97 c4 26 6b f1 39 9b 5e 97 29 39 7e 5f 95 5c 44 b1 9b b6 92 7f 13 9e 07 6c 77 fc 4f c4 a8 46 94 fc 24 78 83 bd a3 0b a9 45 d6 5d 0e ab 93 f9 d3 79 31 32 af ad 7c d1 a9 ff 00 21 fe 98 f9 7b 2e 22 d2 fa f5 9c fe 9d 0e 7b 7a cd 1f b1 c5 33 2a e4 cb 66 96 12 34 a1 37 b3 7e 22 76 db 8c 7d d5 18 7a 98 a8 be 60 ee cd 4f a4 83 26 65 13 2e a5 2c 3b ee 2f be 3a Data Ascii: EKI#=mT$L~xMruj>\|5CS!,&Xc7iD{Zg~,VjyXpU.'%z&k9^)9~_\DlwOF$xE]y12\|!{."{z3f47~"v}z`O&e.,;/:
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 76 1c 0b 1f ae 20 9b fa 89 3f 56 29 ab 3a 37 2f cb f2 74 ab 5a 66 2c 0b 31 1e eb 6b 5a df cf 0f cc 69 60 aa 8b 0a 68 d9 c4 94 95 8c 5a 9a 37 81 ae 41 8c 8b 80 71 d6 b3 83 92 7c 15 fe 4f 0c 07 6e 2d c1 18 73 22 01 c7 4e 24 6d f5 0d f1 5c c8 c5 a5 0c 26 95 bd 22 c5 bb e2 4c c6 a8 fa c8 0a d8 93 a8 b7 38 98 b3 e0 8a d1 85 bf 6f 6c 50 d3 1a 40 d7 df ed 6c 4c 07 b3 2b a8 37 e3 9c 32 80 cf 28 72 7b f1 86 66 02 5e 5f 5c 68 ed 6d c7 71 84 d7 63 61 f0 6d 79 4f 56 43 58 b1 ac c9 76 8f f0 9f f2 6d 6c 72 32 60 b2 ba c9 b6 e4 b9 e4 7f 2a 0c 51 28 be c4 fb e2 12 ac 74 ab 12 ea aa 0d 53 8d 40 2a 5a c4 1c 26 00 3e 5f 58 21 a1 61 65 52 9d ce 00 1b f2 f0 55 2b 49 29 5b 91 7b 60 0c 9a 8f 55 55 53 cb 50 e2 8e 65 8a c3 49 03 df eb 8e 9a 71 95 22 cf 9f 49 4f 94 ac 33 55 79 b3 Data Ascii: v ?V):7/tZf,1kZi`hZ7Aq\|On-s"N$m\&"L8olP@lL+72(r{f^_\hmqcamyOVCXvmlr2`Q(tS@Z&>_X!aeRU+I)[{`UUSPeIq"IO3Uy
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 9e 00 1f 7c 7e 93 cc 5f d8 e7 d3 26 c3 47 e1 cd 65 2a a5 d1 3c e9 6c ab 12 90 Data Ascii: \|~_&Ge*<l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	49795	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	699	OUT	GET /assets/img/chevron-down-orange.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:12 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:11 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 1862
2024-01-15 14:02:12 UTC	1862	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 20 31 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 36 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 20 70 6f 69 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="30px" height="15px" viewBox="0 0 30 15" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 6</title> <defs> <polygon id="path-1" poin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49800	35.201.111.240	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	742	OUT	POST /consent/uw/3 HTTP/1.1 Host: consent-api.service.consent.usercentrics.eu Connection: keep-alive Content-Length: 521 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Access-Control-Allow-Origin: * Accept: application/json X-Request-ID: 4abe8a1e-c9e4-4511-904e-c66d33ab99d3 sec-ch-ua-platform: "Windows" Origin: https://service.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:12 UTC	521	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 22 3a 22 6f 6e 49 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 22 3a 74 72 75 65 2c 22 61 70 70 56 65 72 73 69 6f 6e 22 3a 22 34 2e 33 32 2e 30 22 2c 22 63 6f 6e 73 65 6e 74 73 22 3a 5b 7b 22 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 49 64 22 3a 22 6c 68 4f 55 4b 66 69 48 67 22 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 22 3a 22 31 2e 31 2e 31 22 7d 2c 7b 22 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 31 56 6c 35 4e 69 64 6a 57 58 22 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 22 3a 22 34 30 2e 31 Data Ascii: {"action":"onInitialPageLoad","analytics":true,"appVersion":"4.32.0","consents":[{"consentStatus":true,"consentTemplateId":"lhOUKfiHg","consentTemplateVersion":"1.1.1"},{"consentStatus":true,"consentTemplateId":"H1Vl5NidjWX","consentTemplateVersion":"40.1
2024-01-15 14:02:12 UTC	370	IN	HTTP/1.1 201 Created vary: Origin access-control-allow-origin: * X-Cloud-Trace-Context: 29955d10cf5288701124e9a98ecfaf0b Date: Mon, 15 Jan 2024 14:02:12 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	49797	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	663	OUT	GET /assets/img/synesgy-logo.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:13 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:12 GMT Accept-Ranges: bytes ETag: "0123efde632d81:0" Connection: close Last-Modified: Tue, 08 Mar 2022 12:21:08 GMT Content-Length: 23023
2024-01-15 14:02:13 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 ba 08 06 00 00 00 87 b4 50 51 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 Data Ascii: PNGIHDRPQtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15
2024-01-15 14:02:13 UTC	13140	IN	Data Raw: 7e ac 8f 5a a8 1a 64 90 f0 5b 93 05 76 5d 76 16 c6 75 5e 58 93 8d 79 96 f5 98 91 07 b9 c7 c5 09 15 be 8e 2e 6b e5 2c 9a d3 84 90 24 c1 ba d9 ed c6 0b 8d db e3 e1 e6 dd 31 3b fd 1e b6 ee 7c 9b a4 e1 04 b2 a4 a7 ab 00 d0 1b 05 7a 20 d9 6b d8 de d2 5c 3d 9a 8c f5 f8 90 f5 02 26 98 59 3c ea ce 42 b7 8a a3 91 b8 7b c0 b5 f3 a8 15 c0 07 1e 77 f2 93 92 df 73 67 05 9c 3d 64 74 f4 56 03 32 31 38 e3 32 07 60 62 6b 17 29 03 4f a0 95 a4 0b 37 f2 a4 1b 42 65 b1 14 1d 41 e5 ee a8 85 aa 41 5b af a2 f9 f4 e9 8f a0 a7 ee 3f 09 cd 5c da e7 d8 2c aa 33 b0 7d d0 fb 9c dc f3 74 a3 e3 46 e0 fd 26 0e 32 3e f0 34 56 c6 c7 11 e7 d7 f8 f6 ca 7f e3 33 ab ee a1 8b 2c ac 4b 8e 25 60 d3 35 fe c9 bc 5c e7 07 b4 f8 11 2f 3e e8 f9 98 58 e6 39 02 2e 50 e7 59 f7 ae 31 52 24 59 ac c3 0b fa Data Ascii: ~Zd[v]vu^Xy.k,$1;\|z k\=&Y<B{wsg=dtV2182`bk)O7BeAA[?\,3}tF&2>4V3,K%`5\/>X9.PY1R$Y
2024-01-15 14:02:13 UTC	4380	IN	Data Raw: cf e3 c1 92 49 a1 a1 8f fb dd 49 85 46 af 97 b3 29 a2 be 88 01 7c e8 57 80 c3 48 7f cf 12 c7 6d 5f ea 07 b2 a4 08 64 35 2d 24 26 4f 22 50 ee 4a 20 5c 41 bd 73 0f f0 30 89 fa ab 09 d8 7a 3e d0 4a 20 ce f6 54 af 2e ec e0 32 6b 3b e2 f4 c7 01 93 68 de 9e 43 f5 b0 a9 ab 6d e6 f8 c4 ed 5f f9 0f 8d 92 6f 90 94 90 8e fa 6d 14 02 fd 0c 2a 97 16 39 ce 3b 26 5c 0b 3f fa e0 4d 01 7a 46 74 77 4e c9 b2 95 e8 ef c7 53 f9 28 36 e4 45 ec 2a 36 87 ca bb 51 d3 97 41 b3 0e 04 4e f8 0d 89 c6 e3 49 cc 5e cf c9 66 a8 50 17 2c a6 f2 04 89 d3 8b 6e a6 e3 2f 0d 5d 7d 78 b9 6c 12 69 71 5b 11 97 df e7 44 02 f9 dd c0 fd 7f 88 fa 69 94 d2 f1 79 b9 2c 57 56 f7 43 7c e7 64 e9 57 15 b9 d7 2a 5f 29 8c a8 2c 1a 4b a2 f1 57 ae a6 42 4d b9 df e7 80 e9 3b fa fb 26 0f 37 b1 81 cf 88 dc 30 46 Data Ascii: IIF)\|WHm_d5-$&O"PJ \As0z>J T.2k;hCm_om9;&\?MzFtwNS(6E6QANI^fP,n/]}xliq[Diy,WVC\|dW*_),KWBM;&70F
2024-01-15 14:02:13 UTC	2781	IN	Data Raw: 47 f9 4a 44 46 b7 88 2a 27 ce 7a cb 71 e9 f3 06 00 6e 9e 2c 6e a8 d2 f8 0b 73 74 8e d0 fb 27 fa 4e 8f 35 60 52 23 bc 83 38 17 3b 07 11 70 18 e1 32 6c c6 ce fc 11 55 8d 58 37 e6 c8 b8 bd 84 2b 07 79 06 39 da 8f 97 67 39 02 93 3d e7 d6 0a 73 e1 65 5b de 2b 90 13 6a 74 54 a9 0e ec 9c c3 f6 27 0e e4 59 2a cf c4 e6 0c f4 88 22 1a 6c 0a a2 30 eb 43 40 6f a9 22 a8 23 8a 28 a2 88 22 8a 28 a2 88 22 8a 28 a2 88 22 8a 28 a2 88 22 8a 28 a2 88 22 8a 28 a2 88 22 8a 28 a2 88 22 8a 28 a2 11 46 d5 76 98 e1 e4 75 9c ab 8b dd 05 39 41 1e bb f7 71 d6 0e de 59 82 1d 11 78 c7 0c f6 53 e7 14 3e 9c 1a 87 37 44 c8 44 dd e0 a5 30 e2 88 ab a7 a4 bd 06 83 38 36 80 bd 0c cb d9 c1 96 f7 cd e3 4c a6 cf 4b 5f f2 56 5b 9c 12 9a 7d b4 79 63 03 de 35 25 48 d7 14 51 65 34 0b 1b 6e 87 3c ea Data Ascii: GJDF'zqn,nst'N5`R#8;p2lUX7+y9g9=se[+jtT'Y"l0C@o"#("("("("("("("(Fvu9AqYxS>7DD086LK_V[}yc5%HQe4n<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	49798	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	614	OUT	GET /assets/scripts/bootstrap.bundle.min.js HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:13 UTC	253	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/javascript Date: Mon, 15 Jan 2024 14:02:12 GMT Accept-Ranges: bytes ETag: "08529fa13e2d71:0" Connection: close Last-Modified: Thu, 25 Nov 2021 15:49:06 GMT Content-Length: 83253
2024-01-15 14:02:13 UTC	4169	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v4.6.1 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-01-15 14:02:13 UTC	10220	IN	Data Raw: 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 2e 64 65 66 61 75 6c 74 28 74 29 2e 64 65 74 61 63 68 28 29 2e 74 72 69 67 67 65 72 28 22 63 6c 6f 73 65 64 2e 62 73 2e 61 6c 65 72 74 22 29 2e 72 65 6d 6f 76 65 28 29 7d 2c 74 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 29 2c 6f 3d 6e 2e 64 61 74 61 28 66 29 3b 6f 7c 7c 28 6f 3d 6e 65 77 20 74 28 74 68 69 73 29 2c 6e 2e 64 61 74 Data Ascii: teTransitionEnd(n)}else this._destroyElement(t)},e._destroyElement=function(t){i.default(t).detach().trigger("closed.bs.alert").remove()},t._jQueryInterface=function(e){return this.each((function(){var n=i.default(this),o=n.data(f);o\|\|(o=new t(this),n.dat
2024-01-15 14:02:13 UTC	2920	IN	Data Raw: 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 72 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 72 2b 27 22 27 29 3b 6e 5b 72 5d 28 29 7d 65 6c 73 65 20 6f 2e 69 6e 74 65 72 76 61 6c 26 26 6f 2e 72 69 64 65 26 26 28 6e 2e 70 61 75 73 65 28 29 2c 6e 2e 63 79 63 6c 65 28 29 29 7d 29 29 7d 2c 74 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 75 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 6e 29 7b 76 61 72 20 6f 3d 69 2e 64 65 66 61 75 6c 74 28 6e 29 5b 30 5d 3b 69 66 28 6f 26 26 Data Ascii: ing"==typeof r){if("undefined"==typeof n[r])throw new TypeError('No method named "'+r+'"');n[r]()}else o.interval&&o.ride&&(n.pause(),n.cycle())}))},t._dataApiClickHandler=function(e){var n=u.getSelectorFromElement(this);if(n){var o=i.default(n)[0];if(o&&
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 68 69 73 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 28 21 30 29 3b 76 61 72 20 73 3d 22 73 63 72 6f 6c 6c 22 2b 28 61 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 61 2e 73 6c 69 63 65 28 31 29 29 2c 6c 3d 75 2e 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 3b 69 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 75 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 64 65 66 61 75 6c 74 28 6f 2e 5f 65 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 52 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 6c 61 70 73 65 20 73 68 6f 77 22 29 2c 6f 2e 5f 65 6c 65 6d 65 6e 74 Data Ascii: his.setTransitioning(!0);var s="scroll"+(a[0].toUpperCase()+a.slice(1)),l=u.getTransitionDurationFromElement(this._element);i.default(this._element).one(u.TRANSITION_END,(function(){i.default(o._element).removeClass(R).addClass("collapse show"),o._element
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 74 6f 70 22 3d 3d 3d 6c 3f 28 61 2e 6c 65 66 74 2b 3d 6e 5b 30 5d 2c 61 2e 74 Data Ascii: top"===l?(a.left+=n[0],a.t
2024-01-15 14:02:13 UTC	7830	IN	Data Raw: 6f 70 2d 3d 6e 5b 31 5d 29 3a 22 62 6f 74 74 6f 6d 22 3d 3d 3d 6c 26 26 28 61 2e 6c 65 66 74 2b 3d 6e 5b 30 5d 2c 61 2e 74 6f 70 2b 3d 6e 5b 31 5d 29 2c 74 2e 70 6f 70 70 65 72 3d 61 2c 74 7d 2c 6f 66 66 73 65 74 3a 30 7d 2c 70 72 65 76 65 6e 74 4f 76 65 72 66 6c 6f 77 3a 7b 6f 72 64 65 72 3a 33 30 30 2c 65 6e 61 62 6c 65 64 3a 21 30 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 7c 7c 65 74 28 74 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 29 3b 74 2e 69 6e 73 74 61 6e 63 65 2e 72 65 66 65 72 65 6e 63 65 3d 3d 3d 6e 26 26 28 6e 3d 65 74 28 6e 29 29 3b 76 61 72 20 69 3d 49 74 28 22 74 72 61 6e 73 66 6f 72 6d 22 29 2c 6f 3d 74 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 Data Ascii: op-=n[1]):"bottom"===l&&(a.left+=n[0],a.top+=n[1]),t.popper=a,t},offset:0},preventOverflow:{order:300,enabled:!0,fn:function(t,e){var n=e.boundariesElement\|\|et(t.instance.popper);t.instance.reference===n&&(n=et(n));var i=It("transform"),o=t.instance.poppe
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 3d 22 62 73 2e 64 72 6f 70 64 6f 77 6e 22 2c 58 74 3d 69 2e 64 65 66 61 75 6c 74 2e 66 6e 5b 7a 74 5d 2c 47 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 33 38 7c 34 30 7c 32 37 22 29 2c 24 74 3d 22 64 69 73 61 62 6c 65 64 22 2c 4a 74 3d 22 73 68 6f 77 22 2c 5a 74 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 72 69 67 68 74 22 2c 74 65 3d 22 68 69 64 65 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 22 2c 65 65 3d 22 68 69 64 64 65 6e 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 22 2c 6e 65 3d 22 63 6c 69 63 6b 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 69 65 3d 22 6b 65 79 64 6f 77 6e 2e 62 73 2e 64 72 6f 70 64 6f 77 6e 2e 64 61 74 61 2d 61 70 69 22 2c 6f 65 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 64 72 6f 70 64 6f 77 6e 22 5d 27 2c 72 65 3d Data Ascii: ="bs.dropdown",Xt=i.default.fn[zt],Gt=new RegExp("38\|40\|27"),$t="disabled",Jt="show",Zt="dropdown-menu-right",te="hide.bs.dropdown",ee="hidden.bs.dropdown",ne="click.bs.dropdown.data-api",ie="keydown.bs.dropdown.data-api",oe='[data-toggle="dropdown"]',re=
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 73 29 7d 29 29 2c 69 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6d 6f 64 61 6c 3d 53 Data Ascii: s)})),i.default.fn.modal=S
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 65 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 69 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6d 6f 64 61 6c 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 53 65 2c 69 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6d 6f 64 61 6c 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 64 65 66 61 75 6c 74 2e 66 6e 2e 6d 6f 64 61 6c 3d 66 65 2c 53 65 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 4e 65 3d 5b 22 62 61 63 6b 67 72 6f 75 6e 64 22 2c 22 63 69 74 65 22 2c 22 68 72 65 66 22 2c 22 69 74 65 6d 74 79 70 65 22 2c 22 6c 6f 6e 67 64 65 73 63 22 2c 22 70 6f 73 74 65 72 22 2c 22 73 72 63 22 2c 22 78 6c 69 6e 6b 3a 68 72 65 66 22 5d 2c 44 65 3d 2f 5e 28 3f 3a 28 3f 3a 68 74 74 70 73 3f 7c 6d 61 69 6c 74 6f 7c Data Ascii: e._jQueryInterface,i.default.fn.modal.Constructor=Se,i.default.fn.modal.noConflict=function(){return i.default.fn.modal=fe,Se._jQueryInterface};var Ne=["background","cite","href","itemtype","longdesc","poster","src","xlink:href"],De=/^(?:(?:https?\|mailto\|
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 6f 6e 28 65 29 7b 74 2e 5f 6f 66 66 73 65 74 73 2e 70 75 73 68 28 65 5b 30 5d Data Ascii: on(e){t._offsets.push(e[0]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	49799	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	611	OUT	GET /assets/scripts/swiper.bundle.min.js HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:13 UTC	254	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/javascript Date: Mon, 15 Jan 2024 14:02:12 GMT Accept-Ranges: bytes ETag: "08529fa13e2d71:0" Connection: close Last-Modified: Thu, 25 Nov 2021 15:49:06 GMT Content-Length: 135632
2024-01-15 14:02:13 UTC	4168	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 77 69 70 65 72 20 37 2e 33 2e 30 0d 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 31 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4e 6f 76 65 6d 62 65 72 20 31 38 2c Data Ascii: /** * Swiper 7.3.0 * Most modern mobile touch slider and framework with hardware accelerated transitions * https://swiperjs.com * * Copyright 2014-2021 Vladimir Kharlampidi * * Released under the MIT License * * Released on: November 18,
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 7d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 65 29 7b 6c 65 74 5b 74 2c 73 2c 61 2c 69 5d 3d 65 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 21 74 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 65 2e 74 61 72 67 65 74 2e 64 6f 6d 37 45 76 65 6e 74 44 61 74 61 7c 7c 5b 5d 3b 69 66 28 69 2e 69 6e 64 65 78 4f 66 28 65 29 3c 30 26 26 69 2e 75 6e 73 68 69 66 74 28 65 29 2c 64 28 74 29 2e 69 73 28 73 29 29 61 2e 61 70 70 6c 79 28 74 2c 69 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 65 3d 64 28 74 29 2e 70 61 72 65 6e 74 73 28 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 3d 31 29 64 28 65 5b 74 5d 29 2e 69 73 28 73 29 26 26 61 2e 61 70 70 6c 79 28 65 5b 74 5d 2c 69 Data Ascii: },on:function(...e){let[t,s,a,i]=e;function r(e){const t=e.target;if(!t)return;const i=e.target.dom7EventData\|\|[];if(i.indexOf(e)<0&&i.unshift(e),d(t).is(s))a.apply(t,i);else{const e=d(t).parents();for(let t=0;t<e.length;t+=1)d(e[t]).is(s)&&a.apply(e[t],i
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 2e 73 65 74 47 72 61 62 43 75 72 73 6f 72 28 21 30 29 2c 73 2e 65 6d 69 74 28 Data Ascii: .setGrabCursor(!0),s.emit(
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 22 73 6c 69 64 65 72 46 69 72 73 74 4d 6f 76 65 22 2c 63 29 29 2c 73 2e 65 6d 69 74 28 22 73 6c 69 64 65 72 4d 6f 76 65 22 2c 63 29 2c 69 2e 69 73 4d 6f 76 65 64 3d 21 30 3b 6c 65 74 20 76 3d 73 2e 69 73 48 6f 72 69 7a 6f 6e 74 61 6c 28 29 3f 66 3a 67 3b 6e 2e 64 69 66 66 3d 76 2c 76 2a 3d 72 2e 74 6f 75 63 68 52 61 74 69 6f 2c 6c 26 26 28 76 3d 2d 76 29 2c 73 2e 73 77 69 70 65 44 69 72 65 63 74 69 6f 6e 3d 76 3e 30 3f 22 70 72 65 76 22 3a 22 6e 65 78 74 22 2c 69 2e 63 75 72 72 65 6e 74 54 72 61 6e 73 6c 61 74 65 3d 76 2b 69 2e 73 74 61 72 74 54 72 61 6e 73 6c 61 74 65 3b 6c 65 74 20 77 3d 21 30 2c 62 3d 72 2e 72 65 73 69 73 74 61 6e 63 65 52 61 74 69 6f 3b 69 66 28 72 2e 74 6f 75 63 68 52 65 6c 65 61 73 65 4f 6e 45 64 67 65 73 26 26 28 62 3d 30 29 2c 76 Data Ascii: "sliderFirstMove",c)),s.emit("sliderMove",c),i.isMoved=!0;let v=s.isHorizontal()?f:g;n.diff=v,v*=r.touchRatio,l&&(v=-v),s.swipeDirection=v>0?"prev":"next",i.currentTranslate=v+i.startTranslate;let w=!0,b=r.resistanceRatio;if(r.touchReleaseOnEdges&&(b=0),v
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 65 72 2d 73 6c 69 64 65 2d 69 6e 64 65 78 3d 22 24 7b 64 2e 61 74 74 72 28 22 Data Ascii: er-slide-index="${d.attr("
2024-01-15 14:02:13 UTC	14101	IN	Data Raw: 64 61 74 61 2d 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 69 6e 64 65 78 22 29 7d 22 5d 60 29 2e 61 64 64 43 6c 61 73 73 28 73 2e 73 6c 69 64 65 44 75 70 6c 69 63 61 74 65 50 72 65 76 43 6c 61 73 73 29 3a 61 2e 63 68 69 6c 64 72 65 6e 28 60 2e 24 7b 73 2e 73 6c 69 64 65 43 6c 61 73 73 7d 2e 24 7b 73 2e 73 6c 69 64 65 44 75 70 6c 69 63 61 74 65 43 6c 61 73 73 7d 5b 64 61 74 61 2d 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 69 6e 64 65 78 3d 22 24 7b 64 2e 61 74 74 72 28 22 64 61 74 61 2d 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 69 6e 64 65 78 22 29 7d 22 5d 60 29 2e 61 64 64 43 6c 61 73 73 28 73 2e 73 6c 69 64 65 44 75 70 6c 69 63 61 74 65 50 72 65 76 43 6c 61 73 73 29 29 2c 65 2e 65 6d 69 74 53 6c 69 64 65 73 43 6c 61 73 73 65 73 28 29 7d 2c 75 70 64 61 74 65 41 63 Data Ascii: data-swiper-slide-index")}"]`).addClass(s.slideDuplicatePrevClass):a.children(`.${s.slideClass}.${s.slideDuplicateClass}[data-swiper-slide-index="${d.attr("data-swiper-slide-index")}"]`).addClass(s.slideDuplicatePrevClass)),e.emitSlidesClasses()},updateAc
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 7b 69 73 4c 6f 63 6b 65 64 3a 74 2c 70 61 72 61 6d 73 3a 73 7d 3d 65 2c 7b 73 6c 69 64 65 73 4f 66 66 73 65 74 42 65 66 6f 72 65 3a 61 7d 3d 73 3b 69 66 28 61 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2d 31 2c 73 3d 65 2e 73 6c 69 64 65 73 47 72 69 64 5b 74 5d 2b 65 2e 73 6c 69 64 65 73 53 69 7a 65 73 47 72 69 64 5b 74 5d 2b 32 2a 61 3b 65 2e 69 73 4c 6f 63 6b 65 64 3d 65 2e 73 69 7a 65 3e 73 7d 65 6c 73 65 20 65 2e 69 73 4c 6f 63 6b 65 64 3d 31 3d 3d 3d 65 2e 73 6e 61 70 47 72 69 64 2e 6c 65 6e 67 74 68 3b 21 30 3d 3d 3d 73 2e 61 6c 6c 6f 77 53 6c 69 64 65 4e 65 78 74 26 26 28 65 2e 61 6c 6c 6f 77 53 6c 69 64 65 4e 65 78 74 3d 21 65 2e 69 73 4c 6f 63 6b 65 64 29 2c 21 30 3d 3d 3d 73 2e 61 6c 6c 6f 77 53 6c 69 64 65 50 72 Data Ascii: {isLocked:t,params:s}=e,{slidesOffsetBefore:a}=s;if(a){const t=e.slides.length-1,s=e.slidesGrid[t]+e.slidesSizesGrid[t]+2*a;e.isLocked=e.size>s}else e.isLocked=1===e.snapGrid.length;!0===s.allowSlideNext&&(e.allowSlideNext=!e.isLocked),!0===s.allowSlidePr
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 73 2e 69 6e 69 74 69 61 6c 53 6c 69 64 65 7c 7c 72 28 29 29 7d 29 29 2c 73 28 Data Ascii: s.initialSlide\|\|r())})),s(
2024-01-15 14:02:13 UTC	16383	IN	Data Raw: 22 73 65 74 54 72 61 6e 73 6c 61 74 65 22 2c 28 28 29 3d 3e 7b 65 2e 70 61 72 61 6d 73 2e 76 69 72 74 75 61 6c 2e 65 6e 61 62 6c 65 64 26 26 28 65 2e 70 61 72 61 6d 73 2e 63 73 73 4d 6f 64 65 26 26 21 65 2e 5f 69 6d 6d 65 64 69 61 74 65 56 69 72 74 75 61 6c 3f 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 29 2c 61 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 72 28 29 7d 29 2c 31 30 30 29 29 3a 72 28 29 29 7d 29 29 2c 73 28 22 69 6e 69 74 20 75 70 64 61 74 65 20 72 65 73 69 7a 65 22 2c 28 28 29 3d 3e 7b 65 2e 70 61 72 61 6d 73 2e 76 69 72 74 75 61 6c 2e 65 6e 61 62 6c 65 64 26 26 65 2e 70 61 72 61 6d 73 2e 63 73 73 4d 6f 64 65 26 26 67 28 65 2e 77 72 61 70 70 65 72 45 6c 2c 22 2d 2d 73 77 69 70 65 72 2d 76 69 72 74 75 61 6c 2d 73 69 7a 65 22 2c 60 Data Ascii: "setTranslate",(()=>{e.params.virtual.enabled&&(e.params.cssMode&&!e._immediateVirtual?(clearTimeout(a),a=setTimeout((()=>{r()}),100)):r())})),s("init update resize",(()=>{e.params.virtual.enabled&&e.params.cssMode&&g(e.wrapperEl,"--swiper-virtual-size",`
2024-01-15 14:02:13 UTC	26	IN	Data Raw: 64 64 43 6c 61 73 73 22 5d 28 65 2e 70 61 72 61 6d 73 2e 70 61 67 69 6e 61 74 Data Ascii: ddClass"](e.params.paginat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	49801	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:12 UTC	610	OUT	GET /assets/scripts/jquery.waypoints.js HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:13 UTC	253	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/javascript Date: Mon, 15 Jan 2024 14:02:12 GMT Accept-Ranges: bytes ETag: "08529fa13e2d71:0" Connection: close Last-Modified: Thu, 25 Nov 2021 15:49:06 GMT Content-Length: 18198
2024-01-15 14:02:13 UTC	7089	IN	Data Raw: 2f 2a 21 0d 0a 57 61 79 70 6f 69 6e 74 73 20 2d 20 34 2e 30 2e 30 0d 0a 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 31 2d 32 30 31 35 20 43 61 6c 65 62 20 54 72 6f 75 67 68 74 6f 6e 0d 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0d 0a 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6d 61 6b 65 77 65 62 74 68 69 6e 67 73 2f 77 61 79 70 6f 69 6e 74 73 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6c 69 63 65 6e 73 65 73 2e 74 78 74 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0d 0a 0d 0a 20 20 76 61 72 20 6b 65 79 43 6f 75 6e 74 65 72 20 3d 20 30 0d 0a 20 20 76 61 72 20 61 6c 6c 57 61 79 70 6f 69 6e 74 73 20 3d 20 7b 7d 0d 0a 0d 0a 20 20 Data Ascii: /!Waypoints - 4.0.0Copyright 2011-2015 Caleb TroughtonLicensed under the MIT license.https://github.com/imakewebthings/waypoints/blob/master/licenses.txt/(function() { 'use strict' var keyCounter = 0 var allWaypoints = {}
2024-01-15 14:02:13 UTC	11109	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 6e 65 77 53 63 72 6f 6c 6c 3a 20 74 68 69 73 2e 61 64 61 70 74 65 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6c 64 53 63 72 6f 6c 6c 3a 20 74 68 69 73 2e 6f 6c 64 53 63 72 6f 6c 6c 2e 78 2c 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 77 61 72 64 3a 20 27 72 69 67 68 74 27 2c 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 77 61 72 64 3a 20 27 6c 65 66 74 27 0d 0a 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 6e 65 77 53 63 72 6f 6c 6c 3a 20 74 68 69 73 2e 61 64 61 70 74 65 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6c 64 53 63 72 6f 6c 6c 3a 20 74 68 69 73 2e 6f 6c 64 53 63 72 6f 6c 6c 2e 79 2c 0d 0a 20 20 Data Ascii: newScroll: this.adapter.scrollLeft(), oldScroll: this.oldScroll.x, forward: 'right', backward: 'left' }, vertical: { newScroll: this.adapter.scrollTop(), oldScroll: this.oldScroll.y,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	49804	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:13 UTC	624	OUT	GET /browser-ui/3.34.1/index-b604349e.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index.module.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:13 UTC	1023	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqT4hrVzKPohRM84s9pAcQY9yC7B9ZvlDqU8FTdNHm0f9SuN6cSUp3ZC9_TC_jNdHzLBiNcsivixrvVFd0oMR_F0DO9Qvk5 x-goog-generation: 1704976793691584 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 2057 Content-Encoding: gzip x-goog-hash: crc32c=gcgplw== x-goog-hash: md5=fKgdacIaXB3xzkoBuD83fg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 2057 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:41:27 GMT Expires: Fri, 10 Jan 2025 12:41:27 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:53 GMT ETag: "7ca81d69c21a5c1df1ce4a01b83f377e" Content-Type: text/javascript Age: 350446 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:13 UTC	229	IN	Data Raw: 1f 8b 08 08 99 e1 9f 65 02 ff 74 6d 70 71 34 30 66 72 73 6c 6d 00 ad 58 7b 4f db ca 12 ff ff 7e 0a 12 5d 55 b6 ce c4 17 54 55 e7 c8 91 2f 0a af 92 12 48 9a 04 fa 52 85 d6 f6 c4 d9 e2 78 7d bc 6b 48 9a f8 bb df d9 b5 43 9c 00 2d 3a ba ad 60 ec dd d9 d9 79 fc e6 61 f8 2c 15 99 5a b2 fe 1e 93 7b 08 be a1 0a fc 81 a6 0c 16 9a 08 60 a7 9a 4a 60 43 4d 13 60 23 4d 33 60 1f 35 8d 21 98 6b ca c1 ff a0 69 00 ec 58 d3 1c fc 13 4d 43 f0 8d 9c 08 d8 99 a6 3e 04 e6 7d 01 cc f0 f7 80 bd d7 34 05 5f 69 3a 05 ff 42 d3 09 b0 6b 4d 67 c0 7e 6a 3a 02 df 9c 3f 06 5f 6a 7a 04 be d1 eb 01 7c 73 7e 0c cc 9c eb 03 eb 69 da 29 26 99 98 35 9d ff f0 24 c4 b9 33 13 61 1e a3 f3 43 36 db bc b4 ba a3 b9 4e e1 Data Ascii: etmpq40frslmX{O~]UTU/HRx}kHC-:`ya,Z{`J`CM`#M3`5!kiXMC>}4_i:BkMg~j:?_jz\|s~i)&5$3aC6N
2024-01-15 14:02:13 UTC	1252	IN	Data Raw: 04 8c 39 77 6b f6 11 bb c7 a3 5c 29 91 b4 02 ff dd e4 2d be f3 eb a7 8c ce 43 38 d2 64 0e c6 c2 33 30 0a dc 83 b9 bf 0b 57 9a 5c c2 a5 26 57 6b b1 37 3c 53 39 8b 47 98 dd f3 00 bb 0a 67 2d ff dd 9f 07 fb f8 d7 41 5d bc 11 78 b3 3e 74 82 13 96 c7 6a cc 7c d9 fa f3 ed 5f 21 0b 7c 66 b8 03 91 48 b5 37 f0 d0 09 f9 bd f5 ad c9 62 1e 25 2d 4e 52 a5 1b 60 a2 30 6b 87 5c a6 31 5b b8 3c 89 79 82 ad 49 8c f3 f6 8c 65 11 4f 5a 4a a4 6e 13 9a eb 57 5f 90 b5 33 b3 62 7e be 83 65 2d d5 14 67 e8 62 61 7b ff 45 47 a6 2c e0 49 e4 f8 4c a2 33 9f 4b fb d7 1c b3 70 97 41 59 08 cc b9 ec 0c df 77 af 6e 87 dd f7 e7 63 78 7a c6 b6 e1 f6 d1 a2 40 c4 22 33 3a 4d 44 a2 5a 92 ff 44 f3 b6 36 cb d8 a3 7f b9 07 7b fb 7b 2c 57 e2 39 c5 73 ee 28 9c 2b c7 48 7b aa b5 5a a4 22 ca 58 3a 5d Data Ascii: 9wk\)-C8d30W\&Wk7<S9Gg-A]x>tj\|_!\|fH7b%-NR`0k\1[<yIeOZJnW_3b~e-gba{EG,IL3KpAYwncxz@"3:MDZD6{{,W9s(+H{Z"X:]
2024-01-15 14:02:13 UTC	576	IN	Data Raw: f8 08 a8 e2 bb fb ed 3b cc aa ac 96 0f 5c 05 53 6b 0b 05 a6 fa f5 53 dd 85 6d 2a aa 12 f7 1e 9c 2e 25 90 5b 3d 6b f5 dc aa 50 50 cf b4 db 55 23 71 6b c5 a3 28 da 95 68 02 7b 29 64 ab d0 ad 79 85 75 46 85 db b4 97 4e a0 6f 94 ee 04 61 22 04 8d ae ee b2 32 c6 ed 21 ec d8 73 54 cf 0a 98 22 0b 89 bf 8a e9 4b c6 10 08 6b 6f ee 63 87 9b 21 d0 00 88 ee 4b e7 a8 06 18 8b 4a a4 84 28 83 8c 97 22 06 f5 13 b5 0d a7 f2 08 a0 c9 9f f3 f1 65 6f 4c 73 c1 99 19 6e 74 af 75 1b fb 30 c9 93 ca e2 e5 6b 7a 6a 51 86 78 44 7e e8 a1 a4 96 e8 44 48 7d 9f c5 26 d4 7a 69 c3 a0 73 6d 87 41 2f 69 27 66 d4 79 1f f5 a4 c7 3b fd 11 b0 65 b9 f1 f4 0e 63 7f cd 7a f8 a2 c9 6b d9 46 60 b3 f9 e4 ae aa 59 bf e2 aa 92 f3 37 37 55 e2 ca 8b 1e 4c 20 ab 74 6d 58 8d 97 23 f9 d2 4e c3 f3 4a 90 db Data Ascii: ;\SkSm*.%[=kPPU#qk(h{)dyuFNoa"2!sT"Kkoc!KJ("eoLsntu0kzjQxD~DH}&zismA/i'fy;eczkF`Y77UL tmX#NJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	49802	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:13 UTC	607	OUT	GET /assets/scripts/lottie-player.js HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:13 UTC	254	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/javascript Date: Mon, 15 Jan 2024 14:02:12 GMT Accept-Ranges: bytes ETag: "04e5137cce2d71:0" Connection: close Last-Modified: Fri, 26 Nov 2021 13:47:56 GMT Content-Length: 361069
2024-01-15 14:02:13 UTC	4168	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 5b 22 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 22 5d 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 Data Ascii: !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["lottie-player"]={})}(this,(function(exports){"use strict";f
2024-01-15 14:02:13 UTC	4380	IN	Data Raw: 72 20 69 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 69 29 26 26 28 74 5b 69 5d 3d 72 5b 69 5d 29 7d 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6f 62 6a 65 63 74 53 70 72 65 61 64 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 29 3a 7b 7d 2c 69 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f Data Ascii: r i in r)Object.prototype.hasOwnProperty.call(r,i)&&(t[i]=r[i])}return t}).apply(this,arguments)}function _objectSpread(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?Object(arguments[e]):{},i=Object.keys(r);"function"==typeof Object.getO
2024-01-15 14:02:13 UTC	2920	IN	Data Raw: 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 3f 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 74 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 53 75 70 65 72 28 74 29 7b 76 61 72 20 65 3d 5f 69 73 4e 61 74 69 Data Ascii: t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}function _possibleConstructorReturn(t,e){return!e\|\|"object"!=typeof e&&"function"!=typeof e?_assertThisInitialized(t):e}function _createSuper(t){var e=_isNati
2024-01-15 14:02:14 UTC	1460	IN	Data Raw: 62 6c 65 54 6f 41 72 72 61 79 4c 69 6d 69 74 28 74 2c 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 21 30 2c 61 3d 21 31 2c 73 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 69 3d 28 6e 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 72 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 72 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 69 3d 21 30 29 3b 7d 63 61 74 63 68 28 74 29 7b 61 3d 21 30 2c 73 3d 74 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 7c 7c 6e 75 6c 6c 3d 3d 6f 2e 72 Data Ascii: bleToArrayLimit(t,e){if("undefined"!=typeof Symbol&&Symbol.iterator in Object(t)){var r=[],i=!0,a=!1,s=void 0;try{for(var n,o=t[Symbol.iterator]();!(i=(n=o.next()).done)&&(r.push(n.value),!e\|\|r.length!==e);i=!0);}catch(t){a=!0,s=t}finally{try{i\|\|null==o.r
2024-01-15 14:02:14 UTC	2920	IN	Data Raw: 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 28 72 3d 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 74 29 29 7c 7c 65 26 26 74 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 7b 72 26 26 28 74 3d 72 29 3b 76 61 72 20 69 3d 30 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 61 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3e 3d 74 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 74 5b 69 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 74 7d 2c 66 3a 61 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 Data Ascii: Array.isArray(t)\|\|(r=_unsupportedIterableToArray(t))\|\|e&&t&&"number"==typeof t.length){r&&(t=r);var i=0,a=function(){};return{s:a,n:function(){return i>=t.length?{done:!0}:{done:!1,value:t[i++]}},e:function(t){throw t},f:a}}throw new TypeError("Invalid at
2024-01-15 14:02:14 UTC	2920	IN	Data Raw: 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 75 73 65 20 70 72 69 76 61 74 65 20 66 69 65 6c 64 20 6f 6e 20 6e 6f 6e 2d 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 50 72 69 76 61 74 65 46 69 65 6c 64 47 65 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 5f 63 6c 61 73 73 41 70 70 6c 79 44 65 73 63 72 69 70 74 6f 72 47 65 74 28 74 2c 5f 63 6c 61 73 73 45 78 74 72 61 63 74 46 69 65 6c 64 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 2c 22 67 65 74 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 50 72 69 76 61 74 65 46 69 65 6c 64 53 65 74 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 5f 63 6c 61 73 73 41 70 70 6c 79 44 65 73 63 72 69 70 74 6f 72 53 65 74 28 74 2c 5f 63 6c 61 73 73 45 78 74 72 61 63 Data Ascii: ("attempted to use private field on non-instance");return t}function _classPrivateFieldGet(t,e){return _classApplyDescriptorGet(t,_classExtractFieldDescriptor(t,e,"get"))}function _classPrivateFieldSet(t,e,r){return _classApplyDescriptorSet(t,_classExtrac
2024-01-15 14:02:14 UTC	4380	IN	Data Raw: 29 7d 29 2c 74 68 69 73 29 7d 2c 64 65 66 69 6e 65 43 6c 61 73 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 65 2e 64 65 73 63 72 69 70 74 6f 72 3b 69 66 28 22 66 69 65 6c 64 22 3d 3d 3d 65 2e 6b 69 6e 64 29 7b 76 61 72 20 69 3d 65 2e 69 6e 69 74 69 61 6c 69 7a 65 72 3b 72 3d 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 72 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 72 2e 77 72 69 74 61 62 6c 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 63 61 6c 6c 28 74 29 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2e 6b 65 79 2c 72 29 7d 2c 64 65 63 6f 72 61 74 Data Ascii: )}),this)},defineClassElement:function(t,e){var r=e.descriptor;if("field"===e.kind){var i=e.initializer;r={enumerable:r.enumerable,writable:r.writable,configurable:r.configurable,value:void 0===i?void 0:i.call(t)}}Object.defineProperty(t,e.key,r)},decorat
2024-01-15 14:02:14 UTC	11680	IN	Data Raw: 6c 6c 6f 77 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 72 2b 22 20 63 61 6e 27 74 20 68 61 76 65 20 61 20 2e 22 2b 65 2b 22 20 70 72 6f 70 65 72 74 79 2e 22 29 7d 7d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 44 65 73 63 72 69 70 74 6f 72 28 74 29 7b 76 61 72 20 65 2c 72 3d 5f 74 6f 50 72 6f 70 65 72 74 79 4b 65 79 28 74 2e 6b 65 79 29 3b 22 6d 65 74 68 6f 64 22 3d 3d 3d 74 2e 6b 69 6e 64 3f 65 3d 7b 76 61 6c 75 65 3a 74 2e 76 61 6c 75 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: llowProperty:function(t,e,r){if(void 0!==t[e])throw new TypeError(r+" can't have a ."+e+" property.")}};return t}function _createElementDescriptor(t){var e,r=_toPropertyKey(t.key);"method"===t.kind?e={value:t.value,writable:!0,configurable:!0,enumerable:!
2024-01-15 14:02:14 UTC	4380	IN	Data Raw: 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 6e 75 6c 6c 3b 65 21 3d 3d 72 3b 29 7b 76 61 72 20 69 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 2c 65 3d 69 7d 7d 2c 6d 61 72 6b 65 72 3d 22 7b 7b 6c 69 74 2d 22 2e 63 6f 6e 63 61 74 28 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 73 6c 69 63 65 28 32 29 2c 22 7d 7d 22 29 2c 6e 6f 64 65 4d 61 72 6b 65 72 3d 22 5c 78 33 63 21 2d 2d 22 2e 63 6f 6e 63 61 74 28 6d 61 72 6b 65 72 2c 22 2d 2d 5c 78 33 65 22 29 2c 6d 61 72 6b 65 72 52 65 67 65 78 3d 6e 65 77 20 52 65 67 45 78 70 28 22 22 2e 63 6f 6e 63 61 74 28 6d 61 72 6b 65 72 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 6e 6f 64 65 Data Ascii: 2&&void 0!==arguments[2]?arguments[2]:null;e!==r;){var i=e.nextSibling;t.removeChild(e),e=i}},marker="{{lit-".concat(String(Math.random()).slice(2),"}}"),nodeMarker="\x3c!--".concat(marker,"--\x3e"),markerRegex=new RegExp("".concat(marker,"\|").concat(node
2024-01-15 14:02:14 UTC	2251	IN	Data Raw: 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 20 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 41 55 54 48 4f 52 53 2e 74 78 74 0a 20 20 20 2a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 20 2a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 Data Ascii: ed under the BSD style license found at * http://polymer.github.io/LICENSE.txt * The complete set of authors may be found at * http://polymer.github.io/AUTHORS.txt * The complete set of contributors may be found at * http://polymer.github.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49808	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:13 UTC	689	OUT	GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fregister&cb=1705327332250 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:13 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: di6qafcaj3ee X-Cloud-Trace-Context: 28dae8fe5f87b6b0f27eb44cf4e6808a Date: Mon, 15 Jan 2024 14:02:13 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:13 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	49812	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:13 UTC	631	OUT	GET /browser-ui/3.34.1/SaveButton-cb5f3e5b.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:14 UTC	1021	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo3QmRdZFrn6X_HHL-L2bxWVbxOyZKFvk6LQ1aaX_fDYtZftStJnw3_YGYekciY2se8BSbPIekVQhmRsucdLNAVmqpDKCsB x-goog-generation: 1704976788756803 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 616 Content-Encoding: gzip x-goog-hash: crc32c=L4+P9Q== x-goog-hash: md5=plhxqED7FvREdqrzfxYKPw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 616 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:23 GMT Expires: Fri, 10 Jan 2025 12:40:23 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:48 GMT ETag: "a65871a840fb16f44476aaf37f160a3f" Content-Type: text/javascript Age: 350511 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:14 UTC	231	IN	Data Raw: 1f 8b 08 08 94 e1 9f 65 02 ff 74 6d 70 36 32 38 6f 72 68 68 6c 00 85 94 cb 8e 9b 30 18 85 f7 7d 8a 4c 16 11 48 0e cd 2c aa 56 8e 68 94 30 91 7a 19 cd b4 03 8d d4 55 65 6c 37 72 c7 d8 c8 97 34 28 e1 dd 8b 21 a1 10 32 ed ea 80 cf c1 fc 3e 9f 64 96 e5 52 99 03 5a 8f 90 1e 51 80 9e 9c 1a 80 62 a7 1c a0 af 4e 25 48 73 a7 08 a4 d6 a9 00 e9 27 a7 1a a4 9f 9d 5a 50 38 49 01 4a 9c aa f2 a7 92 d9 38 78 cd 04 a1 fb 20 93 c4 72 1a fc d2 e3 39 6b fe b6 72 29 76 4e 6d 98 32 16 f1 98 aa 1d c3 f4 a3 a1 d9 34 7d f3 f6 76 46 df dd d6 1f 61 29 b4 19 e1 d0 3b 10 a6 51 ca 29 81 0a 48 11 71 86 9f 21 06 4c c7 b4 8a 90 7b 54 50 b5 61 f4 37 24 20 43 6a cb 44 6c 0a 4e 61 51 fa e1 fb 43 bd c9 81 a3 94 72 0d 13 Data Ascii: etmp628orhhl0}LH,Vh0zUel7r4(!2>dRZQbN%Hs'ZP8IJ8x r9kr)vNm24}vFa);Q)Hq!L{TPa7$ CjDlNaQCr
2024-01-15 14:02:14 UTC	385	IN	Data Raw: 60 19 8c ca 90 7a 3e 38 a8 6a 38 0d f3 32 34 1e 0f 56 df 92 e4 f1 e1 c7 32 8a d6 5f 92 d6 8c af 98 e0 66 e6 83 6d 28 3d 7f ce a9 19 65 e1 78 3c 57 d4 58 25 46 c8 4b fc c9 44 78 91 7f 3c ea fa d9 56 cf 0b 2f 0b 9b 37 32 99 24 81 fe 3b 74 80 30 a6 b9 59 59 63 a4 b8 77 23 2e fe e3 43 61 39 0f c3 64 b1 93 8c 8c 66 30 09 d2 da d4 a7 e8 92 73 90 7a 0c 1c 52 84 9f b7 4a 5a 41 22 c9 a5 82 db c0 b2 8b 6c 90 6e 41 a7 d8 ba 22 98 75 0a 36 54 1b 46 e0 d8 e2 69 f3 c5 14 71 3e 6d 36 19 57 ee de bc bc b7 73 41 b3 96 14 39 7d 6a ba 3e ad 7c 90 3b aa 9a a5 f8 12 99 5f 1f b1 04 a4 8b 5d b4 53 d9 2b d8 55 6f 0f 3c c4 4e 7a c4 8b 1e d4 bb f5 c3 f7 d6 4a 06 56 4d 3b 6a 69 e7 3d da a4 e6 4c 2a c2 79 e8 74 32 51 15 e4 1e 41 42 45 d1 e5 fb 4f f7 44 97 9c e9 92 b6 55 17 7c 91 6d Data Ascii: `z>8j824V2_fm(=ex<WX%FKDx<V/72$;t0YYcw#.Ca9df0szRJZA"lnA"u6TFiq>m6WsA9}j>\|;_]S+Uo<NzJVM;ji=L*yt2QABEODU\|m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	49805	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:13 UTC	613	OUT	GET /assets/scripts/jquery.validate.min.js HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:14 UTC	253	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/javascript Date: Mon, 15 Jan 2024 14:02:13 GMT Accept-Ranges: bytes ETag: "0921da69defd91:0" Connection: close Last-Modified: Mon, 25 Sep 2023 10:47:16 GMT Content-Length: 23070
2024-01-15 14:02:14 UTC	2709	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 36 2e 30 20 2d 20 31 32 2f 32 2f 32 30 31 36 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c Data Ascii: /! jQuery Validation Plugin - v1.16.0 - 12/2/2016 http://jqueryvalidation.org/ * Copyright (c) 2016 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?modul
2024-01-15 14:02:14 UTC	16383	IN	Data Raw: 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 2e 6d 61 6b 65 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 63 2e 75 6e 73 68 69 66 74 28 62 29 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 7d 3a 76 6f 69 64 20 30 3d 3d 3d 63 3f 62 3a 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 28 63 3d 61 2e 6d 61 6b 65 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 2e 73 6c 69 63 65 28 31 29 29 2c 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 28 63 3d 5b 63 5d 29 2c 61 2e 65 Data Ascii: (b,c){return 1===arguments.length?function(){var c=a.makeArray(arguments);return c.unshift(b),a.validator.format.apply(this,c)}:void 0===c?b:(arguments.length>2&&c.constructor!==Array&&(c=a.makeArray(arguments).slice(1)),c.constructor!==Array&&(c=[c]),a.e
2024-01-15 14:02:14 UTC	26	IN	Data Raw: 61 72 20 63 3d 7b 7d 3b 61 2e 65 61 63 68 28 62 2e 73 70 6c 69 74 28 2f 5c 73 Data Ascii: ar c={};a.each(b.split(/\s
2024-01-15 14:02:14 UTC	3952	IN	Data Raw: 2f 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 21 30 7d 29 2c 62 3d 63 7d 72 65 74 75 72 6e 20 62 7d 2c 61 64 64 4d 65 74 68 6f 64 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 62 5d 3d 63 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 73 73 61 67 65 73 5b 62 5d 3d 76 6f 69 64 20 30 21 3d 3d 64 3f 64 3a 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 73 73 61 67 65 73 5b 62 5d 2c 63 2e 6c 65 6e 67 74 68 3c 33 26 26 61 2e 76 61 6c 69 64 61 74 6f 72 2e 61 64 64 43 6c 61 73 73 52 75 6c 65 73 28 62 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 62 29 29 7d 2c 6d 65 74 68 6f 64 73 3a 7b 72 65 71 75 69 72 65 64 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c Data Ascii: /),function(){c[this]=!0}),b=c}return b},addMethod:function(b,c,d){a.validator.methods[b]=c,a.validator.messages[b]=void 0!==d?d:a.validator.messages[b],c.length<3&&a.validator.addClassRules(b,a.validator.normalizeRule(b))},methods:{required:function(b,c,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	49815	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	639	OUT	GET /browser-ui/3.34.1/VirtualServiceItem-b5710e81.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:14 UTC	1019	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqogWgeofxcJO0stMf9RDcEoIIcr6gUo-e7jX3YimqNTdMrp98oO6UgBnkfhld5eUt743tO_AX0xvHcb5l_yUDRHg x-goog-generation: 1704976790253910 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 48576 Content-Encoding: gzip x-goog-hash: crc32c=8z2XGA== x-goog-hash: md5=82s1rbl9hXY9LzW6R6+Fnw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 48576 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:23 GMT Expires: Fri, 10 Jan 2025 12:40:23 GMT Cache-Control: public, max-age=31536000, no-transform Last-Modified: Thu, 11 Jan 2024 12:39:50 GMT ETag: "f36b35adb97d85763d2f35ba47af859f" Content-Type: text/javascript Age: 350511 Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:14 UTC	233	IN	Data Raw: 1f 8b 08 08 96 e1 9f 65 02 ff 74 6d 70 78 31 35 31 6a 68 75 5f 00 ec bd db 62 db c8 ae 28 f8 2b 32 57 b6 9a dc 29 31 a2 ee a2 9a ad ed 38 4e e2 8e 13 bb 6d e7 ea f6 72 28 89 b2 18 d3 a4 9a a4 7c 89 ad f3 78 fe 65 9e e7 0f e6 53 e6 4b 06 40 15 c9 22 45 d9 4e 77 af 39 fb cc ac be 58 64 b1 ae 28 14 80 02 50 28 f7 62 1e 84 f1 ed ac 62 47 15 87 8d 76 f1 37 66 f6 4b fc 75 d9 1c 7f 02 36 7a 8b bf 3e 1b fd 81 bf 21 b3 f7 f0 d7 66 f6 3e fe 7a cc de c2 df 88 d9 bf e1 ef 84 d9 07 f8 3b 66 f6 21 fe 2e d8 0d fe cc d9 e8 3b fe ce d8 e8 1d fe 9e 31 fb 3d fe 5e b0 11 55 37 65 23 aa 6e c4 46 cf f1 f7 86 8d 22 fc bd 64 23 aa f6 9a 8d a8 57 57 6c 44 d5 6f 31 fb 0d fe 1e 31 fb 35 fe 9e b3 11 35 b7 cb 6c 6a ef Data Ascii: etmpx151jhu_b(+2W)18Nmr(\|xeSK@"ENw9Xd(P(bbGv7fKu6z>!f>z;f!.;1=^U7e#nF"d#WWlDo1155lj
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: 90 8d 5e e0 ef 36 1b 1d e1 ef 0e 1b 51 7b 9b 6c 14 e3 ef 01 b3 7f c5 df ef 6c f4 01 7f f7 d8 e8 23 fe ee b3 d1 27 fc 7d c7 46 9f f1 f7 09 a3 e6 9e b3 d1 17 fc 3d 65 a3 53 fc 7d c1 ec 6d fc 7d cb 6c aa fe 35 1b 3d c1 df 97 6c 5c c7 df 6f 6c 6c e0 ef 2b 36 6e e0 ef 7b 36 6e e2 ef 07 36 6e e1 ef 47 36 ba c6 df 37 6c dc c6 df 4f 6c dc c1 df cf 6c dc c5 df 2f 6c dc c3 df 3f 98 4d c3 f8 95 d9 3b f8 fb 1b 1b f7 69 b2 60 b6 68 fc 31 3c 2c 68 ba 1c 66 d3 43 00 29 34 73 be c3 c6 36 4d 19 a4 d0 83 0d 29 23 9a 34 78 18 d3 ac c1 c3 84 a6 0d f2 6c d2 bc c1 03 41 70 01 15 12 42 cc 21 85 06 3b 83 07 02 da 19 94 72 68 f6 e0 61 4a d3 07 0f 67 34 7f f0 40 e8 74 03 99 69 c8 97 90 e2 d2 14 c2 c3 37 9a 43 78 38 a7 49 84 07 8f 66 11 1e 2e 68 1a a1 d4 15 cd 23 a4 f8 34 91 f0 10 Data Ascii: ^6Q{ll#'}F=eS}m}l5=l\oll+6n{6n6nG67lOll/l?M;i`h1<,hfC)4s6M)#4xlApB!;rhaJg4@ti7Cx8If.h#4
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: 13 33 b4 36 0c 96 cd 8a 6d 6d d4 99 47 8d 7a ec 02 08 a3 eb 1f d2 02 88 58 e0 03 93 1a 9f 9b 53 16 3b b0 36 27 e6 88 65 d8 76 b3 cc a8 fc a5 35 51 81 f6 86 d4 de f5 d2 1a ab 0b fd f9 fb a3 a3 bd 77 87 69 f2 55 2e 19 69 76 42 1d e7 ea 6b 87 cd d4 db 25 f2 3f 62 ae f0 7b ab 20 30 6a d4 31 05 a0 0b d5 04 d0 29 85 0f af 0c 36 d9 00 99 02 3c c0 ae f1 4e 2b d0 6b 69 b4 d2 a0 42 02 63 36 22 95 f3 c0 9b 84 d5 dd a4 0b f2 ee ee 4c 8d 93 37 76 29 af 14 22 66 c0 b0 09 64 17 2a fe 0b 03 b9 d6 58 a0 b1 0d aa 71 c3 ba ae 56 41 60 24 d0 6a d5 ea c6 46 04 c3 e3 af 28 4d ad ce 98 a8 e4 0a a4 10 e4 24 9c 3a 7f 7b 88 20 cb 44 37 47 58 25 4a 45 1f d7 10 da 59 46 47 2f 5c bf 56 78 cd c8 a9 a0 89 bc ae 84 b8 d5 25 7a 8b 44 4f 2a 9d 7d f8 93 14 97 d3 4c 22 fa b4 ca 94 e8 c2 f6 Data Ascii: 36mmGzXS;6'ev5QwiU.ivBk%?b{ 0j1)6<N+kiBc6"L7v)"fdXqVA`$jF(M$:{ D7GX%JEYFG/\Vx%zDO}L"
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: 32 9b 98 dc af 37 bb 46 bf 05 53 de ac 37 9b 9d 16 2c 12 4c 05 34 aa c3 6a 87 55 8d e8 d9 85 1e 63 6a cf 68 b5 bb 0d ac a2 6e 18 d0 bb 5e 1b 61 0a e5 1a 46 b3 53 e9 e9 3d 48 06 04 23 74 ee 77 fb 1d e8 3d a4 76 da fd 36 0e 96 f7 02 48 03 a4 ee ae 49 46 18 f6 80 0a 19 d0 67 20 78 3d e8 91 71 5f 2a 2c f1 a6 d1 a3 54 58 78 3d c4 f1 36 d0 3c a3 d1 6f d3 bc 03 60 a0 7b f5 5e 05 52 3b 46 bf d9 ae 53 6a bb 69 f4 01 99 2b 50 45 17 86 df c4 f1 d5 f5 66 ab 61 74 00 72 5b 30 67 7d 00 78 97 f0 0e 96 7e 17 a0 60 40 e6 2e cc 6f db a8 f3 d4 4e ab d7 e8 41 22 94 6e f4 60 2e a8 86 9e d1 03 02 85 7d 2b 4d 06 c0 c1 bc 43 c5 2d a4 71 40 d4 1a 00 d3 ca 2e 4c 20 a4 77 0d a3 89 48 d4 05 b2 66 74 fb 84 03 0d c8 0e 94 03 b0 19 a6 a4 d9 31 ea 0d 9c ed 4e dd e8 f4 60 69 43 6a 13 08 Data Ascii: 27FS7,L4jUcjhn^aFS=H#tw=v6HIFg x=q_*,TXx=6<o`{^R;FSji+PEfatr[0g}x~`@.oNA"n`.}+MC-q@.L wHft1N`iCj
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: cb 6a e3 13 c4 f3 01 94 9c 70 df b3 c7 44 70 45 6e 20 3e 57 fa f3 bd a3 a3 bd b7 43 45 f4 b1 52 07 fc 80 31 e3 43 a9 bf d7 c2 45 47 ca 48 87 69 79 6e fb be 13 92 37 cd 72 7e fd 55 74 68 f3 62 be ed f3 25 b3 d6 cd ab e8 17 40 dd 2b 71 68 fb 73 d9 16 91 f3 3c 5d 76 87 34 4d 43 a5 5e 69 ce af 2b 5d f8 3f 3c 1b d9 6a 9d 55 c4 7f 7a 4f 53 84 62 a3 c4 00 be e2 e7 a5 31 27 4e 51 3a c1 e1 02 6a 91 43 62 19 3a d6 50 5e 0b 23 67 50 e6 b4 53 a4 14 a4 09 99 db e8 7f 5b 44 38 be 94 80 36 0a df 21 d9 5f 86 7b e3 10 ca a6 be 38 b4 5a d0 ab 68 ea 05 57 b5 1b 9e bf b8 b0 66 39 df 8f 8a e4 f9 43 9f 7f 00 c9 21 51 6a f7 c7 7d 7d 70 64 49 ca 2a 2c 12 2f a0 59 70 f5 9c 9a 7e ce 5b ce f9 85 fc ea a8 31 fa 4d ff 35 e4 1f a3 88 73 34 83 59 39 cb 9c 16 09 55 ee c3 e6 bf 80 7f 8f Data Ascii: jpDpEn >WCER1CEGHiyn7r~Uthb%@+qhs<]v4MC^i+]?<jUzOSb1'NQ:jCb:P^#gPS[D86!_{8ZhWf9C!Qj}}pdI*,/Yp~[1M5s4Y9U
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: 74 e4 44 f1 07 b4 72 f9 b1 69 33 04 f9 6b 3c 27 ea 91 5f 9d 19 51 f0 8a e4 48 eb 84 1f 69 dd dd 79 f7 06 04 9c 33 2b c0 f8 1e 40 0d 28 fc 06 2c 8a d0 43 c0 91 b5 08 a6 6c 6a 39 f9 ef c2 98 2a e5 49 c0 54 df b0 ac 33 dd 73 fc b3 78 76 77 87 6f d3 f4 2d 1e ce d5 b3 98 dd 16 86 86 1e 72 17 90 9c 37 e0 2a 8b 71 cd f6 c7 b3 20 8c 94 25 03 74 b5 e7 d4 f8 5c 9d c6 e2 c8 ad 9e 1e 3a 5e 39 74 9b 7d 5a ae af b8 86 b0 56 d8 0c a1 84 08 87 c3 46 23 27 5a fd 13 73 71 2c 94 0d 52 78 94 4a 80 c1 12 62 e8 11 9a 6a 9f fd f3 1f 81 ff 7e ac ea ff a9 51 89 27 cf b4 01 a0 ec 91 1a 31 97 d9 0c 56 76 50 ad 06 02 06 1a 08 08 c2 07 e2 05 b7 91 a9 5a 16 d0 c2 b9 4a 22 4c 6c 2d 22 e0 74 14 f1 40 0d 8e eb 27 7a b4 18 c1 6e 4e 35 00 d0 22 0b ae 1d ec 00 cf 84 b6 61 d2 78 e0 18 18 11 Data Ascii: tDri3k<'_QHiy3+@(,Clj9IT3sxvwo-r7q %t\:^9t}ZVF#'Zsq,RxJbj~Q'1VvPZJ"Ll-"t@'znN5"ax
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: b8 cf ba 24 51 c4 a5 07 ba 1e 3e 82 c5 4f 69 7d c2 cd 55 59 3e a3 df ef 3f bb e6 5b af dc 89 af 46 0b fe e3 e7 a5 00 ed 61 76 85 9b 63 ee e4 47 a3 d2 d8 ea e0 61 3c 3c 37 28 1e 8c 46 d4 c2 27 3c 24 28 fe ab 89 84 9a 51 3f a4 23 41 94 ad d2 f8 f2 b6 af b7 e9 f0 46 b7 dd f4 6a 0d bd 5f ef e0 df 7e c7 d6 7b ad 16 fe 4f 2c ca a8 e9 8d 66 a7 a6 b7 7b bd 71 1d 9e 1b 78 02 a2 5d c3 93 59 c9 87 be ad 77 fb f0 1f cf 5f 31 74 a3 d5 a8 d4 bd 86 de c4 53 40 ad 7a 0b 8f 2f 76 6b d0 52 ab b1 9a 15 4f fc e9 bd 36 fc 27 12 eb 98 dc ed 78 b5 0e 7c 6d c3 d0 9a cd 76 ae 58 4d 14 fb a2 a0 80 a2 90 e3 27 b0 ca f3 1a a9 be 9d 49 0d b7 4d 35 84 55 cd c6 23 7a 3f 70 10 ee c2 8e 60 32 6e 1f aa 76 24 0e 36 d0 d1 23 5e 72 81 de c3 b7 34 9b a4 6c 50 fe f1 e8 7e 61 a3 c0 35 42 4f bd Data Ascii: $Q>Oi}UY>?[FavcGa<<7(F'<$(Q?#AFj_~{O,f{qx]Yw_1tS@z/vkRO6'x\|mvXM'IM5U#z?p`2nv$6#^r4lP~a5BO
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: c4 99 ab 0d de 24 92 19 11 b9 17 86 1a 1f bb 27 96 03 7f 70 83 cc 6e 81 95 7c 16 6b 5a f2 a3 91 e6 1e cf 56 4b 8b d9 8d 52 17 3c dc d8 a3 de f7 38 64 36 46 ae a8 e3 e5 18 07 3c 80 45 a2 77 8d f8 aa 7f b9 b7 77 24 29 5b 0b 8e 34 cf 37 df a1 2a 16 95 b2 b0 63 42 b5 ee 64 f8 29 56 27 2c 5d 16 e2 70 b3 e4 e2 0d 13 90 ff 26 fb 78 2b 27 9a 79 bb 72 33 89 57 ad 7a d9 ad 33 e9 63 ee 62 93 0d cb 0a ab 55 5b 2d ff 4a 01 37 50 df 6c 9f 50 5c 05 58 f7 32 a4 18 f7 18 ca 4c 97 40 88 60 37 3f 23 b5 c4 9b 52 75 c7 34 08 90 16 2d 49 5b 01 f3 f1 a5 e8 46 da 6b 3f ea e4 b3 74 94 2c db d9 15 fc 19 d0 98 f9 c7 03 5b e4 02 c6 23 7d 48 bc 91 a9 e1 68 16 a2 dc 55 7f e0 c4 01 9e 0b 2b 1c 15 fb c1 43 08 7e b0 2f 6a 2c 9e 81 a9 8b d3 2f 25 64 e2 31 89 eb 69 c7 bd 4d c6 65 f4 42 3e Data Ascii: $'pn\|kZVKR<8d6F<Eww$)[47*cBd)V',]p&x+'yr3Wz3cbU[-J7PlP\X2L@`7?#Ru4-I[Fk?t,[#}HhU+C~/j,/%d1iMeB>
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: f3 27 cb ab b2 21 b4 78 27 9a 2c 9b ca fb 83 ec ea 33 7a 2d 5e 77 46 89 45 01 74 94 59 56 97 89 63 3f 6f b9 10 f1 86 1b 6b 8b ea aa fb 95 6b 78 2e dc bd ef 4a a9 fc 19 ea 16 17 00 2b 39 79 9b 64 61 f9 48 6a f1 2c 78 2a cb e0 18 56 82 f9 34 a9 c6 f4 d0 28 1f 61 18 cc f1 c6 d1 ed eb b9 8d be 47 20 05 11 38 5c cf 8d 6f d2 f8 07 71 b5 aa 48 07 b9 71 85 c1 60 f1 ec 2c 3c 16 63 9a 18 3c f0 09 8c 80 02 a4 94 64 68 f1 c8 28 f0 11 33 d5 8c b2 e8 29 9a 88 85 b6 da 41 31 17 14 e3 08 77 8f 62 8b b8 2e 3b 23 f5 6a cc b8 67 88 cb dc e8 95 17 8c 9c 3d ff 80 12 c8 dd a5 66 6c 58 96 5b ad e2 3d be f0 13 0f bf 52 21 f4 be 1e ba c0 65 ea 00 09 00 f7 57 93 8b 74 66 85 e4 73 6d 5d 8b 08 62 a1 7a a0 b3 74 b0 09 cb c2 24 8d dd 52 0b 7f f9 1e 3f 1f 69 27 87 d7 d0 2b 09 03 92 30 Data Ascii: '!x',3z-^wFEtYVc?okkx.J+9ydaHj,x*V4(aG 8\oqHq`,<c<dh(3)A1wb.;#jg=flX[=R!eWtfsm]bzt$R?i'+0
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: c0 aa 93 a6 b1 53 4b 41 89 7a 0a 3c 5a 63 b4 5e f7 61 f0 08 84 7e 8d 43 01 73 11 14 00 42 95 7a 8d a0 d0 c5 b4 36 25 cd 40 1c e8 8d 21 3b 74 4d 37 08 3c 0d fc 15 10 83 8a ba 04 b2 1a 25 02 b8 1a 6d 3c ba d3 19 eb 58 b1 81 e7 75 e8 90 10 5e 05 93 e0 04 41 d3 ce 23 46 0d 81 41 b0 84 be 76 70 1e 0d 40 0e 98 70 e8 25 4c 47 8d b7 db 4a fa 58 c3 5a 45 bb ad 64 6a a1 0b 7a 87 23 04 b4 87 bf 8d a8 a6 53 c3 30 52 7c 45 94 6a f6 be 73 36 f9 17 0e fa 8c 1e 45 1b d7 9d d8 49 4f e5 fc f8 91 9c 01 5e b3 30 75 ad 5b e7 9a 42 ac 9a b7 cb 65 16 f8 65 e4 aa da ed 32 7d bd a1 d7 1b 57 0f 9d c8 89 3f da a1 0f 62 fe 96 0d 04 d9 1a b9 83 a9 ab 8b 4a ac a4 04 64 4f 0b 3b c9 f9 7b e6 b3 90 02 c9 28 87 db 5b 07 db 47 a7 2f f6 4e df ed 1d 9d ee 6f 1e 1e 9e 1e bd de 39 3c dd 3b 38 Data Ascii: SKAz<Zc^a~CsBz6%@!;tM7<%m<Xu^A#FAvp@p%LGJXZEdjz#S0R\|Ejs6EIO^0u[Bee2}W?bJdO;{([G/No9<;8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	49810	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	434	OUT	GET /assets/img/chevron-down-orange.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:14 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:13 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 1862
2024-01-15 14:02:14 UTC	1862	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 30 70 78 22 20 68 65 69 67 68 74 3d 22 31 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 20 31 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 36 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 20 70 6f 69 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="30px" height="15px" viewBox="0 0 30 15" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 6</title> <defs> <polygon id="path-1" poin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	49811	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	625	OUT	GET /assets/scripts/jquery.validate.unobtrusive.min.js HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:14 UTC	252	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/javascript Date: Mon, 15 Jan 2024 14:02:13 GMT Accept-Ranges: bytes ETag: "0921da69defd91:0" Connection: close Last-Modified: Mon, 25 Sep 2023 10:47:16 GMT Content-Length: 6286
2024-01-15 14:02:14 UTC	6286	IN	Data Raw: 2f 2a 20 4e 55 47 45 54 3a 20 42 45 47 49 4e 20 4c 49 43 45 4e 53 45 20 54 45 58 54 0d 0a 20 2a 0d 0a 20 2a 20 4d 69 63 72 6f 73 6f 66 74 20 67 72 61 6e 74 73 20 79 6f 75 20 74 68 65 20 72 69 67 68 74 20 74 6f 20 75 73 65 20 74 68 65 73 65 20 73 63 72 69 70 74 20 66 69 6c 65 73 20 66 6f 72 20 74 68 65 20 73 6f 6c 65 0d 0a 20 2a 20 70 75 72 70 6f 73 65 20 6f 66 20 65 69 74 68 65 72 3a 20 28 69 29 20 69 6e 74 65 72 61 63 74 69 6e 67 20 74 68 72 6f 75 67 68 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 77 69 74 68 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 0d 0a 20 2a 20 77 65 62 73 69 74 65 20 6f 72 20 6f 6e 6c 69 6e 65 20 73 65 72 76 69 63 65 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 69 63 65 6e 73 69 6e 67 20 6f 72 Data Ascii: /* NUGET: BEGIN LICENSE TEXT * * Microsoft grants you the right to use these script files for the sole * purpose of either: (i) interacting through your browser with the Microsoft * website or online service, subject to the applicable licensing or

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	49809	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	427	OUT	GET /assets/img/synesgy-logo.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:14 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:13 GMT Accept-Ranges: bytes ETag: "0123efde632d81:0" Connection: close Last-Modified: Tue, 08 Mar 2022 12:21:08 GMT Content-Length: 23023
2024-01-15 14:02:14 UTC	7102	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 ba 08 06 00 00 00 87 b4 50 51 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 Data Ascii: PNGIHDRPQtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15
2024-01-15 14:02:14 UTC	15921	IN	Data Raw: 93 fe 7f 6d e3 eb 0e 5c b1 cd d8 29 ab a7 35 7c 3e 5d 13 bb 23 96 75 53 08 59 a7 c3 2a 8f 0a 19 dc 94 70 6a 1d 72 b2 e1 56 e5 10 52 27 00 b9 70 7e 97 24 07 9b c0 cf 79 dd b9 b8 39 89 40 7b ce 2b 3c 31 38 ca a5 99 3f be ad 95 ad 79 d3 74 ac 2f 78 21 e9 ca 2d 0e 45 ce 2c c3 cf 75 1c e8 c6 38 96 6c 3b 19 2d 4d 71 2f 1c 36 46 a2 7c ef 25 f0 88 63 57 15 e4 9e b8 5e 3e c8 87 86 a3 87 69 f9 33 04 f6 6f 01 1f fe 9d 0f f6 ee 75 9b e1 12 9c 88 da 52 bc f0 54 12 dd b5 a9 d6 ac 99 52 7f b5 d6 3d 57 37 2c 6b a9 77 13 c6 91 5a eb 4f 92 5e fe 51 6d b8 49 8b d8 b4 6b e5 ad ee 39 ef 37 95 e7 9a 81 b8 ee e6 f8 b5 e1 1f f3 33 ab e7 e0 16 64 ab 31 bc 5f d8 a1 c5 cd d5 c5 bb 9a ba c4 72 e2 7f 4b 3a c6 27 7a 8c ae 93 09 ec 6b fb 1a 7b a6 6d 20 5d 9b 41 9d ee c1 fa 1d c6 93 1e Data Ascii: m\)5\|>]#uSY*pjrVR'p~$y9@{+<18?yt/x!-E,u8l;-Mq/6F\|%cW^>i3ouRTR=W7,kwZO^QmIk973d1_rK:'zk{m ]A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	49813	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	632	OUT	GET /browser-ui/3.34.1/DefaultTabs-738dacba.js HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://service.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.usercentrics.eu/browser-ui/3.34.1/index-b604349e.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:14 UTC	1017	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPoQOfQ4gyQphQKkFk-o6Sc0KQ9jxGsWOPBIeHPFjdo8JKk92SwtY6rCUIWLkiuTHPdxGYPHmDq39dstU0hh8yVyRA x-goog-generation: 1704976787291222 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1696 Content-Encoding: gzip x-goog-hash: crc32c=5ztWag== x-goog-hash: md5=KFmYMsAzO6dDsqxu2XpV7Q== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 1696 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Thu, 11 Jan 2024 12:40:23 GMT Expires: Fri, 10 Jan 2025 12:40:23 GMT Cache-Control: public, max-age=31536000, no-transform Age: 350511 Last-Modified: Thu, 11 Jan 2024 12:39:47 GMT ETag: "28599832c0333ba743b2ac6ed97a55ed" Content-Type: text/javascript Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:14 UTC	235	IN	Data Raw: 1f 8b 08 08 93 e1 9f 65 02 ff 74 6d 70 61 7a 38 31 70 74 71 68 00 ad 58 7f 6f e2 3a 16 fd 7f 3f 45 41 b3 51 a2 b9 b0 b0 d2 e8 ad 52 79 46 34 a5 23 76 d9 c2 12 06 69 f4 34 6a 1d 62 20 d3 90 f0 6c 07 4a d3 7c f7 77 6f 42 20 14 da a9 76 57 aa 7a 92 d8 be be bf ce b1 db 60 b9 8a a5 4e bd cd 05 57 17 02 b8 43 a8 c0 db 12 6a e0 37 84 01 f0 2e 21 07 fe 1f 42 09 2b 82 10 a6 2d c2 18 f8 3f 09 a7 90 af 8a c0 7b 22 f4 c1 4b 08 5d f0 72 ab 73 58 10 24 c0 6f 09 b7 c0 47 84 63 e0 2e a1 07 d3 7c d9 1a bc dc 7a 0f f8 37 c2 25 78 8a 70 06 5e 87 b0 0b de bf 08 9d 6c 26 e3 65 bd f9 b7 20 f2 c5 63 73 19 fb 49 28 9a 3f 55 fd 32 28 62 fa 37 cd ea 83 20 18 c1 8c 60 51 b8 b0 82 35 c1 13 3c 10 4c 20 20 18 c2 1f 04 83 22 Data Ascii: etmpaz81ptqhXo:?EAQRyF4#vi4jb lJ\|woB vWz`NWCj7.!B+-?{"K]rsX$oGc.\|z7%xp^l&e csI(?U2(b7 `Q5<L "
2024-01-15 14:02:14 UTC	1252	IN	Data Raw: b6 0d 48 82 0e e4 7b 5f 83 26 78 84 3c 4d 77 f0 48 f0 50 84 7b 05 79 8e 3e 40 ee fd 0d e4 4e de 96 ce 4d 02 a9 13 1e ba 42 ae 83 a9 e8 69 b1 6c 78 9f 7e 6b b7 c4 3f da b9 af d3 38 52 fa e2 1b 13 a6 69 a6 f8 a2 65 1c 86 42 f6 fc 3e f7 44 68 0b 56 af c3 22 f0 c5 35 d7 7c 28 e3 a9 50 2a 88 e6 3b 73 ca 56 ac d6 86 40 4d 02 15 78 a1 b0 e7 a0 16 f1 a6 1c 1d c7 f3 79 88 93 12 56 6b 81 d2 c1 f4 61 3b 12 33 7b 9b c1 d8 62 9f d3 62 6b 8f f5 4d 6d 5a 16 ac 99 fa d2 b6 5b d0 63 5e 33 14 d1 5c 2f 3e b6 3f ae 21 9d 0b 4d 6e bb c1 93 b0 97 a0 2a 6f b3 8c 8d cc 1e 7c 6a 59 90 4e 43 c1 a5 c3 b5 98 c7 72 3b 4c e4 2a 56 c2 9d 52 30 e3 b8 e7 db 5d 50 fb 97 31 f7 26 81 d8 bc 98 6c 3b b0 92 62 1d c4 89 a2 51 7b 90 b1 c0 44 c3 49 60 6f 32 c6 f1 b1 c3 a4 69 5d 06 33 33 c4 5c 51 Data Ascii: H{_&x<MwHP{y>@NMBilx~k?8RieB>DhV"5\|(P;sV@MxyVka;3{bbkMmZ[c^3\/>?!Mno\|jYNCr;L*VR0]P1&l;bQ{DI`o2i]33\Q
2024-01-15 14:02:14 UTC	209	IN	Data Raw: 48 f3 ed f3 ae e2 aa fb 0f a9 3c aa 7b 79 a3 42 57 b2 46 e0 df c3 c1 cd 37 e7 de 67 f0 ea a0 f5 66 2c 25 93 4e 22 39 0c 54 e2 70 bb a3 49 cf c1 28 26 dd db eb c1 c8 7d cb bf 9d 81 dc bd b3 c1 56 26 50 ac 2f 43 38 0c 5b 14 c2 ff de 9a 57 90 a2 1b e7 8b 51 09 fe b4 c6 fb 20 43 e1 5f 6d 7f 5d b5 1d 0f fe df 1d 5c 09 e1 a4 0e 27 fe 1f ca f7 2b ef 7f 51 06 4a f0 58 f2 48 cd 84 bc c9 6f 57 86 a1 9a 2a 5e 8a 57 6f 59 86 11 99 1f de d1 71 a5 62 ff 62 bf f3 17 cd 11 9d 3f 37 e7 46 16 19 a5 ea e7 b9 02 bc 5b 9a 5e d9 f2 65 01 4f ea f0 7a f5 f0 78 ab fc f1 48 77 6d f1 98 ff 2b e1 7b fe 4f 80 ec f2 2f 7f 02 24 06 4a 71 2f 11 00 00 Data Ascii: H<{yBWF7gf,%N"9TpI(&}V&P/C8[WQ C_m]\'+QJXHoW*^WoYqbb?7F[^eOzxHwm+{O/$Jq/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	49817	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	450	OUT	GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fregister&cb=1705327332250 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:14 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: d9lu71ynstcm X-Cloud-Trace-Context: 94fcd0293049545eb756ded7fce6c79a Date: Mon, 15 Jan 2024 14:02:14 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	49814	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	672	OUT	GET /media/eqlpzy03/switzeland-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:14 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:13 GMT Accept-Ranges: bytes ETag: "97f939864064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:30 GMT Content-Length: 746
2024-01-15 14:02:14 UTC	746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 9c 49 44 41 54 78 9c ed dd 21 6e 54 51 14 80 e1 3b 30 82 84 50 14 28 52 f0 35 c8 ba c2 1e 20 d8 6e 65 76 82 6d 58 04 83 69 91 20 00 8b 40 a1 a6 93 54 20 26 25 e8 f2 0b 92 32 6d de 7c df 06 ee 3b 47 fc 79 57 dd d9 e9 d8 bf 1c 00 57 2d ee 58 0a 50 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 a4 b9 d5 4c cf a3 e3 d7 e3 de b3 27 5b 9d eb e7 db 77 e3 d7 f7 1f bb b1 e0 1d 22 10 13 f4 f8 f8 d5 d8 3b 3a dc ea 60 e7 cb 33 Data Ascii: PNGIHDRU/pHYsqqIDATx!nTQ;0P(R5 nevmXi @T &%2m\|;GyWW-XPH$@I $@ H$@I $@ H$@I $@ HL'[w";:`3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	49818	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	664	OUT	GET /media/1ezg3lp0/beluxflag.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:13 GMT Accept-Ranges: bytes ETag: "87cfc75a7bd81:0" Connection: close Last-Modified: Wed, 08 Jun 2022 07:33:18 GMT Content-Length: 21756
2024-01-15 14:02:15 UTC	2723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 03 e8 08 06 00 00 00 86 5e 65 aa 00 00 54 c3 49 44 41 54 78 da ec dc 4f a8 a5 f7 7d df f1 df cc 95 34 f2 68 2c cd 48 1a 59 78 66 84 11 c5 58 90 85 76 36 de c8 ae 29 16 36 18 2c 91 8d 09 b6 21 3b 87 d8 f5 42 2b 81 0d 32 41 2a 81 9a e0 d6 22 35 72 9d ba c5 d0 12 05 15 99 1a d3 1a 1c 5a 5a 41 bc 18 a8 4b b2 0a 21 9b 14 4c 48 1a 02 06 8d 66 ba 18 cd e8 de 99 7b ee 79 fe fc 9e e7 f9 7e 7f bf d7 0b b2 6a 49 9d 93 33 e7 3c e7 7e fa 7d 9f fa e2 67 1f 7c a7 00 00 40 65 f7 1c 9c 2a ff f2 9f 7f e0 fa b9 b3 a7 bc 18 00 00 d4 f1 ab 83 6b 6f 7f f7 e1 5f dd f8 bf 07 d7 bc 18 00 00 2c e1 54 29 e5 86 97 01 00 80 da be f9 bb 0f 97 6f fc ee c3 5e 08 00 00 aa b8 fe 67 ef 2b d7 fe f0 7c b9 f1 8f a7 bd 18 00 00 Data Ascii: PNGIHDR^eTIDATxO}4h,HYxfXv6)6,!;B+2A"5rZZAK!LHf{y~jI3<~}g\|@eko_,T)o^g+\|
2024-01-15 14:02:15 UTC	2920	IN	Data Raw: 00 00 70 32 03 3a 00 d0 25 e9 76 00 a0 2b 92 ed 00 00 00 83 48 b8 03 00 dd 91 6e 07 00 7a 22 d9 0e 00 00 30 9c 0b 74 00 a0 3b d2 ed 00 40 2f 24 db 01 00 00 c6 31 a0 03 00 5d 91 6e 07 00 ba 20 d9 0e 00 00 30 89 84 3b 00 d0 0d e9 76 00 a0 07 92 ed 00 00 00 d3 b9 40 07 00 ba 21 dd 0e 00 b4 4e b2 1d 00 00 60 1e 03 3a 00 d0 05 e9 76 00 a0 69 92 ed 00 00 00 55 48 b8 03 00 cd 93 6e 07 00 5a 26 d9 0e 00 00 50 8f 0b 74 00 a0 79 d2 ed 00 40 ab 24 db 01 00 00 ea 32 a0 03 00 4d 93 6e 07 00 9a 24 d9 0e 00 00 b0 08 09 77 00 a0 59 d2 ed 00 40 8b 24 db 01 00 00 96 e3 02 1d 00 68 96 74 3b 00 d0 1a c9 76 00 00 80 65 19 d0 01 80 26 49 b7 03 00 4d 91 6c 07 00 00 58 85 84 3b 00 d0 1c e9 76 00 a0 25 92 ed 00 00 00 eb 71 81 0e 00 34 47 ba 1d 00 68 85 64 3b 00 00 c0 ba 0c e8 00 Data Ascii: p2:%v+Hnz"0t;@/$1]n 0;v@!N`:viUHnZ&Pty@$2Mn$wY@$ht;ve&IMlX;v%q4Ghd;
2024-01-15 14:02:15 UTC	2920	IN	Data Raw: 6e 07 80 3a 24 db 01 00 00 80 b5 b9 40 07 80 8a a4 db 01 a0 0e c9 76 00 00 00 60 0b 06 74 00 a8 44 ba 1d 00 ea 90 6c 07 00 00 00 b6 22 e1 0e 00 95 48 b7 03 c0 3c 92 ed 00 00 00 c0 d6 5c a0 03 40 05 d2 ed 00 30 8f 64 3b 00 00 00 10 81 01 1d 00 66 92 6e 07 80 79 24 db 01 00 00 80 28 24 dc 01 60 26 e9 76 00 98 46 b2 1d 00 00 00 88 c6 05 3a 00 cc 20 dd 0e 00 d3 48 b6 03 00 00 00 11 19 d0 01 60 22 e9 76 00 98 46 b2 1d 00 00 00 88 4a c2 1d 00 26 92 6e 07 80 71 24 db 01 00 00 80 e8 5c a0 03 c0 04 d2 ed 00 30 8e 64 3b 00 00 00 90 81 01 1d 00 46 92 6e 07 80 71 24 db 01 00 00 80 2c 24 dc 01 60 24 e9 76 00 18 46 b2 1d 00 00 00 c8 c6 05 3a 00 8c 20 dd 0e 00 c3 48 b6 03 00 00 00 19 19 d0 01 60 20 e9 76 00 18 46 b2 1d 00 00 00 c8 4a c2 1d 00 06 92 6e 07 80 93 49 b6 03 Data Ascii: n:$@v`tDl"H<\@0d;fny$($`&vF: H`"vFJ&nq$\0d;Fnq$,$`$vF: H` vFJnI
2024-01-15 14:02:15 UTC	4380	IN	Data Raw: 48 b8 03 34 47 ba 1d a0 3d 92 ed 00 00 00 44 63 34 07 5a e4 02 1d a0 41 d2 ed 00 ed 90 6c 07 00 00 20 12 a3 39 d0 3a 03 3a 40 63 a4 db 01 da 21 d9 0e 00 00 40 04 46 73 a0 ab cf bc 22 e1 0e d0 0c e9 76 80 76 48 b6 03 00 00 b0 25 a3 39 d0 2b 17 e8 00 0d 91 6e 07 c8 4f b2 1d 00 00 80 ad 18 cd 01 0c e8 00 cd 90 6e 07 c8 4f b2 1d 00 00 80 b5 19 cd 01 ee f8 5c 2c 12 ee 00 e9 49 b7 03 e4 27 d9 0e 00 00 c0 5a 8c e6 00 bb b9 40 07 68 80 74 3b 40 5e 92 ed 00 00 00 ac c1 68 0e 30 8c 01 1d 20 39 e9 76 80 bc 24 db 01 00 00 58 92 d1 1c 60 c2 67 67 91 70 07 48 4b ba 1d 20 2f c9 76 00 00 00 96 60 34 07 98 c7 05 3a 40 62 d2 ed 00 f9 48 b6 03 00 00 50 9b d1 1c a0 1e 03 3a 40 52 bf fd 9b d2 ed 00 d9 48 b6 03 00 00 50 8b d1 1c 60 a1 cf d7 22 e1 0e 90 ce 87 2e dd 5b ae fe f8 Data Ascii: H4G=Dc4ZAl 9::@c!@Fs"vvH%9+nOnO\,I'Z@ht;@^h0 9v$X`ggpHK /v`4:@bHP:@RHP`".[
2024-01-15 14:02:15 UTC	1460	IN	Data Raw: df 91 45 c2 1d d2 92 6e 87 bc 24 db 01 00 96 63 34 07 00 00 60 2a ab 1b 24 f6 9d 6f 48 b7 43 46 92 ed 00 00 f5 19 cd 01 00 00 a8 c1 f2 06 49 3d ff ec b9 f2 85 cf 49 b7 43 36 92 ed 00 00 f5 18 cd 01 00 00 a8 fe 5b b3 48 b8 43 3a 8f 5e 38 28 bf fc c9 13 e5 d1 0b ae 57 21 0b c9 76 00 80 3a 8c e6 00 00 00 2c c9 05 3a 24 f4 ea 4b 17 8d e7 90 88 64 3b 00 c0 3c 46 73 00 00 00 d6 62 40 87 64 9e 7f f6 5c 79 ee d3 e7 bc 10 90 84 64 3b 00 c0 34 46 73 00 00 00 36 f9 3d 5a 24 dc 21 0d e9 76 c8 43 b2 1d 00 60 3c a3 39 00 00 00 5b 73 81 0e 89 48 b7 43 0e 92 ed 00 00 c3 19 cd 01 00 00 88 c4 80 0e 49 48 b7 43 0e 92 ed 00 00 fb 19 cd 01 00 00 08 fb 9b b5 48 b8 43 78 d2 ed 10 9f 64 3b 00 c0 c9 8c e6 00 00 00 64 e0 02 1d 12 90 6e 87 d8 24 db 01 00 8e 67 34 07 00 00 20 1b 03 Data Ascii: En$c4`*$oHCFI=IC6[HC:^8(W!v:,:$Kd;<Fsb@d\yd;4Fs6=Z$!vC`<9[sHCIHCHCxd;dn$g4
2024-01-15 14:02:15 UTC	5840	IN	Data Raw: 27 d9 0e 00 b9 19 cd 01 00 00 fa 61 28 87 f1 24 dc e1 18 d2 ed 70 37 c9 76 00 48 fc c3 cf 68 0e 00 00 d0 34 43 39 d4 e3 02 1d 8e 21 dd 0e 47 49 b6 03 40 3e 46 73 00 00 80 f6 18 ca 61 79 06 74 b8 c3 6f ff a6 74 3b 1c 26 d9 0e 00 79 18 cd 01 00 00 da 60 28 87 ed 48 b8 c3 21 1f ba 74 6f b9 fa e3 2b e5 dc 59 d7 e7 20 d9 0e 00 49 7e d4 19 cd 01 00 00 d2 32 94 43 3c 2e d0 e1 90 ef bf f2 98 f1 1c 8a 64 3b 00 44 67 34 07 00 00 c8 c5 50 0e 79 18 d0 e1 5d bf f3 5b 0f 95 67 3e fa 3e 2f 04 dd 93 6c 07 80 98 8c e6 00 00 00 f1 19 ca 21 3f 09 77 28 d2 ed 50 8a 64 3b 00 84 fc c1 66 34 07 00 00 08 c9 50 0e ed 72 81 0e 45 ba 1d 24 db 01 20 0e a3 39 00 00 40 1c 86 72 e8 8f 01 9d ee 49 b7 d3 3b c9 76 00 d8 9e d1 1c 00 00 60 5b 86 72 e0 16 09 77 ba 26 dd 4e cf 24 db 01 60 e3 Data Ascii: 'a($p7vHh4C9!GI@>Fsaytot;&y`(H!to+Y I~2C<.d;Dg4Py][g>>/l!?w(Pd;f4PrE$ 9@rI;v`[rw&N$`
2024-01-15 14:02:15 UTC	1513	IN	Data Raw: 00 00 00 00 00 d6 15 fa 02 3d 6c ba 5d b2 3d 14 a3 39 d9 19 ca 01 00 00 00 00 00 62 08 3b a0 47 4d b7 4b b6 c7 60 34 27 23 43 39 00 00 00 00 00 40 6c 21 13 ee 51 d3 ed 92 ed 1b bf 59 8d e6 24 61 28 07 00 00 00 00 00 c8 29 e4 05 7a b8 74 bb 64 fb 66 8c e6 44 66 28 07 00 00 00 00 00 68 4b b8 01 3d 5a ba 5d b2 7d 7d 46 73 a2 31 94 03 00 00 00 00 00 f4 21 54 c2 3d 5a ba 5d b2 7d c5 37 a2 d1 9c 00 0c e5 00 00 00 00 00 00 7d 0b 75 81 1e 26 dd 2e d9 be 0a a3 39 5b 31 94 03 00 00 00 00 00 70 9c 30 03 7a 94 74 bb 64 fb b2 8c e6 ac c9 50 0e 00 00 00 00 00 c0 18 21 12 ee 51 d2 ed 92 ed 0b bd c9 8c e6 2c cc 50 0e 00 00 00 00 00 40 0d 21 2e d0 37 4f b7 4b b6 57 67 34 67 09 86 72 00 00 00 00 00 00 96 b4 f9 80 be 75 ba 5d b2 bd 1e a3 39 b5 18 ca 01 00 00 00 00 00 d8 c2 Data Ascii: =l]=9b;GMK`4'#C9@l!QY$a()ztdfDf(hK=Z]}}Fs1!T=Z]}7}u&.9[1p0ztdP!Q,P@!.7OKWg4gru]9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	49819	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:14 UTC	432	OUT	GET /media/w31p5jul/immagine-hero.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:02:14 GMT Accept-Ranges: bytes ETag: "8dd7fddf15dd81:0" Connection: close Last-Modified: Wed, 19 Jan 2022 09:21:01 GMT Content-Length: 1295447
2024-01-15 14:02:15 UTC	1259	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 1f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 Data Ascii: JFIFDuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:r
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 97 f1 0f eb 85 d8 7d 16 03 52 e5 f2 2b 10 c3 d2 d8 36 35 49 0d 94 24 97 04 35 bd f1 99 63 59 32 57 e6 1d 11 4d 58 ad fc 2d d8 e1 a1 e4 49 a7 93 54 cf 7a 4e a7 2b 6b 85 d6 be e3 15 87 22 c8 53 c9 4e 75 69 23 71 c8 38 a6 db 12 d0 13 52 8d ce 37 60 c1 1e 5a 5f a5 be b8 dd 81 54 89 32 e9 6d f0 d9 91 27 a1 02 b1 c4 6d f4 c5 94 59 f0 43 92 b0 f6 17 f6 c6 e0 cd 87 c1 98 37 0c 36 e3 19 a9 b9 82 c2 1a 80 ca 0f 18 43 49 30 fb f3 85 99 00 80 90 b7 18 50 31 24 f4 9c 06 66 07 ac 9a 6e 4e 0c b1 a6 79 cb cf a4 1c 36 a1 b2 98 d5 49 1f 1c e0 f2 6e da 95 f5 d4 ff 00 3c d6 bd 81 c5 53 a1 85 25 75 e8 e4 20 96 3f 5f 6c 56 27 24 c8 eb 5d a5 b9 bd f1 45 51 76 09 0a 89 b4 d9 ae 4f 6c 6c a8 c2 fa a0 9a c7 70 6d 8c 03 2b 64 d4 00 b6 dd b1 91 e0 08 52 6b 56 24 71 6c 54 c8 50 d4 79 Data Ascii: }R+65I$5cY2WMX-ITzN+k"SNui#q8R7`Z_T2m'mYC76CI0P1$fnNy6In<S%u ?_lV'$]EQvOllpm+dRkV$qlTPy
2024-01-15 14:02:15 UTC	26	IN	Data Raw: dc 24 fa 7c bf 52 ae fb 6d ed 8d 52 65 34 b4 7e 5c c4 0f e2 37 f7 c7 46 c2 cc Data Ascii: $\|RmRe4~\7F
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 04 5a 36 45 dc d8 8e 46 33 61 65 54 1f 97 66 3f 4e 70 6c 4c 77 93 a9 80 1b 6d be 1a 00 51 19 5c 64 c0 0e 68 ec a0 da c3 db 0b 2a 6e a3 a3 a7 2c bb 7e 78 cf 03 42 31 3a 96 9d 4d 8b 61 19 8a 2a 86 92 34 6d bd 3e f8 cd 98 7c 28 c6 a3 8d d6 c4 6f f4 c6 e6 4c 63 3c 94 82 c0 0c 0c c3 44 0f 5d 2d f4 03 7b 7b 61 3c 99 a8 f8 55 5b 6d 37 bf f1 61 46 c0 e2 a9 1b 6d 6d bb 60 0e d1 ad 31 d5 7b ed c6 0c 1b 95 22 d4 30 69 2e 0f 3d f1 55 52 6c 0d 88 6e 4d bd b0 d8 83 01 34 7e ff 00 ae 34 00 c8 30 00 2d 25 9a c7 0d a8 0e d2 3d ff 00 2c 1d 00 45 87 cc e3 81 83 52 52 ac 3f cb f4 e1 47 8f 49 8c 85 70 02 4e c2 ad 97 9f d7 0b a8 c2 35 40 5f a0 f7 c1 a8 00 6f de 35 ef 87 85 31 98 6f 96 74 dc f1 86 61 59 c6 34 65 5b 1a aa 19 91 55 fd 3f 5c 36 a6 0e f3 2d b7 be 32 60 06 34 dd 87 Data Ascii: Z6EF3aeTf?NplLwmQ\dhn,~xB1:Ma4m>\|(oLc<D]-{{a<U[m7aFmm`1{"0i.=URlnM4~40-%=,ERR?GIpN5@_o51otaY4e[U?\6-2`4
2024-01-15 14:02:15 UTC	26	IN	Data Raw: 2f 99 9b 4b b0 70 1b 4b 0b d8 77 ed 8f 0e ee f2 85 c7 11 4e 1a b9 cf 99 c7 fd Data Ascii: /KpKwN
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 4f 76 d9 16 95 07 ad f7 3e 62 67 95 cf 34 ce c4 ea 66 24 93 ee 7b df 1f a1 5b 22 a1 f3 75 5b 2d b3 14 2c de 64 9b 2b 5a f7 c7 a0 b3 85 14 bf c8 d5 e1 55 28 d6 bf f0 8c 79 b5 e5 64 68 ed 2c b3 ae a0 4c b2 18 de 63 a3 71 a8 0e 4f e7 8e 5a 16 cd 53 3a 9b 29 93 d0 dd 27 f1 49 d1 5e 1f f8 09 47 5f 12 c3 59 d4 73 c4 d0 45 4a 10 33 a1 5f 4e a6 bf e1 04 ef 8f cd 2f 3e 13 e2 57 9c 59 a9 b6 62 8c 4e 72 79 9c 36 9b c3 bf cc 7d fa 1b a7 c3 4f 54 74 ee 65 d2 30 f5 66 7d 55 95 65 b5 35 0c 7c e9 24 75 8d 50 6a b0 5b 6d 62 6c 3b 63 c1 f8 aa d2 fa 9d c3 58 da c3 3c 47 b7 dc 7b 46 77 ae ca de 0e 49 f1 0d e2 96 57 f1 55 e3 d5 26 49 4d 5b 05 37 4d 65 d1 4c 90 d4 cb 68 d7 52 a1 3a c9 3c dc a8 03 ff 00 b5 8f b3 f8 6f 83 dc 7c 3f c2 1a e9 92 66 b3 e2 66 20 f7 6e ae 74 45 55 f7 Data Ascii: Ov>bg4f${["u[-,d+ZU(ydh,LcqOZS:)'I^G_YsEJ3_N/>WYbNry6}OTte0f}Ue5\|$uPj[mbl;cX<G{FwIWU&IM[7MeLhR:<o\|?ff ntEU
2024-01-15 14:02:15 UTC	26	IN	Data Raw: 77 b1 c3 fc ca 99 34 30 54 67 1d 03 53 96 b3 13 09 b0 36 be 29 15 32 4f 4c 0b Data Ascii: w40TgS6)2OL
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 92 74 dc d2 4c 09 4d 5f 61 c6 07 75 28 88 74 4e 85 e8 9a 9c c6 74 61 16 94 5b ee c0 8c 70 55 aa 76 22 60 ed fd 33 96 bc 34 71 86 65 62 82 c6 de c3 1c 0c c5 e7 c1 32 4c bd ea 24 b2 ae c7 92 76 c6 c4 88 ca 52 e7 14 b2 65 ba dd 4e a0 07 16 df 15 4e a2 bf 45 34 4c c3 30 9a be a9 d4 c5 a3 49 37 0d 8e 94 39 50 d8 fa 5f 36 7a 5a 58 86 85 65 5e 54 72 4e 39 dc e9 89 37 1a 55 a6 cc a9 41 30 f9 6d 6d c3 0b 1c 73 97 6d 4d 7b a8 21 a4 86 40 a5 6c 45 f7 23 1d 09 dc 72 bb 29 a8 75 04 71 2a ea 05 08 f6 db 16 89 25 3e 4d 66 aa 9d 5b 70 36 fb 62 f1 24 99 48 12 42 ac a7 6f e5 87 13 50 3e 48 55 20 2f 38 69 93 75 1a 63 fc bf 2c 11 23 6a a2 e9 0d bd f6 c1 32 2b 2a 8c 9a 9f f7 7c 71 ed 86 56 14 85 24 76 be d6 b7 be 29 02 b0 16 84 fb 7e b8 05 07 24 7c db 9c 32 80 07 52 bd b9 e3 Data Ascii: tLM_au(tNta[pUv"`34qeb2L$vReNNE4L0I79P_6zZXe^TrN97UA0mmsmM{!@lE#r)uq%>Mf[p6b$HBoP>HU /8iuc,#j2+\|qV$v)~$\|2R
2024-01-15 14:02:15 UTC	26	IN	Data Raw: 3d 57 ef 1f be 7f d3 06 59 dc 2d 26 d6 a2 e6 24 ed fe 1f f8 d1 5b f0 ff 00 e0 Data Ascii: =WY-&$[
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: cd 35 35 5b e6 79 ec d5 f1 35 41 af a6 45 63 58 ac cd a4 02 6c 54 01 b1 c7 15 6e 39 c4 78 8d 56 b3 e1 f8 a7 ec d9 f3 07 45 9d bf 29 f9 cb e2 64 f1 97 c4 07 8d dd 4f e2 66 75 54 2b 8d 4d 05 1e a2 62 a4 5f 42 46 bc d8 db 76 3e f7 c7 dd 7c 39 c0 ac 2c 29 2a ae 25 fd e7 de 67 fe 9f d0 db 89 a9 bb 31 c9 25 61 08 f5 1d 45 ac 6e 39 c7 d9 ae d3 dc 73 79 63 7b f8 71 f0 36 b7 c7 ef 13 28 3a 7e 91 9a 9c 4e 75 4b 29 df cb 5e f6 1e fb 63 cf e2 5c 47 e5 e9 7e 1f 59 9f 07 0d c5 6e 5e 3e f3 38 3e b5 78 73 e1 9e 5f e0 3f 86 79 2f 4b 51 4b 25 50 cb 23 28 f3 49 f8 a4 62 c4 9d b8 1b 9d b1 fc bf fc 46 a0 b1 7f b7 d7 3d 64 fb ae 03 6b f2 d4 b5 f7 99 c9 f2 7f e3 a3 2b 8a 9f e2 1b a9 d9 45 89 ac 62 3e d7 27 1f d0 ff 00 c3 da f9 e0 d6 eb fe 53 93 e2 18 ff 00 98 63 97 d0 e6 cd 0d Data Ascii: 55[y5AEcXlTn9xVE)dOfuT+Mb_BFv>\|9,)*%g1%aEn9syc{q6(:~NuK)^c\G~Yn^>8>xs_?y/KQK%P#(IbF=dk+Eb>'Sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	49820	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	609	OUT	GET /assets/animations/ESG_blue.json?ver=2 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	223	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Mon, 15 Jan 2024 14:02:14 GMT Accept-Ranges: bytes ETag: "0524cb754dd81:0" Connection: close Last-Modified: Mon, 11 Apr 2022 07:28:52 GMT Content-Length: 90078
2024-01-15 14:02:15 UTC	1256	IN	Data Raw: 7b 22 76 22 3a 22 34 2e 38 2e 30 22 2c 22 6d 65 74 61 22 3a 7b 22 67 22 3a 22 4c 6f 74 74 69 65 46 69 6c 65 73 20 41 45 20 22 2c 22 61 22 3a 22 22 2c 22 6b 22 3a 22 22 2c 22 64 22 3a 22 22 2c 22 74 63 22 3a 22 22 7d 2c 22 66 72 22 3a 32 35 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 32 35 30 2c 22 77 22 3a 31 34 34 30 2c 22 68 22 3a 36 30 30 2c 22 6e 6d 22 3a 22 69 6c 6c 75 20 78 20 57 61 6c 74 65 72 20 6e 65 77 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 7b 22 69 64 22 3a 22 69 6d 61 67 65 5f 30 22 2c 22 77 22 3a 35 33 36 2c 22 68 22 3a 36 30 39 2c 22 75 22 3a 22 22 2c 22 70 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 68 67 41 41 41 4a 68 Data Ascii: {"v":"4.8.0","meta":{"g":"LottieFiles AE ","a":"","k":"","d":"","tc":""},"fr":25,"ip":0,"op":250,"w":1440,"h":600,"nm":"illu x Walter new","ddd":0,"assets":[{"id":"image_0","w":536,"h":609,"u":"","p":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAhgAAAJh
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 5a 50 39 6c 4f 4b 7a 57 6e 58 76 30 73 73 6b 41 67 59 41 38 45 4a 56 78 55 37 4b 75 58 33 5a 33 78 45 77 41 49 41 58 46 6d 73 48 4f 35 48 69 56 2b 58 6f 59 66 30 79 76 79 4e 67 41 41 41 76 44 4a 59 2f 32 59 38 63 66 7a 79 63 50 4c 33 55 4d 6f 6d 41 41 51 44 38 51 45 35 35 4a 30 55 49 47 41 44 41 39 43 77 65 48 4f 35 45 69 76 61 73 36 77 41 41 35 6b 78 6a 2b 4f 6d 67 4f 58 72 51 76 75 6a 33 64 54 41 41 67 4e 66 6c 59 69 65 71 34 73 4c 4c 4a 41 49 47 41 50 43 61 6c 43 63 37 63 63 6b 35 44 41 43 41 31 36 77 4d 65 2f 73 58 76 66 78 4d 42 77 4d 41 4f 46 5a 4f 30 61 39 56 2b 55 4a 64 44 41 45 44 41 44 68 57 71 6d 49 6e 70 59 75 64 36 69 6c 67 41 41 44 48 71 68 30 65 39 46 4f 32 58 52 55 41 6d 4c 4c 6d 31 37 31 42 38 38 6e 35 74 36 76 71 59 41 41 41 4a 38 6f 35 Data Ascii: ZP9lOKzWnXv0sskAgYA8EJVxU7KuX3Z3xEwAIAXFmsHO5HiV+XoYf0yvyNgAAAvDJY/2Y8cfzycPL3UMomAAQD8QE55J0UIGADA9CweHO5Eivas6wAA5kxj+OmgOXrQvuj3dTAAgNflYieq4sLLJAIGAPCalCc7cck5DACA16wMe/sXvfxMBwMAOFZO0a9V+UJdDAEDADhWqmInpYud6ilgAADHqh0e9FO2XRUAmLLm171B88n5t6vqYAAAJ8o5
2024-01-15 14:02:15 UTC	26	IN	Data Raw: 51 34 64 35 43 5a 75 76 64 69 38 2f 61 7a 76 67 6b 79 4e 62 6d 63 6f 4b 4b 74 Data Ascii: Q4d5CZuvdi8/azvgkyNbmcoKKt
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 78 2f 54 68 31 6e 70 50 67 6a 52 52 37 2b 56 33 63 32 74 2b 38 4b 33 68 37 6f 4f 55 4c 4a 62 6e 43 56 54 39 6b 37 51 6c 35 64 79 4f 39 75 54 58 2f 77 69 30 42 2b 2b 49 34 48 45 5a 50 32 68 4e 78 74 42 32 6b 53 49 2f 65 33 78 4a 51 38 50 5a 4a 79 78 64 4b 61 6d 4b 79 56 37 69 61 6c 68 72 48 6c 48 4e 45 6a 68 2b 65 33 37 78 7a 76 2b 2b 53 49 48 79 68 4c 4e 33 4f 45 31 46 62 38 4a 72 52 58 42 76 68 43 7a 42 69 4b 65 4b 67 4e 61 4f 35 4f 73 49 58 59 4b 52 79 70 4e 32 66 6d 30 2f 64 48 4b 46 43 4a 6c 78 42 53 57 6f 63 68 65 52 49 6a 7a 34 52 76 4e 58 53 38 6f 57 53 6a 50 6c 53 51 42 50 70 54 7a 2f 65 75 50 4f 77 37 33 4a 77 50 75 45 4c 52 64 55 34 43 37 59 6d 64 61 79 66 48 4d 4d 38 52 6b 6f 52 42 37 6c 74 76 76 6e 78 38 39 73 37 66 5a 65 46 69 77 6c 66 4b 47 Data Ascii: x/Th1npPgjRR7+V3c2t+8K3h7oOULJbnCVT9k7Ql5dyO9uTX/wi0B++I4HEZP2hNxtB2kSI/e3xJQ8PZJyxdKamKyV7ialhrHlHNEjh+e37xzv++SIHyhLN3OE1Fb8JrRXBvhCzBiKeKgNaO5OsIXYKRypN2fm0/dHKFCJlxBSWocheRIjz4RvNXS8oWSjPlSQBPpTz/euPOw73JwPuELRdU4C7YmdayfHMM8RkoRB7ltvvnx89s7fZeFiwlfKG
2024-01-15 14:02:15 UTC	26	IN	Data Raw: 48 71 49 76 61 66 54 61 4d 61 6a 61 2b 47 47 71 66 59 6f 39 47 70 75 59 6a 39 Data Ascii: HqIvafTaMaja+GGqfYo9GpuYj9
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 77 77 43 78 2f 35 6f 4d 39 73 52 5a 31 4f 61 62 32 50 38 59 34 35 74 50 37 54 36 34 68 76 64 6b 30 55 4d 63 35 54 33 35 41 36 57 4c 41 79 4a 47 51 37 37 47 78 6d 2b 67 38 52 73 38 2b 36 39 4a 34 36 75 68 78 69 6c 79 45 50 76 33 30 72 66 79 48 65 49 4c 57 4c 6c 66 34 70 63 4f 42 6f 6a 39 7a 36 52 52 6a 55 4a 66 31 57 6c 30 61 71 37 71 63 39 43 68 68 78 30 34 78 2f 36 42 6f 30 6a 39 35 2f 69 2b 6d 70 57 33 34 39 42 54 61 2f 43 4f 49 76 61 50 79 78 48 37 72 34 6b 39 4d 64 5a 68 75 49 6a 39 77 77 43 50 2f 6d 76 71 73 47 4a 64 45 50 73 48 6e 6e 4f 50 2f 51 4d 2f 52 2b 6f 2f 32 2f 66 56 6e 50 35 4b 61 49 31 46 6f 58 47 4b 50 62 55 47 37 33 76 45 2f 6d 47 41 32 48 39 4e 42 6e 76 69 4c 47 72 7a 54 65 78 2f 6a 50 48 4e 70 33 59 66 58 4d 4e 37 73 75 67 68 6a 76 4b Data Ascii: wwCx/5oM9sRZ1Oab2P8Y45tP7T64hvdk0UMc5T35A6WLAyJGQ77Gxm+g8Rs8+69J46uhxilyEPv30rfyHeILWLlf4pcOBoj9z6RRjUJf1Wl0aq7qc9Chhx04x/6Bo0j95/i+mpW349BTa/COIvaPyxH7r4k9MdZhuIj9wwCP/mvqsGJdEPsHnnOP/QM/R+o/2/fVnP5KaI1FoXGKPbUG73vE/mGA2H9NBnviLGrzTex/jPHNp3YfXMN7sughjvK
2024-01-15 14:02:15 UTC	26	IN	Data Raw: 6a 39 6f 2f 4c 45 66 76 50 70 6c 47 4e 78 70 37 51 4f 4d 55 65 6a 55 37 4e 52 Data Ascii: j9o/LEfvPplGNxp7QOMUejU7NR
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 65 77 66 42 6f 6a 39 31 32 53 77 4a 38 36 69 4e 74 2f 45 2f 73 63 59 33 33 78 71 39 38 45 31 76 43 65 4c 48 75 49 6f 37 38 6b 66 4b 46 30 63 4c 72 58 46 33 50 65 45 2f 6a 6d 6d 48 4a 6c 34 39 6c 2b 54 78 70 37 51 4f 45 55 4f 59 76 39 65 2b 6c 61 2b 51 33 77 42 4b 2f 64 4c 2f 4e 4c 42 41 4c 48 2f 6d 54 53 71 55 65 69 72 4f 6f 31 4f 7a 56 56 39 44 6a 72 30 73 49 4f 39 32 50 2b 45 54 77 54 49 63 45 33 39 4c 33 45 58 2b 54 33 30 4b 2b 35 72 46 33 51 71 67 74 67 2f 42 42 44 37 72 34 6b 39 4d 64 5a 68 75 49 6a 39 77 77 43 50 2f 6d 76 71 73 47 4a 64 45 50 73 48 6e 76 73 32 39 6a 2f 6e 45 78 33 41 6b 43 4f 54 66 2b 70 2f 69 56 76 79 65 30 4c 2f 6b 63 59 33 50 42 71 4c 51 75 4d 55 65 7a 51 36 4e 52 65 78 66 78 67 67 39 6c 2b 54 77 5a 34 34 69 39 70 38 45 2f 73 66 Data Ascii: ewfBoj912SwJ86iNt/E/scY33xq98E1vCeLHuIo78kfKF0cLrXF3PeE/jmmHJl49l+Txp7QOEUOYv9e+la+Q3wBK/dL/NLBALH/mTSqUeirOo1OzVV9Djr0sIO92P+ETwTIcE39L3EX+T30K+5rF3Qqgtg/BBD7r4k9MdZhuIj9wwCP/mvqsGJdEPsHnvs29j/nEx3AkCOTf+p/iVvye0L/kcY3PBqLQuMUezQ6NRexfxgg9l+TwZ44i9p8E/sf
2024-01-15 14:02:15 UTC	26	IN	Data Raw: 46 47 42 50 48 45 56 74 76 6f 6e 39 6a 7a 47 2b 2f 74 54 75 67 33 50 45 6e 69 Data Ascii: FGBPHEVtvon9jzG+/tTug3PEni
2024-01-15 14:02:15 UTC	16383	IN	Data Raw: 78 36 2b 48 75 39 6d 53 30 66 32 71 2f 49 63 59 6a 59 6f 7a 2b 51 75 6a 6a 41 6a 43 47 48 4c 35 37 39 35 36 53 78 4a 7a 52 4f 34 59 50 59 66 79 78 31 4b 39 38 67 76 6f 43 56 2b 79 56 2b 36 52 41 41 73 66 2b 5a 4e 4b 70 52 36 4b 73 36 6a 55 37 4e 6c 58 30 4f 4b 76 54 51 58 37 66 46 78 48 34 53 6d 74 67 2f 4b 69 4c 32 37 79 4e 58 4e 5a 6e 52 4b 54 4e 69 2f 78 42 41 37 44 38 6e 39 73 52 59 68 65 45 69 39 6f 38 41 65 50 53 66 55 34 55 56 47 77 57 70 66 30 6a 70 7a 52 61 31 78 68 48 37 52 78 33 45 2f 72 31 70 56 4b 4f 78 4a 7a 52 4f 73 55 57 6a 55 33 4d 52 2b 30 63 41 78 50 35 7a 43 72 41 6e 6a 71 49 32 33 38 54 2b 78 78 68 66 66 32 72 33 77 54 6c 69 54 78 59 39 78 46 36 78 4a 33 38 67 64 58 45 35 74 57 61 32 47 43 2f 48 38 51 74 4d 4f 54 7a 78 37 44 38 6e 6a Data Ascii: x6+Hu9mS0f2q/IcYjYoz+QujjAjCGHL57956SxJzRO4YPYfyx1K98gvoCV+yV+6RAAsf+ZNKpR6Ks6jU7NlX0OKvTQX7fFxH4Smtg/KiL27yNXNZnRKTNi/xBA7D8n9sRYheEi9o8AePSfU4UVGwWpf0jpzRa1xhH7Rx3E/r1pVKOxJzROsUWjU3MR+0cAxP5zCrAnjqI238T+xxhff2r3wTliTxY9xF6xJ38gdXE5tWa2GC/H8QtMOTzx7D8nj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	49821	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	669	OUT	GET /media/lcvfsmur/germany-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:14 GMT Accept-Ranges: bytes ETag: "82e9a1f44064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:38:35 GMT Content-Length: 5097
2024-01-15 14:02:15 UTC	1262	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 13 9b 49 44 41 54 78 9c ed dd 0b 78 54 e5 9d 06 f0 37 93 30 13 92 4c 2e 10 12 03 18 41 14 41 0b ac 66 05 d7 aa dd 35 8a d5 82 82 45 a8 72 5d 2d d2 96 b0 5b 44 54 40 57 b1 dc 76 a9 ab 8b a1 5d 41 d7 15 e8 3e 05 5b 51 60 b1 2a 69 51 6b ad b2 a8 60 57 02 ae 28 51 b9 c6 24 93 09 b9 41 92 7d fe df 70 92 99 64 be c9 99 21 64 ce cc 79 7f cf 93 07 98 cc 9c cb 0c df 3b df ed 7c 27 01 40 0b 88 88 3a 5a ec e0 9b 42 44 3a 0c 08 22 d2 62 40 10 91 16 03 82 88 b4 18 10 44 a4 c5 80 20 22 2d 06 04 11 69 31 20 88 48 8b 01 41 44 5a 0c 08 22 d2 62 40 10 91 16 03 82 88 b4 18 10 44 a4 c5 80 20 22 2d 06 04 11 69 Data Ascii: PNGIHDRU/pHYsqqIDATxxT70L.AAf5Er]-[DT@Wv]A>[Q`*iQk`W(Q$A}pd!dy;\|'@:ZBD:"b@D "-i1 HADZ"b@D "-i
2024-01-15 14:02:15 UTC	3835	IN	Data Raw: d6 5f 21 b5 27 d9 97 f1 3c 8a 3e 06 84 45 84 6a e7 4b 01 33 48 e1 eb ca 9e 7e 33 cd 87 70 3b 1f a5 80 2f 2a ca c6 22 cd ef 43 4d ea 62 40 58 4b d2 21 5c 60 f7 f7 20 2a 56 c1 63 7a b7 52 5b 30 33 0f 21 12 32 b1 c9 0c 99 02 dd 55 d7 68 84 0a a5 f6 b5 95 8d c8 c5 55 08 3d 4b 94 ce 8d 23 68 ca 64 1f 44 0c d8 73 96 d7 44 e8 48 41 0d 35 ab d1 df 1e 93 fd 10 a6 f6 1b 62 5b 65 1c c9 b0 8c 3c 24 56 31 20 62 80 5c 17 71 2e 86 00 67 86 98 58 d5 5e 57 5d 44 a5 ae b9 78 d9 7c ed 89 a2 8b 01 11 23 42 cd 92 8c 84 4c 89 36 5b 7b 40 18 23 19 9d 39 db a9 d8 d4 bd 18 10 31 42 3a 0a 65 9e 44 57 90 a6 c5 ea 75 95 dd 7e e2 d2 df e1 7f 95 28 59 1f 03 22 86 c8 95 9e 66 3b 15 43 91 6b 26 c2 65 76 3d 07 9d ce ae f2 24 6b 62 40 c4 18 29 64 d2 dc 88 b4 4f 40 0a fa d9 5c 33 11 2e 39 Data Ascii: _!'<>EjK3H~3p;/"CMb@XK!\` VczR[03!2UhU=K#hdDsDHA5b[e<$V1 b\q.gX^W]Dx\|#BL6[{@#91B:eDWu~(Y"f;Ck&ev=$kb@)dO@\3.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	49822	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	669	OUT	GET /media/4lijqlun/austria-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:14 GMT Accept-Ranges: bytes ETag: "c82ad93c4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:26 GMT Content-Length: 603
2024-01-15 14:02:15 UTC	603	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 0d 49 44 41 54 78 9c ed d7 31 8d 02 51 00 45 d1 3f 9b 29 50 41 b2 52 c7 02 18 c0 0a 0d 3a a0 21 60 81 e6 d3 03 d7 c1 39 12 5e 71 93 b7 5c c6 7e 0e 80 6f db 9f 51 80 22 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 5a ff Data Ascii: PNGIHDRU/pHYsqqIDATx1QE?)PAR:!`9^q\~oQ"@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	49823	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	673	OUT	GET /media/ffgau1n1/netherlands-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:14 GMT Accept-Ranges: bytes ETag: "c522dc8f4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:46 GMT Content-Length: 620
2024-01-15 14:02:15 UTC	620	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 1e 49 44 41 54 78 9c ed d7 21 4e 43 51 00 44 d1 57 f2 24 0e c3 32 10 38 16 40 c2 0e ab 10 5d 49 93 22 08 02 8b fc 55 08 82 20 41 60 48 f1 fd dc 1d 9c b3 84 11 37 99 cd e3 d5 cd 69 00 9c b9 7c b8 3f 5e 18 05 28 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 Data Ascii: PNGIHDRU/pHYsqqIDATx!NCQDW$28@]I"U A`H7i\|?^($@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	49824	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	668	OUT	GET /media/sqkoto1x/greece-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:14 GMT Accept-Ranges: bytes ETag: "cab923f4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:40:40 GMT Content-Length: 900
2024-01-15 14:02:15 UTC	900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 03 36 49 44 41 54 78 9c ed dc 3f 6b 9d 65 18 c0 e1 37 f6 d0 66 a9 cd d4 c2 f1 0f f9 06 51 32 08 59 6c 3f 42 27 dd 54 70 f5 2b 14 33 eb 52 ba 49 b1 ba 88 4e ba b9 08 8d 82 a5 75 50 37 27 21 52 28 04 97 d4 3a a4 a5 e5 2d 5d 4d 7e 8b e7 84 84 73 ae 0b ce fa f2 dc f7 81 1f 3c cb b3 72 71 b8 36 0e a7 c0 de b8 3d f3 21 3e dd de 19 3e f9 f8 f6 69 18 07 16 c1 f6 4b fe 46 a0 08 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 9a 58 cd fc bd f3 de 1b c3 bb ef bf b9 68 63 b1 64 ce 9e 3b b3 26 10 c7 e0 b5 f5 b5 61 eb f2 fa c2 Data Ascii: PNGIHDRU/pHYsqq6IDATx?ke7fQ2Yl?B'Tp+3RINuP7'!R(:-]M~s<rq6=!>>iKFH$@I $@ H$@I $@Xhcd;&a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	49825	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	436	OUT	GET /media/eqlpzy03/switzeland-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:15 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:14 GMT Accept-Ranges: bytes ETag: "97f939864064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:30 GMT Content-Length: 746
2024-01-15 14:02:15 UTC	746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 9c 49 44 41 54 78 9c ed dd 21 6e 54 51 14 80 e1 3b 30 82 84 50 14 28 52 f0 35 c8 ba c2 1e 20 d8 6e 65 76 82 6d 58 04 83 69 91 20 00 8b 40 a1 a6 93 54 20 26 25 e8 f2 0b 92 32 6d de 7c df 06 ee 3b 47 fc 79 57 dd d9 e9 d8 bf 1c 00 57 2d ee 58 0a 50 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 a4 b9 d5 4c cf a3 e3 d7 e3 de b3 27 5b 9d eb e7 db 77 e3 d7 f7 1f bb b1 e0 1d 22 10 13 f4 f8 f8 d5 d8 3b 3a dc ea 60 e7 cb 33 Data Ascii: PNGIHDRU/pHYsqqIDATx!nTQ;0P(R5 nevmXi @T &%2m\|;GyWW-XPH$@I $@ H$@I $@ H$@I $@ HL'[w";:`3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	49829	172.253.62.147	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	1037	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
2024-01-15 14:02:16 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 15 Jan 2024 14:02:15 GMT Date: Mon, 15 Jan 2024 14:02:15 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:16 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js');
2024-01-15 14:02:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	49828	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:15 UTC	428	OUT	GET /media/1ezg3lp0/beluxflag.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:16 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "87cfc75a7bd81:0" Connection: close Last-Modified: Wed, 08 Jun 2022 07:33:18 GMT Content-Length: 21756
2024-01-15 14:02:16 UTC	2723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 03 e8 08 06 00 00 00 86 5e 65 aa 00 00 54 c3 49 44 41 54 78 da ec dc 4f a8 a5 f7 7d df f1 df cc 95 34 f2 68 2c cd 48 1a 59 78 66 84 11 c5 58 90 85 76 36 de c8 ae 29 16 36 18 2c 91 8d 09 b6 21 3b 87 d8 f5 42 2b 81 0d 32 41 2a 81 9a e0 d6 22 35 72 9d ba c5 d0 12 05 15 99 1a d3 1a 1c 5a 5a 41 bc 18 a8 4b b2 0a 21 9b 14 4c 48 1a 02 06 8d 66 ba 18 cd e8 de 99 7b ee 79 fe fc 9e e7 f9 7e 7f bf d7 0b b2 6a 49 9d 93 33 e7 3c e7 7e fa 7d 9f fa e2 67 1f 7c a7 00 00 40 65 f7 1c 9c 2a ff f2 9f 7f e0 fa b9 b3 a7 bc 18 00 00 d4 f1 ab 83 6b 6f 7f f7 e1 5f dd f8 bf 07 d7 bc 18 00 00 2c e1 54 29 e5 86 97 01 00 80 da be f9 bb 0f 97 6f fc ee c3 5e 08 00 00 aa b8 fe 67 ef 2b d7 fe f0 7c b9 f1 8f a7 bd 18 00 00 Data Ascii: PNGIHDR^eTIDATxO}4h,HYxfXv6)6,!;B+2A"5rZZAK!LHf{y~jI3<~}g\|@eko_,T)o^g+\|
2024-01-15 14:02:16 UTC	13140	IN	Data Raw: 00 00 70 32 03 3a 00 d0 25 e9 76 00 a0 2b 92 ed 00 00 00 83 48 b8 03 00 dd 91 6e 07 00 7a 22 d9 0e 00 00 30 9c 0b 74 00 a0 3b d2 ed 00 40 2f 24 db 01 00 00 c6 31 a0 03 00 5d 91 6e 07 00 ba 20 d9 0e 00 00 30 89 84 3b 00 d0 0d e9 76 00 a0 07 92 ed 00 00 00 d3 b9 40 07 00 ba 21 dd 0e 00 b4 4e b2 1d 00 00 60 1e 03 3a 00 d0 05 e9 76 00 a0 69 92 ed 00 00 00 55 48 b8 03 00 cd 93 6e 07 00 5a 26 d9 0e 00 00 50 8f 0b 74 00 a0 79 d2 ed 00 40 ab 24 db 01 00 00 ea 32 a0 03 00 4d 93 6e 07 00 9a 24 d9 0e 00 00 b0 08 09 77 00 a0 59 d2 ed 00 40 8b 24 db 01 00 00 96 e3 02 1d 00 68 96 74 3b 00 d0 1a c9 76 00 00 80 65 19 d0 01 80 26 49 b7 03 00 4d 91 6c 07 00 00 58 85 84 3b 00 d0 1c e9 76 00 a0 25 92 ed 00 00 00 eb 71 81 0e 00 34 47 ba 1d 00 68 85 64 3b 00 00 c0 ba 0c e8 00 Data Ascii: p2:%v+Hnz"0t;@/$1]n 0;v@!N`:viUHnZ&Pty@$2Mn$wY@$ht;ve&IMlX;v%q4Ghd;
2024-01-15 14:02:16 UTC	1460	IN	Data Raw: 6c 0c e8 6c 46 ba 9d 4d 48 b6 03 30 81 d1 1c 00 00 4e 66 28 07 00 5a 21 e1 ce 26 a4 db d9 82 64 3b 00 a3 1e 94 8d e6 00 00 70 17 43 39 00 d0 3a 17 e8 ac ff a6 93 6e 67 03 92 ed 00 0c 61 34 07 00 80 9b 0c e5 00 40 af 0c e8 ac 4e ba 9d 55 49 b6 03 b0 87 d1 1c 00 80 9e 19 ca 01 00 8e 92 70 67 55 d2 ed ac 49 b2 1d 80 9d 0f c1 46 73 00 00 3a 63 28 07 00 18 c6 05 3a eb bd d9 a4 db 59 91 64 3b 00 77 32 9a 03 00 d0 03 43 39 00 c0 3c 06 74 56 23 dd ce 2a 24 db 01 38 c4 68 0e 00 40 ab 0c e5 00 00 cb 90 70 67 15 bf f1 e1 fb ca 5b 7f 2c dd ce b2 24 db 01 28 c5 68 0e 00 40 5b 0c e5 00 00 eb 72 81 ce f2 6f b2 83 53 e5 8f 7e ff 03 c6 73 16 25 d9 0e d0 37 a3 39 00 00 d9 19 ca 01 00 62 30 a0 b3 b8 17 bf 72 a1 3c fd d4 19 2f 04 cb 90 6c 07 e8 96 d1 1c 00 80 8c 0c e5 00 00 Data Ascii: llFMH0Nf(Z!&d;pC9:nga4@NUIpgUIFs:c(:Yd;w2C9<tV#*$8h@pg[,$(h@[roS~s%79b0r</l
2024-01-15 14:02:16 UTC	2920	IN	Data Raw: 86 72 00 00 00 6a 90 70 6f 98 74 7b a3 24 db 81 24 8c e6 00 c0 12 0c e5 00 00 00 2c c9 05 7a a3 a4 db db 24 d9 0e 84 7f b0 30 9a 03 00 95 18 ca 01 00 00 d8 82 01 bd 41 d2 ed 6d 92 6c 07 c2 3e 4c 18 cd 01 80 19 0c e5 00 00 00 44 22 e1 de 20 e9 f6 c6 48 b6 03 01 19 cd 01 80 b1 0c e5 00 00 00 64 e0 02 bd 31 d2 ed 6d 91 6c 07 42 3d 34 18 cd 01 80 01 0c e5 00 00 00 64 66 40 6f 88 74 7b 5b 24 db 81 10 0f 0a 46 73 00 60 07 43 39 00 00 00 2d 92 70 6f 88 74 7b 23 24 db 81 8d 19 cd 01 80 c3 0c e5 00 00 00 f4 c4 05 7a 23 a4 db db 20 d9 0e 6c f6 40 60 34 07 80 ee 19 ca 01 00 00 c0 80 de 04 e9 f6 36 48 b6 03 ab 3f 04 18 cd 01 a0 4b 86 72 00 00 00 d8 4d c2 bd 01 d2 ed c9 49 b6 03 2b 32 9a 03 40 3f 0c e5 00 00 00 30 9e 0b f4 e4 a4 db 73 93 6c 07 56 f9 b2 37 9a 03 40 d3 Data Ascii: rjpot{$$,z$0Aml>LD" Hd1mlB=4df@ot{[$Fs`C9-pot{#$z# l@`46H?KrMI+2@?0slV7@
2024-01-15 14:02:16 UTC	1513	IN	Data Raw: 00 00 00 00 00 d6 15 fa 02 3d 6c ba 5d b2 3d 14 a3 39 d9 19 ca 01 00 00 00 00 00 62 08 3b a0 47 4d b7 4b b6 c7 60 34 27 23 43 39 00 00 00 00 00 40 6c 21 13 ee 51 d3 ed 92 ed 1b bf 59 8d e6 24 61 28 07 00 00 00 00 00 c8 29 e4 05 7a b8 74 bb 64 fb 66 8c e6 44 66 28 07 00 00 00 00 00 68 4b b8 01 3d 5a ba 5d b2 7d 7d 46 73 a2 31 94 03 00 00 00 00 00 f4 21 54 c2 3d 5a ba 5d b2 7d c5 37 a2 d1 9c 00 0c e5 00 00 00 00 00 00 7d 0b 75 81 1e 26 dd 2e d9 be 0a a3 39 5b 31 94 03 00 00 00 00 00 70 9c 30 03 7a 94 74 bb 64 fb b2 8c e6 ac c9 50 0e 00 00 00 00 00 c0 18 21 12 ee 51 d2 ed 92 ed 0b bd c9 8c e6 2c cc 50 0e 00 00 00 00 00 40 0d 21 2e d0 37 4f b7 4b b6 57 67 34 67 09 86 72 00 00 00 00 00 00 96 b4 f9 80 be 75 ba 5d b2 bd 1e a3 39 b5 18 ca 01 00 00 00 00 00 d8 c2 Data Ascii: =l]=9b;GMK`4'#C9@l!QY$a()ztdfDf(hK=Z]}}Fs1!T=Z]}7}u&.9[1p0ztdP!Q,P@!.7OKWg4gru]9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	49830	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	433	OUT	GET /media/lcvfsmur/germany-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:16 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "82e9a1f44064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:38:35 GMT Content-Length: 5097
2024-01-15 14:02:16 UTC	5097	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 13 9b 49 44 41 54 78 9c ed dd 0b 78 54 e5 9d 06 f0 37 93 30 13 92 4c 2e 10 12 03 18 41 14 41 0b ac 66 05 d7 aa dd 35 8a d5 82 82 45 a8 72 5d 2d d2 96 b0 5b 44 54 40 57 b1 dc 76 a9 ab 8b a1 5d 41 d7 15 e8 3e 05 5b 51 60 b1 2a 69 51 6b ad b2 a8 60 57 02 ae 28 51 b9 c6 24 93 09 b9 41 92 7d fe df 70 92 99 64 be c9 99 21 64 ce cc 79 7f cf 93 07 98 cc 9c cb 0c df 3b df ed 7c 27 01 40 0b 88 88 3a 5a ec e0 9b 42 44 3a 0c 08 22 d2 62 40 10 91 16 03 82 88 b4 18 10 44 a4 c5 80 20 22 2d 06 04 11 69 31 20 88 48 8b 01 41 44 5a 0c 08 22 d2 62 40 10 91 16 03 82 88 b4 18 10 44 a4 c5 80 20 22 2d 06 04 11 69 Data Ascii: PNGIHDRU/pHYsqqIDATxxT70L.AAf5Er]-[DT@Wv]A>[Q`*iQk`W(Q$A}pd!dy;\|'@:ZBD:"b@D "-i1 HADZ"b@D "-i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	49837	172.253.62.147	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	1025	OUT	GET /js/bg/0Cqmw64vVDdXjGZEoSN2NjFc6s-AADeaJ1f3yoXUl2A.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9&co=aHR0cHM6Ly9zZXJ2aWNlLnN5bmVzZ3kuY29tOjQ0Mw..&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=normal&cb=wiswkq2oi3a8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
2024-01-15 14:02:16 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17042 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 13 Jan 2024 09:46:54 GMT Expires: Sun, 12 Jan 2025 09:46:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 03 Jan 2024 11:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 188122 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:16 UTC	440	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 46 29 7b 69 66 28 21 28 46 3d 28 66 3d 6e 75 6c 6c 2c 63 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 46 29 7c 7c 21 46 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 66 3b 74 72 79 7b 66 3d 46 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var c=this\|\|self,L=function(f){return f},P=function(f,F){if(!(F=(f=null,c.trustedTypes),F)\|\|!F.createPolicy)return f;try{f=F.createPolicy("bg",{createHTM
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 46 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 72 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 22 22 2b 72 7d 7d 28 63 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 46 46 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 2c 59 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 72 65 74 75 72 6e 20 59 3d 28 4c 3d 28 46 3d 66 70 28 46 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 61 26 26 28 66 26 26 58 28 66 29 2c 63 3d 72 2c 61 28 29 2c 61 3d 76 6f 69 64 20 30 29 7d 2c 21 21 28 63 3d 76 6f 69 64 20 30 2c 66 29 29 2c 46 29 5b 31 5d 2c 46 5b 30 5d 29 2c 7b 69 6e 76 6f 6b 65 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d Data Ascii: F.createScript(r)}:function(r){return""+r}}(c)(Array(7824*Math.random()\|0).join("\n")+'(function(){var FF=function(F,f,c,L,Y){function a(){}return Y=(L=(F=fp(F,function(r){a&&(f&&X(f),c=r,a(),a=void 0)},!!(c=void 0,f)),F)[1],F[0]),{invoke:function(r,P,p,m
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 35 36 33 32 30 3d 3d 28 46 2e 63 68 61 72 43 6f 64 65 41 74 28 63 2b 31 29 26 36 34 35 31 32 29 3f 28 59 3d 36 35 35 33 36 2b 28 28 59 26 31 30 32 33 29 3c 3c 31 30 29 2b 28 46 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 63 29 26 31 30 32 33 29 2c 4c 5b 66 2b 2b 5d 3d 59 3e 3e 31 38 7c 32 34 30 2c 4c 5b 66 2b 2b 5d 3d 59 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 4c 5b 66 2b 2b 5d 3d 59 3e 3e 31 32 7c 32 32 34 2c 4c 5b 66 2b 2b 5d 3d 59 3e 3e 36 26 36 33 7c 31 32 38 29 2c 4c 5b 66 2b 2b 5d 3d 59 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 4c 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 66 6f 72 28 66 3d 5b 5d 3b 46 2d 2d 3b 29 66 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 66 7d 2c 4e 3d 66 Data Ascii: 56320==(F.charCodeAt(c+1)&64512)?(Y=65536+((Y&1023)<<10)+(F.charCodeAt(++c)&1023),L[f++]=Y>>18\|240,L[f++]=Y>>12&63\|128):L[f++]=Y>>12\|224,L[f++]=Y>>6&63\|128),L[f++]=Y&63\|128);return L},U=function(F,f){for(f=[];F--;)f.push(255*Math.random()\|0);return f},N=f
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 2c 59 2c 61 2c 72 2c 50 29 7b 72 65 74 75 72 6e 28 72 3d 28 66 3d 5b 38 30 2c 28 61 3d 67 4a 2c 2d 36 33 29 2c 36 2c 35 35 2c 28 50 3d 46 26 37 2c 37 36 29 2c 37 39 2c 66 2c 2d 33 32 2c 37 35 2c 39 37 5d 2c 75 5b 63 2e 4c 5d 28 63 2e 43 73 29 29 2c 72 29 5b 63 2e 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 59 3d 28 50 2b 3d 36 2b 37 2a 46 2c 70 29 2c 50 26 3d 37 7d 2c 72 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 28 70 3d 28 59 3d 28 70 3d 33 35 39 31 2a 4c 2a 28 70 3d 4c 25 31 36 2b 31 2c 59 29 2b 28 61 28 29 7c 30 29 2a 70 2d 31 31 34 2a 4c 2a 4c 2a 59 2d 20 2d 31 36 35 33 2a 59 2d 70 2a 59 2b 32 2a 4c 2a 4c 2a 70 2b 66 5b 50 2b 36 37 26 37 5d 2a 4c 2a 70 2b 35 37 Data Ascii: g=function(F,f,c,L,Y,a,r,P){return(r=(f=[80,(a=gJ,-63),6,55,(P=F&7,76),79,f,-32,75,97],u[c.L](c.Cs)),r)[c.L]=function(p){Y=(P+=6+7F,p),P&=7},r.concat=function(p){return(p=(Y=(p=3591L(p=L%16+1,Y)+(a()\|0)p-114LLY- -1653Y-pY+2LLp+f[P+67&7]Lp+57
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 28 29 2e 6c 65 6e 67 74 68 7c 7c 46 2e 75 2e 63 72 65 61 74 65 28 29 2e 6c 65 6e 67 74 68 7c 7c 28 46 2e 75 3d 76 6f 69 64 20 30 2c 46 2e 68 3d 76 6f 69 64 20 30 29 2c 66 7d 2c 71 32 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 29 7b 72 65 74 75 72 6e 20 66 2e 4f 28 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 63 3d 4c 7d 2c 66 61 6c 73 65 2c 46 29 2c 63 7d 2c 47 44 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 72 65 74 75 72 6e 20 66 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 3c 46 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 46 5b 66 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 66 3d 66 2e 50 5b 46 5d 2c 66 29 Data Ascii: ().length\|\|F.u.create().length\|\|(F.u=void 0,F.h=void 0),f},q2=function(F,f,c){return f.O(function(L){c=L},false,F),c},GD=function(F,f){return f=0,function(){return f<F.length?{done:false,value:F[f++]}:{done:true}}},J=function(F,f){if(void 0===(f=f.P[F],f)
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 2c 68 66 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 29 7b 74 72 79 7b 4c 3d 46 5b 28 28 66 7c 30 29 2b 32 29 25 33 5d 2c 46 5b 66 5d 3d 28 46 5b 66 5d 7c 30 29 2d 28 46 5b 28 28 66 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 4c 7c 30 29 5e 28 31 3d 3d 66 3f 4c 3c 3c 63 3a 4c 3e 3e 3e 63 29 7d 63 61 74 63 68 28 59 29 7b 74 68 72 6f 77 20 59 3b 7d 7d 2c 4b 70 3d 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 20 46 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 2c 59 2c 61 29 7b 69 66 28 63 2e 54 2e 6c 65 6e 67 74 68 29 7b 63 2e 5a 3d 28 63 2e 62 5a 3d 28 63 2e 5a 26 26 30 28 29 2c 46 29 2c 74 72 75 65 29 3b 74 72 79 7b 4c 3d 63 2e 43 28 29 2c 63 2e 4e 3d 4c 2c 63 2e 46 3d 4c 2c 63 2e 52 3d 30 2c 59 3d 6e 70 28 63 2c 46 29 2c 61 3d Data Ascii: ,hf=function(F,f,c,L){try{L=F[((f\|0)+2)%3],F[f]=(F[f]\|0)-(F[((f\|0)+1)%3]\|0)-(L\|0)^(1==f?L<<c:L>>>c)}catch(Y){throw Y;}},Kp=function(F){return F},I=function(F,f,c,L,Y,a){if(c.T.length){c.Z=(c.bZ=(c.Z&&0(),F),true);try{L=c.C(),c.N=L,c.F=L,c.R=0,Y=np(c,F),a=
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 28 72 2c 50 2c 70 29 7b 28 50 3d 28 70 3d 28 50 3d 48 28 28 70 3d 48 28 72 29 2c 72 29 29 2c 30 21 3d 4a 28 70 2c 72 29 29 2c 4a 29 28 50 2c 72 29 2c 70 29 26 26 47 28 72 2c 31 31 33 2c 50 29 7d 2c 28 47 28 66 2c 28 54 28 33 31 31 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 29 7b 77 28 72 2c 66 61 6c 73 65 2c 50 2c 74 72 75 65 29 7c 7c 28 50 3d 48 28 72 29 2c 70 3d 48 28 72 29 2c 47 28 72 2c 70 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 6d 29 7d 28 41 66 28 4a 28 50 2c 72 2e 69 29 29 29 29 29 7d 2c 28 54 28 38 36 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d 2c 4d 2c 42 29 7b 77 28 72 2c 66 61 6c 73 65 2c 50 2c 74 72 75 65 29 7c 7c 28 4d 3d 49 7a 28 72 2e 69 29 2c 50 3d 4d 2e 41 55 2c 42 3d 4d 2e 7a 45 2c 6d 3d 4d 2e Data Ascii: (r,P,p){(P=(p=(P=H((p=H(r),r)),0!=J(p,r)),J)(P,r),p)&&G(r,113,P)},(G(f,(T(311,function(r,P,p){w(r,false,P,true)\|\|(P=H(r),p=H(r),G(r,p,function(m){return eval(m)}(Af(J(P,r.i)))))},(T(86,function(r,P,p,m,M,B){w(r,false,P,true)\|\|(M=Iz(r.i),P=M.AU,B=M.zE,m=M.
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 2e 5a 3d 66 61 6c 73 65 2c 66 29 2e 4b 73 3d 61 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 61 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 66 2e 53 3d 76 6f 69 64 20 30 2c 66 61 6c 73 65 29 2c 30 29 29 2c 30 29 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d 29 7b 69 66 28 50 3d 72 2e 6c 2e 70 6f 70 28 29 29 7b 66 6f 72 28 6d 3d 74 28 72 29 3b 30 3c 6d 3b 6d 2d 2d 29 70 3d 48 28 72 29 2c 50 5b 70 5d 3d 72 2e 50 5b 70 5d 3b 50 5b 34 33 38 5d 3d 72 2e 50 5b 34 33 38 5d 2c 50 5b 32 35 33 5d 3d 72 2e 50 5b 32 35 33 5d 2c 72 2e 50 3d 50 7d 65 6c 73 65 20 47 28 72 2c 31 31 33 2c 72 2e 44 29 7d 29 2c 66 29 2c 31 31 37 29 29 2c 66 29 2e 5a 61 3d 30 2c 66 29 29 2c 34 39 39 29 2c 5b 5d 29 2c 33 33 31 29 2c 30 Data Ascii: .Z=false,f).Ks=a.timeOrigin\|\|(a.timing\|\|{}).navigationStart\|\|0,f.S=void 0,false),0)),0)),function(r,P,p,m){if(P=r.l.pop()){for(m=t(r);0<m;m--)p=H(r),P[p]=r.P[p];P[438]=r.P[438],P[253]=r.P[253],r.P=P}else G(r,113,r.D)}),f),117)),f).Za=0,f)),499),[]),331),0
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 2b 29 50 2e 70 75 73 68 28 74 28 72 29 29 3b 47 28 72 2c 6d 2c 50 29 7d 29 2c 66 29 2c 66 29 29 2c 31 38 30 29 2c 7b 7d 29 2c 66 29 29 2c 30 29 29 2c 54 29 28 34 36 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 29 2c 34 35 31 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d 2c 4d 2c 42 2c 67 2c 78 2c 68 2c 41 2c 53 2c 4f 29 7b 66 75 6e 63 74 69 6f 6e 20 79 28 71 2c 43 29 7b 66 6f 72 28 3b 6d 3c 71 3b 29 68 7c 3d 74 28 72 29 3c 3c 6d 2c 6d 2b 3d 38 3b 72 65 74 75 72 6e 20 68 3e 3e 3d 28 43 3d 68 26 28 31 3c 3c 71 29 2d 28 6d 2d 3d 71 2c 31 29 2c 71 29 2c 43 7d 66 6f 72 28 41 3d 28 53 3d 28 6d 3d 68 3d 28 67 3d 48 28 72 29 2c 30 29 2c 79 28 33 29 7c 30 29 2b 31 2c 70 3d 79 28 35 29 2c 50 3d 42 3d 30 2c 5b 5d 29 3b 42 3c 70 3b 42 2b 2b 29 4f 3d 79 28 Data Ascii: +)P.push(t(r));G(r,m,P)}),f),f)),180),{}),f)),0)),T)(460,function(){},f),451),function(r,P,p,m,M,B,g,x,h,A,S,O){function y(q,C){for(;m<q;)h\|=t(r)<<m,m+=8;return h>>=(C=h&(1<<q)-(m-=q,1),q),C}for(A=(S=(m=h=(g=H(r),0),y(3)\|0)+1,p=y(5),P=B=0,[]);B<p;B++)O=y(
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 48 5b 74 68 69 73 2e 48 2e 6c 65 6e 67 74 68 3e 3e 31 5d 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 59 29 7b 28 74 68 69 73 2e 6e 2b 2b 2c 35 30 29 3e 74 68 69 73 2e 48 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 48 2e 70 75 73 68 28 4c 29 3a 28 59 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 35 30 3e 59 26 26 28 74 68 69 73 2e 48 5b 59 5d 3d 4c 29 29 7d 29 2c 63 29 2c 46 3d 6e 65 77 20 63 2c 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 72 65 74 75 72 6e 20 4c 3d 66 2e 54 45 28 29 2e 63 6f 6e 63 61 74 28 46 2e 54 45 28 29 29 2c 46 3d 6e 65 77 20 63 2c 4c 7d 29 5d 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 69 66 28 46 2e 68 29 72 65 74 75 72 6e 20 58 46 28 46 2c 46 2e 75 29 3b 72 65 74 75 72 6e 28 66 3d Data Ascii: H[this.H.length>>1]]},function(L,Y){(this.n++,50)>this.H.length?this.H.push(L):(Y=Math.floor(Math.random()*this.n),50>Y&&(this.H[Y]=L))}),c),F=new c,function(L){return L=f.TE().concat(F.TE()),F=new c,L})]},H=function(F,f){if(F.h)return XF(F,F.u);return(f=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	49833	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	433	OUT	GET /media/4lijqlun/austria-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:16 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "c82ad93c4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:26 GMT Content-Length: 603
2024-01-15 14:02:16 UTC	603	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 0d 49 44 41 54 78 9c ed d7 31 8d 02 51 00 45 d1 3f 9b 29 50 41 b2 52 c7 02 18 c0 0a 0d 3a a0 21 60 81 e6 d3 03 d7 c1 39 12 5e 71 93 b7 5c c6 7e 0e 80 6f db 9f 51 80 22 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 5a ff Data Ascii: PNGIHDRU/pHYsqqIDATx1QE?)PAR:!`9^q\~oQ"@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	49831	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	437	OUT	GET /media/ffgau1n1/netherlands-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:16 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "c522dc8f4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:46 GMT Content-Length: 620
2024-01-15 14:02:16 UTC	620	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 1e 49 44 41 54 78 9c ed d7 21 4e 43 51 00 44 d1 57 f2 24 0e c3 32 10 38 16 40 c2 0e ab 10 5d 49 93 22 08 02 8b fc 55 08 82 20 41 60 48 f1 fd dc 1d 9c b3 84 11 37 99 cd e3 d5 cd 69 00 9c b9 7c b8 3f 5e 18 05 28 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 Data Ascii: PNGIHDRU/pHYsqqIDATx!NCQDW$28@]I"U A`H7i\|?^($@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	49832	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	668	OUT	GET /media/txgdbd5e/france-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:16 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "1b3e90454164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:40:51 GMT Content-Length: 630
2024-01-15 14:02:16 UTC	630	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 28 49 44 41 54 78 9c ed d4 a1 4d 83 01 18 45 d1 8f 06 89 c0 90 e0 d8 a0 09 0c 80 65 06 c6 a9 c3 22 18 88 45 9a 92 54 30 00 8a 50 60 82 2b ff a4 69 cf d9 e0 3d 71 2f 1e 1e df fe 86 45 dc af 6f e7 f5 e5 c9 b9 0b f9 5c 3f 7f fc 6c f7 77 27 39 ee 38 6c 56 e7 fe 00 d0 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 Data Ascii: PNGIHDRU/pHYsqq(IDATxMEe"ET0P`+i=q/Eo\?lw'98lVH$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	49835	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	667	OUT	GET /media/p34nnfqq/italy-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:16 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "cf1bfb1b4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:39:41 GMT Content-Length: 629
2024-01-15 14:02:16 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 27 49 44 41 54 78 9c ed d4 b1 49 83 01 18 45 d1 cf 60 a7 58 db 65 00 c1 0d ec 75 1f 17 48 99 4e 48 e3 12 0e e1 26 71 03 8b 54 42 88 13 dc f2 87 90 9c b3 c1 7b c5 bd 79 d9 bd 9e 86 45 3c 3f 3e cd f6 6d e3 dc 85 fc be 7f fc 1c 3e bf d6 17 39 ee 3c 6c 56 d7 fe 00 d0 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 Data Ascii: PNGIHDRU/pHYsqq'IDATxIE`XeuHNH&qTB{yE<?>m>9<lVH$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	49843	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	543	OUT	OPTIONS /settings/G_xgCaSxD/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:16 UTC	621	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPo88Ngc_TuMgE-5t0E6JfOiaqYv2cJTrYmgO46YiHfX7sFJM-Bsy10jPCUnTK5CUufBoAI Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type Date: Mon, 15 Jan 2024 14:02:16 GMT Expires: Mon, 15 Jan 2024 14:02:16 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	49836	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	432	OUT	GET /media/sqkoto1x/greece-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:16 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "cab923f4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:40:40 GMT Content-Length: 900
2024-01-15 14:02:16 UTC	900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 03 36 49 44 41 54 78 9c ed dc 3f 6b 9d 65 18 c0 e1 37 f6 d0 66 a9 cd d4 c2 f1 0f f9 06 51 32 08 59 6c 3f 42 27 dd 54 70 f5 2b 14 33 eb 52 ba 49 b1 ba 88 4e ba b9 08 8d 82 a5 75 50 37 27 21 52 28 04 97 d4 3a a4 a5 e5 2d 5d 4d 7e 8b e7 84 84 73 ae 0b ce fa f2 dc f7 81 1f 3c cb b3 72 71 b8 36 0e a7 c0 de b8 3d f3 21 3e dd de 19 3e f9 f8 f6 69 18 07 16 c1 f6 4b fe 46 a0 08 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 9a 58 cd fc bd f3 de 1b c3 bb ef bf b9 68 63 b1 64 ce 9e 3b b3 26 10 c7 e0 b5 f5 b5 61 eb f2 fa c2 Data Ascii: PNGIHDRU/pHYsqq6IDATx?ke7fQ2Yl?B'Tp+3RINuP7'!R(:-]M~s<rq6=!>>iKFH$@I $@ H$@I $@Xhcd;&a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	49846	172.253.62.147	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	1059	OUT	GET /recaptcha/api2/bframe?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&k=6LfvX9QZAAAAAANgT0xLrUknKimpzKvMqW4xdyi9 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlKHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=orcSInoZBb6Srw0PdPMNeLGKsegfLi-tQnviho5hKJXKDNg0kXIPnfTcuwV5r7RqjT893pWGJF7klKqldBoj4rDJvxfFlgDOCcW9aKDnU9zIlUh2LP0vO8k3uT0gHJD1JvVAclkJnKwZG6hDAl62HrMxNrUeqSR-WF1J-l9YYgE
2024-01-15 14:02:16 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 14:02:16 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-nzppTti6qUuf6vvDIKh8KQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:16 UTC	361	IN	Data Raw: 31 63 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1c6d<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c Data Ascii: oboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-st
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: oto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-01-15 14:02:16 UTC	1252	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 Data Ascii: /* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168
2024-01-15 14:02:17 UTC	664	IN	Data Raw: 54 74 69 36 71 55 75 66 36 76 76 44 49 4b 68 38 4b 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6e 7a 70 70 Data Ascii: Tti6qUuf6vvDIKh8KQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js" nonce="nzpp
2024-01-15 14:02:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	49839	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	667	OUT	GET /media/odiemvmj/spain-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "7c5a42164164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:39:31 GMT Content-Length: 7063
2024-01-15 14:02:17 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 1b 49 49 44 41 54 78 9c ed dd 09 7c 14 f5 fd ff f1 d7 ec bd 9b 4d b2 e4 4e 48 02 01 02 84 1b 31 02 82 47 c1 03 8f e2 51 a5 f5 a8 b5 6a d5 df df 8a 55 6b b5 f6 67 ed f5 a8 77 bd 5a 6d 7f 3f b5 56 40 a9 c7 cf 5b 8b 60 b1 46 45 e4 46 48 20 01 42 38 72 91 73 ef 73 e6 ff d8 89 a2 31 19 01 11 31 e1 f3 7c 3c f6 91 dd b9 76 66 64 df 7e 67 be c7 28 af 33 4a 43 08 21 7a fa 8e 49 4e 8a 10 c2 88 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 Data Ascii: PNGIHDRU/pHYsqqIIDATx\|MNH1GQjUkgwZm?V@[`FEFH B8rss11\|<vfd~g(3JC!zIN
2024-01-15 14:02:17 UTC	4341	IN	Data Raw: d0 6f 02 62 dc 30 07 4d 1d 09 5c ce cf 8a f7 c1 90 86 cd dc 7b 71 ff f3 6a 4b 82 58 3c 1a 3b 89 90 39 d0 c4 7b bb 82 8c 9e e1 a7 b1 21 c1 51 55 bd 17 f3 4d 1b b6 52 f1 f2 22 72 d3 53 d9 e4 31 f1 cc f3 cf e3 36 b9 99 53 7a 02 ee 55 e7 f1 66 74 01 23 ca 5e e6 d5 7f 7d 8c cf ef e3 d2 5e b6 31 a5 cc a9 b7 bb 28 29 b6 ed 9d 16 4f 40 30 a0 72 c6 31 fb be c9 29 c4 a1 d6 6f 02 22 27 bb 88 a9 c7 9f b8 f7 f3 6b 6f fc 1b 77 8a 93 2b cf 6c da e7 ba f5 9e 30 bb 53 23 24 da 15 36 be 17 e3 e3 da 30 a5 23 02 d4 10 e5 28 7a 0f 88 a7 17 cc a7 bd 45 25 25 3b c2 b9 17 5e c6 f0 92 12 fe fe c8 53 98 4d 66 8e cf 9f 4c a0 cd c1 c6 35 05 98 7d ab b9 e1 e7 37 1a 7e f7 a8 b2 c9 58 52 27 e8 ef 1b 1a 9a 69 6d ef 20 18 6b 40 af 46 11 e2 30 eb 37 01 61 b7 d9 39 69 fa f9 7b 3f 3f ff e2 Data Ascii: ob0M\{qjKX<;9{!QUMR"rS16SzUft#^}^1()O@0r1)o"'kow+l0S#$60#(zE%%;^SMfL5}7~XR'im k@F07a9i{??

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	49840	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	676	OUT	GET /media/qu1fsuip/czech-republic-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "d762702d4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:40:10 GMT Content-Length: 1365
2024-01-15 14:02:17 UTC	1365	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 05 07 49 44 41 54 78 9c ed d6 3b 68 9e 65 18 c7 e1 db d0 c5 82 53 27 87 4e 82 76 d4 d1 d9 ae 8a 06 1c 45 e2 62 05 dd 74 af 38 e8 e2 66 d4 a5 8b 85 2e 82 ab 2e 9e 06 bb c4 a9 34 f5 50 5a 62 a1 ad 1a a1 95 58 8d 26 a0 7c 91 57 13 92 2f f9 0e ef e1 39 5c d7 f6 6c 0f f7 f0 e3 7f df d3 2f be f3 f7 9b af 2d c6 a9 87 1e 0c 80 c6 2f 1f 7e f2 e5 c2 77 d7 7f 8c c5 97 de 8d e5 f3 9f 39 0c b0 c7 42 f3 58 3e ff 79 3c 73 66 39 be bd 76 db 85 80 1d 0b bb cf 60 4d 00 bb 2d 1c 74 0d 6b 02 88 71 81 08 6b 02 aa 17 87 05 a2 61 4d 40 bd 8e 0c 44 58 13 50 ad 89 02 d1 b0 26 a0 2e 53 05 22 ac 09 a8 ca d4 81 68 58 Data Ascii: PNGIHDRU/pHYsqqIDATx;heS'NvEbt8f..4PZbX&\|W/9\l/-/~w9BX>y<sf9v`M-tkqkaM@DXP&.S"hX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	49841	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	668	OUT	GET /media/xmkhy0e1/cyprus-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "c68ddb5f4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:41:35 GMT Content-Length: 3868
2024-01-15 14:02:17 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0e ce 49 44 41 54 78 9c ed 9d 7d 6c 95 d5 1d c7 8f 8e 20 b4 54 c5 0e 45 ed 0c ec 0f 2d ce 44 48 04 64 d9 1f 52 83 9b 4a c2 36 9c 8b 64 86 c9 3f 53 a3 92 69 1c cb c0 25 0c c8 c6 de 0c d3 29 24 4b 19 d1 cc 0c 75 93 04 5d 26 b1 b8 2c 19 43 97 28 89 42 35 d9 60 b1 02 03 a1 4a ad 20 82 5d be e7 de 73 3d f7 b9 f7 b4 b7 e5 b9 f7 79 e9 e7 93 34 17 ee eb 79 6e 7b be e7 f7 76 7e e7 ac 81 81 81 01 03 00 50 c9 ca b3 f9 52 00 20 04 02 01 00 41 10 08 00 08 82 40 00 40 10 04 02 00 82 20 10 00 10 04 81 00 80 20 08 04 00 04 41 20 00 20 08 02 01 00 41 10 08 00 08 82 40 00 40 10 04 02 00 82 20 10 00 10 04 81 Data Ascii: PNGIHDRU/pHYsqqIDATx}l TE-DHdRJ6d?Si%)$Ku]&,C(B5`J ]s=y4yn{v~PR A@@ A A@@
2024-01-15 14:02:17 UTC	1146	IN	Data Raw: 21 bf bd af f8 3c 99 df ce a2 70 29 44 e7 86 48 60 3a ae 9e 6d 3f 43 ff b7 13 f1 c8 a1 33 ca 0c 28 15 e9 67 1b 94 8d 88 5a 34 fe 35 e8 f3 c5 ea ef de 6b 5a c6 37 d5 64 d1 68 fc b2 34 24 26 c4 23 92 07 81 48 98 68 80 52 93 4e c1 c7 d6 96 f3 cc 79 cd 13 cc d7 ae f9 4a d9 00 7d 73 5b ff d6 ea ec af c0 72 4d 5c 80 50 13 5a 02 21 53 bf 90 3e 7d b9 6a 91 56 2d 68 6c d1 54 e4 63 9e 38 c8 42 e8 f3 c4 41 e3 72 ab ff cc 88 ab 61 8a e2 f8 db e6 1f 99 ff 1c ec 31 87 3e 38 6a b3 1b ba 9e 6a cf 85 e4 40 20 52 84 8d e2 8f 6f 32 6b 9f de 58 aa 34 7c f0 77 0f db c9 36 f3 0a 45 ff af aa d8 bc a5 d5 79 49 71 f3 97 5e ab 55 db 09 84 84 43 a6 bc f6 7e b8 f7 93 a5 32 92 d5 79 c5 ef 1f 29 fd 7b ee d5 85 da 05 3f 3b a1 80 aa 9f 8a 55 8d 47 14 89 4c d7 eb 3b ed ad 5f 17 e1 f6 a3 Data Ascii: !<p)DH`:m?C3(gZ45kZ7dh4$&#HhRNyJ}s[rM\PZ!S>}jV-hlTc8BAra1>8jj@ Ro2kX4\|w6EyIq^UC~2y){?;UGL;_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	49842	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:16 UTC	670	OUT	GET /media/14xjznio/slovakia-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:16 GMT Accept-Ranges: bytes ETag: "cc60f31b4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:32:31 GMT Content-Length: 3156
2024-01-15 14:02:17 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0c 06 49 44 41 54 78 9c ed dd 0d 6c d4 f5 1d c7 f1 2f 50 1e 8a ad 14 3a 50 3a 50 7c 2a 88 c2 70 25 ba b0 4c f0 21 9b 9b c3 81 4b 06 c3 6d 38 27 d6 e9 16 51 71 2e 6a 0c 18 89 c6 07 c0 b8 45 86 71 42 1c 90 cd f1 20 ba c5 44 86 65 89 03 19 38 60 71 83 92 55 b1 58 06 04 5a 6c 15 1d 60 97 ef af f7 bb 5c cb fd 8e bb de c3 ff f7 ff df fb 95 5c ae 4f 77 ff df 41 7e 9f fb 3d 5f 8f f6 f6 f6 76 01 80 53 cd eb c9 3f 0a 00 17 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 Data Ascii: PNGIHDRU/pHYsqqIDATxl/P:P:P\|*p%L!Km8'Qq.jEqB De8`qUXZl`\\OwA~=_vS?D@p" 8N'D@p" 8N
2024-01-15 14:02:17 UTC	434	IN	Data Raw: 75 5b e5 ad 11 df 8a cf 70 68 97 e3 a9 57 6e 93 e7 6e 1f 2e 95 27 33 3f 24 56 5b 0d 77 d4 88 ac dd 7c 67 3c 1c b4 4b b1 6d d2 ad 84 03 22 29 d2 2d 88 44 7a 82 b4 9e 23 61 5b 13 ba e4 79 51 ed 72 59 b5 5b d2 ea 76 5c 5d 71 54 1e 7b 71 ba 09 19 a5 a1 b3 67 f6 93 04 03 22 4b 5b 10 45 13 10 12 3b 8d 4a 0f 6c 49 fc 28 bf 86 bf 37 c8 13 0f bc 2e 1b 5a 06 24 7d 8c 76 27 7e 3e 6b 8c 5c f3 93 2b cd f7 9f ee dd 2f 0d 73 17 cb fe a5 eb 0a 56 6e 20 08 45 17 10 96 8e 4d e8 09 d9 89 c7 e8 6b 50 dc 7b df 5f e4 dd 8f fb 9b ef b5 0b 72 ff 2d d5 32 e5 67 1d 61 a2 83 90 1a 0c 8d 8b 96 07 59 74 a0 60 8a 36 20 2c 3d 59 5a bb 1d 7a ca b4 a5 41 51 b7 ea 1f 72 cb e3 df 8d ff ec d0 2b 75 66 10 52 d7 5a 00 c5 a2 e8 03 c2 4a 16 14 12 eb 4e 98 65 dc 75 5b 83 2c 1e 10 08 02 a2 0b 1b Data Ascii: u[phWnn.'3?$V[w\|g<Km")-Dz#a[yQrY[v\]qT{qg"K[E;JlI(7.Z$}v'~>k\+/sVn EMkP{_r-2gaYt`6 ,=YZzAQr+ufRZJNeu[,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	49848	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	619	OUT	GET /settings/G_xgCaSxD/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:17 UTC	1130	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPp8he1Ft3qhRcspE2Tc8c4xKD6dIldS1-9zKrtTRRDGm4NE_xEPjjxaZjOuPl3UaR9DbJ4 Date: Mon, 15 Jan 2024 14:02:17 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 15 Jan 2024 14:03:17 GMT Last-Modified: Thu, 21 Dec 2023 15:44:56 GMT ETag: W/"5a564d0133d7887a1e1f3b572267ce49" Vary: Accept-Encoding x-goog-generation: 1703173496129721 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 65 Content-Type: application/json x-goog-hash: crc32c=3fMg5g== x-goog-hash: md5=WlZNATPXiHoeHztXImfOSQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: US, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:17 UTC	72	IN	Data Raw: 34 32 0d 0a 7b 22 6c 61 6e 67 75 61 67 65 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 22 69 74 22 2c 22 65 6e 22 5d 2c 22 65 64 69 74 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 69 74 22 2c 22 65 6e 22 5d 7d 0d 0a Data Ascii: 42{"languagesAvailable":["it","en"],"editableLanguages":["it","en"]}
2024-01-15 14:02:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	49845	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	437	OUT	GET /assets/animations/ESG_blue.json?ver=2 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	223	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "0524cb754dd81:0" Connection: close Last-Modified: Mon, 11 Apr 2022 07:28:52 GMT Content-Length: 90078
2024-01-15 14:02:17 UTC	2716	IN	Data Raw: 7b 22 76 22 3a 22 34 2e 38 2e 30 22 2c 22 6d 65 74 61 22 3a 7b 22 67 22 3a 22 4c 6f 74 74 69 65 46 69 6c 65 73 20 41 45 20 22 2c 22 61 22 3a 22 22 2c 22 6b 22 3a 22 22 2c 22 64 22 3a 22 22 2c 22 74 63 22 3a 22 22 7d 2c 22 66 72 22 3a 32 35 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 32 35 30 2c 22 77 22 3a 31 34 34 30 2c 22 68 22 3a 36 30 30 2c 22 6e 6d 22 3a 22 69 6c 6c 75 20 78 20 57 61 6c 74 65 72 20 6e 65 77 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 7b 22 69 64 22 3a 22 69 6d 61 67 65 5f 30 22 2c 22 77 22 3a 35 33 36 2c 22 68 22 3a 36 30 39 2c 22 75 22 3a 22 22 2c 22 70 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 68 67 41 41 41 4a 68 Data Ascii: {"v":"4.8.0","meta":{"g":"LottieFiles AE ","a":"","k":"","d":"","tc":""},"fr":25,"ip":0,"op":250,"w":1440,"h":600,"nm":"illu x Walter new","ddd":0,"assets":[{"id":"image_0","w":536,"h":609,"u":"","p":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAhgAAAJh
2024-01-15 14:02:17 UTC	16383	IN	Data Raw: 49 62 36 79 79 38 45 44 41 44 67 38 6e 4b 30 55 6b 36 37 52 79 38 46 44 41 42 67 4b 6e 4a 74 73 6e 2f 30 74 34 41 42 41 46 78 65 63 65 70 4c 41 49 41 4c 71 46 4a 45 4c 4c 78 34 4b 57 41 41 41 4a 65 57 69 68 77 52 34 78 65 76 42 51 77 41 34 4e 4a 79 6a 67 38 57 59 72 7a 37 35 6b 38 43 41 4a 78 52 63 39 6a 4c 4c 37 2f 57 77 51 41 41 70 6b 37 41 41 41 43 6d 54 73 41 41 41 43 36 6c 2b 65 52 42 4f 79 4c 2f 36 65 56 6e 41 67 59 41 63 44 6b 4c 45 5a 48 54 2f 73 75 50 42 41 77 41 59 4f 6f 45 44 41 44 67 55 6e 4a 56 61 36 58 49 67 35 65 66 43 52 67 41 77 4b 57 6b 79 50 57 63 30 75 44 6c 5a 77 49 47 41 44 42 31 41 67 59 41 63 44 6b 35 57 6a 6e 48 34 4f 56 48 41 67 59 41 63 44 6c 46 71 71 64 63 44 48 37 77 61 45 61 6c 41 41 44 7a 49 6c 66 31 6c 79 35 53 42 51 43 34 Data Ascii: Ib6yy8EDADg8nK0Uk67Ry8FDABgKnJtsn/0t4ABAFxecepLAIALqFJELLx4KWAAAJeWihwR4xevBQwA4NJyjg8WYrz75k8CAJxRc9jLL7/WwQAApk7AAACmTsAAAC6l+eRBOyL/6eVnAgYAcDkLEZHT/suPBAwAYOoEDADgUnJVa6XIg5efCRgAwKWkyPWc0uDlZwIGADB1AgYAcDk5WjnH4OVHAgYAcDlFqqdcDH7waEalAADzIlf1ly5SBQC4
2024-01-15 14:02:17 UTC	26	IN	Data Raw: 46 4c 31 33 63 34 46 67 7a 66 48 6b 32 61 57 64 6c 37 2f 4c 54 31 2b 2b 61 58 Data Ascii: FL13c4FgzfHk2aWdl7/LT1++aX
2024-01-15 14:02:17 UTC	16383	IN	Data Raw: 41 5a 56 71 45 4c 31 44 4b 51 61 54 59 53 57 33 7a 65 44 62 37 65 37 66 75 59 39 4b 45 4c 37 42 4f 65 78 48 78 4f 4f 57 30 34 34 70 54 38 4a 48 77 42 54 71 54 44 6c 75 33 62 63 34 37 6e 7a 53 7a 78 33 50 6a 74 33 41 6d 34 51 73 46 70 55 69 52 36 35 35 78 64 58 55 70 6e 6b 61 4f 6e 57 6a 62 6e 65 66 4f 77 59 57 6c 43 46 38 6f 61 4c 6e 67 72 66 78 30 70 42 78 50 49 38 56 4f 4e 4d 32 4f 2b 2b 4c 43 61 6f 51 76 39 4f 31 55 31 74 59 54 76 45 66 64 79 44 6e 48 73 32 69 62 6e 52 65 66 43 31 76 6f 67 76 43 46 67 73 35 73 30 39 61 54 74 52 45 70 6e 75 59 63 7a 35 6f 63 7a 39 37 4d 6d 68 33 6e 33 4d 4a 36 43 46 38 6f 4b 44 63 70 49 6c 65 53 74 6a 6b 39 6a 5a 53 66 35 61 5a 35 39 6b 6d 30 7a 2b 61 62 64 35 2f 31 58 53 53 59 43 75 45 4c 4a 62 57 35 2f 45 55 32 63 6a Data Ascii: AZVqEL1DKQaTYSW3zeDb7e7fuY9KEL7BOexHxOOW044pT8JHwBTqTDlu3bc47nzSzx3Pjt3Am4QsFpUiR655xdXUpnkaOnWjbnefOwYWlCF8oaLngrfx0pBxPI8VONM2O++LCaoQv9O1U1tYTvEfdyDnHs2ibnRefC1vogvCFgs5s09aTtREpnuYcz5ocz97Mmh3n3MJ6CF8oKDcpIleStjk9jZSf5aZ59km0z+abd5/1XSSYCuELJbW5/EU2cj
2024-01-15 14:02:17 UTC	26	IN	Data Raw: 75 68 56 6a 57 56 30 61 6b 49 59 76 38 51 51 4f 79 2f 4a 76 62 45 57 49 66 68 Data Ascii: uhVjWV0akIYv8QQOy/JvbEWIfh
2024-01-15 14:02:17 UTC	16383	IN	Data Raw: 49 76 59 50 41 7a 7a 36 72 36 6e 44 69 6e 56 42 37 42 39 34 6a 74 51 2f 2b 6a 67 2f 39 62 2f 2b 65 7a 75 4f 52 37 57 2b 52 64 43 6f 52 6d 4e 52 61 4a 78 69 6a 30 61 6e 35 69 4c 32 44 77 50 45 2f 6d 73 79 32 42 4e 6e 55 5a 74 76 59 76 39 6a 6a 47 38 2b 74 66 76 67 47 74 36 54 52 51 39 78 6c 50 66 6b 44 35 51 75 44 6f 68 67 79 4a 48 72 6d 6b 66 2f 43 39 2f 46 7a 4b 61 78 4b 44 52 4f 6b 59 50 59 76 35 65 2b 6c 65 38 51 33 37 6e 4b 2f 52 4b 2f 64 44 42 41 37 48 38 6d 6a 57 6f 55 2b 71 70 4f 6f 31 4e 7a 56 5a 2b 44 44 6a 33 73 67 4e 67 2f 4f 72 70 75 48 47 76 64 43 4c 57 71 71 59 78 4f 52 54 78 38 33 37 4a 46 4c 4c 64 76 76 6f 73 68 39 6f 2f 70 69 50 33 58 78 4a 34 59 36 7a 42 63 78 50 35 68 67 4e 68 2f 54 52 31 57 72 41 74 69 2f 38 42 7a 78 50 37 52 78 2f 6d Data Ascii: IvYPAzz6r6nDinVB7B94jtQ/+jg/9b/+ezuOR7W+RdCoRmNRaJxij0an5iL2DwPE/msy2BNnUZtvYv9jjG8+tfvgGt6TRQ9xlPfkD5QuDohgyJHrmkf/C9/FzKaxKDROkYPYv5e+le8Q37nK/RK/dDBA7H8mjWoU+qpOo1NzVZ+DDj3sgNg/OrpuHGvdCLWqqYxORTx837JFLLdvvosh9o/piP3XxJ4Y6zBcxP5hgNh/TR1WrAti/8BzxP7Rx/m
2024-01-15 14:02:17 UTC	26	IN	Data Raw: 4e 51 6c 2f 56 61 58 52 71 72 75 70 7a 30 4b 47 48 48 5a 44 36 68 36 4d 74 49 Data Ascii: NQl/VaXRqrupz0KGHHZD6h6MtI
2024-01-15 14:02:17 UTC	16383	IN	Data Raw: 70 61 2f 7a 42 53 78 2f 78 79 31 71 71 6d 4d 54 6b 55 51 2b 34 63 41 59 76 38 31 73 53 66 47 4f 67 77 58 73 58 38 59 34 4e 46 2f 54 52 31 57 72 41 74 69 2f 38 42 7a 70 50 37 68 61 49 32 49 35 52 36 2f 2f 63 4f 45 78 50 36 7a 61 56 53 6a 73 53 67 30 54 72 46 48 6f 31 4e 7a 45 66 75 48 41 57 4c 2f 4e 52 6e 73 69 62 4f 6f 7a 54 65 78 2f 7a 48 47 4e 35 2f 61 66 58 41 4e 37 38 6d 69 68 7a 6a 4b 65 2f 49 48 53 68 63 48 52 44 44 6b 65 4f 62 41 32 33 48 77 37 4c 38 6d 6a 55 57 68 63 59 6f 63 78 50 36 39 39 4b 31 38 68 2f 67 43 56 75 36 58 2b 4b 57 44 41 57 4c 2f 4d 32 6c 55 6f 39 42 58 64 52 71 64 6d 71 76 36 48 48 54 6f 59 51 66 45 2f 74 45 52 71 66 38 63 74 61 71 70 37 4a 78 4f 76 62 34 64 78 32 39 66 43 58 30 65 59 76 2b 34 48 4c 48 2f 6d 74 67 54 59 78 32 47 Data Ascii: pa/zBSx/xy1qqmMTkUQ+4cAYv81sSfGOgwXsX8Y4NF/TR1WrAti/8BzpP7haI2I5R6//cOExP6zaVSjsSg0TrFHo1NzEfuHAWL/NRnsibOozTex/zHGN5/afXAN78mihzjKe/IHShcHRDDkeObA23Hw7L8mjUWhcYocxP699K18h/gCVu6X+KWDAWL/M2lUo9BXdRqdmqv6HHToYQfE/tERqf8ctaqp7JxOvb4dx29fCX0eYv+4HLH/mtgTYx2G
2024-01-15 14:02:17 UTC	26	IN	Data Raw: 48 76 62 4f 50 30 4a 4c 49 50 61 50 69 6f 6a 39 2b 38 68 56 54 57 5a 30 79 6f Data Ascii: HvbOP0JLIPaPioj9+8hVTWZ0yo
2024-01-15 14:02:17 UTC	16383	IN	Data Raw: 7a 59 50 77 51 51 2b 38 2b 4a 50 54 46 57 59 62 69 49 2f 53 4d 41 48 76 33 6e 56 47 48 46 52 6b 48 71 58 31 6d 33 39 6a 2f 2f 2b 76 2f 74 31 76 36 50 57 62 66 50 48 34 37 2b 30 76 72 6e 71 30 59 33 2b 2f 71 6a 39 5a 2f 66 2f 36 78 33 73 37 62 36 76 39 61 76 37 33 39 37 79 38 64 33 74 66 76 62 39 48 62 2f 73 2f 37 31 66 31 75 2f 6e 2b 54 35 33 63 79 36 64 62 75 66 71 64 30 2f 77 32 4e 64 62 58 58 45 66 6e 2f 50 32 78 2b 32 62 71 32 33 31 58 74 65 50 2f 6d 71 50 50 75 71 5a 2f 33 5a 2b 2b 6f 7a 74 66 56 2f 62 4e 2f 72 37 74 31 61 75 31 2b 45 39 56 6c 75 48 32 39 64 62 2f 76 76 38 7a 2f 59 2f 59 4a 31 2b 7a 79 6e 74 57 36 39 74 38 2f 2f 30 74 72 39 7a 50 33 70 43 71 7a 4f 62 2b 33 7a 57 72 56 31 4c 66 33 72 76 39 6e 31 6d 6e 2b 2b 5a 37 75 65 5a 66 33 42 6e Data Ascii: zYPwQQ+8+JPTFWYbiI/SMAHv3nVGHFRkHqX1m39j//+v/t1v6PWbfPH47+0vrnq0Y3+/qj9Z/f/6x3s7b6v9av7397y8d3tfvb9Hb/s/71f1u/n+T53cy6dbufqd0/w2NdbXXEfn/P2x+2bq231XteP/mqPPuqZ/3Z++oztfV/bN/r7t1au1+E9VluH29db/vv8z/Y/YJ1+zyntW69t8//0tr9zP3pCqzOb+3zWrV1Lf3rv9n1mn++Z7ueZf3Bn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	49847	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	432	OUT	GET /media/txgdbd5e/france-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "1b3e90454164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:40:51 GMT Content-Length: 630
2024-01-15 14:02:17 UTC	630	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 28 49 44 41 54 78 9c ed d4 a1 4d 83 01 18 45 d1 8f 06 89 c0 90 e0 d8 a0 09 0c 80 65 06 c6 a9 c3 22 18 88 45 9a 92 54 30 00 8a 50 60 82 2b ff a4 69 cf d9 e0 3d 71 2f 1e 1e df fe 86 45 dc af 6f e7 f5 e5 c9 b9 0b f9 5c 3f 7f fc 6c f7 77 27 39 ee 38 6c 56 e7 fe 00 d0 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 Data Ascii: PNGIHDRU/pHYsqq(IDATxMEe"ET0P`+i=q/Eo\?lw'98lVH$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	49849	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	669	OUT	GET /media/3sidauet/romania-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "6e1664324064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:09 GMT Content-Length: 622
2024-01-15 14:02:17 UTC	622	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 20 49 44 41 54 78 9c ed d4 b1 49 44 51 14 45 d1 3b 62 f0 8b 10 34 b6 0b 23 23 3b 10 2c 44 0c 2c 51 2c 40 87 c9 4c 4c 7f a6 15 ec 48 1e c8 b0 56 07 e7 04 fb 70 75 fb f2 33 2c f1 fc f4 7e 7c bc ff b8 f6 ee 1a 6f 0f 87 e3 7e 1a ff ae 73 77 71 ae cb 80 bf 13 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 Data Ascii: PNGIHDRU/pHYsqq IDATxIDQE;b4##;,D,Q,@LLHVpu3,~\|o~swq H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	49850	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	431	OUT	GET /media/p34nnfqq/italy-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:17 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "cf1bfb1b4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:39:41 GMT Content-Length: 629
2024-01-15 14:02:17 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 27 49 44 41 54 78 9c ed d4 b1 49 83 01 18 45 d1 cf 60 a7 58 db 65 00 c1 0d ec 75 1f 17 48 99 4e 48 e3 12 0e e1 26 71 03 8b 54 42 88 13 dc f2 87 90 9c b3 c1 7b c5 bd 79 d9 bd 9e 86 45 3c 3f 3e cd f6 6d e3 dc 85 fc be 7f fc 1c 3e bf d6 17 39 ee 3c 6c 56 d7 fe 00 d0 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 Data Ascii: PNGIHDRU/pHYsqq'IDATxIE`XeuHNH&qTB{yE<?>m>9<lVH$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	49858	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	536	OUT	OPTIONS /settings/G_xgCaSxD/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:18 UTC	621	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrrKrHPAtjeqaL8mx8c8GRFkg4-5TUlq0LoMsqL8_I7712NfsgjPZ-Ngq64gota1nTiAT8 Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type Date: Mon, 15 Jan 2024 14:02:18 GMT Expires: Mon, 15 Jan 2024 14:02:18 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	49851	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	670	OUT	GET /media/pa5oke0n/bulgaria-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "643941e4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:39:44 GMT Content-Length: 621
2024-01-15 14:02:18 UTC	621	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 1f 49 44 41 54 78 9c ed d7 ab 4d 44 51 00 45 51 3e d7 f0 33 13 2c 04 31 8e 84 04 33 96 50 00 0d 21 69 69 1a 40 52 00 09 9a e0 78 50 c3 c3 73 b3 3b 58 ab 84 23 76 72 0e d7 75 5d 0f 00 66 8f 47 46 01 8a 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 Data Ascii: PNGIHDRU/pHYsqqIDATxMDQEQ>3,13P!ii@RxPs;X#vru]fGF@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	49852	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	668	OUT	GET /media/yemlaspa/poland-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "21bace634164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:41:41 GMT Content-Length: 585
2024-01-15 14:02:18 UTC	585	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 01 fb 49 44 41 54 78 9c ed d7 c1 09 c2 50 00 44 c1 28 11 ec 42 2f 62 39 d6 64 9f 01 91 34 21 b9 7c ef d1 d7 c1 4c 09 7b 78 b0 87 31 c6 98 00 7e 3d 8f 46 01 8a 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 Data Ascii: PNGIHDRU/pHYsqqIDATxPD(B/b9d4!\|L{x1~=F@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	49854	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	431	OUT	GET /media/odiemvmj/spain-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "7c5a42164164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:39:31 GMT Content-Length: 7063
2024-01-15 14:02:18 UTC	1262	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 1b 49 49 44 41 54 78 9c ed dd 09 7c 14 f5 fd ff f1 d7 ec bd 9b 4d b2 e4 4e 48 02 01 02 84 1b 31 02 82 47 c1 03 8f e2 51 a5 f5 a8 b5 6a d5 df df 8a 55 6b b5 f6 67 ed f5 a8 77 bd 5a 6d 7f 3f b5 56 40 a9 c7 cf 5b 8b 60 b1 46 45 e4 46 48 20 01 42 38 72 91 73 ef 73 e6 ff d8 89 a2 31 19 01 11 31 e1 f3 7c 3c f6 91 dd b9 76 66 64 df 7e 67 be c7 28 af 33 4a 43 08 21 7a fa 8e 49 4e 8a 10 c2 88 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 04 84 10 c2 90 Data Ascii: PNGIHDRU/pHYsqqIIDATx\|MNH1GQjUkgwZm?V@[`FEFH B8rss11\|<vfd~g(3JC!zIN
2024-01-15 14:02:18 UTC	5801	IN	Data Raw: 7a 8a 8a 62 52 18 6c 76 90 f5 b9 70 48 f2 46 3b 78 eb f1 7b 79 9f ee 35 0e 61 97 4a e7 b0 28 39 d9 1a 25 c5 66 ea fd 31 1a 07 76 6f 4d b9 2d 37 48 9b b7 9d 25 ff 73 6f b7 e9 2e 4c 4c 6f f1 d0 d6 9a 60 67 a3 13 0f 2b 0e dd 01 0a f1 35 3b a2 02 22 d9 a0 e9 e4 e9 e3 18 e0 31 e1 8c 76 3f f4 20 2a 8b e3 1d 74 26 e2 8c 36 b9 a8 99 ee 65 5b 7e 10 7b 89 86 77 56 90 33 ae 77 b2 f6 c5 18 cf dd 13 e4 ca fb 53 a9 1a e1 a3 72 b8 4f 0f 8f e4 b2 9d 85 51 46 47 53 68 b4 47 7b 04 4c 92 0d 13 e3 47 0f 26 33 a7 f0 1b 3c 62 21 0e ce 11 75 89 a1 06 aa 70 d9 4b 18 5c 90 49 4b 76 88 ad 2f 44 71 96 69 14 78 ed 98 9c d0 64 0d 51 d4 6c e7 a3 2d 21 ce bf 25 85 27 aa f7 50 a2 0d c6 be 22 c8 3b 2d 09 72 d2 6d 6c eb 8c f1 bf 0f 75 e0 32 99 d1 0a 26 50 e1 a9 22 6b 44 0c 8f 6a e2 ed 27 Data Ascii: zbRlvpHF;x{y5aJ(9%f1voM-7H%so.LLo`g+5;"1v? *t&6e[~{wV3wSrOQFGShG{LG&3<b!upK\IKv/DqixdQl-!%'P";-rmlu2&P"kDj'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	49853	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	440	OUT	GET /media/qu1fsuip/czech-republic-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "d762702d4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:40:10 GMT Content-Length: 1365
2024-01-15 14:02:18 UTC	1365	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 05 07 49 44 41 54 78 9c ed d6 3b 68 9e 65 18 c7 e1 db d0 c5 82 53 27 87 4e 82 76 d4 d1 d9 ae 8a 06 1c 45 e2 62 05 dd 74 af 38 e8 e2 66 d4 a5 8b 85 2e 82 ab 2e 9e 06 bb c4 a9 34 f5 50 5a 62 a1 ad 1a a1 95 58 8d 26 a0 7c 91 57 13 92 2f f9 0e ef e1 39 5c d7 f6 6c 0f f7 f0 e3 7f df d3 2f be f3 f7 9b af 2d c6 a9 87 1e 0c 80 c6 2f 1f 7e f2 e5 c2 77 d7 7f 8c c5 97 de 8d e5 f3 9f 39 0c b0 c7 42 f3 58 3e ff 79 3c 73 66 39 be bd 76 db 85 80 1d 0b bb cf 60 4d 00 bb 2d 1c 74 0d 6b 02 88 71 81 08 6b 02 aa 17 87 05 a2 61 4d 40 bd 8e 0c 44 58 13 50 ad 89 02 d1 b0 26 a0 2e 53 05 22 ac 09 a8 ca d4 81 68 58 Data Ascii: PNGIHDRU/pHYsqqIDATx;heS'NvEbt8f..4PZbX&\|W/9\l/-/~w9BX>y<sf9v`M-tkqkaM@DXP&.S"hX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	49855	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	668	OUT	GET /media/fjef03g0/taiwan-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "1b87f0904064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:47 GMT Content-Length: 2643
2024-01-15 14:02:18 UTC	1262	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0a 05 49 44 41 54 78 9c ed dd 5d 8c 94 57 1d c7 f1 7f 61 a3 74 eb 2e 26 e0 4b ed ae a6 da f2 b2 f8 42 a2 a1 5d 13 a3 09 58 7a 81 49 db 04 d2 9b ca 26 25 6a 13 49 2c de b4 35 95 ae b1 95 1b e1 a2 6a a2 d2 06 68 4c 53 48 aa a6 c4 48 0b b1 4d 13 97 52 8d d4 04 50 12 d3 8b 5d b8 02 2e a0 01 6b 68 d6 fc 0e 73 86 67 9f 7d fe bb 33 cb cc ec 79 e6 f9 7e 12 b2 cc c0 ce 33 0c 39 bf 3d e7 ff 9c 97 9b 06 96 7d 67 d2 d0 15 76 5c 38 65 5f f8 df 45 fe 33 d1 2a a3 0b f8 28 01 78 08 08 00 2e 02 02 80 8b 80 00 e0 22 20 00 b8 08 08 00 2e 02 02 80 8b 80 00 e0 aa 44 40 6c 7c e0 ab 09 bc 0b a0 7c 2a 11 10 5b 36 Data Ascii: PNGIHDRU/pHYsqqIDATx]Wat.&KB]XzI&%jI,5jhLSHHMRP].khsg}3y~39=}gv\8e_E3(x." .D@l\|\|[6
2024-01-15 14:02:18 UTC	1381	IN	Data Raw: 6d 91 7d 2f 13 13 e7 c2 f5 35 9d 3b 4e e9 d6 b0 47 0b bb 62 68 b0 44 1c dd a6 e3 01 d1 48 20 a4 68 bc a0 f1 eb bd 6b d9 79 5c 7a 4e 60 a0 db cc 6b 0d 62 71 5f 6f 57 7d 9c dd f6 ef 01 3a de 83 d0 4f 55 ad 61 d0 af 6d b5 e9 cd 71 f9 74 7e a5 64 4a 74 07 a5 88 66 76 6a 11 59 dc 63 02 e8 26 f3 5e 83 50 a3 8a 0d 4b 8d 30 0e 3d b2 ab 28 fb 6b 77 2e d4 75 ef 64 88 64 f7 be 8c 05 d2 38 8c 38 54 db b7 62 a6 3d 2b 80 b2 4b ea 2e 86 1a 5b fc 69 ac a5 d7 71 1f 86 45 8b 3e 14 fe bc a8 0e d0 4e 27 4f 4d d4 5f fd e0 9f fe 66 a3 cf ec a7 97 80 4a 49 7a 26 a5 86 23 71 fd 85 c5 bd 22 9d fd 22 da 21 bb b5 dd be 17 df e8 d8 75 81 54 94 62 26 a5 66 34 6a 82 94 7a 18 53 36 9d 6d b3 fd b5 75 20 77 de 71 6b c7 ae 09 a4 24 f9 80 88 bb 4c 6d ba ff da b4 e7 dd 7b 0e 77 e4 ba 5a 9c Data Ascii: m}/5;NGbhDH hky\zN`kbq_oW}:OUamqt~dJtfvjYc&^PK0=(kw.udd88Tb=+K.[iqE>N'OM_fJIz&#q""!uTb&f4jzS6mu wqk$Lm{wZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	49857	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	432	OUT	GET /media/xmkhy0e1/cyprus-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "c68ddb5f4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:41:35 GMT Content-Length: 3868
2024-01-15 14:02:18 UTC	3868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0e ce 49 44 41 54 78 9c ed 9d 7d 6c 95 d5 1d c7 8f 8e 20 b4 54 c5 0e 45 ed 0c ec 0f 2d ce 44 48 04 64 d9 1f 52 83 9b 4a c2 36 9c 8b 64 86 c9 3f 53 a3 92 69 1c cb c0 25 0c c8 c6 de 0c d3 29 24 4b 19 d1 cc 0c 75 93 04 5d 26 b1 b8 2c 19 43 97 28 89 42 35 d9 60 b1 02 03 a1 4a ad 20 82 5d be e7 de 73 3d f7 b9 f7 b4 b7 e5 b9 f7 79 e9 e7 93 34 17 ee eb 79 6e 7b be e7 f7 76 7e e7 ac 81 81 81 01 03 00 50 c9 ca b3 f9 52 00 20 04 02 01 00 41 10 08 00 08 82 40 00 40 10 04 02 00 82 20 10 00 10 04 81 00 80 20 08 04 00 04 41 20 00 20 08 02 01 00 41 10 08 00 08 82 40 00 40 10 04 02 00 82 20 10 00 10 04 81 Data Ascii: PNGIHDRU/pHYsqqIDATx}l TE-DHdRJ6d?Si%)$Ku]&,C(B5`J ]s=y4yn{v~PR A@@ A A@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	49860	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	383	OUT	GET /settings/G_xgCaSxD/latest/languages.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:18 UTC	1130	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPp8he1Ft3qhRcspE2Tc8c4xKD6dIldS1-9zKrtTRRDGm4NE_xEPjjxaZjOuPl3UaR9DbJ4 x-goog-generation: 1703173496129721 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 65 x-goog-hash: crc32c=3fMg5g== x-goog-hash: md5=WlZNATPXiHoeHztXImfOSQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Date: Mon, 15 Jan 2024 14:02:17 GMT Expires: Mon, 15 Jan 2024 14:03:17 GMT Cache-Control: public, max-age=1800, s-maxage=60 Last-Modified: Thu, 21 Dec 2023 15:44:56 GMT ETag: W/"5a564d0133d7887a1e1f3b572267ce49" Content-Type: application/json Vary: Accept-Encoding Content-Length: 66 Age: 1 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:18 UTC	66	IN	Data Raw: 7b 22 6c 61 6e 67 75 61 67 65 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 22 69 74 22 2c 22 65 6e 22 5d 2c 22 65 64 69 74 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 3a 5b 22 69 74 22 2c 22 65 6e 22 5d 7d Data Ascii: {"languagesAvailable":["it","en"],"editableLanguages":["it","en"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	49856	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:17 UTC	674	OUT	GET /media/2sdnb5pz/flag_of_vietnam-svg.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:17 GMT Accept-Ranges: bytes ETag: "c1aa34f48c4d91:0" Connection: close Last-Modified: Tue, 01 Aug 2023 07:18:02 GMT Content-Length: 5837
2024-01-15 14:02:18 UTC	5643	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 02 ab 08 03 00 00 00 58 c8 0f a6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 03 00 50 4c 54 45 da 25 1d db 2b 1c e5 65 14 e5 64 15 f1 ac 0b f1 ab 0b db 28 1d fc ee 02 fc ef 02 e4 60 15 ff ff 00 e4 5f 15 f0 a7 0c f0 a6 0c da 27 1d fb ea 03 fc eb 03 da 28 1d e3 5b 16 e3 5a 16 ef a2 0c ef a1 0d da 26 1d fb e6 03 fb e8 03 e2 56 17 e2 55 17 ee 9d 0d ee 9c 0d fa e2 04 fa e4 04 e1 50 17 e1 4f 17 ed 97 0e ed 96 0e f9 dd 05 f9 df 04 e0 4b 18 e0 4a 18 ec 92 0f ec 91 0f f8 d9 05 f8 d8 05 df 45 19 e0 46 19 ec 8c 0f eb 8c 0f f8 d3 06 f7 d3 06 df 40 19 ff fe 00 df Data Ascii: PNGIHDRXgAMAa cHRMz&u0`:pQ<PLTE%+ed(`_'([Z&VUPOKJEF@
2024-01-15 14:02:18 UTC	194	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 48 ff 01 08 be b0 46 be c8 cb ea 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 32 33 2d 30 34 2d 31 39 54 32 32 3a 35 33 3a 31 37 2b 30 30 3a 30 30 94 0e 5b 7a 00 00 00 25 74 45 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 32 30 32 33 2d 30 34 2d 31 39 54 32 32 3a 35 33 3a 31 37 2b 30 30 3a 30 30 e5 53 e3 c6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: HF%tEXtdate:create2023-04-19T22:53:17+00:00[z%tEXtdate:modify2023-04-19T22:53:17+00:00SIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	49859	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	670	OUT	GET /media/dk2nyoft/hongkong-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "f1427d6f4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:34:51 GMT Content-Length: 4456
2024-01-15 14:02:18 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 11 1a 49 44 41 54 78 9c ed 9d 7b 8c 1d 55 1d c7 4f bb ed 2e ad dd b6 50 e8 22 ed 0a a4 4d 0a 8b 1a 4b 90 b6 fc 21 68 80 6a 22 fe 41 6d 8d 54 12 1e 8d c1 98 94 00 11 83 42 68 63 09 11 05 02 31 82 a1 a5 35 8a c6 56 48 a4 a2 16 fc 83 f2 07 2d a2 62 84 6e 83 16 28 dd 2d a1 2f 8a 2d 94 6e 79 d4 7c cf dd b3 cc ce ce 99 c7 dd fb 98 b9 f3 f9 24 37 5d d6 7b ef cc 8e 39 df f3 7b 9f 31 cf 77 cf 3a 6e 00 00 46 b2 72 2c 0f 05 00 7c 20 10 00 e0 05 81 00 00 2f 08 04 00 78 41 20 00 c0 0b 02 01 00 5e 10 08 00 f0 82 40 00 80 17 04 02 00 bc 20 10 00 e0 05 81 00 00 2f 08 04 00 78 41 20 00 c0 0b 02 01 00 5e 10 Data Ascii: PNGIHDRU/pHYsqqIDATx{UO.P"MK!hj"AmTBhc15VH-bn(-/-ny\|$7]{9{1w:nFr,\| /xA ^@ /xA ^
2024-01-15 14:02:18 UTC	1734	IN	Data Raw: c2 eb b7 dc 66 b3 24 8a 71 04 33 16 8a 39 e8 3d 7a bf ae 13 15 fb 80 42 41 0c 22 4f b8 b8 42 b5 93 9b 6c 8b f7 e0 a0 16 99 ee c1 f9 0c 66 b0 88 aa 92 19 99 6f a6 5e 7a 89 34 c4 bc b2 ec 3b 43 ae 81 dc 80 81 5d fd e6 c4 4b 2f 36 7b d6 fe 72 d8 67 83 56 8e 1b fc a2 6b cc 5a fd 40 64 3f 84 e2 15 7a 0f f5 09 85 06 17 23 6f 68 01 77 df 7e 5b dd a7 46 bb c9 4f 41 ec 74 ed 2d 5b cd 27 ce 9d 6b 6b 24 c2 71 01 55 78 06 e7 43 38 01 d0 ef 7d 29 d5 a8 eb 40 61 c0 c5 c8 1b 4a 13 ca ac d7 ee 3c f1 d3 3d 35 1f af a6 38 c1 7f 96 2c b5 65 db 61 54 b1 a9 c2 a9 f1 27 9d 64 da a7 9f 32 c2 02 19 e8 df 3d 2c 35 ab 81 31 72 69 de fc f9 2f ec ef a3 0a a4 6c 06 a4 7b 26 96 44 31 a1 50 2a af 28 9d a9 01 2d 9a 15 39 da e6 28 99 fb 4a 23 aa 75 5c 85 4c 51 d9 06 b9 09 1a 10 33 6e 50 Data Ascii: f$q39=zBA"OBlfo^z4;C]K/6{rgVkZ@d?z#ohw~[FOAt-['kk$qUxC8})@aJ<=58,eaT'd2=,51ri/l{&D1P*(-9(J#u\LQ3nP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	49863	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	612	OUT	GET /settings/G_xgCaSxD/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:18 UTC	1139	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPoslTBEfZcSD0PCtWJh25KA2CXQgDvIfYn41o04kPyjjSxeEn9eV7p_8PbxnCVf4cn52sDgWOjs_A Date: Mon, 15 Jan 2024 14:02:18 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 15 Jan 2024 14:03:18 GMT Last-Modified: Thu, 21 Dec 2023 15:44:56 GMT ETag: W/"02a9b53992a513c8d11842a320631e65" Vary: Accept-Encoding x-goog-generation: 1703173496139484 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 6996 Content-Type: application/json x-goog-hash: crc32c=bbgVDA== x-goog-hash: md5=Aqm1OZKlE8jRGEKjIGMeZQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, Warning, X-GUploader-Response-Body-Transformations, X-GUploader-UploadID, X-Google-Trace X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:18 UTC	113	IN	Data Raw: 39 64 33 0d 0a 7b 22 73 65 74 74 69 6e 67 73 49 64 22 3a 22 47 5f 78 67 43 61 53 78 44 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 2e 34 39 22 2c 22 69 73 4c 61 74 65 73 74 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 44 69 73 70 6c 61 79 4c 6f 63 61 74 69 6f 6e 22 3a 22 62 6c 22 2c 22 6d 6f 72 65 49 6e 66 6f 42 75 74 74 6f 6e 55 72 6c Data Ascii: 9d3{"settingsId":"G_xgCaSxD","version":"4.2.49","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 22 3a 22 22 2c 22 61 63 74 69 6f 6e 43 6c 69 63 6b 4f 6e 56 69 65 77 43 6f 6e 73 65 6e 74 49 6e 53 65 61 72 63 68 41 70 70 22 3a 22 22 2c 22 6c 61 79 6f 75 74 22 3a 31 2c 22 70 72 69 76 61 63 79 4d 6f 64 61 6c 22 3a 31 2c 22 75 72 6c 43 6f 6e 73 65 6e 74 49 6e 66 6f 22 3a 22 22 2c 22 73 74 79 6c 65 73 43 73 73 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 43 6c 6f 73 65 49 63 6f 6e 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 55 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 69 6d 67 2e 75 73 65 72 63 65 6e 74 72 69 63 73 2e 65 75 2f 6d 69 73 63 2f 69 63 6f 6e 2d 73 65 63 75 72 69 74 79 2e 73 76 67 22 2c 22 62 61 6e 6e 65 72 4d 6f 62 69 6c Data Ascii: ":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","buttonPrivacyCloseIcon":"","buttonPrivacyOpenIconUrl":"http://img.usercentrics.eu/misc/icon-security.svg","bannerMobil
2024-01-15 14:02:18 UTC	1157	IN	Data Raw: 47 65 74 54 72 61 63 6b 69 6e 67 45 76 65 6e 74 73 22 3a 5b 5d 2c 22 64 61 74 61 53 63 6f 70 65 73 22 3a 5b 22 64 61 74 61 4c 61 79 65 72 22 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 64 6f 77 6e 46 6f 72 53 68 6f 77 69 6e 67 50 72 69 6d 61 72 79 56 69 65 77 41 67 61 69 6e 22 3a 30 2c 22 62 61 6e 6e 65 72 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 63 6f 72 6e 65 72 4d 6f 64 61 6c 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 6c 61 6e 67 75 61 67 65 53 65 6c 65 63 74 6f 72 54 79 70 65 22 3a 32 2c 22 63 6f 6e 73 65 6e 74 49 6e 66 6f 41 63 74 69 6f 6e 53 65 6c 65 63 74 69 6f 6e 22 3a 31 2c 22 62 74 6e 4d 6f 72 65 49 6e 66 6f 41 63 74 69 6f 6e 53 65 6c 65 63 74 69 6f 6e 22 3a 31 2c 22 75 73 65 4f 76 65 72 6c 61 79 22 3a 66 61 6c 73 65 Data Ascii: GetTrackingEvents":[],"dataScopes":["dataLayer"],"language":"en","countdownForShowingPrimaryViewAgain":0,"bannerPlacement":1,"cornerModalPlacement":1,"languageSelectorType":2,"consentInfoActionSelection":1,"btnMoreInfoActionSelection":1,"useOverlay":false
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 34 63 37 32 0d 0a 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 5c 22 2e 3c 62 72 3e 3c 2f 73 70 61 6e 3e 3c 62 72 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 20 59 6f 75 20 63 61 6e 20 61 6c 77 61 79 73 20 63 68 61 6e 67 65 20 2f 20 77 69 74 68 64 72 61 77 20 79 6f 75 72 20 63 6f 6e 73 65 6e 74 20 6c 61 74 65 72 20 62 79 20 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 74 68 65 20 73 65 74 74 69 6e 67 73 20 62 75 74 74 6f 6e 20 69 6e 20 74 68 65 20 6c 6f 77 65 72 20 72 69 67 68 74 20 63 6f 72 6e 65 72 20 6f 66 20 74 68 65 20 70 61 67 65 2e 3c 2f 64 69 76 3e 22 2c 22 74 63 66 32 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 3a 31 2c 22 70 6f 77 65 72 65 64 42 79 45 6e 75 6d 22 3a 22 55 53 45 52 43 45 4e 54 52 49 43 Data Ascii: 4c72e information\".<br></span><br></div><div> You can always change / withdraw your consent later by clicking on the settings button in the lower right corner of the page.</div>","tcf2Enabled":false,"firstUserInteraction":1,"poweredByEnum":"USERCENTRIC
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 6e 74 73 22 3a 5b 5d 2c 22 6c 65 67 61 6c 42 61 73 69 73 4c 69 73 74 22 3a 5b 5d 2c 22 64 69 73 61 62 6c 65 4c 65 67 61 6c 42 61 73 69 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 73 54 68 69 72 64 43 6f 75 6e 74 72 79 22 3a 66 61 6c 73 65 2c 22 5f 6d 65 74 61 22 3a 7b 22 6e 61 6d 65 22 3a 22 55 73 65 72 63 65 6e 74 72 69 63 73 20 43 6f 6e 73 65 6e 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 22 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 6b 6f 63 45 6f 64 6a 62 37 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 32 2e 31 31 2e 34 31 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 Data Ascii: nts":[],"legalBasisList":[],"disableLegalBasis":false,"usesThirdCountry":false,"_meta":{"name":"Usercentrics Consent Management Platform"}},{"type":"predefined","templateId":"HkocEodjb7","version":"52.11.41","categorySlug":"functional","description":"","i
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 3a 22 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 61 72 65 20 75 73 65 64 20 62 79 20 61 64 76 65 72 74 69 73 65 72 73 20 74 6f 20 73 65 72 76 65 20 61 64 73 20 74 68 61 74 20 61 72 65 20 72 65 6c 65 76 61 6e 74 20 74 6f 20 79 6f 75 72 20 69 6e 74 65 72 65 73 74 73 2e 22 2c 22 69 73 45 73 73 65 6e 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 65 6e 61 62 6c 65 20 75 73 20 74 6f 20 61 6e 61 6c 79 73 65 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 77 Data Ascii: :"These technologies are used by advertisers to serve ads that are relevant to your interests.","isEssential":false,"isHidden":false},{"categorySlug":"functional","label":"Functional","description":"These technologies enable us to analyse the use of the w
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 6f 72 20 72 65 66 65 72 20 74 6f 20 6f 75 72 20 70 72 69 76 61 63 79 20 70 6f 6c 69 63 79 2e 22 2c 22 61 70 70 46 69 72 73 74 4c 61 79 65 72 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 65 20 61 6e 64 20 6f 75 72 20 70 61 72 74 6e 65 72 73 20 61 72 65 20 75 73 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 6c 69 6b 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 70 72 6f 63 65 73 73 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 69 6d 70 72 6f 76 65 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 73 61 6c 65 20 6f 66 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 79 6f 75 20 6d 61 79 20 65 78 65 72 63 69 73 65 20 79 6f 75 72 20 63 6f 6e 73 75 6d 65 72 Data Ascii: or refer to our privacy policy.","appFirstLayerDescription":"We and our partners are using technologies like cookies and process personal data in order to improve your experience. In case of sale of your personal information you may exercise your consumer
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 63 68 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 61 79 20 62 65 20 75 73 65 64 20 61 6e 64 20 77 68 69 63 68 20 44 61 74 61 20 50 72 6f 63 65 73 73 69 6e 67 20 53 65 72 76 69 63 65 73 20 6d 61 79 20 68 61 76 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 56 61 72 69 61 6e 74 22 3a 22 43 45 4e 54 45 52 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 53 69 64 65 22 3a 22 4c 45 46 54 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 48 69 64 65 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 22 3a 66 61 6c 73 65 2c 22 62 74 6e 53 61 76 65 22 3a 22 4f 4b 22 2c 22 62 74 6e 4d 6f 72 65 49 6e 66 6f 22 3a 22 4d 6f 72 65 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 6f 70 74 4f 75 74 4e 6f 74 69 63 65 4c Data Ascii: ch information may be used and which Data Processing Services may have access to this information.","secondLayerVariant":"CENTER","secondLayerSide":"LEFT","secondLayerHideLanguageSwitch":false,"btnSave":"OK","btnMoreInfo":"More Information","optOutNoticeL
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 64 6f 72 73 20 69 6d 70 6c 65 6d 65 6e 74 65 64 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 2e 20 59 6f 75 20 63 61 6e 20 61 64 6a 75 73 74 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 73 65 74 74 69 6e 67 73 20 62 61 73 65 64 20 6f 6e 20 73 70 65 63 69 66 69 63 20 70 75 72 70 6f 73 65 73 20 61 6e 64 2f 6f 72 20 61 74 20 61 20 76 65 6e 64 6f 72 20 6c 65 76 65 6c 20 61 74 20 61 6e 79 20 74 69 6d 65 2e 22 2c 22 73 65 63 6f 6e 64 4c 61 79 65 72 48 69 64 65 54 6f 67 67 6c 65 73 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4c 65 67 69 74 69 6d 61 74 65 49 6e 74 65 72 65 73 74 54 6f 67 67 6c 65 73 22 3a 66 61 6c 73 65 2c 22 6c 61 62 65 6c 73 50 75 72 70 6f 73 65 73 22 3a 22 50 75 72 70 6f 73 65 73 22 2c 22 6c 61 62 65 6c 73 46 65 61 74 75 72 65 73 22 3a 22 46 65 61 Data Ascii: dors implemented on this website. You can adjust your privacy settings based on specific purposes and/or at a vendor level at any time.","secondLayerHideToggles":false,"hideLegitimateInterestToggles":false,"labelsPurposes":"Purposes","labelsFeatures":"Fea
2024-01-15 14:02:18 UTC	1252	IN	Data Raw: 74 72 75 65 2c 22 63 6d 70 49 64 22 3a 6e 75 6c 6c 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 73 65 6e 73 75 44 6f 6d 61 69 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 73 65 6e 73 75 53 63 72 69 70 74 50 61 74 68 22 3a 6e 75 6c 6c 2c 22 73 65 6c 65 63 74 65 64 53 74 61 63 6b 73 22 3a 5b 5d 2c 22 73 63 6f 70 65 22 3a 22 53 45 52 56 49 43 45 22 2c 22 61 70 70 4c 61 79 65 72 4e 6f 74 65 52 65 73 75 72 66 61 63 65 22 3a 22 59 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 73 65 74 74 69 6e 67 73 20 6f 72 20 77 69 74 68 64 72 61 77 20 79 6f 75 72 20 63 6f 6e 73 65 6e 74 20 61 74 20 61 6e 79 20 74 69 6d 65 20 62 79 20 6f 70 65 6e 69 6e 67 20 74 68 65 20 6d 65 6e 75 20 70 6f 69 6e 74 20 50 72 69 76 61 63 79 20 Data Ascii: true,"cmpId":null,"cmpVersion":null,"consensuDomain":null,"consensuScriptPath":null,"selectedStacks":[],"scope":"SERVICE","appLayerNoteResurface":"You can change your privacy settings or withdraw your consent at any time by opening the menu point Privacy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	49861	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	434	OUT	GET /media/14xjznio/slovakia-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "cc60f31b4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:32:31 GMT Content-Length: 3156
2024-01-15 14:02:18 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0c 06 49 44 41 54 78 9c ed dd 0d 6c d4 f5 1d c7 f1 2f 50 1e 8a ad 14 3a 50 3a 50 7c 2a 88 c2 70 25 ba b0 4c f0 21 9b 9b c3 81 4b 06 c3 6d 38 27 d6 e9 16 51 71 2e 6a 0c 18 89 c6 07 c0 b8 45 86 71 42 1c 90 cd f1 20 ba c5 44 86 65 89 03 19 38 60 71 83 92 55 b1 58 06 04 5a 6c 15 1d 60 97 ef af f7 bb 5c cb fd 8e bb de c3 ff f7 ff df fb 95 5c ae 4f 77 ff df 41 7e 9f fb 3d 5f 8f f6 f6 f6 76 01 80 53 cd eb c9 3f 0a 00 17 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 Data Ascii: PNGIHDRU/pHYsqqIDATxl/P:P:P\|*p%L!Km8'Qq.jEqB De8`qUXZl`\\OwA~=_vS?D@p" 8N'D@p" 8N
2024-01-15 14:02:18 UTC	434	IN	Data Raw: 75 5b e5 ad 11 df 8a cf 70 68 97 e3 a9 57 6e 93 e7 6e 1f 2e 95 27 33 3f 24 56 5b 0d 77 d4 88 ac dd 7c 67 3c 1c b4 4b b1 6d d2 ad 84 03 22 29 d2 2d 88 44 7a 82 b4 9e 23 61 5b 13 ba e4 79 51 ed 72 59 b5 5b d2 ea 76 5c 5d 71 54 1e 7b 71 ba 09 19 a5 a1 b3 67 f6 93 04 03 22 4b 5b 10 45 13 10 12 3b 8d 4a 0f 6c 49 fc 28 bf 86 bf 37 c8 13 0f bc 2e 1b 5a 06 24 7d 8c 76 27 7e 3e 6b 8c 5c f3 93 2b cd f7 9f ee dd 2f 0d 73 17 cb fe a5 eb 0a 56 6e 20 08 45 17 10 96 8e 4d e8 09 d9 89 c7 e8 6b 50 dc 7b df 5f e4 dd 8f fb 9b ef b5 0b 72 ff 2d d5 32 e5 67 1d 61 a2 83 90 1a 0c 8d 8b 96 07 59 74 a0 60 8a 36 20 2c 3d 59 5a bb 1d 7a ca b4 a5 41 51 b7 ea 1f 72 cb e3 df 8d ff ec d0 2b 75 66 10 52 d7 5a 00 c5 a2 e8 03 c2 4a 16 14 12 eb 4e 98 65 dc 75 5b 83 2c 1e 10 08 02 a2 0b 1b Data Ascii: u[phWnn.'3?$V[w\|g<Km")-Dz#a[yQrY[v\]qT{qg"K[E;JlI(7.Z$}v'~>k\+/sVn EMkP{_r-2gaYt`6 ,=YZzAQr+ufRZJNeu[,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	49862	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	433	OUT	GET /media/3sidauet/romania-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:18 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "6e1664324064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:09 GMT Content-Length: 622
2024-01-15 14:02:18 UTC	622	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 20 49 44 41 54 78 9c ed d4 b1 49 44 51 14 45 d1 3b 62 f0 8b 10 34 b6 0b 23 23 3b 10 2c 44 0c 2c 51 2c 40 87 c9 4c 4c 7f a6 15 ec 48 1e c8 b0 56 07 e7 04 fb 70 75 fb f2 33 2c f1 fc f4 7e 7c bc ff b8 f6 ee 1a 6f 0f 87 e3 7e 1a ff ae 73 77 71 ae cb 80 bf 13 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 Data Ascii: PNGIHDRU/pHYsqq IDATxIDQE;b4##;,D,Q,@LLHVpu3,~\|o~swq H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	49864	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	667	OUT	GET /media/0o2jaanu/india-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "a629ec74064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:31:58 GMT Content-Length: 3685
2024-01-15 14:02:19 UTC	2723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0e 17 49 44 41 54 78 9c ed 9d 5d 8c 5d 55 15 80 77 b5 60 05 a4 c5 08 b4 46 cb 90 60 03 94 e2 14 88 29 25 91 19 8d 49 6b 62 9c 1a 0d 10 4d da 3e 80 92 88 b4 09 68 8c 54 4a 4a e4 01 63 8b c4 10 30 b1 c5 97 d2 17 5b 7d e0 27 44 db 3e 50 78 50 3a 2a a4 8d 9a b4 16 a4 18 a2 9d 69 22 90 a0 8e f9 f6 3d 6b d8 73 66 76 5b df 38 77 be 2f 99 74 e6 de 73 cf 99 b9 cd fa ee da 6b af bd cf 9c b1 9f 7c 7a 22 89 88 b4 38 7b d9 97 36 be cf 37 45 44 6a 28 08 11 a9 a2 20 44 a4 8a 82 10 91 2a 0a 42 44 aa 28 08 11 a9 a2 20 44 a4 8a 82 10 91 2a 0a 42 44 aa 28 08 11 a9 a2 20 44 a4 8a 82 10 91 2a 0a 42 44 aa 28 08 Data Ascii: PNGIHDRU/pHYsqqIDATx]]Uw`F`)%IkbM>hTJJc0[}'D>PxP:i"=ksfv[8w/tsk\|z"8{67EDj( DBD( DBD( DBD(
2024-01-15 14:02:19 UTC	962	IN	Data Raw: 91 4d f0 1a 86 17 b1 6d 1c 81 4e e1 b2 7d 9b bd d8 7f 82 2c 84 bd 22 38 57 39 b5 ea f0 a2 c3 4c 48 27 19 3b f1 d6 c4 65 f3 7f 30 71 51 fa 7e fe f7 d8 91 13 33 fe 19 77 ac fd 45 fe 0a 9e db 7b 24 bf e6 8f 07 8f e7 47 78 ed ce ed 2f e6 ef 79 fc d1 ad 07 f2 b9 f8 9e 63 b9 ce 35 97 fc 68 e2 7b 77 3e 39 79 8e 27 77 1f 9a 18 b9 f1 67 f9 b9 99 e0 39 5e 1f e7 90 ce 32 64 06 d1 51 a8 15 44 1f 04 c3 00 36 97 6d d7 22 e2 be 15 e5 06 b3 64 0f 64 05 b1 c6 82 d7 96 35 8d 58 90 c5 ac 47 b4 63 d3 0b c1 14 67 64 19 64 18 33 dd 77 83 f3 f1 7b c4 7e 99 66 0f dd 47 41 74 18 86 08 b1 ad 1b 33 0e 34 33 45 ea 4f 3d 20 6e 6a 13 30 9c a0 67 22 86 20 51 88 9c a9 0b b2 b7 0d dd bb b5 86 5e c1 f2 dd 19 8b b8 39 4f dc 9b 03 79 30 ab 11 5d 96 d4 48 da 3b 5f 4b f7 50 10 1d 87 20 2c 0b Data Ascii: MmN},"8W9LH';e0qQ~3wE{$Gx/yc5h{w>9y'wg9^2dQD6m"dd5XGcgdd3w{~fGAt343EO= nj0g" Q^9Oy0]H;_KP ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	49865	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	682	OUT	GET /media/mg0lezrl/united-arab-emirates-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "85df2434164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:38:59 GMT Content-Length: 651
2024-01-15 14:02:19 UTC	651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 3d 49 44 41 54 78 9c ed d7 21 4a 44 51 18 86 e1 eb 30 e0 58 ac 03 23 06 9b d1 8d b8 11 b1 b8 04 71 03 16 31 18 dd 86 d1 65 d8 26 19 6d b7 88 6e c0 37 9c 69 17 9f 67 05 1f ff 81 17 ce d1 db 74 f5 33 31 e4 e1 65 ef 60 fc 07 f7 2b cf 0c 14 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 Data Ascii: PNGIHDRU/pHYsqq=IDATx!JDQ0X#q1e&mn7igt31e`+@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	49867	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	668	OUT	GET /media/lcabmwzn/turkey-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "8dae6f34064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:38:32 GMT Content-Length: 2895
2024-01-15 14:02:19 UTC	2723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0b 01 49 44 41 54 78 9c ed dd 6f 6c d5 57 1d c7 f1 53 0a 8c ae d0 ae d0 06 28 22 25 64 50 16 e3 3a 8d b0 a8 c9 3a 19 46 e7 83 b5 26 62 7c b0 82 59 c2 0c b2 80 26 1a c1 38 db 64 91 c5 44 e9 1c 3e 59 62 2c 2c 2e 99 0f 46 8d ff 9e 8c 58 1e b2 25 a6 8b 8b 25 2c 48 19 83 81 d6 31 3a b0 50 c6 6a 3e 87 5e bc 42 4f 7b db 7b 6e ef 39 e7 f7 7e 25 04 c2 9f db df 2d f4 c3 39 df 73 ce f7 54 f4 9b 75 63 06 00 ee d4 35 87 4f 0a 00 17 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e Data Ascii: PNGIHDRU/pHYsqqIDATxolWS("%dP::F&b\|Y&8dD>Yb,,.FX%%,H1:Pj>^BO{{n9~%-9sTuc5OD@p" 8N'D@p" 8N
2024-01-15 14:02:19 UTC	172	IN	Data Raw: 10 00 9c d2 5e e6 04 50 1c 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 98 98 31 e6 bf b8 38 e6 54 7e 28 5c e0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ^PD@p" 8N'D@p" 8N'D@p" 8N'D@p" 8N'D@18T~(\IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	49866	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	668	OUT	GET /media/a5tl02k4/jordan-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "301d66464064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:42 GMT Content-Length: 1696
2024-01-15 14:02:19 UTC	1696	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 06 52 49 44 41 54 78 9c ed dd 4d a8 a5 63 00 c0 f1 67 34 34 ea 4e c6 c2 62 a6 86 19 6a 94 32 26 94 85 1a 63 4b 3e d6 2c 50 8a 1d 8a 2d c3 5a 58 12 8b a1 2c 2c 7c c7 02 45 69 76 68 48 8a 05 23 65 d4 88 99 5c cd 24 83 9e 6b 9e eb ce bd ce dc f3 f1 9e f7 7d 3e 7e bf ba 9d 73 ef 74 ea bd a7 73 fe f3 7c bc ef b9 1b de 0c 57 fe fd 6a 38 1a 5e 0b 47 c3 62 38 15 00 92 0d 1f 84 3d 7f c7 fb bf 87 53 41 28 80 95 96 03 91 08 05 90 ac 09 44 22 14 c0 c8 40 24 42 01 ed 5a 37 10 89 50 40 7b c6 0e 44 22 14 d0 8e 89 03 91 08 05 d4 6f ea 40 24 42 01 f5 9a 39 10 89 50 40 7d 3a 0b 44 22 14 50 8f ce 03 91 08 05 Data Ascii: PNGIHDRU/pHYsqqRIDATxMcg44Nbj2&cK>,P-ZX,,\|EivhH#e\$k}>~sts\|Wj8^Gb8=SA(D"@$BZ7P@{D"o@$B9P@}:D"P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	49869	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	434	OUT	GET /media/pa5oke0n/bulgaria-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "643941e4164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:39:44 GMT Content-Length: 621
2024-01-15 14:02:19 UTC	621	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 1f 49 44 41 54 78 9c ed d7 ab 4d 44 51 00 45 51 3e d7 f0 33 13 2c 04 31 8e 84 04 33 96 50 00 0d 21 69 69 1a 40 52 00 09 9a e0 78 50 c3 c3 73 b3 3b 58 ab 84 23 76 72 0e d7 75 5d 0f 00 66 8f 47 46 01 8a 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 Data Ascii: PNGIHDRU/pHYsqqIDATxMDQEQ>3,13P!ii@RxPs;X#vru]fGF@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	49870	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	432	OUT	GET /media/yemlaspa/poland-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "21bace634164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:41:41 GMT Content-Length: 585
2024-01-15 14:02:19 UTC	585	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 01 fb 49 44 41 54 78 9c ed d7 c1 09 c2 50 00 44 c1 28 11 ec 42 2f 62 39 d6 64 9f 01 91 34 21 b9 7c ef d1 d7 c1 4c 09 7b 78 b0 87 31 c6 98 00 7e 3d 8f 46 01 8a 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 Data Ascii: PNGIHDRU/pHYsqqIDATxPD(B/b9d4!\|L{x1~=F@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	49868	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	432	OUT	GET /media/fjef03g0/taiwan-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "1b87f0904064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:47 GMT Content-Length: 2643
2024-01-15 14:02:19 UTC	2643	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0a 05 49 44 41 54 78 9c ed dd 5d 8c 94 57 1d c7 f1 7f 61 a3 74 eb 2e 26 e0 4b ed ae a6 da f2 b2 f8 42 a2 a1 5d 13 a3 09 58 7a 81 49 db 04 d2 9b ca 26 25 6a 13 49 2c de b4 35 95 ae b1 95 1b e1 a2 6a a2 d2 06 68 4c 53 48 aa a6 c4 48 0b b1 4d 13 97 52 8d d4 04 50 12 d3 8b 5d b8 02 2e a0 01 6b 68 d6 fc 0e 73 86 67 9f 7d fe bb 33 cb cc ec 79 e6 f9 7e 12 b2 cc c0 ce 33 0c 39 bf 3d e7 ff 9c 97 9b 06 96 7d 67 d2 d0 15 76 5c 38 65 5f f8 df 45 fe 33 d1 2a a3 0b f8 28 01 78 08 08 00 2e 02 02 80 8b 80 00 e0 22 20 00 b8 08 08 00 2e 02 02 80 8b 80 00 e0 aa 44 40 6c 7c e0 ab 09 bc 0b a0 7c 2a 11 10 5b 36 Data Ascii: PNGIHDRU/pHYsqqIDATx]Wat.&KB]XzI&%jI,5jhLSHHMRP].khsg}3y~39=}gv\8e_E3(x." .D@l\|\|[6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	49871	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:18 UTC	438	OUT	GET /media/2sdnb5pz/flag_of_vietnam-svg.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "c1aa34f48c4d91:0" Connection: close Last-Modified: Tue, 01 Aug 2023 07:18:02 GMT Content-Length: 5837
2024-01-15 14:02:19 UTC	1263	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 02 ab 08 03 00 00 00 58 c8 0f a6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 03 00 50 4c 54 45 da 25 1d db 2b 1c e5 65 14 e5 64 15 f1 ac 0b f1 ab 0b db 28 1d fc ee 02 fc ef 02 e4 60 15 ff ff 00 e4 5f 15 f0 a7 0c f0 a6 0c da 27 1d fb ea 03 fc eb 03 da 28 1d e3 5b 16 e3 5a 16 ef a2 0c ef a1 0d da 26 1d fb e6 03 fb e8 03 e2 56 17 e2 55 17 ee 9d 0d ee 9c 0d fa e2 04 fa e4 04 e1 50 17 e1 4f 17 ed 97 0e ed 96 0e f9 dd 05 f9 df 04 e0 4b 18 e0 4a 18 ec 92 0f ec 91 0f f8 d9 05 f8 d8 05 df 45 19 e0 46 19 ec 8c 0f eb 8c 0f f8 d3 06 f7 d3 06 df 40 19 ff fe 00 df Data Ascii: PNGIHDRXgAMAa cHRMz&u0`:pQ<PLTE%+ed(`_'([Z&VUPOKJEF@
2024-01-15 14:02:19 UTC	4574	IN	Data Raw: 67 db e8 55 db a9 05 14 ce 9b d7 0c 80 ed d5 02 0a 67 87 35 03 60 47 b5 80 a2 d9 29 7a cd 10 d5 80 82 79 cb da 01 f0 56 d5 80 82 d9 79 ed 00 d8 45 35 a0 58 76 8d d6 f1 36 f5 80 42 79 fb ba 03 e0 1d ea 01 85 f2 ce 75 07 c0 6e ea 01 45 b2 7b e3 ba 03 20 da 43 45 a0 40 de b5 5e ff 47 ef 56 11 28 90 3d d7 1f 00 7b a9 08 14 c7 de 43 d7 1f 00 8d fb a8 09 14 c6 7b a2 76 de ab 26 50 18 fb b6 1f 00 ef 53 13 28 8a 61 c3 db 0f 80 a6 fd 54 05 0a 62 44 b4 81 f7 ab 0a 14 c4 fe 1b 0e 80 0f a8 0a 14 c3 c8 51 1b 0e 80 d1 07 a8 0b 14 c2 07 a3 32 3e a4 2e 50 08 07 96 1b 00 07 a9 0b 14 c1 98 b1 e5 06 c0 b8 f1 2a 03 05 70 70 54 d6 21 2a 03 05 70 68 f9 01 f0 61 95 81 fc 9b 70 58 f9 01 30 71 92 da 40 ee 1d 1e 75 e0 23 6a 03 b9 f7 d1 8e 06 c0 11 6a 03 79 d7 6b 72 47 03 60 ca 54 Data Ascii: gUg5`G)zyVyE5Xv6ByunE{ CE@^GV(={C{v&PS(aTbDQ2>.PppT!phapX0q@u#jjykrG`T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	49878	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	376	OUT	GET /settings/G_xgCaSxD/latest/en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:19 UTC	993	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPq6bjlm8y6-O63kSC8ZtaJKvZXGP1e1t18QDYT0NobcB4TL-cNq1OG77wcrlRCpi5yJRuA Date: Mon, 15 Jan 2024 14:02:19 GMT Cache-Control: public, max-age=1800, s-maxage=60 Expires: Mon, 15 Jan 2024 14:03:19 GMT Last-Modified: Thu, 21 Dec 2023 15:44:56 GMT ETag: W/"02a9b53992a513c8d11842a320631e65" Vary: Accept-Encoding x-goog-generation: 1703173496139484 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 6996 Content-Type: application/json x-goog-hash: crc32c=bbgVDA== x-goog-hash: md5=Aqm1OZKlE8jRGEKjIGMeZQ== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 61 36 34 0d 0a 7b 22 73 65 74 74 69 6e 67 73 49 64 22 3a 22 47 5f 78 67 43 61 53 78 44 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 2e 34 39 22 2c 22 69 73 4c 61 74 65 73 74 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 44 69 73 70 6c 61 79 4c 6f 63 61 74 69 6f 6e 22 3a 22 62 6c 22 2c 22 6d 6f 72 65 49 6e 66 6f 42 75 74 74 6f 6e 55 72 6c 22 3a 22 22 2c 22 61 63 74 69 6f 6e 43 6c 69 63 6b 4f 6e 56 69 65 77 43 6f 6e 73 65 6e 74 49 6e 53 65 61 72 63 68 41 70 70 22 3a 22 22 2c 22 6c 61 79 6f 75 74 22 3a 31 2c 22 70 72 69 76 61 63 79 4d 6f 64 61 6c 22 3a 31 2c 22 75 72 6c 43 6f 6e 73 65 6e 74 49 6e 66 6f 22 3a 22 22 2c 22 73 74 79 6c 65 73 43 73 73 22 3a 22 22 2c 22 62 75 74 74 6f 6e 50 72 69 76 61 63 79 4f 70 65 6e 49 63 6f 6e 22 3a 22 22 2c 22 62 75 74 74 6f Data Ascii: a64{"settingsId":"G_xgCaSxD","version":"4.2.49","isLatest":true,"buttonDisplayLocation":"bl","moreInfoButtonUrl":"","actionClickOnViewConsentInSearchApp":"","layout":1,"privacyModal":1,"urlConsentInfo":"","stylesCss":"","buttonPrivacyOpenIcon":"","butto
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 69 74 65 4c 69 73 74 54 61 72 67 65 74 44 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 77 68 69 74 65 4c 69 73 74 52 65 66 65 72 72 65 72 44 6f 6d 61 69 6e 73 22 3a 5b 5d 2c 22 73 68 6f 77 45 72 72 6f 72 4f 6e 55 6e 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 22 3a 66 61 6c 73 65 2c 22 74 72 61 63 6b 69 6e 67 50 72 6f 76 69 64 65 72 55 73 65 64 54 6f 47 65 74 54 72 61 63 6b 69 6e 67 45 76 65 6e 74 73 22 3a 5b 5d 2c 22 64 61 74 61 53 63 6f 70 65 73 22 3a 5b 22 64 61 74 61 4c 61 79 65 72 22 5d 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 63 6f 75 6e 74 64 6f 77 6e 46 6f 72 53 68 6f 77 69 6e 67 50 72 69 6d 61 72 79 56 69 65 77 41 67 61 69 6e 22 3a 30 2c 22 62 61 6e 6e 65 72 50 6c 61 63 65 6d 65 6e 74 22 3a 31 2c 22 63 6f 72 6e 65 72 4d 6f 64 61 6c 50 6c 61 63 65 Data Ascii: iteListTargetDomains":[],"whiteListReferrerDomains":[],"showErrorOnUnallowedDomain":false,"trackingProviderUsedToGetTrackingEvents":[],"dataScopes":["dataLayer"],"language":"en","countdownForShowingPrimaryViewAgain":0,"bannerPlacement":1,"cornerModalPlace
2024-01-15 14:02:19 UTC	163	IN	Data Raw: 20 63 6f 6f 6b 69 65 20 69 6e 20 5c 22 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 5c 22 2e 3c 62 72 3e 3c 2f 73 70 61 6e 3e 3c 62 72 3e 3c 2f 64 69 76 3e 3c 64 69 76 3e 20 59 6f 75 20 63 61 6e 20 61 6c 77 61 79 73 20 63 68 61 6e 67 65 20 2f 20 77 69 74 68 64 72 61 77 20 79 6f 75 72 20 63 6f 6e 73 65 6e 74 20 6c 61 74 65 72 20 62 79 20 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 74 68 65 20 73 65 74 74 69 6e 67 73 20 62 75 74 74 6f 6e 20 69 6e 20 74 68 65 20 6c 6f 77 65 72 20 72 69 0d 0a Data Ascii: cookie in \"More information\".<br></span><br></div><div> You can always change / withdraw your consent later by clicking on the settings button in the lower ri
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 31 30 30 30 0d 0a 67 68 74 20 63 6f 72 6e 65 72 20 6f 66 20 74 68 65 20 70 61 67 65 2e 3c 2f 64 69 76 3e 22 2c 22 74 63 66 32 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 22 3a 31 2c 22 70 6f 77 65 72 65 64 42 79 45 6e 75 6d 22 3a 22 55 53 45 52 43 45 4e 54 52 49 43 53 22 2c 22 73 65 6c 65 63 74 65 64 53 65 74 74 69 6e 67 73 41 70 70 56 65 72 73 69 6f 6e 22 3a 22 56 32 22 2c 22 70 72 69 76 61 63 79 42 75 74 74 6f 6e 55 72 6c 73 22 3a 7b 22 73 74 61 72 74 73 57 69 74 68 22 3a 5b 5d 2c 22 73 74 61 72 74 73 4e 6f 74 57 69 74 68 22 3a 5b 5d 2c 22 63 6f 6e 74 61 69 6e 73 22 3a 5b 5d 2c 22 63 6f 6e 74 61 69 6e 73 4e 6f 74 22 3a 5b 5d 2c 22 69 73 45 71 75 61 6c 54 6f 22 3a 5b 5d 2c 22 69 73 4e 6f 74 Data Ascii: 1000ght corner of the page.</div>","tcf2Enabled":false,"firstUserInteraction":1,"poweredByEnum":"USERCENTRICS","selectedSettingsAppVersion":"V2","privacyButtonUrls":{"startsWith":[],"startsNotWith":[],"contains":[],"containsNot":[],"isEqualTo":[],"isNot
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 6b 6f 63 45 6f 64 6a 62 37 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 32 2e 31 31 2e 34 31 22 2c 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 44 65 61 63 74 69 76 61 74 65 64 22 3a 74 72 75 65 2c 22 69 73 41 75 74 6f 55 70 64 61 74 65 41 6c 6c 6f 77 65 64 22 3a 74 72 75 65 2c 22 64 65 66 61 75 6c 74 43 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 73 75 62 43 6f 6e 73 65 6e 74 73 22 3a 5b 5d 2c 22 6c 65 67 61 6c 42 61 73 69 73 4c 69 73 74 22 3a 5b 5d Data Ascii: e":"predefined","templateId":"HkocEodjb7","version":"52.11.41","categorySlug":"functional","description":"","isHidden":false,"isShared":false,"isDeactivated":true,"isAutoUpdateAllowed":true,"defaultConsentStatus":false,"subConsents":[],"legalBasisList":[]
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 6c 75 67 22 3a 22 66 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 65 6e 61 62 6c 65 20 75 73 20 74 6f 20 61 6e 61 6c 79 73 65 20 74 68 65 20 75 73 65 20 6f 66 20 74 68 65 20 77 65 62 73 69 74 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 6d 65 61 73 75 72 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 22 2c 22 69 73 45 73 73 65 6e 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 61 74 65 67 6f 72 79 53 6c 75 67 22 3a 22 65 73 73 65 6e 74 69 61 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 45 73 73 65 6e 74 69 61 6c 22 2c 22 64 65 73 63 72 Data Ascii: lug":"functional","label":"Functional","description":"These technologies enable us to analyse the use of the website in order to measure and improve performance.","isEssential":false,"isHidden":false},{"categorySlug":"essential","label":"Essential","descr
2024-01-15 14:02:19 UTC	348	IN	Data Raw: 20 6f 72 64 65 72 20 74 6f 20 69 6d 70 72 6f 76 65 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 2e 20 49 6e 20 63 61 73 65 20 6f 66 20 73 61 6c 65 20 6f 66 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 79 6f 75 20 6d 61 79 20 65 78 65 72 63 69 73 65 20 79 6f 75 72 20 63 6f 6e 73 75 6d 65 72 20 72 69 67 68 74 20 74 6f 20 6f 70 74 2d 6f 75 74 20 62 79 20 61 63 74 69 76 61 74 69 6e 67 20 74 68 65 20 74 6f 67 67 6c 65 20 27 44 6f 20 4e 6f 74 20 53 65 6c 6c 20 4d 79 20 50 65 72 73 6f 6e 61 6c 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 27 20 62 65 6c 6f 77 2e 20 46 6f 72 20 64 65 74 61 69 6c 65 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 63 61 74 65 67 6f 72 69 65 73 20 6f 66 20 70 65 72 73 6f 6e 61 6c Data Ascii: order to improve your experience. In case of sale of your personal information you may exercise your consumer right to opt-out by activating the toggle 'Do Not Sell My Personal Information' below. For detailed information about the categories of personal
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 33 62 65 31 0d 0a 72 6f 63 65 73 73 69 6e 67 20 53 65 72 76 69 63 65 73 20 6d 61 79 20 68 61 76 65 20 61 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 6f 75 72 20 70 72 69 76 61 63 79 20 70 6f 6c 69 63 79 2e 22 2c 22 66 69 72 73 74 4c 61 79 65 72 4d 6f 62 69 6c 65 44 65 73 63 72 69 70 74 69 6f 6e 49 73 41 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 66 69 72 73 74 4c 61 79 65 72 4d 6f 62 69 6c 65 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 65 20 61 6e 64 20 6f 75 72 20 70 61 72 74 6e 65 72 73 20 61 72 65 20 75 73 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 6c 69 6b 65 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 70 72 6f 63 65 73 73 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 Data Ascii: 3be1rocessing Services may have access to this information please refer to our privacy policy.","firstLayerMobileDescriptionIsActive":false,"firstLayerMobileDescription":"We and our partners are using technologies like cookies and process personal data
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 28 65 2e 67 2e 20 63 6f 6f 6b 69 65 73 29 20 74 6f 20 73 74 6f 72 65 20 61 6e 64 2f 6f 72 20 61 63 63 65 73 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 75 73 65 72 27 73 20 64 65 76 69 63 65 73 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 70 72 6f 63 65 73 73 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 73 75 63 68 20 61 73 20 49 50 20 61 64 64 72 65 73 73 65 73 20 6f 72 20 62 72 6f 77 73 69 6e 67 20 64 61 74 61 2e 20 59 6f 75 20 6d 61 79 20 63 6f 6e 73 65 6e 74 20 74 6f 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 6f 66 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 66 6f 72 20 74 68 65 20 6c 69 73 74 65 64 20 70 75 72 70 6f 73 65 73 20 62 65 6c 6f 77 2e 20 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 20 79 6f 75 20 63 61 6e 20 73 65 74 20 79 Data Ascii: (e.g. cookies) to store and/or access information on user's devices in order to process personal data such as IP addresses or browsing data. You may consent to the processing of your personal data for the listed purposes below. Alternatively you can set y
2024-01-15 14:02:19 UTC	1252	IN	Data Raw: 65 73 20 74 68 61 74 20 73 65 74 20 79 6f 75 72 20 63 68 6f 69 63 65 73 20 67 6c 6f 62 61 6c 6c 79 2e 20 42 79 20 63 6c 69 63 6b 69 6e 67 20 6f 6e 20 6f 75 72 20 50 72 69 76 61 63 79 20 42 75 74 74 6f 6e 20 69 6e 20 74 68 65 20 62 6f 74 74 6f 6d 20 6c 65 66 74 20 63 6f 72 6e 65 72 2c 20 79 6f 75 20 63 61 6e 20 63 68 61 6e 67 65 20 79 6f 75 72 20 73 65 74 74 69 6e 67 73 20 6f 72 20 77 69 74 68 64 72 61 77 20 79 6f 75 72 20 63 6f 6e 73 65 6e 74 20 61 74 20 61 6e 79 20 74 69 6d 65 2e 22 2c 22 74 6f 67 67 6c 65 73 43 6f 6e 73 65 6e 74 54 6f 67 67 6c 65 4c 61 62 65 6c 22 3a 22 43 6f 6e 73 65 6e 74 22 2c 22 74 6f 67 67 6c 65 73 4c 65 67 49 6e 74 54 6f 67 67 6c 65 4c 61 62 65 6c 22 3a 22 4c 65 67 69 74 69 6d 61 74 65 20 49 6e 74 65 72 65 73 74 22 2c 22 74 6f 67 Data Ascii: es that set your choices globally. By clicking on our Privacy Button in the bottom left corner, you can change your settings or withdraw your consent at any time.","togglesConsentToggleLabel":"Consent","togglesLegIntToggleLabel":"Legitimate Interest","tog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	49877	35.241.3.184	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	536	OUT	OPTIONS /translations/translations-en.json HTTP/1.1 Host: api.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:19 UTC	628	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrMYK1-dBtzYVZJ0Jl62OCJq2u31SF3PZGXeqtX95pr8Evjh0BNv84b4Q6Rnt4Rtl3UBuG7PdY13w Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Access-Control-Allow-Methods: GET,HEAD,PUT,POST,DELETE Access-Control-Allow-Headers: content-type Date: Mon, 15 Jan 2024 14:02:19 GMT Expires: Mon, 15 Jan 2024 14:02:19 GMT Cache-Control: private, max-age=0 Content-Length: 0 Server: UploadServer Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=7776000 X-Client-Geo-Location: AU, Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	49876	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	614	OUT	GET /session/1px.png?settingsId=G_xgCaSxD HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:19 UTC	824	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPoVNnkOFUgXn1q9j532NL43gB6FnB4Sk4aapa8V0yndw21IfR1D449lfHucMouWNQMTtsPsv5EkWw x-goog-generation: 1588928773413784 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 522 Content-Encoding: gzip x-goog-hash: crc32c=pFwm0Q== x-goog-hash: md5=NwKtpzuJUQF7hFHL1qllIw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 522 Server: UploadServer Date: Mon, 15 Jan 2024 13:59:04 GMT Expires: Mon, 15 Jan 2024 14:29:04 GMT Cache-Control: public,max-age=1800,no-transform Age: 195 Last-Modified: Fri, 08 May 2020 09:06:13 GMT ETag: "3702ada73b8951017b8451cbd6a96523" Content-Type: image/png Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:19 UTC	428	IN	Data Raw: 1f 8b 08 08 00 21 b5 5e 02 ff 74 6d 70 43 66 57 47 41 45 00 01 e9 01 16 fe 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 01 82 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 cf 2b 44 51 14 c7 3f 66 c8 e4 47 14 0b 0b 8b 49 58 21 46 89 94 32 93 86 92 34 46 f9 b5 99 79 f3 66 46 cd 8f d7 7b 6f d2 64 ab 6c a7 28 b1 f1 6b c1 5f c0 56 59 2b 45 a4 64 65 61 4d 6c 98 9e f3 bc a9 91 cc bd 9d 73 3e f7 7b ef 39 dd 7b 2e b8 c2 29 25 6d 54 f7 43 3a 63 ea a1 a0 df bb b0 b8 e4 ad 7d a6 06 8f d8 28 83 11 c5 d0 c6 67 67 a7 a9 38 3e ee a8 b2 e3 4d af 5d ab f2 b9 7f 47 7d 4c 35 14 a8 f2 08 8f 29 9a 6e 0a 4f 0a 4f af 99 9a cd db c2 ad 4a 32 12 13 3e 15 ee d1 e5 82 c2 b7 b6 1e 75 f8 c5 Data Ascii: !^tmpCfWGAEPNGIHDRiCCPsRGB IEC61966-2.1(u+DQ?fGIX!F24FyfF{odl(k_VY+EdeaMls>{9{.)%mTC:c}(gg8>M]G}L5)nOOJ2>u
2024-01-15 14:02:19 UTC	94	IN	Data Raw: 9e 95 f6 39 be 87 f0 ba 7c d5 15 ec ee 41 b7 9c 6f 5a f9 06 8c 92 67 f7 99 b6 60 68 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 09 a2 9e 66 e9 01 00 00 Data Ascii: 9\|AoZg`hpHYs.#.#x?vIDATc````NIENDB`f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	49873	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	673	OUT	GET /media/ba5cbsww/philippines-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:18 GMT Accept-Ranges: bytes ETag: "f7dcde4c4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:53 GMT Content-Length: 5219
2024-01-15 14:02:19 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 14 15 49 44 41 54 78 9c ed 9d 7d 6c 5b 67 15 c6 8f 63 c7 f9 58 3f 96 d2 d2 ae 25 52 01 29 74 d2 f8 10 1d a0 21 60 1b 1a 42 eb 60 1b fc 31 86 3a 69 9d 60 68 43 02 52 d0 36 04 74 6d 56 4d 82 65 40 d9 a4 ad 2b 42 62 62 d9 c6 fe 00 da 22 f8 83 69 2d 12 1b 82 2d 53 d7 4d 4d 97 69 6b 59 68 ba d0 d2 90 26 cd 87 63 c7 e8 79 ed 37 b9 76 ee bd b9 b6 ef c7 7b ed e7 27 45 71 1c 3b be 76 7c 1f 9f f7 39 e7 3d 27 f1 ef e1 89 fc fd 3f eb 97 67 0f 0f 09 21 84 58 e8 49 e4 f3 f9 3c 7e fe e7 cb ff 91 7b 76 bd 20 a7 4e 5f e0 0b 44 08 91 12 81 d0 3c fe f4 71 79 78 df ab 72 7e 3c c3 57 88 90 c6 66 b1 40 80 f1 89 Data Ascii: PNGIHDRU/pHYsqqIDATx}l[gcX?%R)t!`B`1:i`hCR6tmVMe@+Bbb"i--SMMikYh&cy7v{'Eq;v\|9='?g!XI<~{v N_D<qyxr~<Wf@
2024-01-15 14:02:19 UTC	2497	IN	Data Raw: e1 ba c2 c9 a8 cb c1 c3 12 0d 2f 51 59 ad 02 a1 61 d9 36 71 a1 3a 81 d0 53 b6 2b a5 b0 6e 4e 4b 6e e2 ef 91 fd 53 12 e9 75 92 cf bc 53 f9 fd 42 16 89 a5 5e 63 1c 4f aa e3 06 25 c4 f0 7a 6a 05 fe c4 3d bb 5e 60 5a 94 58 a9 5c 20 aa 15 87 7a 20 6c 91 98 39 d5 5b b2 57 c4 09 1c 17 84 22 59 5c 8a 38 0d 1a f2 02 b7 95 13 0b 95 09 84 ea cf 30 70 ad b1 2d db c2 00 bb 40 c3 6a 2c 83 d7 fb c2 6b 9f ae e8 3e 88 d2 5a d6 df 5d 93 88 0d 3c f8 d4 d8 2b 3f da f7 bf aa ff 00 a9 0b 46 5a 57 3d 5d 71 04 a1 47 f1 57 2d 12 89 34 c6 65 45 f6 fa c1 83 a8 36 83 82 fd 1c 61 a5 3e 75 46 63 a9 63 55 d1 03 d2 c9 c5 b4 72 2d 85 60 a3 7f ed 97 37 ba 7b 65 fc 88 39 73 4e 49 a4 f4 54 5c 07 a1 9b aa 2c 25 12 f8 24 53 06 66 eb 26 75 1f 5c 46 f8 9b 1d fd 93 4c bf fd 83 c8 9e 74 7a cd 36 Data Ascii: /QYa6q:S+nNKnSuSB^cO%zj=^`ZX\ z l9[W"Y\80p-@j,k>Z]<+?FZW=]qGW-4eE6a>uFccUr-`7{e9sNIT\,%$Sf&u\FLtz6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	49874	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	434	OUT	GET /media/dk2nyoft/hongkong-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "f1427d6f4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:34:51 GMT Content-Length: 4456
2024-01-15 14:02:19 UTC	4456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 11 1a 49 44 41 54 78 9c ed 9d 7b 8c 1d 55 1d c7 4f bb ed 2e ad dd b6 50 e8 22 ed 0a a4 4d 0a 8b 1a 4b 90 b6 fc 21 68 80 6a 22 fe 41 6d 8d 54 12 1e 8d c1 98 94 00 11 83 42 68 63 09 11 05 02 31 82 a1 a5 35 8a c6 56 48 a4 a2 16 fc 83 f2 07 2d a2 62 84 6e 83 16 28 dd 2d a1 2f 8a 2d 94 6e 79 d4 7c cf dd b3 cc ce ce 99 c7 dd fb 98 b9 f3 f9 24 37 5d d6 7b ef cc 8e 39 df f3 7b 9f 31 cf 77 cf 3a 6e 00 00 46 b2 72 2c 0f 05 00 7c 20 10 00 e0 05 81 00 00 2f 08 04 00 78 41 20 00 c0 0b 02 01 00 5e 10 08 00 f0 82 40 00 80 17 04 02 00 bc 20 10 00 e0 05 81 00 00 2f 08 04 00 78 41 20 00 c0 0b 02 01 00 5e 10 Data Ascii: PNGIHDRU/pHYsqqIDATx{UO.P"MK!hj"AmTBhc15VH-bn(-/-ny\|$7]{9{1w:nFr,\| /xA ^@ /xA ^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	49875	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	676	OUT	GET /media/2cwb4kxf/united-kingdom-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:19 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "363cfe254064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:32:48 GMT Content-Length: 6180
2024-01-15 14:02:19 UTC	5642	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 17 d6 49 44 41 54 78 9c ed 9d 61 70 56 d5 99 c7 0f 69 aa 99 2e 20 6c 85 1a 85 9a ec 4e 98 c6 5a 05 dc 09 92 2f a1 14 6c 55 b0 14 a5 d3 9a 0f 8d 45 ac 1d 3a 88 84 b6 1f 64 37 49 97 ce 4e 2d 81 e0 d4 a9 4a a9 71 a6 b1 2e 0a 5a 50 a6 2d 15 93 2f 41 d2 2a b4 1d cd 8e 7c 08 5d b4 30 63 67 4d 85 d9 c9 07 77 b2 f3 3f be c7 b9 84 dc 7b cf 7b cf 73 6e ee bd ef ff 37 93 7e 10 7a df f0 be ef 79 9e e7 fc cf ff 3c cf b4 f1 f1 f1 71 25 c8 1b c3 67 55 c7 bf 1f 56 c7 86 46 24 1f 4b 42 58 da 54 af 9e 7b 7a 7d e8 9f 8f 74 3e a1 46 ba f6 78 7d fb 96 8f ff 3e f2 cf ef ba 7b 2f bf 0f 29 b1 6e ed 22 d5 be 69 b9 Data Ascii: PNGIHDRU/pHYsqqIDATxapVi. lNZ/lUE:d7IN-Jq.ZP-/A*\|]0cgMw?{{sn7~zy<q%gUVF$KBXT{z}t>Fx}>{/)n"i
2024-01-15 14:02:19 UTC	538	IN	Data Raw: 70 2c b6 3f b0 dc 8b c7 c8 18 ad 6a db 56 eb f5 e8 62 3c 44 92 bf 6c ee 3f 7e c6 a9 82 90 6a dc 82 88 87 23 9c 28 a3 13 a7 53 91 22 90 46 0f 0a 63 b4 92 e8 b8 9d a8 82 c0 d1 c8 5b 9b bb 9d b7 12 aa 64 74 c2 f1 4d 54 73 d8 ee 47 5e e6 00 1a 52 28 20 64 e2 07 b7 a3 37 b4 35 7b f1 1f 21 d9 ce ee 7f 5c 27 f2 53 9b 77 26 d2 04 cb aa 20 24 1b b7 d8 18 9d 38 9d 8a 14 9d 34 9a e9 1a a3 55 12 7d c2 3a 40 48 35 6e b1 31 3a 71 3a 15 a9 24 82 cd 74 7d 9e 78 98 8e db e5 18 ad 62 03 84 54 e3 16 1b a3 13 a7 53 91 4a 26 8d 1e 14 41 a3 95 8d 3e 11 aa 41 c0 e8 84 aa c1 75 2b 81 92 06 1a 43 94 ce 00 b1 a6 63 fb 61 4e c0 26 24 20 64 e2 8e 54 d7 b6 db bc 5c 83 40 f5 8e 64 8d 75 0e 7b 42 d8 dd a8 4b 02 04 8c 4e ae 47 24 06 18 9d 50 d6 44 0d a1 f9 b7 ed 2f d1 fd 48 c8 24 20 61 Data Ascii: p,?jVb<Dl?~j#(S"Fc[dtMTsG^R( d75{!\'Sw& $84U}:@H5n1:q:$t}xbTSJ&A>Au+CcaN&$ dT\@du{BKNG$PD/H$ a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	49886	35.190.14.188	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	379	OUT	GET /session/1px.png?settingsId=G_xgCaSxD HTTP/1.1 Host: app.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:19 UTC	817	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqd87CrpG7lOuvsezUql0DQOa0HHFHBfEv7D_Pajiv02uieNyCcKN1IVo2Vkga9Qu8XfN4 x-goog-generation: 1588928773413784 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 522 Content-Encoding: gzip x-goog-hash: crc32c=pFwm0Q== x-goog-hash: md5=NwKtpzuJUQF7hFHL1qllIw== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 522 Server: UploadServer Date: Mon, 15 Jan 2024 13:50:23 GMT Expires: Mon, 15 Jan 2024 14:20:23 GMT Cache-Control: public,max-age=1800,no-transform Age: 716 Last-Modified: Fri, 08 May 2020 09:06:13 GMT ETag: "3702ada73b8951017b8451cbd6a96523" Content-Type: image/png Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:19 UTC	435	IN	Data Raw: 1f 8b 08 08 00 21 b5 5e 02 ff 74 6d 70 43 66 57 47 41 45 00 01 e9 01 16 fe 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 01 82 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 28 91 75 91 cf 2b 44 51 14 c7 3f 66 c8 e4 47 14 0b 0b 8b 49 58 21 46 89 94 32 93 86 92 34 46 f9 b5 99 79 f3 66 46 cd 8f d7 7b 6f d2 64 ab 6c a7 28 b1 f1 6b c1 5f c0 56 59 2b 45 a4 64 65 61 4d 6c 98 9e f3 bc a9 91 cc bd 9d 73 3e f7 7b ef 39 dd 7b 2e b8 c2 29 25 6d 54 f7 43 3a 63 ea a1 a0 df bb b0 b8 e4 ad 7d a6 06 8f d8 28 83 11 c5 d0 c6 67 67 a7 a9 38 3e ee a8 b2 e3 4d af 5d ab f2 b9 7f 47 7d 4c 35 14 a8 f2 08 8f 29 9a 6e 0a 4f 0a 4f af 99 9a cd db c2 ad 4a 32 12 13 3e 15 ee d1 e5 82 c2 b7 b6 1e 75 f8 c5 Data Ascii: !^tmpCfWGAEPNGIHDRiCCPsRGB IEC61966-2.1(u+DQ?fGIX!F24FyfF{odl(k_VY+EdeaMls>{9{.)%mTC:c}(gg8>M]G}L5)nOOJ2>u
2024-01-15 14:02:19 UTC	87	IN	Data Raw: ba 7c d5 15 ec ee 41 b7 9c 6f 5a f9 06 8c 92 67 f7 99 b6 60 68 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 09 a2 9e 66 e9 01 00 00 Data Ascii: \|AoZg`hpHYs.#.#x?vIDATc````NIENDB`f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	49879	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	431	OUT	GET /media/0o2jaanu/india-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "a629ec74064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:31:58 GMT Content-Length: 3685
2024-01-15 14:02:20 UTC	3685	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0e 17 49 44 41 54 78 9c ed 9d 5d 8c 5d 55 15 80 77 b5 60 05 a4 c5 08 b4 46 cb 90 60 03 94 e2 14 88 29 25 91 19 8d 49 6b 62 9c 1a 0d 10 4d da 3e 80 92 88 b4 09 68 8c 54 4a 4a e4 01 63 8b c4 10 30 b1 c5 97 d2 17 5b 7d e0 27 44 db 3e 50 78 50 3a 2a a4 8d 9a b4 16 a4 18 a2 9d 69 22 90 a0 8e f9 f6 3d 6b d8 73 66 76 5b df 38 77 be 2f 99 74 e6 de 73 cf 99 b9 cd fa ee da 6b af bd cf 9c b1 9f 7c 7a 22 89 88 b4 38 7b d9 97 36 be cf 37 45 44 6a 28 08 11 a9 a2 20 44 a4 8a 82 10 91 2a 0a 42 44 aa 28 08 11 a9 a2 20 44 a4 8a 82 10 91 2a 0a 42 44 aa 28 08 11 a9 a2 20 44 a4 8a 82 10 91 2a 0a 42 44 aa 28 08 Data Ascii: PNGIHDRU/pHYsqqIDATx]]Uw`F`)%IkbM>hTJJc0[}'D>PxP:i"=ksfv[8w/tsk\|z"8{67EDj( DBD( DBD( DBD(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	49888	34.120.28.121	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	579	OUT	OPTIONS /aggregate/en?templates=H1Vl5NidjWX@40.17.44,zqWojrT0P@15.7.10 HTTP/1.1 Host: aggregator.service.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:20 UTC	498	IN	HTTP/1.1 204 No Content vary: Origin, Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE access-control-allow-headers: content-type access-control-max-age: 86400 X-Cloud-Trace-Context: 5763b4f5e59c78c1aa2984d4ba2f87f9 Date: Mon, 15 Jan 2024 14:02:20 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.8	49880	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	669	OUT	GET /media/i2girxb4/ireland-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "78f8e9c54064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:37:16 GMT Content-Length: 632
2024-01-15 14:02:20 UTC	632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 2a 49 44 41 54 78 9c ed d4 b1 49 83 01 18 45 d1 2f 22 08 e2 02 56 96 b6 8e e0 00 6e e1 0c ce 91 ce 22 5b a4 b1 4f 69 e7 08 ba 83 08 0a 1a 27 b8 e5 0f 21 39 67 83 f7 8a bb ba df 3c ee 87 45 dc 5d df ce fa e1 c9 b9 0b f9 7a 79 fe f8 7e dd de 1c e5 b8 c3 b0 3b 3b f5 07 80 26 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 Data Ascii: PNGIHDRU/pHYsqq*IDATxIE/"Vn"[Oi'!9g<E]zy~;;&@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.8	49881	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	446	OUT	GET /media/mg0lezrl/united-arab-emirates-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	215	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "85df2434164d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:38:59 GMT Content-Length: 651
2024-01-15 14:02:20 UTC	651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 3d 49 44 41 54 78 9c ed d7 21 4a 44 51 18 86 e1 eb 30 e0 58 ac 03 23 06 9b d1 8d b8 11 b1 b8 04 71 03 16 31 18 dd 86 d1 65 d8 26 19 6d b7 88 6e c0 37 9c 69 17 9f 67 05 1f ff 81 17 ce d1 db 74 f5 33 31 e4 e1 65 ef 60 fc 07 f7 2b cf 0c 14 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 Data Ascii: PNGIHDRU/pHYsqq=IDATx!JDQ0X#q1e&mn7igt31e`+@I $@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.8	49883	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	432	OUT	GET /media/a5tl02k4/jordan-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "301d66464064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:42 GMT Content-Length: 1696
2024-01-15 14:02:20 UTC	1696	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 06 52 49 44 41 54 78 9c ed dd 4d a8 a5 63 00 c0 f1 67 34 34 ea 4e c6 c2 62 a6 86 19 6a 94 32 26 94 85 1a 63 4b 3e d6 2c 50 8a 1d 8a 2d c3 5a 58 12 8b a1 2c 2c 7c c7 02 45 69 76 68 48 8a 05 23 65 d4 88 99 5c cd 24 83 9e 6b 9e eb ce bd ce dc f3 f1 9e f7 7d 3e 7e bf ba 9d 73 ef 74 ea bd a7 73 fe f3 7c bc ef b9 1b de 0c 57 fe fd 6a 38 1a 5e 0b 47 c3 62 38 15 00 92 0d 1f 84 3d 7f c7 fb bf 87 53 41 28 80 95 96 03 91 08 05 90 ac 09 44 22 14 c0 c8 40 24 42 01 ed 5a 37 10 89 50 40 7b c6 0e 44 22 14 d0 8e 89 03 91 08 05 d4 6f ea 40 24 42 01 f5 9a 39 10 89 50 40 7d 3a 0b 44 22 14 50 8f ce 03 91 08 05 Data Ascii: PNGIHDRU/pHYsqqRIDATxMcg44Nbj2&cK>,P-ZX,,\|EivhH#e\$k}>~sts\|Wj8^Gb8=SA(D"@$BZ7P@{D"o@$B9P@}:D"P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.8	49882	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	662	OUT	GET /media/2vhcl40j/imprese.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "aaa991b1f2e5d71:0" Connection: close Last-Modified: Tue, 30 Nov 2021 14:00:55 GMT Content-Length: 1104
2024-01-15 14:02:20 UTC	1104	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.8	49884	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:19 UTC	432	OUT	GET /media/lcabmwzn/turkey-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "8dae6f34064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:38:32 GMT Content-Length: 2895
2024-01-15 14:02:20 UTC	2723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 0b 01 49 44 41 54 78 9c ed dd 6f 6c d5 57 1d c7 f1 53 0a 8c ae d0 ae d0 06 28 22 25 64 50 16 e3 3a 8d b0 a8 c9 3a 19 46 e7 83 b5 26 62 7c b0 82 59 c2 0c b2 80 26 1a c1 38 db 64 91 c5 44 e9 1c 3e 59 62 2c 2c 2e 99 0f 46 8d ff 9e 8c 58 1e b2 25 a6 8b 8b 25 2c 48 19 83 81 d6 31 3a b0 50 c6 6a 3e 87 5e bc 42 4f 7b db 7b 6e ef 39 e7 f7 7e 25 04 c2 9f db df 2d f4 c3 39 df 73 ce f7 54 f4 9b 75 63 06 00 ee d4 35 87 4f 0a 00 17 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e Data Ascii: PNGIHDRU/pHYsqqIDATxolWS("%dP::F&b\|Y&8dD>Yb,,.FX%%,H1:Pj>^BO{{n9~%-9sTuc5OD@p" 8N'D@p" 8N
2024-01-15 14:02:20 UTC	172	IN	Data Raw: 10 00 9c d2 5e e6 04 50 1c 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 70 22 20 00 38 11 10 00 9c 08 08 00 4e 04 04 00 27 02 02 80 13 01 01 c0 89 80 00 e0 44 40 00 98 98 31 e6 bf b8 38 e6 54 7e 28 5c e0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ^PD@p" 8N'D@p" 8N'D@p" 8N'D@p" 8N'D@18T~(\IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.8	49885	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	660	OUT	GET /media/nehjkomg/world.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "68f717b017dd81:0" Connection: close Last-Modified: Wed, 19 Jan 2022 09:33:59 GMT Content-Length: 15218
2024-01-15 14:02:20 UTC	1262	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 9c 00 00 00 9c 08 06 00 00 00 8a b8 c2 4d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 9c a0 03 00 04 00 00 00 01 00 00 00 9c 00 00 00 00 6f d7 8f d8 00 00 3a dc 49 44 41 54 78 01 ed 5d 09 7c 14 45 d6 af ea 99 c9 01 89 e0 81 ae 90 04 50 14 44 57 57 b9 bc 41 d6 0b 77 5d af 5d 14 48 02 a2 a8 7b f8 e1 4a c2 e5 b1 71 3d 20 24 e8 aa b8 87 22 6e 2e 44 5c af 55 11 2f 40 d6 55 11 f1 c6 05 45 05 12 f0 56 20 89 39 66 a6 eb fb bf 4e ba a7 aa 67 26 73 4f 26 81 f9 11 fa d5 f5 ea e8 d7 af 5e bd 7a f5 8a b3 7d 3f 63 04 06 55 97 ec d7 c2 ea 07 0b Data Ascii: PNGIHDRMsRGBDeXIfMM*io:IDATx]\|EPDWWAw]]H{Jq= $"n.D\U/@UEV 9fNg&sO&^z}?cU
2024-01-15 14:02:20 UTC	2920	IN	Data Raw: 8d 9f bf c5 de 8f ce 0c a7 14 c1 e5 54 17 5d 24 bc e2 6e 0c 48 ae 7d 50 d0 d0 16 a8 05 96 a4 39 44 e9 e7 93 16 6e b3 a7 c7 1a 3e 7a 79 49 d6 ee e6 c6 3f 40 f7 3a 07 c4 b6 9f 1d 1f 88 ad fa a4 cc 91 53 3a 83 b3 d9 db 62 86 73 aa 67 fd 94 e9 de 07 31 e5 0f 0f 48 78 9c 66 01 56 35 2d 3f 6b 6a aa ec 60 a4 04 c1 1d b9 b4 e4 a0 46 4f c3 12 ac 02 cf 37 07 53 7e 42 36 59 a1 39 9c d7 6e 9f 34 ff 33 39 3e 56 d8 10 ce ab 8a 47 02 0f f4 6b ec 32 70 d5 6c 3b 4e 22 74 a6 f1 a2 ba 82 f2 45 f6 b4 54 09 e7 54 ce 19 c5 44 eb 63 98 11 fa 05 6c 13 e7 df a6 39 d3 7e fe f9 c4 3b de 0f 98 9e c4 c8 4e 27 b8 dc aa e2 d3 84 ae 3f 1c 70 b0 a0 da e0 1a bb ae 2e bf fc 89 58 c7 c4 20 ae 47 6f ec cb dd cd 87 33 5d 3b 5a 17 02 5b 5e 6c 8c 21 88 07 43 ce f9 66 27 e7 13 b7 15 94 bd 1d 2c Data Ascii: T]$nH}P9Dn>zyI?@:S:bsg1HxfV5-?kj`FO7S~B6Y9n439>VGk2pl;N"tETTDcl9~;N'?p.X Go3];Z[^l!Cf',
2024-01-15 14:02:20 UTC	2920	IN	Data Raw: 60 74 7b 0c b6 14 df 97 c5 20 7c c8 f7 e3 24 7f 50 59 2e e8 94 4a 2f 1f 03 50 20 0f 02 a8 f3 83 44 11 1b d5 43 9c 0c 0a 8c 17 e4 3a 21 8b 9d 2c 87 53 15 5e 03 17 f6 24 6f e2 e3 f8 b9 31 f5 e2 1e 08 7b 5b d1 97 23 3c ba f7 3f f0 81 12 17 63 46 3b fe 64 87 8d 59 81 6b ca e2 08 ef 6f 72 3b ed 04 6c 4e 50 82 7b b0 fa c7 12 70 b7 74 ab 14 b8 9b 83 3b 7f 6b 85 13 04 40 d7 a7 fa 62 e3 7c 50 82 aa 4a 18 da ba 49 0b de c4 31 bc b1 f0 5f 32 0e 5c ed 53 b5 22 a1 e9 82 95 43 e8 5e 42 67 33 d4 b4 ae 17 72 08 4d d9 67 25 9a 79 b0 a6 e1 b6 60 3d 09 4a 70 42 f7 2a 5b 58 40 b4 35 29 53 01 6e db 93 1b 8b a3 ba d6 f4 2a c7 77 05 b8 ae a0 6c 25 0e cf 1e 07 b9 f1 3e 4c 35 18 42 f9 27 2e df dd dc f0 12 29 bf e5 d8 ae 06 6f 2f 2c 7d 15 7d fb 5c 6e 37 76 90 54 15 9a 94 18 90 e0 Data Ascii: `t{ \|$PY.J/P DC:!,S^$o1{[#<?cF;dYkor;lNP{pt;k@b\|PJI1_2\S"C^Bg3rMg%y`=JpB[X@5)Snwl%>L5B'.)o/,}}\n7vT
2024-01-15 14:02:20 UTC	2920	IN	Data Raw: c6 c3 a8 11 5f 3f 5d c2 9b 14 15 88 dc 87 84 c2 69 38 ef 20 ab 41 40 48 fd 2b 8a 2c bd 15 6d 31 e1 ac e7 99 18 c7 bb e5 7c 61 b5 09 ec 0e dc 7f 69 66 86 eb 28 08 ec 8f 86 55 06 99 1c 5c 2c 93 f3 82 88 8f c1 34 7e a5 1c 17 0a 36 14 c0 4c f5 2e ef d0 9b cf c1 39 60 dd 6e c2 f3 6d 28 64 f6 f4 01 cb 8b 7f 02 16 ff 9c 7d 81 80 ce fe 27 a3 4f ff cb f1 94 29 dd 5e 3c ac 70 bf ca 62 da f3 9b 22 67 06 37 58 b4 a3 a0 fc 59 39 ae ab c1 b5 97 95 7d 0a 19 9a 44 10 eb 07 8e a5 a8 75 48 de 32 14 cf 4e 8d 08 f1 df a4 b6 b2 32 07 00 30 2e cd 44 68 38 ed 7d 2c 56 98 93 b6 8c 9f f7 4d 80 6c 41 a3 b6 e7 2f fc 08 75 3c 23 67 c0 8e ca df 73 ab 66 fe 4a 8e 0b 03 56 69 09 8b 53 d2 76 db 6c af f8 f6 30 10 19 59 68 8a c3 4a 74 82 bb 59 bf 03 c4 a0 ea 95 70 e8 97 65 64 5d b8 e5 bc Data Ascii: _?]i8 A@H+,m1\|aif(U\,4~6L.9`nm(d}'O)^<pb"g7XY9}DuH2N20.Dh8},VMlA/u<#gsfJViSvl0YhJtYped]
2024-01-15 14:02:20 UTC	2920	IN	Data Raw: bc 43 3e 8b d5 64 26 c2 f8 e1 06 65 e6 a9 80 5b 89 e3 e8 28 5d 5b 5c fc ff 17 99 d9 0b 59 53 03 a6 f0 76 2e 87 13 49 5f ff 50 ff 5b d4 d4 e9 5c 0e c4 76 a7 9d d8 f0 61 96 77 44 6c b4 92 fd 81 f3 42 78 49 18 8d bc 2e 7c b8 eb 58 46 cf c5 d1 de bf 10 d1 88 0b 7d ac 92 1f 62 8b a9 72 32 64 38 4a 04 f0 5f 35 93 3a 07 2b 69 09 0c 18 2e bd 34 76 09 71 36 b3 1a 10 df 61 b8 de f1 26 33 9c 88 27 bd 08 58 32 dc 2b e3 86 3f 83 99 9d 2d cb e5 55 ce 3a 15 c4 f6 07 b9 5d 58 14 bd 74 52 e6 c8 d9 4a 9c 14 20 63 89 ef 84 78 0b 5e 12 fe 8a 55 fa a5 98 31 70 cb 8f 5e 0a 93 b1 8f c8 05 ab 94 35 21 20 b4 01 2a c1 31 b6 ca ac c8 22 38 70 98 6a 33 d2 78 0a 76 b0 e9 8d 51 89 4f 42 a0 2e 7f e1 73 18 d4 bb e4 aa 20 16 fc 36 1a 4f 8c 32 8e 50 b0 c1 e5 98 74 6a cd e0 72 8d e3 43 95 Data Ascii: C>d&e[(][\YSv.I_P[\vawDlBxI.\|XF}br2d8J_5:+i.4vq6a&3'X2+?-U:]XtRJ cx^U1p^5! *1"8pj3xvQOB.s 6O2PtjrC
2024-01-15 14:02:20 UTC	2276	IN	Data Raw: 0e 87 82 23 59 28 04 c2 65 5c 23 15 8c e8 aa 8a ab eb b9 fb 21 08 78 b6 1d 85 c8 16 0a e4 af 0f 12 75 a5 2a b7 f1 9d 19 19 69 38 54 dd b1 65 71 a0 36 cb 71 31 11 1c 21 aa bd e8 b6 4f 71 47 f3 35 b2 3c 47 0d f5 3a c4 9d 39 55 33 c3 96 71 c0 ba 55 0e c7 44 9d dc d0 54 81 61 71 bc 48 69 8b 10 e7 87 6b 09 4d 9e 8b b0 31 5f 2a 97 c7 0b 5c da c1 42 41 ce 6a c1 41 89 4e 88 89 20 b6 f3 ad 8c 00 c0 95 22 5a 28 e4 56 ce 1c ee e5 e2 09 bc 8f 34 13 0f da d8 ca 9d 62 42 fb c1 74 33 3a aa 67 cc 04 47 b5 d6 4d 2a 7f 50 13 ea 2a 8e 88 0e 6e 53 2b 73 aa 8a cf 0d ab 65 5c f6 ec 48 03 c5 7d 02 7a 58 08 92 93 a9 36 bf ec 05 b4 6d a5 5c 1b 5e d0 b2 50 fd 24 53 6c dd c3 9f 01 41 f8 3c a7 1b 0b 85 b4 22 19 57 b8 70 30 a2 93 cb a3 9d eb 0f 89 60 a1 40 67 5d e1 4f 6e 05 de 9d ef Data Ascii: #Y(e\#!xui8Teq6q1!OqG5<G:9U3qUDTaqHikM1_\BAjAN "Z(V4bBt3:gGMPnS+se\H}zX6m\^P$SlA<"Wp0`@g]On

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.8	49887	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	674	OUT	GET /media/mivd1pzi/istituti-finanziari.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "5d41f0b1f2e5d71:0" Connection: close Last-Modified: Tue, 30 Nov 2021 14:00:56 GMT Content-Length: 1818
2024-01-15 14:02:20 UTC	1818	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.8	49889	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	437	OUT	GET /media/ba5cbsww/philippines-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:20 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:19 GMT Accept-Ranges: bytes ETag: "f7dcde4c4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:33:53 GMT Content-Length: 5219
2024-01-15 14:02:20 UTC	5219	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 14 15 49 44 41 54 78 9c ed 9d 7d 6c 5b 67 15 c6 8f 63 c7 f9 58 3f 96 d2 d2 ae 25 52 01 29 74 d2 f8 10 1d a0 21 60 1b 1a 42 eb 60 1b fc 31 86 3a 69 9d 60 68 43 02 52 d0 36 04 74 6d 56 4d 82 65 40 d9 a4 ad 2b 42 62 62 d9 c6 fe 00 da 22 f8 83 69 2d 12 1b 82 2d 53 d7 4d 4d 97 69 6b 59 68 ba d0 d2 90 26 cd 87 63 c7 e8 79 ed 37 b9 76 ee bd b9 b6 ef c7 7b ed e7 27 45 71 1c 3b be 76 7c 1f 9f f7 39 e7 3d 27 f1 ef e1 89 fc fd 3f eb 97 67 0f 0f 09 21 84 58 e8 49 e4 f3 f9 3c 7e fe e7 cb ff 91 7b 76 bd 20 a7 4e 5f e0 0b 44 08 91 12 81 d0 3c fe f4 71 79 78 df ab 72 7e 3c c3 57 88 90 c6 66 b1 40 80 f1 89 Data Ascii: PNGIHDRU/pHYsqqIDATx}l[gcX?%R)t!`B`1:i`hCR6tmVMe@+Bbb"i--SMMikYh&cy7v{'Eq;v\|9='?g!XI<~{v N_D<qyxr~<Wf@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.8	49892	34.120.28.121	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	655	OUT	GET /aggregate/en?templates=H1Vl5NidjWX@40.17.44,zqWojrT0P@15.7.10 HTTP/1.1 Host: aggregator.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:20 UTC	428	IN	HTTP/1.1 200 OK vary: Accept-Encoding, accept-encoding access-control-allow-origin: * content-type: application/json; charset=utf-8 Cache-Control: public,max-age=2592000 etag: "1uteajd" X-Cloud-Trace-Context: d5f904925e5d5e34879b430f20b8e00a Date: Mon, 15 Jan 2024 14:02:20 GMT Server: Google Frontend Content-Length: 7615 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:20 UTC	1252	IN	Data Raw: 7b 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 61 64 6d 69 6e 53 65 74 74 69 6e 67 73 49 64 22 3a 5b 5d 2c 22 64 61 74 61 41 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 2c 22 64 61 74 61 50 72 6f 63 65 73 73 6f 72 73 22 3a 5b 22 4d 61 74 6f 6d 6f 22 5d 2c 22 64 61 74 61 50 72 6f 63 65 73 73 6f 72 22 3a 22 4d 61 74 6f 6d 6f 22 2c 22 64 61 74 61 50 75 72 70 6f 73 65 73 22 3a 5b 5d 2c 22 64 6f 6d 41 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 2c 22 64 6f 6d 45 6c 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 64 6f 6d 4b 65 79 73 22 3a 5b 5d 2c 22 6e 61 6d 65 4f 66 50 72 6f 63 65 73 73 69 6e 67 43 6f 6d 70 61 6e 79 22 3a 22 49 6e 6e 6f 43 72 61 66 74 22 2c 22 61 64 64 72 65 73 73 4f 66 50 72 6f 63 65 73 73 69 6e 67 43 6f 6d 70 61 6e 79 22 3a 22 31 35 30 20 57 69 6c 6c 69 73 20 Data Ascii: {"templates":[{"adminSettingsId":[],"dataAttributes":[],"dataProcessors":["Matomo"],"dataProcessor":"Matomo","dataPurposes":[],"domAttributes":[],"domElements":[],"domKeys":[],"nameOfProcessingCompany":"InnoCraft","addressOfProcessingCompany":"150 Willis
2024-01-15 14:02:20 UTC	1252	IN	Data Raw: 50 52 22 5d 2c 22 72 65 74 65 6e 74 69 6f 6e 50 65 72 69 6f 64 4c 69 73 74 22 3a 5b 5d 2c 22 73 75 62 43 6f 6e 73 65 6e 74 73 22 3a 5b 5d 2c 22 63 6f 6f 6b 69 65 4e 61 6d 65 73 22 3a 5b 5d 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 7a 71 57 6f 6a 72 54 30 50 22 2c 22 75 70 64 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 31 31 2d 32 31 54 31 31 3a 33 37 3a 34 38 2e 30 32 33 5a 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 35 2e 37 2e 31 30 22 2c 22 69 73 4c 61 74 65 73 74 22 3a 74 72 75 65 2c 22 69 73 53 68 61 72 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 74 79 70 65 22 3a 22 70 72 65 64 65 66 69 6e 65 64 22 2c 22 73 68 61 72 65 43 75 73 74 6f 6d 43 6f 6e 73 65 6e 74 22 3a Data Ascii: PR"],"retentionPeriodList":[],"subConsents":[],"cookieNames":[],"templateId":"zqWojrT0P","updatedAt":"2023-11-21T11:37:48.023Z","language":"en","version":"15.7.10","isLatest":true,"isShared":false,"isHidden":false,"type":"predefined","shareCustomConsent":
2024-01-15 14:02:20 UTC	368	IN	Data Raw: 6e 64 73 22 3a 33 34 31 38 37 34 30 30 2c 22 75 73 65 73 4e 6f 6e 43 6f 6f 6b 69 65 41 63 63 65 73 73 22 3a 6e 75 6c 6c 2c 22 64 65 76 69 63 65 53 74 6f 72 61 67 65 44 69 73 63 6c 6f 73 75 72 65 55 72 6c 22 3a 22 22 2c 22 64 65 76 69 63 65 53 74 6f 72 61 67 65 22 3a 7b 22 64 69 73 63 6c 6f 73 75 72 65 73 22 3a 5b 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 5f 70 6b 5f 69 64 22 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 33 34 31 38 37 34 30 30 2c 22 64 6f 6d 61 69 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 73 74 6f 72 65 20 61 20 66 65 77 20 64 65 74 61 69 6c 73 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 72 20 73 75 63 68 20 61 73 20 74 68 65 20 75 6e Data Ascii: nds":34187400,"usesNonCookieAccess":null,"deviceStorageDisclosureUrl":"","deviceStorage":{"disclosures":[{"identifier":"","name":"_pk_id","maxAgeSeconds":34187400,"domain":"","description":"This is used to store a few details about the user such as the un
2024-01-15 14:02:20 UTC	1252	IN	Data Raw: 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 73 74 6f 72 65 20 74 68 65 20 61 74 74 72 69 62 75 74 69 6f 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 74 68 65 20 72 65 66 65 72 72 65 72 20 69 6e 69 74 69 61 6c 6c 79 20 75 73 65 64 20 74 6f 20 76 69 73 69 74 20 74 68 65 20 77 65 62 73 69 74 65 22 2c 22 74 79 70 65 22 3a 22 63 6f 6f 6b 69 65 22 7d 2c 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 5f 70 6b 5f 73 65 73 22 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 2c 22 64 6f 6d 61 69 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 73 74 6f 72 65 20 61 20 75 6e 69 71 75 65 20 73 65 73 73 69 6f 6e 20 49 44 2e 22 2c 22 74 79 Data Ascii: ption":"This is used to store the attribution information, the referrer initially used to visit the website","type":"cookie"},{"identifier":"","name":"_pk_ses","maxAgeSeconds":1800,"domain":"","description":"This is used to store a unique session ID.","ty
2024-01-15 14:02:20 UTC	1252	IN	Data Raw: 20 6d 61 6e 61 67 65 6d 65 6e 74 20 73 65 72 76 69 63 65 2e 20 55 73 65 72 63 65 6e 74 72 69 63 73 20 47 6d 62 48 20 69 73 20 75 73 65 64 20 6f 6e 20 74 68 65 20 77 65 62 73 69 74 65 20 61 73 20 61 20 70 72 6f 63 65 73 73 6f 72 20 66 6f 72 20 74 68 65 20 70 75 72 70 6f 73 65 20 6f 66 20 63 6f 6e 73 65 6e 74 20 6d 61 6e 61 67 65 6d 65 6e 74 2e 22 2c 22 74 65 63 68 6e 6f 6c 6f 67 79 55 73 65 64 22 3a 5b 22 4c 6f 63 61 6c 20 73 74 6f 72 61 67 65 22 2c 22 50 69 78 65 6c 22 5d 2c 22 6c 61 6e 67 75 61 67 65 73 41 76 61 69 6c 61 62 6c 65 22 3a 5b 22 65 6e 22 2c 22 7a 68 22 2c 22 68 72 22 2c 22 63 73 22 2c 22 64 61 22 2c 22 6e 6c 22 2c 22 66 69 22 2c 22 66 72 22 2c 22 64 65 22 2c 22 68 75 22 2c 22 69 74 22 2c 22 6e 6f 22 2c 22 70 6c 22 2c 22 70 74 22 2c 22 72 6f Data Ascii: management service. Usercentrics GmbH is used on the website as a processor for the purpose of consent management.","technologyUsed":["Local storage","Pixel"],"languagesAvailable":["en","zh","hr","cs","da","nl","fi","fr","de","hu","it","no","pl","pt","ro
2024-01-15 14:02:20 UTC	1252	IN	Data Raw: 73 69 6e 67 22 3a 22 45 75 72 6f 70 65 61 6e 20 55 6e 69 6f 6e 22 2c 22 70 72 6f 63 65 73 73 69 6e 67 43 6f 6d 70 61 6e 79 22 3a 22 55 73 65 72 63 65 6e 74 72 69 63 73 20 47 6d 62 48 2c 20 53 65 6e 64 6c 69 6e 67 65 72 20 53 74 72 2e 20 37 2c 20 38 30 33 33 31 20 4d 75 6e 69 63 68 2c 20 47 65 72 6d 61 6e 79 22 2c 22 6f 70 74 4f 75 74 55 72 6c 22 3a 22 22 2c 22 70 6f 6c 69 63 79 4f 66 50 72 6f 63 65 73 73 6f 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 63 65 6e 74 72 69 63 73 2e 63 6f 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 64 65 66 61 75 6c 74 43 61 74 65 67 6f 72 79 4c 61 62 65 6c 22 3a 22 45 73 73 65 6e 74 69 61 6c 22 2c 22 64 65 66 61 75 6c 74 43 61 74 65 67 6f 72 79 53 Data Ascii: sing":"European Union","processingCompany":"Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany","optOutUrl":"","policyOfProcessorUrl":"https://usercentrics.com/privacy-policy/","description":"","defaultCategoryLabel":"Essential","defaultCategoryS
2024-01-15 14:02:20 UTC	987	IN	Data Raw: 64 65 76 69 63 65 53 74 6f 72 61 67 65 44 69 73 63 6c 6f 73 75 72 65 55 72 6c 22 3a 22 22 2c 22 64 65 76 69 63 65 53 74 6f 72 61 67 65 22 3a 7b 22 64 69 73 63 6c 6f 73 75 72 65 73 22 3a 5b 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 75 63 5f 73 65 74 74 69 6e 67 73 20 61 6e 64 2f 6f 72 20 75 63 53 74 72 69 6e 67 22 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 30 2c 22 64 6f 6d 61 69 6e 22 3a 22 75 73 65 72 63 65 6e 74 72 69 63 73 2e 63 6f 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 68 6f 6c 64 73 20 74 68 65 20 43 6f 6e 74 72 6f 6c 6c 65 72 49 44 20 61 6e 64 20 53 65 74 74 69 6e 67 73 49 44 2c 20 74 68 65 20 6c 61 6e 67 75 61 67 65 2c 20 73 65 74 74 69 6e 67 73 20 76 65 72 73 69 6f 6e 20 61 6e Data Ascii: deviceStorageDisclosureUrl":"","deviceStorage":{"disclosures":[{"identifier":"","name":"uc_settings and/or ucString","maxAgeSeconds":0,"domain":"usercentrics.com","description":"This holds the ControllerID and SettingsID, the language, settings version an

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.8	49891	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	440	OUT	GET /media/2cwb4kxf/united-kingdom-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "363cfe254064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:32:48 GMT Content-Length: 6180
2024-01-15 14:02:21 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 17 d6 49 44 41 54 78 9c ed 9d 61 70 56 d5 99 c7 0f 69 aa 99 2e 20 6c 85 1a 85 9a ec 4e 98 c6 5a 05 dc 09 92 2f a1 14 6c 55 b0 14 a5 d3 9a 0f 8d 45 ac 1d 3a 88 84 b6 1f 64 37 49 97 ce 4e 2d 81 e0 d4 a9 4a a9 71 a6 b1 2e 0a 5a 50 a6 2d 15 93 2f 41 d2 2a b4 1d cd 8e 7c 08 5d b4 30 63 67 4d 85 d9 c9 07 77 b2 f3 3f be c7 b9 84 dc 7b cf 7b cf 73 6e ee bd ef ff 37 93 7e 10 7a df f0 be ef 79 9e e7 fc cf ff 3c cf b4 f1 f1 f1 71 25 c8 1b c3 67 55 c7 bf 1f 56 c7 86 46 24 1f 4b 42 58 da 54 af 9e 7b 7a 7d e8 9f 8f 74 3e a1 46 ba f6 78 7d fb 96 8f ff 3e f2 cf ef ba 7b 2f bf 0f 29 b1 6e ed 22 d5 be 69 b9 Data Ascii: PNGIHDRU/pHYsqqIDATxapVi. lNZ/lUE:d7IN-Jq.ZP-/A*\|]0cgMw?{{sn7~zy<q%gUVF$KBXT{z}t>Fx}>{/)n"i
2024-01-15 14:02:21 UTC	3458	IN	Data Raw: be 04 48 9c ae 41 3c cf 9a d1 c9 95 c2 05 08 83 99 58 5e ce 45 30 63 b4 72 d5 27 82 ad f9 a5 8d 56 79 1d 46 9c a4 d5 9b d4 b0 5b 9f ad de 24 3a 47 67 99 69 57 ff f3 43 e3 85 fb 57 4d 00 0b 09 ad e2 6c 2e f4 18 50 d6 ea 9b 9e 8e 25 ad 2a 5d ec 41 95 e2 c3 bb 3f 78 7c 24 b2 85 1a 16 9a ab 98 17 c7 f2 f1 df 47 fe 0d 2c 22 1b f1 51 95 04 48 ed 37 71 d4 18 b0 65 84 c1 09 3f d2 5b 09 15 18 91 9f 07 2f 43 52 56 dd 7a fd 40 45 04 08 03 b2 18 6e 58 da f4 24 34 c0 f3 a0 05 c8 8c 7f 61 c3 c8 42 80 b0 41 3a 20 37 f4 6c f1 f2 3e 23 28 ef e9 1d 14 6f 0e 9b 45 10 20 0a bb c5 98 8c 24 17 c1 24 3b 6e fb 32 5a e5 99 bc cc 9a 50 11 23 f2 8b 4c 45 05 08 43 92 8b 60 a6 e3 b6 94 d1 ca 47 6b fe 3c 21 39 6b 22 d8 ea cd 87 00 19 37 22 bf c8 4c db b1 fb e5 8a d9 62 4c c6 cc 92 3e Data Ascii: HA<X^E0cr'VyF[$:GgiWCWMl.P%*]A?x\|$G,"QH7qe?[/CRVz@EnX$4aBA: 7l>#(oE $$;n2ZP#LEC`Gk<!9k"7"LbL>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.8	49890	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	668	OUT	GET /media/aqddpooa/assicurazioni.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "76cb21b2f2e5d71:0" Connection: close Last-Modified: Tue, 30 Nov 2021 14:00:56 GMT Content-Length: 1582
2024-01-15 14:02:21 UTC	1582	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.8	49893	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	664	OUT	GET /media/wnmdo5pn/synesgy_2.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "a7e13980f773d81:0" Connection: close Last-Modified: Mon, 30 May 2022 07:33:05 GMT Content-Length: 4247276
2024-01-15 14:02:21 UTC	16163	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 13 61 00 00 0d b4 08 06 00 00 00 d2 36 81 35 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da ec 7d 6b 9a ab ba 0e a5 64 48 52 55 e7 76 4f a8 67 d1 93 e8 71 f6 94 fa 9e bd 2b 0f f0 ea 1f f8 6d 43 0c 81 84 54 69 9d ef 3b a9 0d c6 96 65 59 b6 85 90 f8 7f fd ef ff 03 22 22 02 08 34 fc 49 48 7e 03 20 bb 87 bc 18 40 44 28 5c a3 e4 fa f0 37 c7 05 47 af 59 30 db 32 70 e5 d8 fc c1 c1 f3 ee 9a f9 6d d8 97 57 ae 32 5f a6 31 cf 2a 8e db 69 18 a4 38 a6 4b 11 91 22 7f 3f 7c 4e 11 91 52 e6 9a ab 53 0f 65 c3 7a 83 f6 ec df ac 22 b2 86 b6 6d 39 db 36 fb ba 15 e9 98 2e f6 3c 48 9f 63 15 f0 8b d2 fe 78 1e 87 65 b8 70 2d 2d 97 3d c7 b9 dc 30 d5 81 e7 94 af ad 74 2b 60 59 71 6c Data Ascii: PNGIHDRa65pHYs.#.#x?v IDATx}kdHRUvOgq+mCTi;eY""4IH~ @D(\7GY02pmW2_1*i8K"?\|NRSez"m96.<Hcxep--=0t+`Yql
2024-01-15 14:02:21 UTC	20	IN	Data Raw: 1f 4b 33 26 38 5c 8f ce 7c e4 97 98 ee bc a3 76 ac e7 c2 3c Data Ascii: K3&8\\|v<
2024-01-15 14:02:21 UTC	8436	IN	Data Raw: e4 42 2b 3c a1 7d d2 f2 c6 57 85 94 bf 67 1c 37 c0 ca 1d 2e a1 86 72 6c 7e 49 29 22 6e a2 03 a8 bd c7 4d 33 dc 27 22 a5 1a 53 a4 f1 f7 9a 26 ba 47 aa 21 66 fb ac a9 bf 69 82 76 cc 35 fb 6b eb 0c ef 59 ba 98 09 2a a6 cb f2 48 13 11 0c a3 75 ca 5b 10 69 3b 08 d6 dd c5 fc 57 3f bd ac 9c 21 18 cf 89 77 3c f0 7e 28 ca f4 5b d1 f8 73 28 09 89 ed 8f cb b6 8c 42 39 d3 7f dd 51 d7 75 44 44 d4 f7 43 27 a1 7b d2 da da 8f 74 36 63 1b 3b 0e 86 be 53 7b 18 7e 8f 27 3a 9d 3e 88 88 e8 78 3c 12 11 d1 e1 78 a0 c3 61 b8 7f 68 87 6b 6d db 0e ff 3e b4 d4 36 e6 5a d3 9a e1 61 f7 ab 75 4f 44 44 d7 6e 68 bd 87 76 94 68 ad 27 78 1d 1b 41 86 1f 36 22 61 78 ca 8a b8 b1 32 9a ec ac 38 b7 53 5a fe 0d e3 68 f9 ab 5d 21 4b b7 ad df f5 f1 78 a0 a3 e9 f7 c1 5c b3 65 38 68 a7 b7 f5 f7 da Data Ascii: B+<}Wg7.rl~I)"nM3'"S&G!fiv5kY*Hu[i;W?!w<~([s(B9QuDDC'{t6c;S{~':>x<xahkm>6ZauODDnhvh'xA6"ax28SZh]!Kx\e8h
2024-01-15 14:02:21 UTC	1460	IN	Data Raw: 95 55 23 57 8d d5 29 6d e3 f4 4b 63 64 b5 69 8f 74 38 0d 7c ba 18 9e a8 ef e1 de f5 fb 9b ba cb 40 07 4c 3b bd e1 c3 4d 07 bb 28 71 7e d9 99 00 00 20 00 49 44 41 54 d8 39 04 52 66 8d 52 8d 91 51 73 8f 98 fd 9e c1 c8 b6 db 4b a1 27 6d ea e5 5c db 91 ca 5d 4b 9d ee 50 6e 5f 10 9c 7c d3 ed 11 07 fa 3a 56 e3 d5 c7 8d ed 3c f1 2a cf 67 4f 30 6f f0 2a 75 f1 c2 fe ac e8 2c c8 cf 64 e0 9b a1 28 d0 f8 99 fc aa 3c c3 16 4d 90 fe c5 ea 83 42 88 49 87 8f 79 e6 cf 69 9f bc dd 9b 52 57 19 53 50 a4 f0 67 0b 00 96 cd 13 dc ab 0a 4f 9a b8 3b 50 17 3b a8 eb 25 bd 5c da 81 d4 59 63 97 a3 f3 53 d6 b2 29 83 e6 44 3d 93 2f 1a 78 1e 9b 47 e8 c2 0b 46 1c 25 0b e3 dc fe 3c 4c c8 74 61 60 ce b6 6d 26 07 8a c5 75 72 ae 9e 07 7d a7 41 6f 21 e6 6c e0 31 e1 cd 96 4a 08 46 df e8 70 62 Data Ascii: U#W)mKcdit8\|@L;M(q~ IDAT9RfRQsK'm\]KPn_\|:V<gO0ou,d(<MBIyiRWSPgO;P;%\YcS)D=/xGF%<Lta`m&ur}Ao!l1JFpb
2024-01-15 14:02:21 UTC	15524	IN	Data Raw: 23 5f c3 bd c6 24 1f 12 fc ca d7 de f7 f1 74 3e c3 e9 e4 75 e7 f7 ef 3f 00 00 70 38 1c 00 00 a0 eb 2e 70 3e 5f 58 af fc bd cb f9 04 a7 93 e2 e7 3d cb 36 89 b5 eb 83 2e f8 f7 3a 4b ec 07 35 34 ec 13 2f 97 33 eb 73 03 0d db 79 bb f3 f4 1d 8e be 9d dd 7e 1f 69 dd 33 ad 5f 5f 5f 00 00 f0 eb eb 57 bc 17 fa d5 b6 00 c8 75 05 23 0d be c4 b5 2e da f4 70 3c ca cb 37 2a e5 f1 6d c1 d7 eb d8 57 ef b8 bd f3 f9 0c 5f 6c 9b 5d d7 b1 3d 1e f9 d9 11 6c cf 7a 6f fb e8 7b ad 0d fd ed b8 1c db e5 be 87 8e e9 da 73 ff 5b a3 22 bf 74 a3 59 ef 59 9f 9b 16 5a b7 67 39 fb 7b aa 69 b9 7c 0b 17 ed e9 e8 ce de 37 d8 ce b7 db 13 41 32 77 df ef 06 00 8c 2e e7 2b 2a d8 89 53 d1 be 88 e9 03 62 fe 59 05 44 fd c0 27 a4 33 b2 ae 32 e7 c2 c1 f4 b9 98 fe 50 59 86 a8 b2 f4 ab 7c 7b 99 3b 89 Data Ascii: #_$t>u?p8.p>_X=6.:K54/3sy~i3___Wu#.p<7mW_l]=lzo{s["tYYZg9{i\|7A2w.+SbYD'32PY\|{;
2024-01-15 14:02:21 UTC	16383	IN	Data Raw: 7c e5 7f 6b e3 40 b9 20 a4 60 13 3a 8e f9 6d fb 55 d0 40 40 51 a6 27 ee 7f 7f f6 3c ea 2f 67 b0 3d ff 1d d8 db 39 40 64 df 8f ec 2f c3 dc 41 1b 50 f1 ac 27 15 f6 6f e1 e2 f9 93 cf 43 b3 7e b9 60 27 dc 8e 56 f1 c8 2e 0c 8e f0 fa 7f 0f a6 ab 95 63 b7 c5 a7 91 b9 4f 42 2b 3f a1 bc c1 66 02 6e 54 8f 60 f9 e6 d9 b3 78 f7 b8 86 f0 41 2a 49 5b 11 46 b7 d7 86 69 01 be c1 5e e7 77 7c 09 c1 aa fc f1 8e 9d 84 c7 d0 e7 6e de 67 bb cd 0e ae 3c a3 4f 70 0d 6f f4 d5 7d fd 21 8d 65 ef 52 6d a0 7f f5 8e af 94 fc c7 4c 44 de cc c0 1e 66 5e 2f 46 d8 03 f4 eb c6 a3 56 8b 89 a1 55 4f 97 d6 b5 94 d8 c1 3e 1b 4d d7 39 3b 1a 11 4d fe e2 8d 8a 76 60 bc af 57 a3 79 a2 51 aa 9c 5b 9b dc 57 1f bd 81 95 bd 77 a8 cc 95 a8 d2 56 be e2 9b f9 36 75 93 8c 9f 5b cb 36 f3 e2 07 18 d8 3d 3d Data Ascii: \|k@ `:mU@@Q'</g=9@d/AP'oC~`'V.cOB+?fnT`xA*I[Fi^w\|ng<Opo}!eRmLDf^/FVUO>M9;Mv`WyQ[WwV6u[6==
2024-01-15 14:02:21 UTC	26	IN	Data Raw: d7 2c 74 a3 8a 57 ca 6b 72 34 c6 5c b0 1b c5 ec 0d 69 8e 14 9a bc 75 64 93 af Data Ascii: ,tWkr4\iud
2024-01-15 14:02:21 UTC	16383	IN	Data Raw: 33 e1 cc d3 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 c3 4f 42 40 dd 55 b0 d8 83 81 c6 69 1c 65 37 48 bd a3 99 56 11 08 f3 79 7f 24 48 03 1a ba 53 1f 41 de a6 90 06 f5 4d 64 99 03 2a b3 c2 4e ed 70 5c 43 49 94 bb a1 56 3b 8e 1f db 65 9a 26 77 23 17 de f1 cc 34 82 38 38 c3 89 d4 98 73 e4 a9 33 5a 4e d1 38 05 1a 3d 37 2a af ed 92 a6 69 d6 1b 99 1d 63 6c 06 2f 86 c7 c7 63 a7 4e c5 67 20 8a 37 97 60 4c 1b c7 77 f0 5c 5e f0 02 61 f1 5c 56 f1 66 ba c5 87 b0 76 bc 71 3d 78 77 4e 4e d9 e5 97 8c 2d b1 4d e7 a0 ff a2 39 75 d3 91 8b 0b 6d a8 89 73 6d f0 e2 fa f2 b8 e2 fc 51 cb 7d fa 00 5c 34 16 ac 60 e9 8f 36 b8 99 Data Ascii: 3`0`0`0`0`0`0`0`0`0OB@Uie7HVy$HSAMdNp\CIV;e&w#488s3ZN8=7icl/cNg 7`Lw\^a\Vfvq=xwNN-M9umsmQ}\4`6
2024-01-15 14:02:21 UTC	26	IN	Data Raw: 3a e5 a5 b0 57 8e 29 11 74 ac c7 db 6d 9f 6c e6 eb eb 57 7f dc 7e a9 6e 43 21 Data Ascii: :W)tmlW~nC!
2024-01-15 14:02:21 UTC	16383	IN	Data Raw: cf f5 7a 55 f5 63 c5 fd 58 ad 57 f0 fd 7b 9f 74 ed f3 a3 4f 38 f4 9d 8f eb 55 4e 5a 97 4d 9d 20 76 92 38 a7 4f ae b4 e5 24 4b b1 8b aa ad 9a ec ce 67 9d 6f 35 e1 4e 9f e0 e7 d7 ef df f0 c5 f4 4b e6 c0 9c 18 a7 83 bc 26 89 13 27 35 39 e9 59 4e d2 27 c9 8b dc 68 8d 55 e0 24 53 ab 66 03 eb 75 9d 1c 4d 12 ec b5 bb 9d 26 5f fb f1 b3 4f b4 f6 eb d7 2f d8 71 9f a4 2e 49 f4 13 7c 93 13 72 39 a6 c1 e5 24 81 9a f8 ad b0 75 f1 93 04 63 db d6 04 81 52 3e 94 09 ba 8a e4 53 d0 27 12 1a 26 b2 4b 5d ca ea b6 27 b9 e7 be f1 6c 9c 14 92 ed 91 20 27 2f 0b 54 f1 d2 39 9f 75 7a c2 be a4 df 5e bf 59 79 08 ae 4e 12 25 49 1b 43 13 d4 8e 35 c9 54 70 ea b7 52 e1 87 a5 ff 2d eb de 38 71 e4 74 ac 21 7e 08 74 5c cc 89 c3 72 a2 b4 01 5f 28 af 19 8b 5c 46 12 35 a5 36 e6 b1 a3 48 20 96 Data Ascii: zUcXW{tO8UNZM v8O$Kgo5NK&'59YN'hU$SfuM&_O/q.I\|r9$ucR>S'&K]'l '/T9uz^YyN%IC5TpR-8qt!~t\r_(\F56H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.8	49902	35.201.111.240	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	581	OUT	OPTIONS /consent/uw/3 HTTP/1.1 Host: consent-api.service.consent.usercentrics.eu Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: access-control-allow-origin,content-type,x-request-id Origin: https://www.synesgy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:21 UTC	583	IN	HTTP/1.1 204 No Content vary: Origin, Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE access-control-allow-headers: access-control-allow-origin,content-type,x-request-id access-control-max-age: 86400 X-Cloud-Trace-Context: a3f1dd80cae2ea457fa88e13f245a21a Date: Mon, 15 Jan 2024 14:02:21 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.8	49894	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:20 UTC	664	OUT	GET /media/tkccxelm/synesgy_3.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "7d6ada92f773d81:0" Connection: close Last-Modified: Mon, 30 May 2022 07:33:36 GMT Content-Length: 7348829
2024-01-15 14:02:21 UTC	16163	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 13 61 00 00 0d b4 08 06 00 00 00 d2 36 81 35 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da ec bd 5b 9a e4 b6 d2 24 88 0b c9 88 4c e9 f4 ff f5 e6 66 4d b3 8f 59 c9 2c a9 8f a4 cc 08 92 00 fa 21 60 06 b8 91 51 17 55 96 aa 24 c1 5f b2 2a 33 82 c4 c5 ef ee 80 f9 ff ef ff fd 7f 8a 73 ce 95 e2 9c 73 ce e5 9c 9d 73 ce 15 f7 f8 45 0c c1 c5 10 eb ef 1e 54 72 7a fc 2d 4e ce 39 e7 e6 79 76 ce 39 97 f2 5e ff 5e 9f 51 1e 3f 53 ca 7c 86 f3 8f a7 ec fb e3 b3 cb b2 d4 ff 6f f5 67 aa cf 7c 3c 3b d7 67 c4 18 9c 77 de f5 84 f1 60 cc 53 7c bc 03 9f f3 f5 13 db 66 df 95 52 72 29 3d be 13 a6 c9 3c 03 3f 9d af ef f2 c1 39 e7 dc ba ae 8f cf fb c7 3b c2 3c b9 5c 9f e1 eb 67 b7 f4 Data Ascii: PNGIHDRa65pHYs.#.#x?v IDATx[$LfMY,!`QU$_*3sssETrz-N9yv9^^Q?S\|og\|<;gw`S\|fRr)=<?9;<\g
2024-01-15 14:02:21 UTC	20	IN	Data Raw: b9 d8 8a 39 7d b2 d6 db e4 9e e6 c6 d5 fe b0 17 cd db da 75 Data Ascii: 9}u
2024-01-15 14:02:21 UTC	16383	IN	Data Raw: 62 bd d0 1f eb ac 8c eb 4b af 4a a9 d3 35 bf 16 67 eb 33 e5 dc 74 74 da 6b 5e 33 dd 4d 0c 86 b9 c2 6e d0 67 84 9f ee 9a 7f c3 da 08 f2 88 55 de ef ea 4f f8 73 1f f2 2c 37 78 ec 63 4b b6 6f 4a ec ea fb fb 3b ed 22 9e 95 24 77 08 3f 03 b1 97 f2 5e 1f 4f 29 7f ea 38 99 ab 97 3e a5 3e 67 4f 35 67 db 5b 3a 1b 16 6d 2f 51 7d d7 4b f5 43 b8 47 29 1f f6 16 7f a3 bd 92 de b4 29 4c 07 9f 93 f3 83 3f 95 f3 a9 cf 1a 64 9f 62 9f ff f7 d6 af 5a 69 1f 27 5b 37 c3 3a b1 4f d2 d6 61 7b 7e dc e8 48 15 59 4b bb c6 f8 fc ce be 1b cf c5 8d 5d 8d be 5f 87 be 1e 67 79 b0 ad 63 e3 3d 67 6b 91 69 37 f6 0a 35 d0 d6 67 57 24 bf 9e bb 3c 9e cd ed a2 07 8f b6 ce 97 53 3d 58 72 6e 75 f7 e0 6c 3d 48 6a 48 9e 39 e7 cd d8 b3 10 02 f7 01 36 02 39 39 f6 43 4a 8f 01 eb 3e 75 3f f7 4e 16 b6 Data Ascii: bKJ5g3ttk^3MngUOs,7xcKoJ;"$w?^O)8>>gO5g[:m/Q}KCG))L?dbZi'[7:Oa{~HYK]_gyc=gki75gW$<S=Xrnul=HjH9699CJ>u?N
2024-01-15 14:02:21 UTC	1	IN	Data Raw: 79 Data Ascii: y
2024-01-15 14:02:21 UTC	9036	IN	Data Raw: c9 64 f6 47 ba 9c 80 9e 8c dc fb ac f9 ac e0 35 9f 9f 1b 7e cd a6 ef 8f 52 27 c1 97 23 b7 e3 b3 78 3f 9e dd 7b cf 1c 71 91 bc 07 1e b2 61 d8 55 63 7c 70 45 f2 4c be 03 d2 c4 4d a8 61 1d 07 a7 b0 b4 e9 b7 50 df df de de 1c 4a 18 f7 07 b1 5e 04 97 72 0d f0 27 66 ff 30 ce 13 c7 3a a3 86 80 db 20 35 57 54 fc 37 7e 50 38 d6 fd ce ba c0 fb 10 2b 02 1b ce 2a 9e b9 cf 69 14 3c bd 6f 45 0c cf 8f 7d 77 f6 88 c8 11 e8 9b 50 03 e1 03 f3 dc f1 64 7a 3f 6c 32 cf 08 bc 99 b7 c7 bc bc 7f ff 26 3e 50 dd be 25 35 f6 65 9d 74 5e 01 d6 97 79 42 fd c2 5c 94 fc c6 35 c9 4e ef 33 01 77 c2 7f 67 7e 56 e6 4b f6 66 f1 d3 b9 d8 38 51 c6 89 de ef 7d 7b 7b 53 78 ab f5 71 92 9f 4b eb d9 b0 86 c0 f6 76 cf de e2 60 8c 0f 98 26 e7 4a bf 41 7d 5a 27 d4 2b c1 da c9 19 9e 5f e7 61 e7 83 0b Data Ascii: dG5~R'#x?{qaUc\|pELMaPJ^r'f0: 5WT7~P8+*i<oE}wPdz?l2&>P%5et^yB\5N3wg~VKf8Q}{{SxqKv`&JA}Z'+_a
2024-01-15 14:02:21 UTC	16383	IN	Data Raw: a0 aa b7 dc 23 ce 73 a7 fa 59 d5 df a0 4c eb 44 a9 d7 51 c8 57 e7 b2 6d df 5b 6c 42 5d 37 eb 58 2c 46 91 1b ea 92 99 5f c8 5d 5b 8e 96 b8 b1 2a 92 f6 59 b1 e4 ac 01 f2 f7 65 9e dd ed 76 95 f1 88 f2 a4 e4 e3 b7 ed 4d f9 60 f3 f7 a0 7c c4 d5 ea 96 69 51 cf 0d 65 62 3c 5b 29 d5 e4 86 a2 6a 63 ad c5 a5 2d ab dc 88 e7 b6 0a db d5 69 95 6c ac fd bb 65 a5 9f 95 82 fa a8 f3 cd 9d f3 a6 73 2a eb ab e4 94 e8 23 7d 7f 0a 4d a1 b9 9f bb fb 1d ca aa b3 7a 46 57 8f 38 a2 57 bf ee 9f 85 f5 88 0a 96 3a 16 50 9b 6b ad ce 23 06 e4 3e f0 01 c4 3d f0 0c 54 d8 e9 b7 ac c5 ad 1e ed 26 17 59 c5 d0 5a af aa 7e c1 6a ad 07 e5 4e e4 4e 1b 67 ce f8 b9 55 f2 cd 39 35 65 4e 53 37 9b 1a 2a 72 c7 a6 ae 35 53 11 37 40 60 9c d8 03 0f 6e 15 ee 2d 26 61 ac 74 b9 18 3e dd d4 df 1f f3 03 e5 Data Ascii: #sYLDQWm[lB]7X,F_][YevM`\|iQeb<[)jc-iles#}MzFW8W:Pk#>=T&YZ~jNNgU95eNS7*r5S7@`n-&at>
2024-01-15 14:02:21 UTC	26	IN	Data Raw: 65 27 55 7f e6 19 43 8d 25 be 3a 3b db b6 ac be 01 eb c0 2c a9 46 c8 0b 76 ea Data Ascii: e'UC%:;,Fv
2024-01-15 14:02:21 UTC	16383	IN	Data Raw: dd f9 69 e9 d6 9a 99 e2 03 c5 38 3e 81 57 19 47 77 b3 af 8d 74 0b 7e 18 cf 86 7b 01 ff f4 d8 08 3f 8d 70 d1 c7 eb 18 a7 d3 71 a8 0f 6f f7 dc 73 ee 7c 67 72 be 82 f5 19 bf e7 f8 d0 eb 19 d8 33 8d 3d 3b d1 33 fa f9 51 a6 e7 64 8c d7 c6 68 1a 4e 9f bb 2a 4b ec e6 b0 1c d8 76 a7 e6 af d7 fb bd 63 f7 9d 9d 2f 02 ae 4a e1 1c 7f ba 38 0a 76 e7 e5 e2 63 30 9e 85 63 9c 62 e8 fd 30 ef fa 0c e4 87 81 cb 63 f4 ae 4c 99 61 db b5 e7 34 eb 67 31 2e cc 97 62 80 e2 99 c8 2b d9 57 ad d5 30 08 b1 2d cf 8a 3f ab d3 5b f5 a9 88 0f b1 28 16 64 b6 58 5d 9f 36 c7 8c f1 0f e3 cd 59 99 5d 97 16 07 80 c9 a0 3f d0 73 c4 16 3c 94 d9 b0 e8 73 4b f6 39 0e 7c 19 62 7f cd 9e 69 7e 56 26 61 09 f3 7c 75 f7 33 7c 6c 4c b7 fd 3c 40 af 81 d5 f0 4c 29 89 0e 72 6b f8 dc 42 2d 70 a7 67 6b d6 98 Data Ascii: i8>WGwt~{?pqos\|gr3=;3QdhN*Kvc/J8vc0cb0cLa4g1.b+W0-?[(dX]6Y]?s<sK9\|bi~V&a\|u3\|lL<@L)rkB-pgk
2024-01-15 14:02:21 UTC	26	IN	Data Raw: ca 42 be db 18 94 ab 5b 83 10 96 70 bf 3d 6c 5f 59 7b 9b 1f 64 e6 e6 42 0c c6 Data Ascii: B[p=l_Y{dB
2024-01-15 14:02:21 UTC	16383	IN	Data Raw: ca a6 5a 6d 8c ea a3 a3 67 8e 16 62 4b e4 38 61 2e 45 74 cc 60 46 07 ab a3 32 da ef c5 f9 19 8c b3 b4 79 db d6 dd 98 c0 03 e9 18 e2 05 18 32 9b 2f 51 06 e1 62 7a 06 bd 85 ff 07 5b 6a c9 fe 5a 6a 23 e2 99 61 63 cf f0 49 ec 9e 36 5f f9 74 3e a6 29 91 8d d6 c3 69 bc cc b0 1d 0e 2c 97 de d7 ee fb 51 5f cd 26 ca 13 1f ef 63 8d 31 aa 1b 16 c0 df 38 d6 c0 67 40 8f 11 63 fa 6b de 6e 37 c2 9b 8f ef be 37 06 63 f8 93 44 cc b8 95 ec bf f7 6f 98 25 5c 73 85 1f 06 e3 f4 e4 59 d6 a5 23 ee b4 df 31 2b 35 f4 b8 3a 3b 87 6e e4 98 1d 0e e8 9f b3 66 cf da ba 13 3e b6 fb fb e3 a0 e7 79 31 df 73 bb 3b bd 60 9c a1 4c c6 60 6d ed 58 64 55 a7 1b eb 6a 24 fc 32 11 33 30 6c 14 fa 5e 73 b1 79 06 cb f9 3c 7b 7d 68 7f 07 ab ed ae 6b e1 fd e0 5c 43 08 3b e1 05 8a 47 ea 8f 81 7f da 9c Data Ascii: ZmgbK8a.Et`F2y2/Qbz[jZj#acI6_t>)i,Q_&c18g@ckn77cDo%\sY#1+5:;nf>y1s;`L`mXdUj$230l^sy<{}hk\C;G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.8	49895	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	433	OUT	GET /media/i2girxb4/ireland-33-33x.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	216	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "78f8e9c54064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:37:16 GMT Content-Length: 632
2024-01-15 14:02:21 UTC	632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 08 00 00 00 9a 08 06 00 00 00 55 2f d6 03 00 00 00 09 70 48 59 73 00 01 71 18 00 01 71 18 01 ec c1 b0 08 00 00 02 2a 49 44 41 54 78 9c ed d4 b1 49 83 01 18 45 d1 2f 22 08 e2 02 56 96 b6 8e e0 00 6e e1 0c ce 91 ce 22 5b a4 b1 4f 69 e7 08 ba 83 08 0a 1a 27 b8 e5 0f 21 39 67 83 f7 8a bb ba df 3c ee 87 45 dc 5d df ce fa e1 c9 b9 0b f9 7a 79 fe f8 7e dd de 1c e5 b8 c3 b0 3b 3b f5 07 80 26 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 00 92 40 00 49 20 80 24 10 40 12 08 20 09 04 90 04 02 48 02 01 24 81 Data Ascii: PNGIHDRU/pHYsqq*IDATxIE/"Vn"[Oi'!9g<E]zy~;;&@ H$@I $@ H$@I $@ H$@I $@ H$@I $@ H$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.8	49896	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	426	OUT	GET /media/2vhcl40j/imprese.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "aaa991b1f2e5d71:0" Connection: close Last-Modified: Tue, 30 Nov 2021 14:00:55 GMT Content-Length: 1104
2024-01-15 14:02:21 UTC	1104	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.8	49903	34.120.28.121	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	419	OUT	GET /aggregate/en?templates=H1Vl5NidjWX@40.17.44,zqWojrT0P@15.7.10 HTTP/1.1 Host: aggregator.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:21 UTC	436	IN	HTTP/1.1 200 OK access-control-allow-origin: * X-Cloud-Trace-Context: d5f904925e5d5e34879b430f20b8e00a Server: Google Frontend Content-Length: 7615 Via: 1.1 google Date: Mon, 15 Jan 2024 14:02:20 GMT Cache-Control: public,max-age=2592000 ETag: "1uteajd" Content-Type: application/json; charset=utf-8 Vary: Accept-Encoding, accept-encoding Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:21 UTC	816	IN	Data Raw: 7b 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 61 64 6d 69 6e 53 65 74 74 69 6e 67 73 49 64 22 3a 5b 5d 2c 22 64 61 74 61 41 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 2c 22 64 61 74 61 50 72 6f 63 65 73 73 6f 72 73 22 3a 5b 22 4d 61 74 6f 6d 6f 22 5d 2c 22 64 61 74 61 50 72 6f 63 65 73 73 6f 72 22 3a 22 4d 61 74 6f 6d 6f 22 2c 22 64 61 74 61 50 75 72 70 6f 73 65 73 22 3a 5b 5d 2c 22 64 6f 6d 41 74 74 72 69 62 75 74 65 73 22 3a 5b 5d 2c 22 64 6f 6d 45 6c 65 6d 65 6e 74 73 22 3a 5b 5d 2c 22 64 6f 6d 4b 65 79 73 22 3a 5b 5d 2c 22 6e 61 6d 65 4f 66 50 72 6f 63 65 73 73 69 6e 67 43 6f 6d 70 61 6e 79 22 3a 22 49 6e 6e 6f 43 72 61 66 74 22 2c 22 61 64 64 72 65 73 73 4f 66 50 72 6f 63 65 73 73 69 6e 67 43 6f 6d 70 61 6e 79 22 3a 22 31 35 30 20 57 69 6c 6c 69 73 20 Data Ascii: {"templates":[{"adminSettingsId":[],"dataAttributes":[],"dataProcessors":["Matomo"],"dataProcessor":"Matomo","dataPurposes":[],"domAttributes":[],"domElements":[],"domKeys":[],"nameOfProcessingCompany":"InnoCraft","addressOfProcessingCompany":"150 Willis
2024-01-15 14:02:21 UTC	1252	IN	Data Raw: 65 20 6f 66 20 76 69 73 69 74 22 2c 22 44 65 76 69 63 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 46 69 6c 65 73 20 63 6c 69 63 6b 65 64 20 6f 72 20 64 6f 77 6e 6c 6f 61 64 65 64 22 2c 22 47 65 6f 67 72 61 70 68 69 63 20 6c 6f 63 61 74 69 6f 6e 22 2c 22 4c 69 6e 6b 73 20 74 6f 20 6f 75 74 73 69 64 65 20 64 6f 6d 61 69 6e 20 63 6c 69 63 6b 65 64 22 2c 22 4e 75 6d 62 65 72 20 6f 66 20 76 69 73 69 74 73 22 2c 22 50 61 67 65 20 74 69 74 6c 65 22 2c 22 52 65 66 65 72 72 65 72 20 55 52 4c 22 2c 22 53 63 72 65 65 6e 20 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 22 54 69 6d 65 20 6f 66 20 75 73 65 72 73 20 66 69 72 73 74 20 76 69 73 69 74 22 2c 22 54 69 6d 65 20 6f 66 20 75 73 65 72 73 20 70 72 65 76 69 6f 75 73 20 76 69 73 69 74 22 2c 22 54 69 6d 65 20 7a 6f 6e 65 Data Ascii: e of visit","Device information","Files clicked or downloaded","Geographic location","Links to outside domain clicked","Number of visits","Page title","Referrer URL","Screen resolution","Time of users first visit","Time of users previous visit","Time zone
2024-01-15 14:02:21 UTC	1252	IN	Data Raw: 64 65 64 20 66 6f 72 20 74 68 65 20 70 72 6f 63 65 73 73 69 6e 67 20 70 75 72 70 6f 73 65 73 2e 22 2c 22 64 61 74 61 50 72 6f 74 65 63 74 69 6f 6e 4f 66 66 69 63 65 72 22 3a 22 70 72 69 76 61 63 79 40 6d 61 74 6f 6d 6f 2e 6f 72 67 22 2c 22 64 61 74 61 43 6f 6c 6c 65 63 74 65 64 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 64 61 74 61 50 75 72 70 6f 73 65 73 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 64 61 74 61 52 65 63 69 70 69 65 6e 74 73 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 6c 65 67 61 6c 42 61 73 69 73 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 6f 70 74 4f 75 74 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 74 68 69 72 64 43 6f 75 6e 74 72 79 54 72 61 6e 73 66 65 72 22 3a 22 22 2c 22 70 72 69 76 61 63 79 50 6f Data Ascii: ded for the processing purposes.","dataProtectionOfficer":"privacy@matomo.org","dataCollectedDescription":"","dataPurposesDescription":"","dataRecipientsDescription":"","legalBasisDescription":"","optOutDescription":"","thirdCountryTransfer":"","privacyPo
2024-01-15 14:02:21 UTC	1252	IN	Data Raw: 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 2c 22 64 6f 6d 61 69 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 73 74 6f 72 65 20 61 20 75 6e 69 71 75 65 20 73 65 73 73 69 6f 6e 20 49 44 2e 22 2c 22 74 79 70 65 22 3a 22 63 6f 6f 6b 69 65 22 7d 2c 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 5f 70 6b 5f 74 65 73 74 63 6f 6f 6b 69 65 22 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 30 2c 22 64 6f 6d 61 69 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 63 68 65 63 6b 20 77 68 65 74 68 65 72 20 74 68 65 20 76 69 73 69 74 6f 72 e2 80 99 73 20 62 72 6f 77 73 65 72 20 73 75 70 70 6f 72 74 Data Ascii: maxAgeSeconds":1800,"domain":"","description":"This is used to store a unique session ID.","type":"cookie"},{"identifier":"","name":"_pk_testcookie","maxAgeSeconds":0,"domain":"","description":"This is used to check whether the visitors browser support
2024-01-15 14:02:21 UTC	1252	IN	Data Raw: 6e 22 2c 22 61 66 22 2c 22 6b 61 22 2c 22 6b 6b 22 2c 22 68 65 22 2c 22 66 61 22 2c 22 63 79 22 2c 22 75 7a 5f 6c 61 74 6e 22 2c 22 68 79 22 2c 22 67 6c 22 2c 22 6d 73 22 5d 2c 22 64 61 74 61 43 6f 6c 6c 65 63 74 65 64 4c 69 73 74 22 3a 5b 22 4f 70 74 2d 69 6e 20 61 6e 64 20 6f 70 74 2d 6f 75 74 20 64 61 74 61 22 2c 22 52 65 66 65 72 72 65 72 20 55 52 4c 22 2c 22 55 73 65 72 20 61 67 65 6e 74 22 2c 22 55 73 65 72 20 73 65 74 74 69 6e 67 73 22 2c 22 43 6f 6e 73 65 6e 74 20 49 44 22 2c 22 54 69 6d 65 20 6f 66 20 63 6f 6e 73 65 6e 74 22 2c 22 43 6f 6e 73 65 6e 74 20 74 79 70 65 22 2c 22 54 65 6d 70 6c 61 74 65 20 76 65 72 73 69 6f 6e 22 2c 22 42 61 6e 6e 65 72 20 6c 61 6e 67 75 61 67 65 22 2c 22 49 50 20 61 64 64 72 65 73 73 22 2c 22 47 65 6f 67 72 61 70 68 Data Ascii: n","af","ka","kk","he","fa","cy","uz_latn","hy","gl","ms"],"dataCollectedList":["Opt-in and opt-out data","Referrer URL","User agent","User settings","Consent ID","Time of consent","Consent type","Template version","Banner language","IP address","Geograph
2024-01-15 14:02:21 UTC	1252	IN	Data Raw: 61 20 77 69 6c 6c 20 74 68 65 6e 20 62 65 20 64 65 6c 65 74 65 64 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 22 2c 22 64 61 74 61 50 72 6f 74 65 63 74 69 6f 6e 4f 66 66 69 63 65 72 22 3a 22 64 61 74 65 6e 73 63 68 75 74 7a 40 75 73 65 72 63 65 6e 74 72 69 63 73 2e 63 6f 6d 22 2c 22 64 61 74 61 43 6f 6c 6c 65 63 74 65 64 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 20 55 52 4c 73 20 6f 66 20 74 68 65 20 77 65 62 70 61 67 65 20 61 6e 64 20 74 68 65 20 70 61 67 65 20 70 61 74 68 20 6f 66 20 74 68 65 20 77 65 62 70 61 67 65 20 61 72 65 20 64 61 74 61 20 63 6f 6c 6c 65 63 74 65 64 20 74 68 72 6f 75 67 68 20 74 68 65 20 54 61 67 6c 6f 67 67 65 72 2e 20 54 68 65 20 54 61 67 6c 6f 67 67 65 72 20 69 73 20 61 6c 77 61 79 73 20 61 63 74 69 Data Ascii: a will then be deleted immediately.","dataProtectionOfficer":"datenschutz@usercentrics.com","dataCollectedDescription":"The request URLs of the webpage and the page path of the webpage are data collected through the Taglogger. The Taglogger is always acti
2024-01-15 14:02:21 UTC	539	IN	Data Raw: 79 20 67 69 76 65 6e 20 63 6f 6e 73 65 6e 74 2e 22 2c 22 74 79 70 65 22 3a 22 77 65 62 22 7d 2c 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 75 63 44 61 74 61 20 28 6f 70 74 69 6f 6e 61 6c 29 22 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 30 2c 22 64 6f 6d 61 69 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 68 6f 6c 64 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 47 6f 6f 67 6c 65 20 43 6f 6e 73 65 6e 74 20 4d 6f 64 65 2e 22 2c 22 74 79 70 65 22 3a 22 77 65 62 22 7d 2c 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 22 2c 22 6e 61 6d 65 22 3a 22 75 63 5f 75 69 5f 76 65 72 73 69 6f 6e 22 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 30 2c 22 64 6f 6d 61 69 6e Data Ascii: y given consent.","type":"web"},{"identifier":"","name":"ucData (optional)","maxAgeSeconds":0,"domain":"","description":"This holds information about the Google Consent Mode.","type":"web"},{"identifier":"","name":"uc_ui_version","maxAgeSeconds":0,"domain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.8	49897	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	666	OUT	GET /media/spsp0w2m/ingranaggio.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "b7f8392648ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:55:14 GMT Content-Length: 2920
2024-01-15 14:02:21 UTC	2718	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 14:02:21 UTC	202	IN	Data Raw: 30 2e 34 4c 37 2c 32 39 2e 31 6c 30 2e 34 2c 30 2e 36 63 30 2e 37 2c 31 2c 31 2e 35 2c 31 2e 39 2c 32 2e 34 2c 32 2e 38 6c 30 2e 35 2c 30 2e 35 6c 2d 31 2e 33 2c 33 2e 32 0a 09 09 09 09 09 63 2d 30 2e 31 2c 30 2e 33 2c 30 2c 30 2e 37 2c 30 2e 33 2c 30 2e 39 6c 34 2e 39 2c 32 2e 34 63 30 2e 33 2c 30 2e 32 2c 30 2e 37 2c 30 2c 30 2e 39 2d 30 2e 33 6c 31 2e 37 2d 33 6c 30 2e 37 2c 30 2e 31 63 31 2e 32 2c 30 2e 32 2c 32 2e 34 2c 30 2e 33 2c 33 2e 37 2c 30 2e 32 4c 32 32 2e 31 2c 33 36 2e 34 7a 22 2f 3e 0a 09 09 09 3c 2f 67 3e 0a 09 09 3c 2f 67 3e 0a 09 3c 2f 67 3e 0a 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 0.4L7,29.1l0.4,0.6c0.7,1,1.5,1.9,2.4,2.8l0.5,0.5l-1.3,3.2c-0.1,0.3,0,0.7,0.3,0.9l4.9,2.4c0.3,0.2,0.7,0,0.9-0.3l1.7-3l0.7,0.1c1.2,0.2,2.4,0.3,3.7,0.2L22.1,36.4z"/></g></g></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.8	49898	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	438	OUT	GET /media/mivd1pzi/istituti-finanziari.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "5d41f0b1f2e5d71:0" Connection: close Last-Modified: Tue, 30 Nov 2021 14:00:56 GMT Content-Length: 1818
2024-01-15 14:02:21 UTC	1258	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 14:02:21 UTC	560	IN	Data Raw: 30 2e 38 63 30 2d 30 2e 33 2d 30 2e 31 2d 30 2e 35 2d 30 2e 32 2d 30 2e 37 4c 33 38 2c 32 39 0a 09 63 2d 31 2e 32 2d 31 2e 32 2d 32 2e 38 2d 32 2e 35 2d 35 2e 36 2d 32 2e 35 63 2d 33 2e 33 2c 30 2d 36 2e 32 2c 32 2e 32 2d 37 2e 33 2c 35 2e 33 68 2d 31 63 2d 30 2e 36 2c 30 2d 31 2e 31 2c 30 2e 35 2d 31 2e 31 2c 31 2e 31 53 32 33 2e 35 2c 33 34 2c 32 34 2c 33 34 68 30 2e 36 63 30 2c 30 2e 31 2c 30 2c 30 2e 31 2c 30 2c 30 2e 32 0a 09 63 30 2c 30 2e 32 2c 30 2c 30 2e 34 2c 30 2c 30 2e 36 48 32 34 63 2d 30 2e 36 2c 30 2d 31 2e 31 2c 30 2e 35 2d 31 2e 31 2c 31 2e 31 63 30 2c 30 2e 36 2c 30 2e 35 2c 31 2e 31 2c 31 2e 31 2c 31 2e 31 68 31 2e 32 63 31 2e 32 2c 32 2e 39 2c 34 2c 34 2e 38 2c 37 2e 31 2c 34 2e 38 63 32 2e 37 2c 30 2c 34 2e 34 2d 31 2e 33 2c 35 2e 36 Data Ascii: 0.8c0-0.3-0.1-0.5-0.2-0.7L38,29c-1.2-1.2-2.8-2.5-5.6-2.5c-3.3,0-6.2,2.2-7.3,5.3h-1c-0.6,0-1.1,0.5-1.1,1.1S23.5,34,24,34h0.6c0,0.1,0,0.1,0,0.2c0,0.2,0,0.4,0,0.6H24c-0.6,0-1.1,0.5-1.1,1.1c0,0.6,0.5,1.1,1.1,1.1h1.2c1.2,2.9,4,4.8,7.1,4.8c2.7,0,4.4-1.3,5.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.8	49899	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	661	OUT	GET /media/b5ohr1ef/foglia.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "efa47f3d48ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:55:53 GMT Content-Length: 1191
2024-01-15 14:02:21 UTC	1191	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.8	49900	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	424	OUT	GET /media/nehjkomg/world.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	217	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "68f717b017dd81:0" Connection: close Last-Modified: Wed, 19 Jan 2022 09:33:59 GMT Content-Length: 15218
2024-01-15 14:02:21 UTC	2722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 9c 00 00 00 9c 08 06 00 00 00 8a b8 c2 4d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 44 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 00 9c a0 03 00 04 00 00 00 01 00 00 00 9c 00 00 00 00 6f d7 8f d8 00 00 3a dc 49 44 41 54 78 01 ed 5d 09 7c 14 45 d6 af ea 99 c9 01 89 e0 81 ae 90 04 50 14 44 57 57 b9 bc 41 d6 0b 77 5d af 5d 14 48 02 a2 a8 7b f8 e1 4a c2 e5 b1 71 3d 20 24 e8 aa b8 87 22 6e 2e 44 5c af 55 11 2f 40 d6 55 11 f1 c6 05 45 05 12 f0 56 20 89 39 66 a6 eb fb bf 4e ba a7 aa 67 26 73 4f 26 81 f9 11 fa d5 f5 ea e8 d7 af 5e bd 7a f5 8a b3 7d 3f 63 04 06 55 97 ec d7 c2 ea 07 0b Data Ascii: PNGIHDRMsRGBDeXIfMM*io:IDATx]\|EPDWWAw]]H{Jq= $"n.D\U/@UEV 9fNg&sO&^z}?cU
2024-01-15 14:02:21 UTC	12496	IN	Data Raw: 2c c4 41 4a 78 5f 20 a6 11 a8 9d 7c e7 12 ec 08 94 2a 44 07 db 0a 8f db fd d2 61 cb 67 f5 8a 05 79 4c 04 f7 c5 47 9f bc 0c f5 47 c8 06 c4 9d f0 04 b7 ef bb 1e 49 67 21 62 19 88 7d 65 d5 11 80 a1 26 4c ed f9 8b 6a ac e8 d1 d2 e4 59 a3 c6 45 16 8a 9a e0 68 4e 07 d7 3d 55 a9 0e d6 18 9a 70 8e 86 1a e4 29 25 be 3d 10 2f c2 83 a9 f9 0f 98 46 b1 a5 d5 f6 03 5e d7 2e 01 a7 35 fb 7e 71 1d 81 53 32 47 9e 07 6d 80 5d bb f0 33 9c 68 bb 39 da 8a a2 22 b8 bc ea 39 43 75 e6 2d 95 17 09 74 2e 52 38 d3 4e ab 9d 52 ba b6 ae b0 fc 42 27 73 9d 10 8a f0 b0 a9 ff 5a bf aa 59 c7 45 d5 78 ce 56 cb e5 b0 37 f8 3b 39 bc 0f 8e 7d 04 48 af e9 75 b0 93 f0 41 7b 64 6c d0 10 fc 29 77 d9 dc 63 e4 b8 70 e1 a8 08 ce ab 7b e8 24 ba cf 2c 1c ac ce c9 78 d1 ce 89 f3 36 99 15 6f 9b 3c ff 9d Data Ascii: ,AJx_ \|*DagyLGGIg!b}e&LjYEhN=Up)%=/F^.5~qS2Gm]3h9"9Cu-t.R8NRB'sZYExV7;9}HuA{dl)wcp{$,x6o<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.8	49901	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	658	OUT	GET /media/hsentkoi/alt.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:21 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:20 GMT Accept-Ranges: bytes ETag: "db29c64c48ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:56:18 GMT Content-Length: 1498
2024-01-15 14:02:21 UTC	1498	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.8	49907	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	668	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327340151 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:21 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: svcghaorfomp X-Cloud-Trace-Context: 0ea3782fc4bba0c5e95b014c1ebd1803 Date: Mon, 15 Jan 2024 14:02:21 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:21 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.8	49905	35.201.111.240	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	734	OUT	POST /consent/uw/3 HTTP/1.1 Host: consent-api.service.consent.usercentrics.eu Connection: keep-alive Content-Length: 432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Access-Control-Allow-Origin: * Accept: application/json X-Request-ID: aaac5db4-d7b9-402f-a8e8-1d6a2436661f sec-ch-ua-platform: "Windows" Origin: https://www.synesgy.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:21 UTC	432	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 22 3a 22 6f 6e 49 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 22 3a 74 72 75 65 2c 22 61 70 70 56 65 72 73 69 6f 6e 22 3a 22 34 2e 33 32 2e 30 22 2c 22 63 6f 6e 73 65 6e 74 73 22 3a 5b 7b 22 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 49 64 22 3a 22 7a 71 57 6f 6a 72 54 30 50 22 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 22 3a 22 31 35 2e 37 2e 31 30 22 7d 2c 7b 22 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 49 64 22 3a 22 48 31 56 6c 35 4e 69 64 6a 57 58 22 2c 22 63 6f 6e 73 65 6e 74 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 22 3a 22 34 Data Ascii: {"action":"onInitialPageLoad","analytics":true,"appVersion":"4.32.0","consents":[{"consentStatus":false,"consentTemplateId":"zqWojrT0P","consentTemplateVersion":"15.7.10"},{"consentStatus":true,"consentTemplateId":"H1Vl5NidjWX","consentTemplateVersion":"4
2024-01-15 14:02:21 UTC	370	IN	HTTP/1.1 201 Created vary: Origin access-control-allow-origin: * X-Cloud-Trace-Context: db0980b32e91ae945349ebfda3b1c900 Date: Mon, 15 Jan 2024 14:02:21 GMT Content-Type: text/html Server: Google Frontend Content-Length: 0 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.8	49904	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	432	OUT	GET /media/aqddpooa/assicurazioni.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "76cb21b2f2e5d71:0" Connection: close Last-Modified: Tue, 30 Nov 2021 14:00:56 GMT Content-Length: 1582
2024-01-15 14:02:22 UTC	1258	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 14:02:22 UTC	324	IN	Data Raw: 31 2d 31 2d 31 48 37 2e 39 63 2d 30 2e 36 2c 30 2d 31 2c 30 2e 34 2d 31 2c 31 53 37 2e 33 2c 32 36 2e 35 2c 37 2e 39 2c 32 36 2e 35 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 36 33 2e 36 2c 34 34 6c 2d 39 2e 33 2c 31 32 2e 31 63 2d 32 2e 35 2d 32 2e 35 2d 35 2e 37 2d 35 2e 35 2d 36 2e 32 2d 36 63 2d 30 2e 34 2d 30 2e 34 2d 31 2e 31 2d 30 2e 33 2d 31 2e 34 2c 30 2e 31 73 2d 30 2e 33 2c 31 2e 31 2c 30 2e 31 2c 31 2e 34 0a 09 09 63 30 2e 34 2c 30 2e 33 2c 32 2e 36 2c 32 2e 34 2c 36 2e 31 2c 35 2e 39 63 30 2e 34 2c 30 2e 34 2c 30 2e 39 2c 30 2e 36 2c 31 2e 34 2c 30 2e 36 63 30 2c 30 2c 30 2e 31 2c 30 2c 30 2e 31 2c 30 63 30 2e 36 2c 30 2c 31 2e 31 2d 30 2e 33 2c 31 2e 34 2d 30 2e 38 6c 39 2e 33 2d 31 32 2e 31 63 30 2e Data Ascii: 1-1-1H7.9c-0.6,0-1,0.4-1,1S7.3,26.5,7.9,26.5z"/><path class="st0" d="M63.6,44l-9.3,12.1c-2.5-2.5-5.7-5.5-6.2-6c-0.4-0.4-1.1-0.3-1.4,0.1s-0.3,1.1,0.1,1.4c0.4,0.3,2.6,2.4,6.1,5.9c0.4,0.4,0.9,0.6,1.4,0.6c0,0,0.1,0,0.1,0c0.6,0,1.1-0.3,1.4-0.8l9.3-12.1c0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.8	49906	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	663	OUT	GET /media/d3nj5svb/coccarda.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "62accf5c48ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:56:45 GMT Content-Length: 1946
2024-01-15 14:02:22 UTC	1258	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 14:02:22 UTC	688	IN	Data Raw: 2e 34 2c 31 36 2e 37 2c 31 36 2e 36 0a 09 09 09 09 09 43 33 32 2e 37 2c 32 34 2e 37 2c 32 35 2e 32 2c 33 32 2e 32 2c 31 36 2c 33 32 2e 32 7a 20 4d 31 36 2c 31 43 37 2e 39 2c 31 2c 31 2e 33 2c 37 2e 35 2c 31 2e 33 2c 31 35 2e 36 63 30 2c 38 2c 36 2e 36 2c 31 34 2e 36 2c 31 34 2e 37 2c 31 34 2e 36 63 38 2e 31 2c 30 2c 31 34 2e 37 2d 36 2e 35 2c 31 34 2e 37 2d 31 34 2e 36 0a 09 09 09 09 09 43 33 30 2e 37 2c 37 2e 35 2c 32 34 2e 31 2c 31 2c 31 36 2c 31 7a 22 2f 3e 0a 09 09 09 3c 2f 67 3e 0a 09 09 09 3c 67 20 69 64 3d 22 53 74 72 6f 6b 65 2d 35 22 3e 0a 09 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 30 2e 37 2c 34 38 2e 36 6c 2d 34 2e 34 2d 37 2e 34 43 36 2e 32 2c 34 31 2e 31 2c 36 2e 31 2c 34 31 2c 36 2e 31 2c 34 31 63 2d 30 Data Ascii: .4,16.7,16.6C32.7,24.7,25.2,32.2,16,32.2z M16,1C7.9,1,1.3,7.5,1.3,15.6c0,8,6.6,14.6,14.7,14.6c8.1,0,14.7-6.5,14.7-14.6C30.7,7.5,24.1,1,16,1z"/></g><g id="Stroke-5"><path class="st0" d="M10.7,48.6l-4.4-7.4C6.2,41.1,6.1,41,6.1,41c-0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.8	49914	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:21 UTC	433	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327340151 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:22 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: s1uy1bv499ev X-Cloud-Trace-Context: 120d21d0e90723b7c3f81efd60685ad8 Date: Mon, 15 Jan 2024 14:02:22 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:22 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	49908	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	430	OUT	GET /media/spsp0w2m/ingranaggio.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "b7f8392648ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:55:14 GMT Content-Length: 2920
2024-01-15 14:02:22 UTC	2920	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.8	49909	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	425	OUT	GET /media/b5ohr1ef/foglia.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "efa47f3d48ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:55:53 GMT Content-Length: 1191
2024-01-15 14:02:22 UTC	1191	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.8	49910	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	667	OUT	GET /media/u31heilt/asvis_logogr.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "3bed93e43f91d81:0" Connection: close Last-Modified: Wed, 06 Jul 2022 13:54:21 GMT Content-Length: 780600
2024-01-15 14:02:22 UTC	2719	IN	Data Raw: ff d8 ff e1 2b e2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 37 3a 30 34 3a 31 38 20 31 31 3a 35 38 3a 30 33 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 03 0f a0 03 00 04 00 00 00 01 00 00 01 6f 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: +ExifMM*bj(1 r2i''Adobe Photoshop CS6 (Macintosh)2017:04:18 11:58:03o"
2024-01-15 14:02:22 UTC	10220	IN	Data Raw: 48 6a 9f 6a f7 6b 4f 6b a7 6b ff 6c 57 6c af 6d 08 6d 60 6d b9 6e 12 6e 6b 6e c4 6f 1e 6f 78 6f d1 70 2b 70 86 70 e0 71 3a 71 95 71 f0 72 4b 72 a6 73 01 73 5d 73 b8 74 14 74 70 74 cc 75 28 75 85 75 e1 76 3e 76 9b 76 f8 77 56 77 b3 78 11 78 6e 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 Data Ascii: HjjkOkklWlmm`mnnknooxop+ppq:qqrKrss]sttptu(uuv>vvwVwxxnxy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$h
2024-01-15 14:02:22 UTC	16383	IN	Data Raw: 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 01 6f 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 03 0f 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c Data Ascii: riginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongoRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcel
2024-01-15 14:02:22 UTC	26	IN	Data Raw: 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 52 3d 31 39 33 20 47 3d 33 39 20 42 Data Ascii: G:swatchName="R=193 G=39 B
2024-01-15 14:02:23 UTC	11394	IN	Data Raw: 3d 34 35 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 63 79 61 6e 3d 22 31 36 2e 37 39 36 38 39 38 22 20 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3d 22 39 34 2e 35 33 31 32 39 36 22 20 78 6d 70 47 3a 79 65 6c 6c 6f 77 3d 22 38 32 2e 30 33 31 32 39 36 22 20 78 6d 70 47 3a 62 6c 61 63 6b 3d 22 37 2e 30 33 31 32 39 38 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 52 3d 32 33 37 20 47 3d 32 38 20 42 3d 33 36 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 63 79 61 6e 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3d 22 39 34 2e 31 Data Ascii: =45" xmpG:mode="CMYK" xmpG:type="PROCESS" xmpG:cyan="16.796898" xmpG:magenta="94.531296" xmpG:yellow="82.031296" xmpG:black="7.031298"/> <rdf:li xmpG:swatchName="R=237 G=28 B=36" xmpG:mode="CMYK" xmpG:type="PROCESS" xmpG:cyan="0.000000" xmpG:magenta="94.1
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 1d 3f 1e 3a 1f 34 20 2c 21 23 22 19 23 0f 24 04 24 f9 25 ee 26 e3 27 d8 28 cc 29 c1 2a b6 2b ab 2c 9f 2d 93 2e 87 2f 7c 30 70 31 64 32 59 33 4d 34 41 35 36 36 2b 37 21 38 16 39 0b 3a 00 3a f6 3b ed 3c e3 3d db 3e d3 3f cb 40 c4 41 bd 42 b7 43 b2 44 ac 45 a6 46 a1 47 9c 48 97 49 94 4a 90 4b 8e 4c 8b 4d 8a 4e 89 4f 88 50 88 51 89 52 88 53 88 54 88 55 88 56 89 57 8a 58 8b 59 8d 5a 8f 5b 91 5c 93 5d 96 5e 98 5f 9b 60 9d 61 9f 62 a0 63 a1 64 a3 65 a4 66 a6 67 a7 68 a8 69 a9 6a aa 6b aa 6c ab 6d ab 6e ab 6f ab 70 a9 71 a8 72 a5 73 a3 74 a0 75 9d 76 99 77 95 78 91 79 8c 7a 87 7b 82 7c 7c 7d 76 7e 6f 7f 69 80 61 81 5a 82 51 83 48 84 3e 85 35 86 2b 87 21 88 17 89 0c 8a 02 8a f7 8b ed 8c e2 8d d8 8e cd 8f c3 90 b9 91 af 92 a5 93 9c 94 92 95 89 96 80 97 78 98 70 99 Data Ascii: ?:4 ,!#"#$$%&'()*+,-./\|0p1d2Y3M4A566+7!89::;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{\|\|}v~oiaZQH>5+!xp
2024-01-15 14:02:23 UTC	26	IN	Data Raw: 5e 98 3d 57 ad 88 21 96 0a 44 d5 87 1c 94 5b 30 5e 86 57 93 f4 16 ff 86 b2 8f Data Ascii: ^=W!D[0^W
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 8d 00 00 80 00 80 00 99 1c 8d 68 a8 cc 89 f5 8b d8 a5 e9 79 dc 8a 44 a2 cd 68 dc 88 c9 9f b7 57 12 87 88 9d 0f 44 40 86 8b 9b 49 2f e6 85 bd 9a 29 16 be 85 e1 8f 61 00 00 80 00 80 00 98 bd 8d 08 b2 56 89 84 8b 7b ae f1 79 56 89 dc ab 39 68 4e 88 52 a7 90 56 91 87 06 a4 94 43 d5 86 04 a2 f6 2f 86 85 38 9f 1d 16 6b 85 48 8f 28 00 00 80 00 80 00 90 d8 9e e1 68 cc 82 d7 9c 4c 6a 8d 73 df 9a 02 6c 34 63 c4 97 ef 6d c5 52 87 96 0b 6f 49 3f ec 94 86 70 b1 2b 4a 93 e8 71 b3 10 6c 96 de 71 2f 00 00 80 00 7d d0 90 40 9d 8d 71 63 82 48 9b 10 72 51 73 3c 98 c3 73 3a 63 26 96 a3 74 22 51 f0 94 b6 75 0c 3f 65 93 2a 75 e9 2a d3 92 75 76 7a 10 38 94 f5 75 f2 00 00 80 00 80 00 8f 98 9c 21 79 d9 81 75 99 ba 7a 12 72 7d 97 6d 7a 4d 62 60 95 53 7a 95 51 3d 93 6a 7a e9 3e cb Data Ascii: hyDhWD@I/)aV{yV9hNRVC/8kH(hLjsl4cmRoI?p+Jqlq/}@qcHrQs<s:c&t"Qu?euuvz8u!yuzr}mzMb`SzQ=jz>
2024-01-15 14:02:23 UTC	26	IN	Data Raw: 61 20 79 fc 60 60 63 59 7a 75 50 10 65 6c 7a e6 3e 47 67 17 7b 51 2a d0 67 68 Data Ascii: a y``cYzuPelz>Gg{Q*gh
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 7b 9d 12 34 6a 7a 7b 6f 00 00 80 00 80 00 8a 11 59 a0 82 08 7c d2 5c 6a 82 07 6e a2 5e f2 81 df 5f 65 61 46 81 a0 4f 27 63 67 81 64 3d 9d 65 0b 81 3b 2a 4d 65 24 81 2c 11 e6 68 f7 81 3b 00 00 80 00 80 00 89 19 57 99 8b 4f 7b e7 5a 7d 8a 9e 6d c5 5d 18 89 bc 5e 96 5f 7f 88 c8 4e 64 61 ae 87 ed 3c fa 63 4b 87 42 29 e9 63 27 86 ff 11 b3 67 b0 86 43 00 00 80 00 80 00 88 5c 55 f6 94 82 7b 31 58 ed 93 27 6d 11 5b 95 91 8e 5d ec 5e 02 8f ea 4d bf 60 36 8e 7b 3c 5b 61 ce 8d 71 29 6f 61 6e 8d 49 11 82 66 aa 8a 62 00 00 80 00 80 00 87 d9 54 ba 9d 99 7a aa 57 bd 9b 9f 6c 82 5a 67 99 56 5d 5e 5c d2 97 08 4d 45 5f 03 95 16 3b fa 60 8f 93 d3 29 09 5f ef 93 68 11 24 65 ef 8b 97 00 00 80 00 80 00 85 30 71 92 53 40 78 6a 72 96 56 f3 6a a5 73 b3 5a 78 5b a5 74 d8 5d c9 4b Data Ascii: {4jz{oY\|\jn^_eaFO'cgd=e;*Me$,h;WO{Z}m]^_Nda<cKB)c'gC\U{1X'm[]^M`6{<[aq)oanIfbTzWlZgV]^\ME_;`)_h$e0qS@xjrVjsZx[t]K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	49912	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	684	OUT	GET /media/vefajzik/swisscleantech-logo-titelbild.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "3852dae47de7d81:0" Connection: close Last-Modified: Mon, 24 Oct 2022 07:54:50 GMT Content-Length: 118073
2024-01-15 14:02:22 UTC	2719	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 74 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 11 00 00 00 5a 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 31 32 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: JFIF``tExifMM*JR(1Z``paint.net 4.2.12CC
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-01-15 14:02:23 UTC	26	IN	Data Raw: 8f 57 2d ca 6b e2 e7 68 2d 3a b7 b2 ff 00 36 7c 6f 16 f1 b6 03 23 a1 cd 5a 5c Data Ascii: W-kh-:6\|o#Z\
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: d5 1f c3 15 bb ff 00 25 de e7 49 fb 5e 7e d8 51 eb 96 f7 5e 13 f0 7d da c9 65 20 30 ea 7a a4 2d c5 c0 e8 60 81 bf b8 79 0f 20 e1 87 0b f2 e4 9f 99 95 71 c7 65 e2 8e d8 f6 c7 d2 95 3e ed 7e 9b 97 e0 29 61 29 7b 38 2f 5e ed f7 67 f1 ef 13 71 36 2f 3a c5 bc 4e 29 ff 00 86 2b 64 bb 25 fa 88 aa 41 a7 51 45 77 1f 36 14 51 45 00 15 fb 5d ff 00 06 be ff 00 c1 3e 1b c3 de 14 d5 3f 68 af 13 58 af db 3c 45 1c 9a 37 83 56 44 f9 e0 b3 49 19 2f 2f 39 e9 e7 48 82 24 3c 1d 90 3b 0c ac c0 d7 e6 af fc 13 0f fe 09 fd ac 7f c1 48 3f 6a bd 2f c0 d6 bf 6a b3 f0 bd 8a 8d 4b c5 9a ac 04 2b 69 9a 70 38 21 18 f1 e7 4c c3 ca 8c 60 90 4b be 0a c6 d5 fd 4c 78 2f c1 da 5f c3 cf 08 e9 7a 0e 89 a7 db e9 7a 2e 8b 69 15 85 85 9d ba 6c 8a d6 08 94 24 71 a8 ec aa a0 01 ec 28 03 62 8a 28 a0 Data Ascii: %I^~Q^}e 0z-`y qe>~)a){8/^gq6/:N)+d%AQEw6QE]>?hX<E7VDI//9H$<;H?j/jK+ip8!L`KLx/_zz.il$q(b(
2024-01-15 14:02:23 UTC	26	IN	Data Raw: 54 80 cd a4 df 3a 0f 33 47 d4 63 cb 5b dd 46 d8 2c a5 5f 01 b6 fd f8 da 44 39 Data Ascii: T:3Gc[F,_D9
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 57 60 7f 93 1b 71 32 c4 16 ea 09 2d 6e 97 e5 9e 09 06 1e 19 07 0c 87 dc 36 41 f7 14 01 25 14 51 40 0d 6b 9b ab 16 59 ec 2e a6 b1 be b7 61 35 ad cc 2d b6 5b 69 54 86 49 10 f6 65 60 18 1f 50 2b fa f0 fd 94 7e 35 2f ed 1f fb 33 fc 3f f8 80 ab 14 7f f0 99 78 7e c7 58 78 e2 ff 00 57 14 93 40 8e e8 b9 c9 c2 b1 61 c9 ed 5f c8 81 fe 5c d7 f4 e3 ff 00 04 15 d6 e7 d7 3f e0 91 df 05 e5 b8 6f 31 ad f4 eb cb 35 e4 ff 00 ab 83 50 ba 85 07 3e 89 1a 8f f0 14 01 f6 25 14 51 40 0d 27 8f c6 bf 94 9f f8 2a 9f c2 0f f8 50 df f0 52 6f 8d de 17 f2 d6 18 ed 7c 53 3e a3 0a a9 c8 10 df a4 7a 84 58 3f ee 5d 2e 7d 08 23 b5 7f 57 04 64 57 f3 e3 ff 00 07 49 7c 1e 4f 01 7f c1 40 bc 3f e2 c8 61 f2 e1 f1 f7 85 21 79 1c 0c 09 ae 6c e5 78 64 39 ee c2 27 b6 07 db 6d 00 7e 6c d1 45 14 01 d9 Data Ascii: W`q2-n6A%Q@kY.a5-[iTIe`P+~5/3?x~XxW@a_\?o15P>%Q@'*PRo\|S>zX?].}#WdWI\|O@?a!ylxd9'm~lE
2024-01-15 14:02:23 UTC	26	IN	Data Raw: ae c1 56 34 03 2c cc 4f 00 00 09 24 f6 15 fc 8f 7e d8 df b4 7c df b6 07 ed 5f Data Ascii: V4,O$~\|_
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: f1 0b e2 84 cd 36 cf 1b 6b 32 df 5a 2c a0 89 23 b3 50 b0 da 21 07 90 52 d6 28 57 07 a6 dc 50 07 9b d1 45 14 01 e8 df b1 f7 c0 13 fb 55 fe d5 df 0e 7e 1b f9 6d 34 1e 32 f1 05 ae 9d 76 80 12 7e c9 bb cc ba 3c 73 c5 ba 4c c4 f6 0a 4f 6a fd ab ff 00 83 a8 7e 01 ff 00 c2 77 fb 13 f8 57 e2 05 bd bb 49 75 f0 df c4 71 c7 3c a1 09 f2 6c b5 0d b6 cf 93 d8 1b 85 b3 1f 5c 57 c5 9f f0 6b ef ec fd ff 00 0b 47 fe 0a 07 aa 78 e2 6b 76 92 cf e1 6f 87 a5 b8 8a 5d b9 58 af 6f f7 da c3 cf a9 80 5e 8f a0 35 fb 59 ff 00 05 06 fd 9e 7f e1 ab ff 00 62 af 89 df 0f 56 dd 6e 2e bc 4b e1 fb 98 6c 11 87 fc be a2 f9 d6 a7 9c 72 27 8e 22 0e 78 2b 40 1f c9 ad 15 0e 9f 78 ba 85 8c 37 0b 9d b3 46 b2 0c 8c 70 46 6a 6a 00 8e e0 48 62 3e 4c d2 5b cc 39 8e 68 98 ac 90 b8 e5 5d 48 e4 32 90 08 Data Ascii: 6k2Z,#P!R(WPEU~m42v~<sLOj~wWIuq<l\WkGxkvo]Xo^5YbVn.Klr'"x+@x7FpFjjHb>L[9h]H2
2024-01-15 14:02:23 UTC	26	IN	Data Raw: 17 8b b4 31 f2 a7 89 a2 62 01 c8 c8 0d 91 ee 05 7e 02 d9 7f c1 ad bf b5 1c 76 Data Ascii: 1b~v
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 51 ac da c7 c1 39 24 54 0a ee be 25 d4 36 b9 03 92 33 a7 74 3d 68 03 f3 be 8a fd 18 ff 00 88 5b 3f 6a 0f fa 0a 7c 15 ff 00 c2 97 50 ff 00 e5 75 1f f1 0b 67 ed 41 ff 00 41 4f 82 bf f8 52 ea 1f fc ae a0 0f ce 88 af ef 34 ab 98 6e f4 eb a9 ac 75 1b 39 16 e2 d2 ea 16 db 25 ac e8 43 47 22 9e cc ae 15 81 ec 40 af eb 83 f6 34 fd a3 ec ff 00 6b 9f d9 5b c0 3f 12 ac 7c 95 8f c6 1a 34 17 f2 c5 17 29 6d 70 57 6d c4 23 92 7f 77 32 c8 98 27 20 a6 0f 35 f8 68 df f0 6b 6f ed 44 47 fc 85 3e 0a ff 00 e1 4b a8 7f f2 ba bf 55 3f e0 89 ff 00 b1 f7 c5 af d8 43 f6 50 bc f8 69 f1 4a e3 c2 77 8b a5 eb 57 17 ba 03 e8 3a a4 f7 d1 43 69 73 89 a5 89 cc d0 42 50 8b 86 99 c0 50 41 f3 49 ce 73 40 1f 65 57 e6 ef fc 1d 29 ff 00 28 d5 d3 3f ec 78 d3 7f f4 4d dd 7e 91 57 c7 bf f0 5b 0f d8 Data Ascii: Q9$T%63t=h[?j\|PugAAOR4nu9%CG"@4k[?\|4)mpWm#w2' 5hkoDG>KU?CPiJwW:CisBPPAIs@eW)(?xM~W[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.8	49911	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	684	OUT	GET /media/jfwonuut/ilsole_csr-it2023_logo_en_hor.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "ab74d79f6a4d91:0" Connection: close Last-Modified: Thu, 22 Jun 2023 10:41:01 GMT Content-Length: 279269
2024-01-15 14:02:22 UTC	1261	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 c6 00 00 01 d9 08 06 00 00 00 ac 3b e8 e5 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec bd dd f2 6d c9 51 1f 98 b9 4e 4b 6d 18 d9 52 04 0e 3b 86 41 a8 81 61 2e e6 46 8a b0 c1 98 99 b1 da 4f 20 bd 01 fd 06 ee 4b cf 80 87 b6 2d f0 07 a3 b1 c4 30 be 75 fb 0d e4 27 a0 75 33 61 70 c4 44 37 06 01 86 b1 5a 10 01 fa 04 09 d9 92 ba d1 59 39 17 55 99 f9 cb ac ac b5 d6 de ff cf 73 7a 65 f7 ff ec bd d7 aa 8f ac aa ac fc f8 55 ad 5a 2c 22 74 d2 49 27 dd 3e fd d9 1f fe eb 97 88 e8 25 66 26 22 7a a9 ff 29 bd 4c 7d ea ad 24 c4 44 1f 22 a2 8f 52 4b 4b d2 6f 0a 11 71 2e 98 99 98 98 74 ee 6a 5a bb 9d 93 df a8 15 ca 85 97 16 6a e3 74 bb c8 b1 f4 cf 35 dc 10 62 66 e0 ad Data Ascii: PNGIHDR;pHYs.#.#x?v IDATxmQNKmR;Aa.FO K-0u'u3apD7ZY9UszeUZ,"tI'>%f&"z)L}$D"RKKoq.tjZjt5bf
2024-01-15 14:02:22 UTC	11680	IN	Data Raw: 7d 6b 02 7b 7b 85 08 d7 e8 a6 e4 76 2a d7 f1 00 c0 38 2f 44 c4 7d 9d af 4b 7b b7 bd 82 7d 18 31 9d 89 1d c1 1f 7d 61 c2 e4 22 36 8c 0d 98 aa f3 db 57 90 d5 51 b7 3d 7e da 63 73 cb 43 dd a7 ca 7e 54 76 c6 3f 2b af 34 d4 66 6e 75 ba 3e e5 af d6 c9 55 4a 4c b3 04 f9 6c 7c 37 9f 1d e6 d8 06 09 ce 5d f8 34 2f e9 36 81 6b 19 e5 fd 59 03 c6 ed 43 c7 77 bd 0e 18 5f b8 79 13 4f 0b ff c0 e3 88 9e 3e c5 48 4c 4b bb 26 ed 97 ea 7a 8d c2 70 71 db 36 31 a0 9d 4b ed 62 a2 5b 03 c6 cd df b2 ae 32 8d 4e 8b ca 18 b3 01 e3 0d b8 86 e5 17 6e 75 56 fa 5b 7b ea 52 60 5c 6f 9b 1f be 2c 96 26 8c ae 96 8b d7 c2 17 ec b3 45 93 be 45 44 df 24 a2 b7 45 e4 6d 69 df df 64 e2 6f fe e4 df ff f4 9b 74 d2 49 27 5d 44 27 30 7e d2 49 13 fa c6 1f fe da 4b 44 f4 d2 42 fc 32 39 08 fe 12 11 7d Data Ascii: }k{{v*8/D}K{}1}a"6WQ=~csC~Tv?+4fnu>UJLl\|7]4/6kYCw_yO>HLK&zpq61Kb[2NnuV[{R`\o,&EED$EmidotI']D'0~IKDB29}
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 42 06 fa 0c 18 cf 2f b8 ba 84 e0 c5 76 93 76 e4 78 6d 9c 2b 47 49 03 91 ec 16 e3 6d 6c c7 3c e0 67 d8 d5 0b 29 7c 97 1c 06 4a dc 1e e7 67 51 4b d0 d3 da fd 08 8c b7 cf a4 cd 83 d8 60 dd 49 df e9 2e a3 bc db 14 f2 a2 1e 8c 3e bc 60 b2 98 86 3c 10 19 f4 a8 8b f8 ae 06 b4 bc 92 7e 43 f9 47 a8 5a dc 68 4f 49 50 6a 74 91 77 43 37 ec a7 a7 71 7c 2a 40 61 44 21 e3 bc b3 ce 12 d7 11 61 02 78 19 36 62 5d a8 6c d6 31 0d f5 cc e7 c6 11 0f 23 56 bf 77 33 73 3d 8c bf fa 19 fd d3 02 eb ce 27 1e 01 63 fe 83 c0 fc c4 60 3c d5 35 f0 29 e2 ef 06 a6 7a 48 2e 03 c6 3d 95 74 9e 36 17 86 80 c1 36 4e 2e e3 43 3e f0 83 54 4f b0 be 6c d5 e6 68 6c 77 e6 7c 00 c5 f1 36 f8 a2 98 66 1f 18 af 66 70 a5 e7 72 99 f7 0f 8c 0f bc f4 e4 bd 17 55 c0 20 2f e7 d4 56 7e d8 31 8e 1f 5d 97 fa 7c Data Ascii: B/vvxm+GIml<g)\|JgQK`I.>`<~CGZhOIPjtwC7q\|*@aD!ax6b]l1#Vw3s='c`<5)zH.=t66N.C>TOlhlw\|6ffprU /V~1]\|
2024-01-15 14:02:23 UTC	26	IN	Data Raw: 66 af f3 c7 5e 97 67 dd f6 e5 bd cc 3b 33 d9 df 7c de cc fb ee bd 2e cf 5e d7 Data Ascii: f^g;3\|.^
2024-01-15 14:02:23 UTC	11208	IN	Data Raw: 67 7d d7 b3 9f 65 fe 08 31 1b ca 4e c9 bc 4a 9e 55 2e 06 35 b1 a6 17 25 72 c1 63 12 7f c5 f5 35 65 f1 65 ac 6e 8d 00 c6 65 47 cd 37 cd d3 74 39 73 7b a1 a1 03 25 8b 6f 3a 9b 43 f0 db cc 29 0f 97 78 a5 0b bd 24 a2 8a 51 23 31 ee c6 23 0b 6f 77 dd 0a 00 c9 c6 3e b5 fa b6 db 33 a3 8b 45 ba 78 f6 b7 37 fb 39 b2 6a 94 6a 41 de fb b6 75 92 48 5f b6 24 ba 20 77 5a aa 34 65 33 2e da 05 7a ca fa 2d 17 76 7a b1 cc b9 38 c4 97 79 9e 8b c9 86 12 29 32 0f 10 06 13 10 6f 2f 4a 85 16 94 18 af 66 6d c2 3d 4d a4 56 62 5c 5a d4 fb ee cb f6 ad fb 6e 82 fa 11 e3 e6 5e 8c 59 2e 74 48 b0 df e4 91 2d 20 22 0b 70 fd c7 4f 8c 5b 23 95 f8 df 47 8c 27 48 88 f1 d8 c8 97 d8 08 5a c3 ba bd 0a 28 d7 9e 00 c2 d3 87 ba 2f c7 28 31 9e 58 fd bd 76 62 5c 80 73 23 35 dd 2c fd 39 e8 5a a4 0d Data Ascii: g}e1NJU.5%rc5eeneG7t9s{%o:C)x$Q#1#ow>3Ex79jjAuH_$ wZ4e3.z-vz8y)2o/Jfm=MVb\Zn^Y.tH- "pO[#G'HZ(/(1Xvb\s#5,9Z
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 64 bf d1 e5 ce dd 50 39 49 17 f2 ac cc 6c 7a 3a 6b 9f be 4a ea d6 9b 4f 75 3d d7 d0 b7 d5 35 5f 8d f9 da 94 47 7e 90 3a cc 1c 50 98 d2 e1 8b 81 19 3b 2d 09 f9 47 17 ee 7a 3c a1 1b 11 c6 e6 a1 17 ba 4d 78 57 12 55 30 ae f3 87 c3 7e 9a 5f d8 6e 12 e1 87 f7 a4 bb 53 e9 1d ba a8 b8 00 d3 0e dc f8 f3 ec 7f 7e 3e d3 6a 79 c1 8a ab 0a 5a 8d e7 e9 0b d9 ec 23 6d 2d b2 8d 85 b7 17 fd 44 5d 7e 7a 2a a7 cc a1 ee 1f 4c ca 33 57 10 c1 4e 1e db 97 23 df da d1 e8 83 54 0f ed b8 1f 4f fd cb fb b1 f7 e9 7f 54 9b 4d 94 23 28 04 0f 09 58 8f 0d 47 3f 68 c2 c6 76 89 7b 3b 80 17 76 fc 18 c7 0e ef 4c 0d 53 69 e9 c0 92 0b ff 00 8c 31 e1 0a 88 7b 9a 86 5d 50 9e fe 51 b8 20 78 f2 02 0f cb df 13 7c f2 64 65 ab 5e b8 e2 f6 c6 38 4d cb a3 17 d8 23 7d 68 2e ab 01 d5 59 8b 07 50 ab 38 Data Ascii: dP9Ilz:kJOu=5_G~:P;-Gz<MxWU0~_nS~>jyZ#m-D]~z*L3WN#TOTM#(XG?hv{;vLSi1{]PQ x\|de^8M#}h.YP8
2024-01-15 14:02:23 UTC	26	IN	Data Raw: a9 a8 02 b3 09 e0 94 33 f0 3d 44 e6 c6 f2 0b 86 ca bb 08 0d 86 e3 56 df 39 12 Data Ascii: 3=DV9
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 71 04 90 f4 6b 30 f9 b4 64 82 61 15 cf 12 ca 93 92 d6 da aa c8 ad 17 a9 88 e2 5c 45 72 16 65 fe af 58 22 39 db a9 c9 22 4f db 2b ea 62 c5 0d 1c fa dd 5d 84 8f d4 75 ea d5 fb 89 41 3b f4 f6 9f 96 4a fa 65 f9 fd ae 1a 07 77 ac 00 f0 7b d1 fb 43 73 2e 41 63 e2 40 d0 f2 bd 9b aa 7c cb aa 7f c1 ae a7 bf 97 fc a0 fb 9f 8e 90 ba c7 bb 9e b3 92 08 3a 50 be 37 10 6a 24 d8 f1 c4 dd 98 7a c6 a5 51 df ef 3d 13 fb 71 da 79 d7 63 fb ba bb 83 f7 0d 39 0e 81 b1 e3 c3 85 c8 71 9d fe 94 39 2f c7 94 39 c5 df 42 8d 61 f7 d3 ff 81 bd 5b ee cd 17 98 90 e3 d9 5d c2 6e 8c 76 53 0b 6b b7 3b f4 03 db 1e c0 e4 e9 e7 63 ea 19 57 14 8f ec 12 9b 64 92 6b 59 6c 77 8a eb d0 98 96 46 94 56 68 38 dd 02 44 e0 67 c5 8d 24 b6 01 47 0d 5d 4c fe 05 f3 36 6f 0b d9 34 a5 10 66 9c 69 45 bc d4 46 Data Ascii: qk0da\EreX"9"O+b]uA;Jew{Cs.Ac@\|:P7j$zQ=qyc9q9/9Ba[]nvSk;cWdkYlwFVh8Dg$G]L6o4fiEF
2024-01-15 14:02:23 UTC	26	IN	Data Raw: 76 9b 82 8e 03 92 87 75 e7 34 b8 cf 16 76 8e 65 39 10 d6 9f e9 44 84 88 6d 91 Data Ascii: vu4ve9Dm
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: e3 cf 33 5e 07 0f 30 05 97 97 8a ef cd ab 5a af a8 60 3f 22 1d f1 52 b0 71 26 14 ac e2 5d 5d a3 53 b1 4e 81 e0 77 9e 73 96 ae 48 95 19 1d d9 ef c7 45 38 58 e1 36 33 37 3f ba a1 4b 75 7d b7 ad 0b 7a 40 bc 18 12 42 b4 dd 6a bc 13 16 e3 b7 71 a5 32 6d da a5 95 a1 43 3b 83 31 92 d3 82 8b f6 85 3c ed b3 b7 6f 36 06 4f bb ac 60 ca 35 6a d4 d0 b8 fb c7 5f 6c 29 fe b5 0b 2e 6f 8b 05 f6 9c d3 ce 2e 7c 78 65 1a 16 4e 9f 8d 9b 6f fc 60 65 e9 e5 45 51 cb f7 9f ae 7b b8 4d 92 d4 a8 51 a3 9b 70 fa 4b ca 6c 28 c6 9c 5c 48 bb 40 95 76 c1 46 95 59 01 a0 91 73 f1 17 5c 28 c5 c8 80 98 c9 57 ec 03 f2 b7 28 a9 a1 88 75 16 5b 59 65 48 53 70 22 23 25 70 a5 0d eb 2d 3a bd 02 f0 2c 83 b7 03 a2 f3 aa 49 f2 2d ba c7 10 48 d5 a6 48 09 90 28 32 1e 40 b0 09 44 ea c1 b1 6e 8d 39 f3 74 Data Ascii: 3^0Z`?"Rq&]]SNwsHE8X637?Ku}z@Bjq2mC;1<o6O`5j_l).o.\|xeNo`eEQ{MQpKl(\H@vFYs\(W(u[YeHSp"#%p-:,I-HH(2@Dn9t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.8	49913	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	422	OUT	GET /media/hsentkoi/alt.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:22 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:21 GMT Accept-Ranges: bytes ETag: "db29c64c48ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:56:18 GMT Content-Length: 1498
2024-01-15 14:02:22 UTC	1498	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.8	49916	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	427	OUT	GET /media/d3nj5svb/coccarda.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:23 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:22 GMT Accept-Ranges: bytes ETag: "62accf5c48ebd71:0" Connection: close Last-Modified: Tue, 07 Dec 2021 08:56:45 GMT Content-Length: 1946
2024-01-15 14:02:23 UTC	1946	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Livello_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.8	49915	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:22 UTC	649	OUT	GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.synesgy.com/ Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2 Range: bytes=0-
2024-01-15 14:02:23 UTC	276	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Date: Mon, 15 Jan 2024 14:02:22 GMT Accept-Ranges: bytes Content-Range: bytes 0-22524463/22524464 ETag: "38c551fcd022da1:0" Connection: close Last-Modified: Wed, 29 Nov 2023 14:33:14 GMT Content-Length: 22524464
2024-01-15 14:02:23 UTC	2663	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 01 56 b4 29 6d 64 61 74 dc 00 4c 61 76 63 36 30 2e 33 2e 31 30 30 00 42 34 9f df bf 30 00 04 85 96 a2 c4 d7 ab 57 8e 7d aa b5 52 a6 6a eb 21 28 f8 54 84 84 96 11 97 9e 93 39 71 2b ad c4 de 16 be 5a e4 ce ab a4 eb 76 03 79 c0 dc 61 39 83 73 86 c9 b9 f1 c4 af 04 a2 6a b1 9d af f0 75 aa 4a 9f 43 11 9a 33 e5 21 60 39 a1 86 37 af 80 c1 dd 8e ee 3c c1 62 e3 d8 0f 13 71 0d 8c d2 53 95 8d d0 93 d3 63 26 af 20 da a5 53 e7 19 86 77 0e 4b 1d 8f 61 28 76 0e 60 b9 14 f9 dc 70 39 58 4a 92 c4 85 92 9f 02 61 f8 98 5a d5 6a f1 df c5 56 aa 4a cd 5d 66 71 50 a8 f8 ad 21 69 2c 04 34 4b ef c8 bf fc e9 9d 8d 9e 2e 94 f4 54 50 3d 6d 9d 6e c8 77 b4 67 85 88 97 Data Ascii: ftypisomisomiso2avc1mp41freeV)mdatLavc60.3.100B40W}Rj!(T9q+Zvya9sjuJC3!`97<bqSc& SwKa(v`p9XJaZjVJ]fqP!i,4K.TP=mnwg
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d 75 d7 5d Data Ascii: u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]
2024-01-15 14:02:23 UTC	26	IN	Data Raw: a7 62 67 2f d0 12 09 3b 24 63 20 cd d5 13 15 c2 c6 8a c8 fc 54 78 6e 14 1d 9e Data Ascii: bg/;$c Txn
2024-01-15 14:02:23 UTC	16383	IN	Data Raw: a6 e8 8a 69 e6 2e 93 37 0b c9 54 aa 78 56 ea a8 15 1a 23 31 5f 39 46 de 8c 93 51 5a 7d 72 ec 9b 4a ed 96 5c 44 10 01 72 8c ca 25 90 70 25 e2 e0 00 00 02 90 41 9b 40 2a 80 05 a9 70 8d 10 14 75 80 93 ed 86 a9 1a a5 6c b2 cd 42 02 53 84 40 4f f1 f1 91 d5 82 78 2b 4a c5 86 99 03 e0 8d 89 d7 3e 12 33 42 62 35 8d b2 70 59 31 9e af c2 13 61 6d 18 12 22 20 e8 1d 5c e2 a0 7b 05 86 ad 84 38 e4 02 f1 92 8c 41 db 02 f6 25 87 36 13 96 69 ca 85 24 80 b3 41 59 8a 78 93 fc 64 8c 1b 0f 38 71 e0 ea c0 3b 4a 4c 7c 58 69 02 a2 81 61 3b fc 4f c1 d5 fc 66 87 1c 5f 0d dc 23 ce 1c 7d 10 53 32 1b a5 4a ad 06 24 59 98 d5 2f 19 05 1a a4 7f 0e 38 88 32 c1 df f9 e6 04 2f 21 37 16 ab c4 bf 06 60 00 9e 6b 15 01 16 7e 33 0e 75 9e 4f 40 bb 25 59 1e 58 23 b9 60 3d e2 d5 d6 61 dc b3 5d 58 Data Ascii: i.7TxV#1_9FQZ}rJ\Dr%p%A@*pulBS@Ox+J>3Bb5pY1am" \{8A%6i$AYxd8q;JL\|Xia;Of_#}S2J$Y/82/!7`k~3uO@%YX#`=a]X
2024-01-15 14:02:23 UTC	26	IN	Data Raw: c0 c2 61 b2 ff 19 26 90 8b f5 13 a4 fa 84 e4 2f 51 3a 33 0f 2c 42 51 8f c6 70 Data Ascii: a&/Q:3,BQp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.8	49921	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	448	OUT	GET /media/vefajzik/swisscleantech-logo-titelbild.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:02:23 GMT Accept-Ranges: bytes ETag: "3852dae47de7d81:0" Connection: close Last-Modified: Mon, 24 Oct 2022 07:54:50 GMT Content-Length: 118073
2024-01-15 14:02:24 UTC	4179	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 74 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 11 00 00 00 5a 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 31 32 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: JFIF``tExifMM*JR(1Z``paint.net 4.2.12CC
2024-01-15 14:02:24 UTC	14600	IN	Data Raw: e3 64 95 fc c6 b5 d4 af 49 b1 0d 9c e5 6d 10 2d bc 78 3c 80 91 a8 07 a0 af 3b 8a 25 85 36 aa aa a8 e0 00 30 05 3a 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 23 22 8a 28 03 63 e1 8f c4 6f 11 fc 12 f1 57 f6 e7 82 fc 41 ae 78 3f 5a e3 37 da 1d fc ba 7d c3 e3 38 dc f1 32 96 03 3d 18 9c 57 dc df b3 07 fc 1c 9b fb 47 7c 06 96 1b 7f 17 5d 68 bf 17 b4 58 b6 a9 83 5c b7 4b 0d 41 63 1f c2 97 96 b1 8e 71 fc 73 43 33 1e a7 26 be 01 a2 80 3f a2 ef d9 0b fe 0e 3d fd 9f 7f 68 f9 ec f4 cf 16 6a 17 df 08 fc 49 73 85 fb 37 89 00 fe cd 77 e4 90 9a 82 0f 25 54 60 60 cf e4 96 2c 00 04 e4 0f be 34 cd 52 df 59 d3 ad ef 2d 2e 21 ba b3 bc 8d 66 82 78 5c 49 1c c8 c0 15 75 61 90 ca 41 04 11 c1 07 35 fc 6c d7 b7 7e c6 3f f0 51 ef 8c bf b0 16 aa 8d f0 d7 c6 57 5a 76 8a ce 5e e7 c3 Data Ascii: dIm-x<;%60:((((#"(coWAx?Z7}82=WG\|]hX\KAcqsC3&?=hjIs7w%T``,4RY-.!fx\IuaA5l~?QWZv^
2024-01-15 14:02:24 UTC	4380	IN	Data Raw: bf 69 9b cf 80 5a ec 96 f7 29 35 f7 86 75 17 0d 79 68 9c c9 03 e3 1e 74 39 38 df d0 32 e4 07 00 02 41 00 8f ba 7c 37 e2 5d 3f c6 7a 0d ae ab a4 de 43 a8 69 b7 c9 e6 41 71 09 ca c8 3a 7b 10 41 e0 a9 00 82 30 40 39 af cc 57 fb b5 de fc 07 fd a2 75 cf 80 7a d4 92 58 ed be d2 6e 9c 35 ee 99 33 ed 8a 7e db 94 f3 e5 c8 3f bc 07 38 01 83 0c 0a f9 7c ef 87 d6 23 f7 b4 34 97 5f 3f f8 27 ec be 1e 78 9b 53 29 71 c0 e3 ef 2a 3d 1e ee 3e 9e 5d 4f d0 c2 71 45 72 7f 09 3e 34 78 7f e3 6e 80 6f f4 1b cf 30 c4 07 da 6d 26 01 2e ac d8 e7 89 13 3d 0e 0e 19 49 56 c1 c1 3d ba c0 72 2b f3 ba d4 27 4a 6e 9d 44 d3 5d 19 fd 4f 81 cc 28 63 29 46 be 1e 6a 51 92 ba 69 dd 30 a2 8a 2b 33 b0 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 00 bf 41 c9 e8 3d 6a 87 88 fc 4d Data Ascii: iZ)5uyht982A\|7]?zCiAq:{A0@9WuzXn53~?8\|#4_?'xS)q*=>]OqEr>4xno0m&.=IV=r+'JnD]O(c)FjQi0+3((((((A=jM
2024-01-15 14:02:24 UTC	2920	IN	Data Raw: b7 c3 cd 19 05 7f b3 35 9b 9b 4d bf 41 1b 81 5f 41 7c 21 ff 00 82 d6 7e d5 1f 05 65 5f ec cf 8c fe 26 d5 ad b8 df 6b e2 28 ed f5 b8 e4 c7 62 f7 31 bc cb ff 00 00 91 73 5f 2e d1 40 1f ad 9f b3 af fc 1d 7b e3 0d 06 48 ec fe 2c 7c 31 d1 7c 41 6b c0 6d 4f c3 17 8d a7 dd 46 39 c9 36 d3 99 23 90 9e 3a 4b 18 1e 86 bf 53 3f 61 1f f8 28 ef c2 df f8 28 c7 82 75 3d 63 e1 ae ad a8 5c 4d a0 bc 31 eb 1a 66 a3 61 25 9d ee 92 f2 87 31 2c 8a d9 46 dc 23 72 1a 27 74 3b 48 dd 90 40 fe 51 eb f6 77 fe 0d 17 e7 4f fd a0 87 fd 37 f0 ff 00 fe 81 a8 d0 07 ec bd 14 51 40 05 14 57 88 fe de ff 00 b7 2f 83 7f e0 9e bf b3 ce a5 f1 03 c6 0f 35 c4 70 ba da 69 9a 5d b3 af da f5 ab d7 cf 97 6f 10 6e 32 70 59 98 f0 88 8e c7 85 c1 00 f4 0f 8c 9f 1b fc 23 fb 3d 7c 3e be f1 67 8e bc 45 a4 f8 Data Ascii: 5MA_A\|!~e_&k(b1s_.@{H,\|1\|AkmOF96#:KS?a((u=c\M1fa%1,F#r't;H@QwO7Q@W/5pi]on2pY#=\|>gE
2024-01-15 14:02:24 UTC	14849	IN	Data Raw: cd ff 00 83 a6 be 38 49 e0 7f d8 43 c3 fe 07 b7 b8 d9 27 c4 4f 13 db c5 73 10 6e 65 b5 b2 1f 6b 6e 3a e0 4e 96 a7 eb 8f 5a fc 05 4f bb 40 0b 45 14 50 01 45 74 9f 07 be 10 78 9b f6 82 f8 ab a0 f8 1f c1 7a 4d c6 bd e2 af 14 5d 8b 2d 36 c2 16 0a d3 c9 b5 9c 92 cc 42 a2 22 2b bb bb 10 a8 88 cc 48 00 d7 ed 97 ec 93 ff 00 06 b2 7c 37 f0 67 87 ed 6f 7e 33 78 a3 5a f1 d7 88 a4 01 ee 34 ed 16 e5 b4 bd 1a d8 e3 98 d5 d4 0b 99 bf eb a1 78 f3 8f f5 6b c8 a0 0f c2 9a 2b fa 86 f0 87 fc 11 13 f6 4f f0 54 6a b6 bf 03 7c 13 79 b4 86 0d aa 45 2e a8 e0 8e 9f 35 cb c8 7f 5e 6b 6b 59 ff 00 82 40 fe cb 7e 20 85 62 9b e0 1f c2 c5 51 9e 6d f4 08 2d d8 67 1f c5 1a a9 ed c1 cf 1c e3 a9 a0 0f e5 7b 70 a5 af e9 1f e2 37 fc 1b 93 fb 27 f8 de d5 96 c7 c0 ba cf 85 67 6c e6 7d 17 c4 77 Data Ascii: 8IC'Osnekn:NZO@EPEtxzM]-6B"+H\|7go~3xZ4xk+OTj\|yE.5^kkY@~ bQm-g{p7'gl}w
2024-01-15 14:02:24 UTC	15266	IN	Data Raw: 14 51 45 00 7e 92 7f c1 ac df f2 91 df 10 7f d8 89 7b ff 00 a5 96 55 fd 08 57 f3 df ff 00 06 b3 7f ca 47 7c 41 ff 00 62 25 ef fe 96 59 57 f4 21 40 05 14 51 40 1f cf 3f fc 1d 25 ff 00 29 29 d2 7f ec 46 d3 ff 00 f4 aa fa bf 38 eb f4 73 fe 0e 91 38 ff 00 82 94 e9 3f f6 23 69 ff 00 fa 55 7d 5f 9c 74 00 51 45 14 00 85 73 fd df ca 80 8a 3f 85 7f 2a 5a 28 00 a2 8a 28 00 a2 8a 28 00 af d5 8f f8 35 c3 f6 28 b8 f1 d7 c7 9f 10 7c 76 d6 2c 64 5d 13 c0 b0 49 a2 78 72 67 18 5b 9d 4e e6 32 b7 52 27 af 93 6c de 59 3d 09 bb 20 72 a4 0f 88 bf e0 9d bf f0 4e 6f 1f 7f c1 49 be 35 c7 e1 7f 08 c2 fa 76 83 a7 ba 3f 89 3c 4d 34 25 ec fc 3f 6e d9 20 9e 82 5b 87 0a c2 38 57 96 6c 16 db 18 79 17 fa 7b fd 9a ff 00 67 6f 0b 7e c9 ff 00 03 3c 37 f0 ef c1 3a 79 d3 7c 33 e1 7b 5f b2 da Data Ascii: QE~{UWG\|Ab%YW!@Q@?%))F8s8?#iU}_tQEs?*Z(((5(\|v,d]Ixrg[N2R'lY= rNoI5v?<M4%?n [8Wly{go~<7:y\|3{_
2024-01-15 14:02:24 UTC	15266	IN	Data Raw: e1 f8 35 ff 00 04 eb b7 f1 ac f6 be 4e b9 f1 63 53 b8 d5 e6 76 4c 4b f6 38 24 7b 5b 34 27 19 2a 52 37 99 79 23 fd 24 9e e6 bf 9d ad 5e f7 fb 3b 4b b9 b8 ed 04 4f 21 c7 b0 26 bf af 6f d9 1b e1 40 f8 17 fb 2c fc 39 f0 5f 92 b0 b7 85 7c 35 a7 e9 72 c6 3f 86 48 ad a3 47 fc d8 31 fc 68 03 d1 a8 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b f2 ef fe 0e b8 ff 00 93 1b f0 0f fd 8f 50 7f e9 05 ed 7e a2 57 e5 df fc 1d 71 ff 00 26 37 e0 1f fb 1e a0 ff 00 d2 0b da 00 fc 0f a2 8a 28 00 af a7 3f e0 8b 9f f2 96 0f 80 ff 00 f6 30 cd ff 00 a6 fb ba f9 8e bd 4b f6 20 fd a3 6d ff 00 64 3f da f3 e1 ff 00 c4 eb bd 26 e3 5e b5 f0 4e a4 f7 f2 69 f0 4e b0 49 76 1a da 68 42 ab b0 21 70 65 0d 92 3a 29 1e e0 03 fa e2 a2 bf 1f 7f e2 2e 0f 0d ff 00 d1 0c f1 27 fe 14 76 ff 00 fc 6a Data Ascii: 5NcSvLK8${[4'*R7y#$^;KO!&o@,9_\|5r?HG1h(((+P~Wq&7(?0K md?&^NiNIvhB!pe:).'vj
2024-01-15 14:02:24 UTC	16383	IN	Data Raw: 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 Data Ascii: EQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE
2024-01-15 14:02:24 UTC	26	IN	Data Raw: 11 bc bd 9a 4b ab cb ad 1e d2 69 a6 90 ee 79 9d a1 42 cc c7 b9 24 92 7d cd 51 Data Ascii: KiyB$}Q
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: fd a1 7f 68 4f 0d fe cd 3f 0f 67 f1 1f 89 6e 19 20 8c 88 ed ed a1 01 ae 2f 65 3d 22 89 09 1b 9b bf 24 05 00 92 40 04 d4 df b3 a4 db 7f 67 df 05 b7 f7 74 3b 3f fd 10 95 f9 7b ff 00 05 01 fd a1 ee bf 68 1f da 23 54 65 99 a4 d0 7c 37 34 9a 66 95 08 6c c6 02 10 b3 4b e9 ba 49 14 f2 3f 81 23 1d 8d 7d 96 65 9a 7d 4f 08 aa 3d 64 ec 97 ad b7 7e 87 e0 3c 1b c1 ef 3e ce 67 86 6f 96 9c 1b 72 6b 7b 5e c9 2f 37 f9 5c d3 f8 ff 00 ff 00 05 27 f8 95 f1 b2 fe 68 ec 75 09 3c 1b a1 b3 62 1b 4d 2a 66 8e e0 af 6f 32 e4 61 cb 7f d7 3d 83 b6 0f 24 f8 56 a7 e2 1d 4b 5a b9 33 5e ea 5a 85 e4 ed cb 49 71 73 24 ae 4f b9 66 27 f3 aa 72 ba c6 85 99 82 aa f2 49 38 c0 af a2 7e 11 ff 00 c1 2f 3e 29 7c 56 d0 21 d5 27 b7 d3 7c 2f 67 74 a1 e3 4d 55 e5 5b a6 53 9c 1f 21 50 94 cf a4 85 5b 91 Data Ascii: hO?gn /e="$@gt;?{h#Te\|74flKI?#}e}O=d~<>gork{^/7\'hu<bM*fo2a=$VKZ3^ZIqs$Of'rI8~/>)\|V!'\|/gtMU[S!P[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.8	49920	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	428	OUT	GET /media/wnmdo5pn/synesgy_2.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:23 GMT Accept-Ranges: bytes ETag: "a7e13980f773d81:0" Connection: close Last-Modified: Mon, 30 May 2022 07:33:05 GMT Content-Length: 4247276
2024-01-15 14:02:24 UTC	5639	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 13 61 00 00 0d b4 08 06 00 00 00 d2 36 81 35 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da ec 7d 6b 9a ab ba 0e a5 64 48 52 55 e7 76 4f a8 67 d1 93 e8 71 f6 94 fa 9e bd 2b 0f f0 ea 1f f8 6d 43 0c 81 84 54 69 9d ef 3b a9 0d c6 96 65 59 b6 85 90 f8 7f fd ef ff 03 22 22 02 08 34 fc 49 48 7e 03 20 bb 87 bc 18 40 44 28 5c a3 e4 fa f0 37 c7 05 47 af 59 30 db 32 70 e5 d8 fc c1 c1 f3 ee 9a f9 6d d8 97 57 ae 32 5f a6 31 cf 2a 8e db 69 18 a4 38 a6 4b 11 91 22 7f 3f 7c 4e 11 91 52 e6 9a ab 53 0f 65 c3 7a 83 f6 ec df ac 22 b2 86 b6 6d 39 db 36 fb ba 15 e9 98 2e f6 3c 48 9f 63 15 f0 8b d2 fe 78 1e 87 65 b8 70 2d 2d 97 3d c7 b9 dc 30 d5 81 e7 94 af ad 74 2b 60 59 71 6c Data Ascii: PNGIHDRa65pHYs.#.#x?v IDATx}kdHRUvOgq+mCTi;eY""4IH~ @D(\7GY02pmW2_1*i8K"?\|NRSez"m96.<Hcxep--=0t+`Yql
2024-01-15 14:02:24 UTC	16383	IN	Data Raw: 51 12 84 8d d8 05 66 72 fd 36 75 6b 1d 06 5c 0b b8 c4 81 dc 06 bc 69 54 29 00 9c a7 22 fd 88 56 71 43 9a fa c4 a4 c0 c1 58 c4 c1 f1 c2 e0 6d 36 e0 56 1c 84 2d 0e 68 66 db 56 41 d0 3a 95 ce 09 15 fc 69 fb e5 c6 bc f1 c1 00 39 e8 6b 31 b9 a8 55 56 26 08 59 a3 cd ef 30 0f 8e 87 86 da c6 06 2b 33 01 c7 ae 37 ba 75 c3 df 9d fd 35 c1 db 34 75 c4 a6 1f 0c 2b 27 bd 9b 83 8c f8 83 77 c0 6b 96 74 fe f6 5a 93 ee 6d 90 37 1b 08 d1 f0 af eb e9 ea 02 93 99 a0 6f e8 dd 39 e0 ef 1f 65 fa d1 3a 79 6e 4d 50 b4 e3 71 08 88 f6 f9 f1 31 cc 83 8f 0f 3a 99 bf 3f 4d f0 b6 d3 f1 e4 74 a7 9d 4b 1c cc 0d 65 da b1 65 c2 60 7f e9 bc 27 04 29 6b 23 39 19 58 7f b0 f2 d2 9b c0 71 fd 47 20 2f 43 df 2e 36 d8 db ed e6 82 db f5 26 b0 99 0d 68 d6 f5 bd 93 a5 ce f0 8b 6d 60 42 56 2e 08 9b 61 Data Ascii: Qfr6uk\iT)"VqCXm6V-hfVA:i9k1UV&Y0+37u54u+'wktZm7o9e:ynMPq1:?MtKee`')k#9XqG /C.6&hm`BV.a
2024-01-15 14:02:24 UTC	26	IN	Data Raw: 32 8e 64 66 72 68 a5 45 b6 4b f0 4e 99 ce 71 ab a0 cf 12 e7 13 66 95 6d 4c ca Data Ascii: 2dfrhEKNqfmL
2024-01-15 14:02:24 UTC	16383	IN	Data Raw: 2f d5 6c f9 c2 24 0a 1c c5 ac e3 1e 05 34 b8 e0 6b 9c d6 c5 79 00 b4 e0 87 b3 35 18 41 fb 1c d1 c3 9c 07 8c e3 c0 51 32 bb c7 25 47 0c 8c ea 94 f4 d3 94 f8 1e a8 1c 58 6d dd f5 7b 6f fb 00 7e 61 9b f2 31 f0 d4 48 e0 65 a3 27 7b d5 e7 30 95 5f 38 4a fc e4 27 d7 77 6e 7a e1 30 ce 7a 3b cc 2b 08 00 6f 20 80 18 1d 98 f2 d1 69 ae 17 28 36 19 f7 e4 7b 83 ed 0e 88 2f 5d a4 36 b0 1a 64 1f c2 fd 06 2d 2f 3b 8c bd 9b 47 78 4f 0d 60 c7 e3 21 9b e6 19 83 ad 67 d9 b7 84 a5 bf 04 18 df 0a 81 cb cb 63 18 ec cd 7d ec c9 3c e2 81 68 ff e4 ac 0e fb 6f 2e 45 82 cb 02 a6 8d ab ae 7b f7 aa 5e 59 b8 e6 ec 8b 1a e4 81 ea c1 c1 87 bb f7 1b 72 75 82 ea be 6a 5f 63 1c d5 b3 f5 ca 7b 9f 9b 25 18 9b e0 47 ed e6 e5 e5 aa 40 20 78 c9 2a 8a 79 eb 29 17 0e 7a 4f 5b 80 c3 b7 fe c8 c8 49 Data Ascii: /l$4ky5AQ2%GXm{o~a1He'{0_8J'wnz0z;+o i(6{/]6d-/;GxO`!gc}<ho.E{^Yruj_c{%G@ x*y)zO[I
2024-01-15 14:02:24 UTC	26	IN	Data Raw: 7f ff ef ff 79 9b 50 0a ba f3 85 ed 9d 6d a8 ef a2 df 1b ce 7e 83 6e 39 e7 92 Data Ascii: yPm~n9
2024-01-15 14:02:24 UTC	16383	IN	Data Raw: 7f c9 e5 13 7d 8c 2b ec b2 eb fb e8 4f 92 9f b9 30 9d 67 d8 31 5f 43 bf b4 d2 89 5f aa e4 85 f7 93 50 e8 82 03 1b f5 25 c8 2f c8 b3 6d 1d 40 d3 56 7d c8 6e b7 8f 3e 2d c8 ac dd 79 5a 1a d3 c6 7b 27 f6 13 ce 3a e8 b8 4f 78 3e 97 46 4e 04 d4 fa fe ef c0 b7 87 6d 9a 97 68 a6 d5 f0 d8 6c 4c 9a 9b e8 26 e9 61 f0 29 f6 c0 7c e5 79 45 1f 66 26 d6 01 85 fe 06 f5 57 1a 74 b0 27 c3 3e 34 e8 99 52 60 b9 8f 2e e8 59 f0 e9 64 47 e3 03 50 3a 95 5b fb fc 81 83 7b b1 0c 66 86 8b 69 ce 08 03 13 2d 8a 0c 3e c3 dc 99 04 7a fb a9 38 6e bf 6f ba bc ca 69 22 70 b3 06 5f 71 b3 6b a3 f7 de a1 df f8 d0 e2 c9 f6 68 03 16 8f 36 09 6e 5b 04 63 e6 0c 68 93 8d cd 41 27 e9 da 32 7d 49 f9 17 38 34 40 0f d6 39 77 1b 41 ab 77 1f e8 de ee d3 b2 72 74 5b fd f8 10 a1 4d 9c 41 c0 7b 09 a2 ca Data Ascii: }+O0g1_C_P%/m@V}n>-yZ{':Ox>FNmhlL&a)\|yEf&Wt'>4R`.YdGP:[{fi->z8noi"p_qkh6n[chA'2}I84@9wAwrt[MA{
2024-01-15 14:02:24 UTC	26	IN	Data Raw: fa 65 dd b2 06 02 27 27 68 e9 e8 1b 60 f9 5c be 4f 23 33 c6 63 fc 55 7a 2a de Data Ascii: e''h`\O#3cUz*
2024-01-15 14:02:24 UTC	16383	IN	Data Raw: fe e8 12 e3 98 7e fb 5b 77 86 e3 f1 e7 4f f0 49 69 1b 96 68 19 7a 30 5a 4f 3e c4 a7 f5 48 df 45 08 7a e6 c6 38 33 02 5d 33 69 7b 34 cc 2f 37 13 ec 2c 68 19 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 86 9f 84 20 bb f0 d5 19 53 65 87 df 71 e6 3c d4 7b f2 3f 15 bb 2a f1 ee 57 44 c5 0e 4b 79 57 53 00 90 6d 70 f9 e1 89 74 fb 13 5b 01 e0 68 b7 2b d4 ba 75 f7 1d a4 d1 bd 5a 1a de 59 54 76 ed c1 71 96 47 1c 9c e8 ae 85 c7 76 15 c3 e1 de e6 a9 a6 53 fc 87 90 8e d2 aa 8b 8b 0e 33 7f a3 8d da 4b 99 8f ec 04 36 17 38 b7 00 2d 48 f3 8c 82 3f 26 e3 aa 25 1d 5d d8 70 1f 04 ee 96 42 e0 97 97 71 05 1f 3d 5d 1e ef d8 d8 78 47 Data Ascii: ~[wOIihz0ZO>HEz83]3i{4/7,h`0`0`0`0`0`0`0`0`0 Seq<{?*WDKyWSmpt[h+uZYTvqGvS3K68-H?&%]pBq=]xG
2024-01-15 14:02:24 UTC	26	IN	Data Raw: cb b1 df 41 d7 ee 7b 1e 59 1e 91 d1 07 07 db cd 16 00 00 5e de fa e3 af ed 2b Data Ascii: A{Y^+
2024-01-15 14:02:24 UTC	16383	IN	Data Raw: 00 00 fc fd 9f bf e1 3f 7f ff 0f 00 00 6c 59 46 44 54 9b 88 6d 5b f9 c6 be db c3 e1 20 fe c2 be c1 be ee 80 d4 c7 25 60 c6 44 70 38 f4 7c ed 76 9f 3d af ed 4e 6d 43 e2 0a 0e 1c 06 11 c1 79 b1 c7 fe 18 bc 87 c0 76 28 36 44 6c 8b e4 93 f2 ff eb ef bf 58 d6 37 d6 bd 53 ff fd 64 de df 3f de e1 df 7f 7f 03 00 c0 3f ff fd 5f 00 00 f8 df ff fd 7f 00 00 f0 e7 f7 3b ec 99 67 f1 59 c7 b6 d8 34 0d 34 1b af 76 2b f6 82 ea 4b 1c c9 98 77 40 07 39 1c eb 22 26 75 91 84 b5 bb a4 94 00 5b d6 a1 27 a6 a9 4a 51 ff 42 7e 30 55 5d 4e 1d 43 ca b8 22 48 12 9f 22 41 12 fb 90 6f e1 94 3b c2 bc 92 09 c5 b5 47 73 83 be e8 37 b5 6f 15 f9 99 a6 47 07 84 75 cf eb 20 81 4b 62 3b 1c 57 3b 89 c7 1d 74 6c 4f 49 63 2f 9d ec 73 91 52 d5 5d a7 22 ee 75 b5 39 82 63 5a ae dc c3 7a d0 b7 13 21 Data Ascii: ?lYFDTm[ %`Dp8\|v=NmCyv(6DlX7Sd??_;gY44v+Kw@9"&u['JQB~0U]NC"H"Ao;Gs7oGu Kb;W;tlOIc/sR]"u9cZz!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.8	49919	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	693	OUT	GET /assets/img/bg-world-leaf.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:23 GMT Accept-Ranges: bytes ETag: "0123efde632d81:0" Connection: close Last-Modified: Tue, 08 Mar 2022 12:21:08 GMT Content-Length: 3049
2024-01-15 14:02:24 UTC	3049	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 37 32 70 78 22 20 68 65 69 67 68 74 3d 22 36 37 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 32 20 36 37 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 31 33 20 43 6f 70 79 20 32 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 55 49 5f 61 67 67 69 6f 72 6e 61 74 61 22 20 73 74 72 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="672px" height="672px" viewBox="0 0 672 672" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 13 Copy 2</title> <g id="UI_aggiornata" stroke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.8	49918	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	697	OUT	GET /assets/img/arrow-right-white.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:23 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 2350
2024-01-15 14:02:24 UTC	2350	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 70 78 22 20 68 65 69 67 68 74 3d 22 31 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 31 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 20 70 6f 69 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 4</title> <defs> <polygon id="path-1" poin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.8	49917	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	690	OUT	GET /assets/img/play-white.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:23 GMT Accept-Ranges: bytes ETag: "048bec2fd4fd81:0" Connection: close Last-Modified: Thu, 14 Apr 2022 12:47:12 GMT Content-Length: 2203
2024-01-15 14:02:24 UTC	2203	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 37 70 78 22 20 68 65 69 67 68 74 3d 22 37 37 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 37 20 37 37 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 32 39 33 43 41 42 38 2d 35 44 35 43 2d 34 35 46 37 2d 39 41 46 46 2d 44 46 41 33 37 38 31 39 37 30 35 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="77px" height="77px" viewBox="0 0 77 77" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>4293CAB8-5D5C-45F7-9AFF-DFA378197051</title> <defs>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.8	49922	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	695	OUT	GET /assets/img/social/linkedin.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:23 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 1018
2024-01-15 14:02:24 UTC	1018	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 76 65 6c 6c 6f 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 34 2e 38 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 34 2e 38 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 39 62 32 33 33 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="28" height="24.89" viewBox="0 0 28 24.89"> <defs> <style> .cls-1 { fill: #f9b233; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.8	49923	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	448	OUT	GET /media/jfwonuut/ilsole_csr-it2023_logo_en_hor.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:23 GMT Accept-Ranges: bytes ETag: "ab74d79f6a4d91:0" Connection: close Last-Modified: Thu, 22 Jun 2023 10:41:01 GMT Content-Length: 279269
2024-01-15 14:02:24 UTC	7101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 c6 00 00 01 d9 08 06 00 00 00 ac 3b e8 e5 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec bd dd f2 6d c9 51 1f 98 b9 4e 4b 6d 18 d9 52 04 0e 3b 86 41 a8 81 61 2e e6 46 8a b0 c1 98 99 b1 da 4f 20 bd 01 fd 06 ee 4b cf 80 87 b6 2d f0 07 a3 b1 c4 30 be 75 fb 0d e4 27 a0 75 33 61 70 c4 44 37 06 01 86 b1 5a 10 01 fa 04 09 d9 92 ba d1 59 39 17 55 99 f9 cb ac ac b5 d6 de ff cf 73 7a 65 f7 ff ec bd d7 aa 8f ac aa ac fc f8 55 ad 5a 2c 22 74 d2 49 27 dd 3e fd d9 1f fe eb 97 88 e8 25 66 26 22 7a a9 ff 29 bd 4c 7d ea ad 24 c4 44 1f 22 a2 8f 52 4b 4b d2 6f 0a 11 71 2e 98 99 98 98 74 ee 6a 5a bb 9d 93 df a8 15 ca 85 97 16 6a e3 74 bb c8 b1 f4 cf 35 dc 10 62 66 e0 ad Data Ascii: PNGIHDR;pHYs.#.#x?v IDATxmQNKmR;Aa.FO K-0u'u3apD7ZY9UszeUZ,"tI'>%f&"z)L}$D"RKKoq.tjZjt5bf
2024-01-15 14:02:24 UTC	8760	IN	Data Raw: a9 7f 4b 73 68 af 6d 43 78 99 92 1f 7f f9 66 2e 27 8f bf 03 0c e8 13 e0 5c d0 c5 16 26 ee ee ca de 51 38 07 68 6b 91 95 46 09 30 7d 2f b9 a5 43 c1 b1 1c 75 3c 28 f6 61 5c 28 f3 7c 3c f4 a4 df c1 61 8b 47 f1 1c a7 68 2e 25 88 c6 65 74 04 18 af c7 ba 7d 63 13 57 4e c2 12 8f ad d9 a6 12 18 3f d0 a6 01 90 1a ee ab fd 12 e8 f7 bd b1 7f 7e 09 75 b4 08 75 3f a1 1e e3 a9 76 e9 dd d6 f6 14 d4 2f df 2c 92 87 ef c7 65 d5 63 23 f7 ed db 5f e3 50 17 e6 ae f3 13 c0 fa 51 12 de 3e 55 ef 01 18 2f 84 b6 8c da ee 01 18 1f 16 da dd 69 f4 b9 86 e1 27 c9 cd 80 f1 2e 64 db c0 b8 73 e8 c0 b8 9e 85 fd 38 80 71 6d 2d d6 a1 f2 f3 10 47 a9 e0 82 f1 f3 0d 8c 47 9e 4a 36 78 e8 9f cf 13 d1 e7 a8 81 e4 6f d3 49 27 3d 22 3a 81 f1 93 1e 05 7d ed f7 7f f5 a5 0e 84 bf 42 cc 1f 25 ca 81 07 Data Ascii: KshmCxf.'\&Q8hkF0}/Cu<(a\(\|<aGh.%et}cWN?~uu?v/,ec#_PQ>U/i'.ds8qm-GGJ6xoI'=":}B%
2024-01-15 14:02:24 UTC	1460	IN	Data Raw: 73 e9 d3 b4 33 60 29 f3 cb e5 33 65 50 bc 0e a6 39 ce 59 9a 8d ea 46 65 0c f7 57 48 87 28 35 02 24 07 bb 6c b5 e7 35 99 50 11 59 57 f4 c7 01 99 84 16 28 53 1f 2a 7f da 5b 86 8f 49 17 1b 16 f7 49 ae 0d 34 57 70 b4 0b da 61 e2 1a d9 8a 20 8a d8 d8 68 59 f8 88 27 ab 4c b8 ab df f9 ea 47 15 34 f4 8a f4 96 1d 9f 62 b6 64 75 fd 7f d5 51 2a e4 7d 50 cd 5b c1 23 54 c6 04 eb 3a 5c 4a 69 75 ec 7d ee 36 eb e2 60 70 09 f4 92 c4 62 2e a0 4b 5e cc ea 72 4c 00 56 1e 3f 4a a5 2c 0d e3 b9 00 8f ba 0c db 93 1f 9a 0e c1 6a e4 9f 47 4e b4 e7 c8 64 87 00 bd 8c c0 a5 5d 31 19 5c 83 7c 4a 7f 21 98 1d 9b a1 b9 7a a6 e0 01 80 de 1b 1d 8d 6d 0a aa 13 74 c1 a5 94 3d 12 91 7c 7c 85 b6 5d e7 07 51 1a 90 fc 65 93 91 8b 59 0c 7d 04 ae 57 1a 47 e9 40 38 58 92 ba 2b 6d 5c a4 96 05 d0 c9 Data Ascii: s3`)3eP9YFeWH(5$l5PYW(S[II4Wpa hY'LG4bduQ}P[#T:\Jiu}6`pb.K^rLV?J,jGNd]1\\|J!zmt=\|\|]QeY}WG@8X+m\
2024-01-15 14:02:24 UTC	10220	IN	Data Raw: 43 a2 1e 3a 06 58 b7 52 e5 a4 90 be ca 34 85 25 01 94 52 c0 c1 3c 43 78 34 b3 04 62 f0 1e 79 5a 2c 78 b7 69 21 78 81 dd a5 42 3d f0 9c c8 6c 6e 93 4e a3 a1 61 f1 9a 81 fe 22 ae 53 60 35 4e b1 4f ec 16 a1 58 17 68 27 d2 39 25 32 2e 28 04 76 af 1a ea eb 16 85 76 e0 ab ed bc d0 57 82 17 62 a3 3b 8e 58 45 d7 2e 61 0a 98 67 e7 d9 cb 85 c7 4a 6f 73 de 15 8f 85 17 f8 98 df 2b ee 4c d5 70 9f 1a 37 e9 63 cf 15 85 a2 8b fc 4d 8a 8d 75 5c 5b c6 00 54 fa e5 5a c4 3b 30 29 32 a4 d1 b9 93 e1 e9 21 3f 30 1b 75 8a 24 d9 43 fb 00 47 3b 74 d0 94 21 62 03 49 8c 13 9a 66 dd 7b 5f 61 9e 73 16 e7 d8 08 25 5b 73 58 db ad 02 e8 bf 83 c4 9a 10 1d 6c 47 16 12 dc e1 0f 9f 82 fc 95 8f ad f7 5b c3 22 57 c5 07 5c 1b ea a7 30 0c 59 5e 18 d3 a4 59 e8 3d d1 1f 1d c7 b1 e6 d1 87 7c 18 ff Data Ascii: C:XR4%R<Cx4byZ,xi!xB=lnNa"S`5NOXh'9%2.(vvWb;XE.agJos+Lp7cMu\[TZ;0)2!?0u$CG;t!bIf{_as%[sXlG["W\0Y^Y=\|
2024-01-15 14:02:24 UTC	10220	IN	Data Raw: 4a 12 91 ef 98 6e 0b 2b 7d 77 6e d2 33 79 47 6a e4 0d e5 93 5a 87 17 83 5e 99 9d 96 fb a9 7d 9f 83 80 b3 92 aa 38 b1 02 f5 aa 39 9a ad 8e 83 79 96 5f 88 86 cd 56 a1 fc e7 42 c0 36 5f ca 19 16 02 20 1d ca 4f 05 8c 4b 3f e4 ea 22 60 dc 74 b3 83 ba eb ba da c2 21 01 74 aa dc 39 6b ce 9f e0 3d 72 19 36 9d d9 79 e1 d1 b9 09 a0 64 70 bd 82 a4 29 10 41 a4 e0 23 11 83 af 7a 7f c0 78 4a ee ed d5 41 81 72 f0 49 0f 62 ed fb bd 33 c6 bd 82 f0 e4 27 f8 ef 64 bf a4 ed f0 67 1f 29 e6 85 0c df 11 d5 3d 71 01 bb f5 35 77 3c 29 8e 89 4c e6 57 09 8c f7 7c 01 18 a7 be a3 1f c0 63 6c 96 03 e3 a0 fb 3a b3 7b c0 b8 55 3c f4 d9 16 30 ee 69 05 94 2b db 77 0e e9 5d 96 e7 c0 b8 da 3b 5f f7 58 cc b0 8a b6 a9 d1 bf 25 e6 57 7f e4 6f fd c3 f3 c5 9c 0f 48 27 30 fe 80 f4 a7 6f fd f2 4b Data Ascii: Jn+}wn3yGjZ^}89y_VB6_ OK?"`t!t9k=r6ydp)A#zxJArIb3'dg)=q5w<)LW\|cl:{U<0i+w];_X%WoH'0oK
2024-01-15 14:02:25 UTC	1460	IN	Data Raw: 1a 57 5a 0d eb df f6 b3 e6 31 32 cc af 93 93 b6 c7 d4 c8 e2 89 af dd c0 24 1b 18 a6 c4 3a 11 39 38 d8 03 29 f7 d4 25 cd a9 38 41 de 37 12 b6 d4 1d fd e9 df a5 92 7c 03 cb af 0a de 9b f6 e0 09 29 fb dc c3 9f c3 d6 07 b3 c9 4c 20 21 c7 97 bd e2 8f 0b 13 b3 b5 a0 68 af f3 8d fb 36 55 1a 8e 2b cf 77 d0 e1 f2 12 b7 cc fa 9b 07 54 96 63 87 9f c5 d6 07 3e 93 49 8e 57 5a 3a d1 37 72 45 ee 3c 2a 73 ba 32 ad d1 f7 6e f9 5e 61 2b 74 09 7b 0c 79 f1 f0 b3 d8 f2 ef 1f c7 e4 c9 89 d4 78 8b d7 bc db 78 fe fa 8c ae a1 5a 6e 14 39 5e 1d 86 56 5d 8d d6 8e 01 a4 3d 35 bd 53 6f e9 4d f5 89 d7 98 01 af 57 e5 99 69 0a 38 fa 0c 63 a6 6d 4a 83 f2 cd 07 a9 1f 35 58 37 08 a9 3f b4 f3 d9 6f 18 38 09 a8 a9 d9 1f af 4e 30 f5 24 f5 bd 87 81 dd 37 ba f1 f3 d7 d6 35 b3 d3 00 25 31 5e 00 Data Ascii: WZ12$:98)%8A7\|)L !h6U+wTc>IWZ:7rE<*s2n^a+t{yxxZn9^V]=5SoMWi8cmJ5X7?o8N0$75%1^
2024-01-15 14:02:25 UTC	2340	IN	Data Raw: 63 e8 ec b7 da 5b 94 b0 b4 26 cf 37 80 12 e6 d5 c0 b6 51 2c fe a0 8c 44 32 c9 ef dc 32 30 1f 35 4e d3 0f dd 0a 94 49 bd 27 5e 91 43 f5 c9 06 22 06 74 65 c5 44 a7 7d 72 65 e9 09 a8 95 f6 74 d9 32 1b 95 9d 76 55 3d e4 ce 5d 1b 4b 72 3c 2f 4a 62 3c 07 72 91 e2 75 1d 1f 42 6a 84 3d 78 3b 3d 2f 35 39 c7 96 29 65 31 29 d1 da fd 52 cc 7f c9 db 31 77 e0 12 44 51 6b 7a 3e 25 4a cc 30 34 82 14 97 b8 e5 fb 5f 2d fd 8d 97 28 51 47 b4 b4 f5 62 e8 dc 77 63 e1 b9 ef c3 9c d6 fe e4 22 b7 57 e6 29 09 54 6b cc 92 09 6d f5 61 47 e4 16 fb ad 49 40 41 90 29 92 11 62 ed 45 fc 7b 13 3e 53 de 57 4b 23 26 b7 cb 4d e6 d1 a0 a6 15 11 a7 c3 db 7a 7c 62 f4 c2 c0 a2 c4 5a 27 8e 39 26 e3 18 71 2c 2c 50 09 d1 e1 90 64 5a 68 b7 3c d4 ce 05 21 64 8d f2 aa 72 19 9c c2 e7 d2 9f ce 12 32 65 Data Ascii: c[&7Q,D2205NI'^C"teD}ret2vU=]Kr</Jb<ruBj=x;=/59)e1)R1wDQkz>%J04_-(QGbwc"W)TkmaGI@A)bE{>SWK#&Mz\|bZ'9&q,,PdZh<!dr2e
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: d0 5c 2c 73 ae 19 7e c2 41 09 6d 73 61 93 a6 3e 18 33 3c 77 e9 35 c3 95 8a d7 2c 97 14 08 07 61 2e 68 50 0e 48 97 1a e0 ea 9a 32 02 88 5d 89 88 6d 8c 5f ee 28 9d 10 27 d2 91 c5 7c f6 2a 5c 85 e5 74 31 ca 8d 50 ea c3 48 2c 4e 53 80 ae 00 11 d7 77 48 26 67 f6 22 c7 23 77 c6 c7 26 c8 a9 5b 76 ce 35 9d cd 9c c4 39 f9 eb 79 4e ce c0 b9 8c 6b 92 d3 da 4a 3c 06 c3 24 18 62 30 e9 d2 83 73 bd 09 c3 64 fe 11 0c 3f c4 b2 39 e9 6d 15 18 8b 6f 30 c8 43 f1 6c 16 2c 21 d6 b8 fe 38 25 46 0a c1 db cf 4c 3d 58 e5 5d 07 75 5d 5b da e9 05 af e1 8e c8 20 f5 5c fd 3b 08 83 a7 e3 d6 75 e6 25 0a 73 cb 4c cb 5e c8 65 97 93 e1 f3 3d 35 1b da f8 4c 51 6b 45 9a 1b 95 b1 d1 0d 88 4f 8e 3b d7 0f 65 1c c2 d9 3d 54 3d c1 d8 6c c8 b6 66 8e c4 1c 7b 9f f9 4e a6 d5 f8 e0 8a d7 e4 cf 27 47 Data Ascii: \,s~Amsa>3<w5,a.hPH2]m_('\|*\t1PH,NSwH&g"#w&[v59yNkJ<$b0sd?9mo0Cl,!8%FL=X]u][ \;u%sL^e=5LQkEO;e=T=lf{N'G
2024-01-15 14:02:25 UTC	26	IN	Data Raw: 90 77 b8 6f b0 7d 75 ef e6 4b 3b 49 71 00 18 3b 3e 82 ad bf fa 72 db d2 ef a2 Data Ascii: wo}uK;Iq;>r
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: a9 aa 46 95 10 c2 6e 72 3a fa 2f 0f d7 30 dd ce d7 28 93 37 cd f4 e1 e9 2d a1 b3 ed ec db 3b 7e f5 c9 29 1d cd b1 24 4e 08 62 7c e3 43 1f b9 0d 02 17 e9 b7 5c 25 e8 09 be 92 e9 0c 7a 71 a0 db 9e 6b 3d 44 77 59 98 4a c1 76 49 45 b1 37 6a 55 1c b6 58 90 4a 4a 21 21 7a 26 61 e6 82 f7 60 e2 a4 e2 07 b0 d4 a8 71 32 e0 9e 65 77 61 f9 b6 0d 95 a4 55 94 38 de 76 a0 bc 1f cc b2 fe c5 d7 6f 5a 83 9b ef fc 43 1c 1a 1d 2d 1c f7 c7 eb 1f c1 f0 c8 81 52 f9 d6 a8 51 63 fc 30 34 eb 52 0c ce 4a 5e c1 95 00 9a 30 76 bf 46 77 81 60 36 a4 d6 b2 57 db 09 4b 89 66 93 e8 39 00 88 06 a4 c8 f0 26 f9 b8 b0 f9 24 79 85 ac b4 49 68 41 ad 5a 61 d4 1c 7d c5 a4 20 92 d7 fa 3d c2 9a 10 b6 52 a8 0f ac fc 8c c8 d5 3a 5b 8c 77 86 a9 10 95 9f b0 d7 10 5e 67 30 e9 1d 35 8d d1 bb 2e df 6b d2 Data Ascii: Fnr:/0(7-;~)$Nb\|C\%zqk=DwYJvIE7jUXJJ!!z&a`q2ewaU8voZC-RQc04RJ^0vFw`6WKf9&$yIhAZa} =R:[w^g05.k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.8	49924	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	694	OUT	GET /assets/img/social/youtube.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:24 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:24 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 917
2024-01-15 14:02:24 UTC	917	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 76 65 6c 6c 6f 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 30 22 20 68 65 69 67 68 74 3d 22 32 32 2e 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 20 32 32 2e 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 39 62 32 33 33 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="30" height="22.5" viewBox="0 0 30 22.5"> <defs> <style> .cls-1 { fill: #f9b233; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.8	49925	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:24 UTC	431	OUT	GET /media/u31heilt/asvis_logogr.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:25 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:02:24 GMT Accept-Ranges: bytes ETag: "3bed93e43f91d81:0" Connection: close Last-Modified: Wed, 06 Jul 2022 13:54:21 GMT Content-Length: 780600
2024-01-15 14:02:25 UTC	1259	IN	Data Raw: ff d8 ff e1 2b e2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 31 37 3a 30 34 3a 31 38 20 31 31 3a 35 38 3a 30 33 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 03 0f a0 03 00 04 00 00 00 01 00 00 01 6f 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: +ExifMM*bj(1 r2i''Adobe Photoshop CS6 (Macintosh)2017:04:18 11:58:03o"
2024-01-15 14:02:25 UTC	13140	IN	Data Raw: 01 16 cf 58 59 5a 20 00 00 00 00 00 00 7b 24 00 00 40 4c 00 00 01 ea 58 59 5a 20 00 00 00 00 00 00 55 d8 00 00 aa 4e 00 00 12 f3 58 59 5a 20 00 00 00 00 00 00 25 da 00 00 15 66 00 00 be 50 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 36 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 a3 00 a8 00 ad 00 b2 00 b7 00 bc 00 c1 00 c6 00 cb 00 d0 00 d5 00 db 00 e0 00 e5 00 eb 00 f0 00 f6 00 fb 01 01 01 07 01 0d 01 13 01 19 01 1f 01 25 01 2b 01 32 01 38 01 3e 01 45 01 4c 01 52 01 59 01 60 01 67 01 6e 01 75 01 7c 01 83 01 8b 01 92 01 9a 01 a1 01 a9 01 b1 01 b9 01 c1 01 c9 01 d1 01 d9 01 e1 01 e9 01 f2 01 fa 02 03 02 0c 02 14 Data Ascii: XYZ {$@LXYZ UNXYZ %fPcurv#(-26;@EJOTY^chmrw\|%+28>ELRY`gnu\|
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: 00 01 a8 00 69 00 4d 00 61 00 63 74 65 78 74 00 00 00 00 43 6f 70 79 72 69 67 68 74 20 41 70 70 6c 65 20 49 6e 63 2e 2c 20 32 30 31 37 00 00 58 59 5a 20 00 00 00 00 00 00 f3 52 00 01 00 00 00 01 16 cf 58 59 5a 20 00 00 00 00 00 00 7b 24 00 00 40 4c 00 00 01 ea 58 59 5a 20 00 00 00 00 00 00 55 d8 00 00 aa 4e 00 00 12 f3 58 59 5a 20 00 00 00 00 00 00 25 da 00 00 15 66 00 00 be 50 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 36 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 a3 00 a8 00 ad 00 b2 00 b7 00 bc 00 c1 00 c6 00 cb 00 d0 00 d5 00 db 00 e0 00 e5 00 eb 00 f0 00 f6 00 fb 01 01 01 07 01 0d 01 13 01 19 01 1f 01 25 Data Ascii: iMactextCopyright Apple Inc., 2017XYZ RXYZ {$@LXYZ UNXYZ %fPcurv#(-26;@EJOTY^chmrw\|%
2024-01-15 14:02:25 UTC	26	IN	Data Raw: 47 3a 63 79 61 6e 3d 22 37 31 2e 34 38 34 33 39 38 22 20 78 6d 70 47 3a 6d 61 Data Ascii: G:cyan="71.484398" xmpG:ma
2024-01-15 14:02:25 UTC	9748	IN	Data Raw: 67 65 6e 74 61 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 79 65 6c 6c 6f 77 3d 22 38 37 2e 35 30 30 30 30 38 22 20 78 6d 70 47 3a 62 6c 61 63 6b 3d 22 30 2e 30 30 30 30 30 30 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 52 3d 30 20 47 3d 31 34 36 20 42 3d 36 39 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 63 79 61 6e 3d 22 38 33 2e 39 38 34 33 39 38 22 20 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3d 22 31 34 2e 34 35 33 31 30 31 22 20 78 6d 70 47 3a 79 65 6c 6c 6f 77 3d 22 39 32 2e 31 38 37 35 30 30 22 20 78 6d 70 47 3a 62 6c 61 63 6b 3d 22 32 2e 33 34 33 37 39 38 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 Data Ascii: genta="0.000000" xmpG:yellow="87.500008" xmpG:black="0.000000"/> <rdf:li xmpG:swatchName="R=0 G=146 B=69" xmpG:mode="CMYK" xmpG:type="PROCESS" xmpG:cyan="83.984398" xmpG:magenta="14.453101" xmpG:yellow="92.187500" xmpG:black="2.343798"/> <rdf:li xmpG:swat
2024-01-15 14:02:25 UTC	15266	IN	Data Raw: bc 4e bd 52 be 57 bf 5d c0 63 c1 6a c2 72 c3 7b c4 84 c5 8a c6 90 c7 96 c8 9d c9 a5 ca ad cb b6 cc bf cd c8 ce d2 cf dc d0 e6 d1 f1 d2 fb d4 06 d5 12 d6 1e d7 2a d8 37 d9 44 da 51 db 5e dc 6b dd 79 de 86 df 94 e0 9c e1 a2 e2 a8 e3 ad e4 b2 e5 b6 e6 ba e7 bd e8 c0 e9 c3 ea d4 eb e5 ec f5 ee 04 ef 12 f0 20 f1 2c f2 38 f3 43 f4 4e f5 59 f6 63 f7 6a f8 6e f9 6f fa 6c fb 64 fc 56 fd 44 fe 2f ff 17 ff ff 00 00 02 05 03 d8 05 68 06 c6 08 06 09 32 0a 52 0b 65 0c 72 0d 78 0e 7a 0f 7a 10 7a 11 79 12 75 13 70 14 68 15 5e 16 52 17 45 18 37 19 29 1a 34 1b 3d 1c 40 1d 3f 1e 3a 1f 34 20 2c 21 23 22 19 23 0f 24 04 24 f9 25 ee 26 e3 27 d8 28 cc 29 c1 2a b6 2b ab 2c 9f 2d 93 2e 87 2f 7c 30 70 31 64 32 59 33 4d 34 41 35 36 36 2b 37 21 38 16 39 0b 3a 00 3a f6 3b ed 3c e3 3d Data Ascii: NRW]cjr{7DQ^ky ,8CNYcjnoldVD/h2Rerxzzzyuph^RE7)4=@?:4 ,!#"#$$%&'()+,-./\|0p1d2Y3M4A566+7!89::;<=
2024-01-15 14:02:25 UTC	15266	IN	Data Raw: 81 f9 6e 2a 84 79 81 d1 6f bf 6f fc 81 b9 71 4d 5a 70 81 b8 72 d9 43 80 81 dd 74 47 29 04 82 81 75 53 05 3c 83 bb 76 8d ba 4c 80 bd 74 b3 a9 10 80 8d 75 8d 96 b3 80 65 76 56 83 4f 80 4b 77 17 6e e5 80 42 77 dd 59 70 80 50 78 a6 42 93 80 78 79 5a 28 2e 80 fc 79 c8 04 c8 82 0c 7a d2 b9 1c 7f 0e 7e cd a7 c2 7e f9 7e b7 95 98 7e df 7e 9c 82 24 7e d8 7e 86 6d cf 7e dc 7e 83 58 79 7e f8 7e 8d 41 ba 7f 27 7e 92 27 6e 7f 8e 7e 7c 04 62 80 91 7e 92 b7 bc 7d 94 88 d5 a6 5c 7d 86 87 ee 94 0e 7d 7c 86 fe 80 c9 7d 81 86 15 6c 90 7d 9f 85 4c 57 61 7d cc 84 98 40 cc 7d ff 83 f6 26 a8 7e 44 83 84 04 09 7f 48 81 d4 b6 6d 7c 59 92 e1 a5 0b 7c 50 91 38 92 bf 7c 50 8f 7f 7f 84 7c 5d 8d c8 6b 77 7c 80 8c 2d 56 68 7c be 8a c7 3f fe 7c f4 89 90 25 ff 7d 18 89 06 03 be 7e 2f 82 Data Ascii: n*yooqMZprCtG)uS<vLtuevVOKwnBwYpPxBxyZ(.yz~~~~~$~~m~~Xy~~A'~'n~\|b~}\}}\|}l}LWa}@}&~DHm\|Y\|P8\|P\|]kw\|-Vh\|?\|%}~/
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: 80 00 65 af 8b 7d 75 4c 5a 96 8a bc 76 15 4e 9b 89 f1 76 c2 41 9e 89 2e 77 50 33 66 88 9f 77 c8 23 03 88 a2 77 fd 0f 0c 89 53 77 94 00 00 81 4e 7c e5 00 00 80 00 80 00 64 f7 89 e2 7c f0 59 ee 89 30 7d 4b 4e 00 88 67 7d 7b 41 09 87 9f 7d 8d 32 de 87 04 7d 99 22 d9 86 cc 7d a3 0f 0b 87 12 7d b5 00 00 80 1b 80 00 00 00 80 00 80 00 64 5a 88 88 84 8b 59 52 87 e6 84 77 4d 68 87 20 84 2f 40 76 86 54 83 d0 32 5a 85 b0 83 8a 22 80 85 58 83 89 0f 33 85 21 83 47 00 00 80 00 80 00 00 00 80 00 80 00 63 de 87 80 8c 45 59 0d 86 ef 8b e5 4d 2f 86 1f 8b 24 40 3f 85 2c 8a 3b 32 2f 84 67 89 b0 22 36 84 06 8a 01 0e e5 83 a0 87 f2 00 00 80 00 80 00 00 00 80 00 80 00 63 7c 86 b1 94 19 58 ad 86 21 93 7c 4c cb 85 4d 92 53 3f e1 84 4f 91 06 31 e3 83 73 90 6e 22 02 82 ed 90 2a 0e Data Ascii: e}uLZvNvA.wP3fw#wSwN\|d\|Y0}KNg}{A}2}"}}dZYRwMh /@vT2Z"X3!GcEYM/$@?,;2/g"6c\|X!\|LMS?O1sn"*
2024-01-15 14:02:25 UTC	26	IN	Data Raw: 76 6e 0d b8 82 9d f8 60 aa b1 80 99 ca 53 6b aa 70 95 c2 46 8f a3 39 91 b6 3a Data Ascii: vn`SkpF9:
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: 72 9b aa 8d a4 2f 74 93 d1 89 a1 26 32 8b d2 85 f3 88 b1 c5 d0 ad 32 7b 71 be f1 a7 87 6e 25 b7 fa a2 3d 60 d2 b0 f9 9d 57 53 9b a9 f0 98 a3 46 c3 a2 c5 93 ee 3a a4 9b 4b 8f 37 2f a1 93 87 8a 96 26 5a 8b 93 86 61 f2 cf 7b 63 79 b0 db dd 7b bc 79 d2 c4 a8 7c 1c 7a 07 ad 25 7c 83 7a 5e 95 71 7c f7 7a dd 7d ad 7d 7c 7b 82 65 f0 7e 15 7c 3e 4e 44 7e d9 7d 34 36 cb 7f e9 7e 7d f0 b2 79 b9 84 cf da 2d 7a 34 83 ca c3 2a 7a b3 82 e8 ab cf 7b 3b 82 32 94 34 7b d0 81 aa 7c 88 7c 76 81 42 64 e1 7d 2e 80 e3 4d 55 7e 10 80 9f 36 01 7f 3a 80 68 ee cc 78 59 90 02 d8 6a 78 e5 8d da c1 9f 79 78 8b d2 aa 5e 7a 19 8a 10 92 ea 7a c9 88 7d 7b 64 7b 8b 87 05 63 e4 7c 5f 85 86 4c 7d 7d 5b 83 fe 35 4c 7e 9b 82 3f ed 06 77 33 9b 31 d6 ae 77 c8 97 ef bf f8 78 68 94 d8 a8 e0 79 19 Data Ascii: r/t&22{qn%=`WSF:K7/&Za{cy{y\|z%\|z^q\|z}}\|{e~\|>ND~}46~}y-z4*z{;24{\|\|vBd}.MU~6:hxYjxyx^zz}{d{c\|_L}}[5L~?w31wxhy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.8	49926	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:25 UTC	695	OUT	GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.synesgy.com/ Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2 Range: bytes=22446080-22524463 If-Range: "38c551fcd022da1:0"
2024-01-15 14:02:25 UTC	280	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Date: Mon, 15 Jan 2024 14:02:24 GMT Accept-Ranges: bytes Content-Range: bytes 22446080-22524463/22524464 ETag: "38c551fcd022da1:0" Connection: close Last-Modified: Wed, 29 Nov 2023 14:33:14 GMT Content-Length: 78384
2024-01-15 14:02:25 UTC	4119	IN	Data Raw: a2 93 dd 31 6f 3b d0 8c 84 eb 66 9e 14 d3 af 6c 5d dc 9d 77 c4 99 8a 2a 9f ba 53 09 45 a1 15 05 44 db c0 25 e2 9e c1 c4 b2 44 52 c0 ca 9a 33 be 70 81 85 ac 53 0f 22 18 ab 63 98 02 0c 96 10 bb 1c 4b 4c 84 c3 74 d1 d5 79 e1 51 ce 89 42 7c 33 0e f9 0a 7e 91 b1 bb 8d e9 3f 76 d2 b4 c8 31 66 cd 4b 85 a6 34 52 64 6b 02 54 9a d0 00 4d c2 59 c4 91 4b 21 bb 91 20 89 44 99 2d 1a 5c 5d c8 d7 fa 07 39 be 4b 1d 1e f0 83 2a 62 f6 00 27 23 31 ec 0b 72 e3 c7 ec dc 53 84 bb f0 96 7d 72 65 d5 dd ae cd 88 01 25 0f 55 57 ac 00 f0 e7 65 28 94 fd 68 c9 9d 24 17 75 29 ea 53 d6 c8 a0 20 96 9d 66 f7 3b 39 fb 16 60 86 c8 f5 3c 96 0e 9c cc e1 d8 6a c7 9f ba 90 bb cc 2c fe ac 18 02 58 eb 3b a1 9a 5b 96 a8 de ad 00 cd d3 57 eb b1 a2 4c de 45 d5 31 29 5e 55 82 3d c4 23 af b5 33 f1 a5 Data Ascii: 1o;fl]wSED%DR3pS"cKLtyQB\|3~?v1fK4RdkTMYK! D-\]9Kb'#1rS}re%UWe(h$u)S f;9`<j,X;[WLE1)^U=#3
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: ca ff 60 77 6d fb 14 60 db d9 50 5c c8 e7 ce 4c 43 61 52 1b 8f a6 e6 8f 96 15 7d 2e de 38 fe 90 62 78 80 52 d7 dd 4e 90 77 d5 f0 64 56 5a bd ab d0 12 23 b2 4a af 80 67 5a 94 ce 65 b4 10 cd 9e 59 68 cf a8 bd 7a 27 af da a6 c8 e6 ae 6b b9 79 a1 29 4f ef 3d a8 41 7b fd 0a cd ee f9 56 d9 e1 6c be 0b 4f 55 15 b7 0c 90 9e 95 2d 6b 54 65 cd 2f 25 71 c9 58 df b3 d5 d7 c0 c3 bf 14 ed 13 46 09 f7 b2 99 72 fb f2 d1 9e f7 f5 4a d1 74 9b 5c 1e 1d 75 00 02 5e 99 0a 50 92 05 2d ea 6f 5b b4 33 ce 54 81 46 91 34 bb 5d ca ff 60 88 bb ac 94 cd 13 73 55 71 aa 15 bf b6 fe 57 6a c7 b3 6e 73 97 f8 2c 8a 85 d3 c5 a4 35 77 f5 e9 27 52 f9 6c d0 73 72 a5 38 e1 cf 21 fe 2c 9d 41 c5 33 8f 25 05 46 8e f9 2e 31 89 55 fb e5 19 37 00 53 81 1e 0c bb b9 11 d6 32 0a a4 0c 74 56 0e 75 4a ce Data Ascii: `wm`P\LCaR}.8bxRNwdVZ#JgZeYhz'ky)O=A{VlOU-kTe/%qXFrJt\u^P-o[3TF4]`sUqWjns,5w'Rlsr8!,A3%F.1U7S2tVuJ
2024-01-15 14:02:25 UTC	26	IN	Data Raw: 00 00 3f da 00 00 39 e7 00 00 49 b0 00 00 4b 22 00 00 3e ec 00 00 3d c8 00 00 Data Ascii: ?9IK">=
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: 3a 07 00 00 3a 93 00 00 4c 7c 00 00 2c 2e 00 00 48 b3 00 00 3f 4d 00 00 36 d5 00 00 43 8b 00 00 39 26 00 00 3f 43 00 00 35 c6 00 00 3e 51 00 00 49 fb 00 00 3a 13 00 00 31 7a 00 00 43 68 00 00 41 07 00 00 4d cc 00 00 36 b4 00 00 45 5a 00 00 3f cb 00 00 36 ff 00 00 4a 43 00 00 34 a4 00 00 45 36 00 00 38 18 00 00 41 c8 00 00 51 57 00 00 43 b0 00 00 33 80 00 00 42 8d 00 00 39 86 00 00 44 11 00 00 2f 05 00 00 48 a3 00 00 39 58 00 00 60 6f 00 00 0e b5 00 00 16 3b 00 00 19 bd 00 00 13 69 00 00 12 a0 00 00 1f f4 00 00 15 d6 00 00 15 74 00 00 14 5c 00 00 15 2e 00 00 14 c4 00 00 14 af 00 00 13 dd 00 00 14 22 00 00 0d 39 00 00 17 85 00 00 13 72 00 00 14 43 00 00 13 f6 00 00 13 f5 00 00 13 79 00 00 14 49 00 00 14 0b 00 00 15 6f 00 00 14 ed 00 00 0d 5f 00 00 10 6b 00 Data Ascii: ::L\|,.H?M6C9&?C5>QI:1zChAM6EZ?6JC4E68AQWC3B9D/H9X`o;it\."9rCyIo_k
2024-01-15 14:02:25 UTC	26	IN	Data Raw: 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 Data Ascii:
2024-01-15 14:02:25 UTC	16383	IN	Data Raw: 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 02 00 00 03 ff 00 00 00 01 00 00 04 02 00 00 00 Data Ascii:
2024-01-15 14:02:25 UTC	26	IN	Data Raw: 91 00 00 00 01 00 00 00 01 00 00 04 92 00 00 00 02 00 00 00 01 00 00 04 99 00 Data Ascii:
2024-01-15 14:02:25 UTC	12827	IN	Data Raw: 00 00 01 00 00 00 01 00 00 04 9a 00 00 00 02 00 00 00 01 00 00 04 a1 00 00 00 01 00 00 00 01 00 00 04 a2 00 00 00 02 00 00 00 01 00 00 04 a9 00 00 00 01 00 00 00 01 00 00 04 aa 00 00 00 02 00 00 00 01 00 00 04 b1 00 00 00 01 00 00 00 01 00 00 04 b2 00 00 00 02 00 00 00 01 00 00 04 b9 00 00 00 01 00 00 00 01 00 00 04 ba 00 00 00 02 00 00 00 01 00 00 04 c1 00 00 00 01 00 00 00 01 00 00 04 c2 00 00 00 02 00 00 00 01 00 00 04 c9 00 00 00 01 00 00 00 01 00 00 04 ca 00 00 00 02 00 00 00 01 00 00 04 d1 00 00 00 01 00 00 00 01 00 00 04 d2 00 00 00 02 00 00 00 01 00 00 04 d9 00 00 00 01 00 00 00 01 00 00 04 da 00 00 00 02 00 00 00 01 00 00 04 e1 00 00 00 01 00 00 00 01 00 00 04 e2 00 00 00 02 00 00 00 01 00 00 04 e9 00 00 00 01 00 00 00 01 00 00 04 ea 00 00 00 02 Data Ascii:
2024-01-15 14:02:25 UTC	12211	IN	Data Raw: 00 00 01 58 00 00 01 56 00 00 01 56 00 00 01 69 00 00 01 53 00 00 01 4c 00 00 01 66 00 00 01 4b 00 00 01 60 00 00 01 3d 00 00 01 4c 00 00 01 5d 00 00 01 6a 00 00 01 61 00 00 01 58 00 00 01 5e 00 00 01 4b 00 00 01 55 00 00 01 54 00 00 01 51 00 00 01 31 00 00 01 51 00 00 01 52 00 00 01 56 00 00 01 6a 00 00 01 38 00 00 01 4b 00 00 01 61 00 00 01 6d 00 00 01 63 00 00 01 49 00 00 01 32 00 00 01 59 00 00 01 4e 00 00 01 35 00 00 01 2b 00 00 01 5d 00 00 01 62 00 00 01 8d 00 00 01 5e 00 00 01 57 00 00 01 5c 00 00 02 54 00 00 01 39 00 00 01 4d 00 00 01 34 00 00 01 5a 00 00 01 8a 00 00 01 39 00 00 01 31 00 00 01 1f 00 00 01 68 00 00 01 7c 00 00 01 51 00 00 01 4a 00 00 01 51 00 00 01 4d 00 00 01 5e 00 00 01 67 00 00 01 5e 00 00 01 47 00 00 01 51 00 00 01 5f 00 00 01 Data Ascii: XVViSLfK`=L]jaX^KUTQ1QRVj8KamcI2YN5+]b^W\T9M4Z91h\|QJQM^g^GQ_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.8	49927	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:25 UTC	425	OUT	GET /assets/img/play-white.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:25 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:24 GMT Accept-Ranges: bytes ETag: "048bec2fd4fd81:0" Connection: close Last-Modified: Thu, 14 Apr 2022 12:47:12 GMT Content-Length: 2203
2024-01-15 14:02:25 UTC	2203	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 37 37 70 78 22 20 68 65 69 67 68 74 3d 22 37 37 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 37 20 37 37 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 32 39 33 43 41 42 38 2d 35 44 35 43 2d 34 35 46 37 2d 39 41 46 46 2d 44 46 41 33 37 38 31 39 37 30 35 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="77px" height="77px" viewBox="0 0 77 77" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>4293CAB8-5D5C-45F7-9AFF-DFA378197051</title> <defs>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.8	49929	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:25 UTC	673	OUT	GET /assets/webfonts/subset-DMSans-Bold.woff2 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:25 UTC	218	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Date: Mon, 15 Jan 2024 14:02:24 GMT Accept-Ranges: bytes ETag: "08529fa13e2d71:0" Connection: close Last-Modified: Thu, 25 Nov 2021 15:49:06 GMT Content-Length: 24492
2024-01-15 14:02:25 UTC	2721	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 5f ac 00 11 00 00 00 00 ee bc 00 00 5f 4b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 66 1b f0 0c 1c 83 2c 06 60 00 82 4c 08 60 09 9c 0c 11 08 0a 82 94 4c 81 f5 3c 0b 85 7a 00 01 36 02 24 03 8b 58 04 20 05 8e 20 07 8f 61 0c 81 3d 1b 09 db 47 d0 6d db 35 2c 42 e7 09 3b ed 1e bd 66 2c 05 d3 cd c1 cb ed a0 94 d9 5b 97 55 b0 6d 1a dd 6e 07 48 2e a7 4a c9 fe ff ff 4f 4d 26 63 ac db a0 db 86 80 6a 4a f1 d6 27 48 92 e6 ee 4a 38 0a 7d a1 89 c5 50 d1 7a e9 58 b7 9d 81 1d 7e 3c a3 b1 c5 b9 af 05 cd 49 84 0b 83 5d 18 af c8 f5 32 53 3b f5 37 13 dc 0e 71 f6 72 98 bc 58 35 2b 72 e2 74 c5 30 42 31 8c 40 c7 d6 47 69 cb df 8d 8e b2 a4 84 5e b5 0a d3 08 3e 90 c1 b3 7a fe eb 39 41 d9 41 50 31 41 49 49 69 92 fa 27 Data Ascii: wOF2__Kf,`L`L<z6$X a=Gm5,B;f,[UmnH.JOM&cjJ'HJ8}PzX~<I]2S;7qrX5+rt0B1@Gi^>z9AAP1AIIi'
2024-01-15 14:02:25 UTC	8760	IN	Data Raw: 18 58 d8 6b 8e 0e 8f c1 ef 16 a1 11 29 19 79 3d 9c 9f 42 ca 72 31 bf cb 31 f6 63 0a 66 16 56 b6 d8 69 3b 8d 84 38 61 91 44 11 13 97 94 92 96 91 ad 4f 59 95 3b d5 d4 4a 5d 43 33 2d b4 75 74 f5 f4 cd 65 fe 9c c5 b4 7c ef 46 e4 16 3d 1a d8 06 0b 82 11 14 ab 5c 97 b0 2d d9 94 51 ba 9e 07 9f 5b f9 e4 28 d3 f4 d2 ee 4f 06 3f 03 2d 10 67 84 0e 81 09 ad 60 25 6b 4c b9 06 5c e3 30 78 86 3f 1e 2b c0 09 31 8b a3 9e a3 49 5a 3a 7a 86 cc dc 54 27 26 a7 42 4a ac 37 22 8c 33 89 68 4b d7 29 2c 5d 8d 26 b7 f2 c9 51 96 16 2b dc f4 c2 5d 1c 0d f4 85 a0 4d e4 2d c6 c1 59 ec 14 61 20 74 c5 e9 f5 c9 b7 79 a1 38 9e 88 1c 55 81 12 e9 b8 95 4f 1e ca b4 a4 0b 41 ff ec 17 06 37 20 e7 a6 11 ac 05 71 59 80 61 65 1c b3 31 8f 2d 88 31 47 5e 9d 72 fd ab 31 99 4c 26 93 cd 99 99 7e 9c dd Data Ascii: Xk)y=Br11cfVi;8aDOY;J]C3-ute\|F=\-Q[(O?-g`%kL\0x?+1IZ:zT'&BJ7"3hK),]&Q+]M-Ya ty8UOA7 qYae1-1G^r1L&~
2024-01-15 14:02:25 UTC	4380	IN	Data Raw: 60 75 41 f7 9b 5b 4f fb 72 d9 d1 10 37 35 d6 66 17 6b 8c 36 be 88 db 29 a2 a9 96 ec c4 0a cc 01 10 39 3e 4f 0d aa 99 1a 04 42 74 5d bd 7e f5 da b6 6b ee d8 eb 98 e8 b4 ca 3d 95 bb af c4 09 34 79 d7 ff d7 ff bf 36 21 a9 fd aa c3 f4 fd ed b2 83 ca 4c 82 f8 33 a2 56 47 31 ea 68 8d 60 b6 b9 98 ad 92 16 d3 a3 b3 a4 f2 98 f4 52 92 0c e0 5c 72 af 39 03 99 fe 1f 83 69 d5 f7 97 2b 76 26 67 ae b7 56 e8 8f 0f 0d 1d d7 57 d5 ee 31 65 6e 28 8e 81 55 46 a7 99 98 3c d6 95 fa d9 0c 2a 4b 97 94 61 e0 44 16 0a 0d 26 0a cb 1c ae f8 da 42 05 9b bc 91 11 7b c2 25 de 06 6c d3 ba a1 fe f4 95 a2 f2 9a 98 b5 69 8e 35 43 3d 94 34 88 28 20 d1 8c 53 10 d1 df 60 64 a1 94 9f a3 f0 27 23 35 24 d2 b9 c5 84 2e 4e 8f 2d ee eb e3 4e 40 78 13 99 ae f3 45 48 b2 6c 26 c4 5e 5d 68 94 28 0c 94 Data Ascii: `uA[Or75fk6)9>OBt]~k=4y6!L3VG1h`R\r9i+v&gVW1en(UF<*KaD&B{%li5C=4( S`d'#5$.N-N@xEHl&^]h(
2024-01-15 14:02:25 UTC	7300	IN	Data Raw: 5a af c3 8a 20 7a e7 80 6d 6b 35 b0 1c 66 46 9f 35 b0 06 98 7c b0 43 ed 52 f5 a3 b2 d4 3a 97 91 bf 4a 53 55 4d 18 ce 2e c4 47 a5 a4 72 ae 79 ca 93 b5 52 b8 cb 8d 67 ca ac 12 bc 1f b7 ee 69 10 16 87 97 44 35 47 ff ac 15 08 01 63 5e ed 22 d3 03 39 f7 98 85 eb 8d 29 8e bb ed 28 7b 81 eb 8d 75 7d 5e 18 35 52 2f 3c f5 da 6f 9d de 6b b2 21 4f f7 33 e8 fb 7d 20 4b fd 8f 9c 52 d2 5f 83 c3 e1 5b 39 42 f5 27 d6 da 5f 13 f9 0f 16 a7 df 43 1f d4 4f 00 8b f9 03 10 b5 58 3e de c5 4f 6f 1e 3b 8d 77 ed ac bb 6a 36 05 00 bc 8d 61 1a b8 92 e8 83 86 79 6a fc d9 e9 a4 bb c6 3c 1f fc e2 e8 52 f5 33 b2 a1 f5 bc 6b 83 ef 1e 9c b5 b2 6a 89 19 07 82 a3 a5 87 33 13 30 3a 1e 1a 83 ed cf 62 fc 44 e3 56 e0 ad a4 fa df ba d8 9b a2 4b fe 9d a6 ae b6 98 38 30 aa 69 34 d6 74 9b 15 2f 37 Data Ascii: Z zmk5fF5\|CR:JSUM.GryRgiD5Gc^"9)({u}^5R/<ok!O3} KR_[9B'_COX>Oo;wj6ayj<R3kj30:bDVK80i4t/7
2024-01-15 14:02:25 UTC	1331	IN	Data Raw: f9 6f 66 d7 08 6f 04 23 6b 28 6d 02 61 99 60 94 1b 40 49 22 9b 01 2b 63 4b 48 57 67 99 7a dd 2a 00 96 b6 38 5c 75 08 c8 e9 27 32 35 1f e2 d2 2f e2 5f 4f 98 a1 6d 68 ba 0b d9 74 26 9f 78 ff 82 97 00 71 d5 20 1c 36 a1 49 61 28 bc 6b cd 3e 1e 0b b2 c1 99 32 da b1 8c 6e ba d9 4c 96 1d 9b 54 c4 37 02 fb 0a 82 b5 5d 1d 56 d4 a1 b6 af a9 76 c0 fa 02 cc 48 17 68 4e 5a f0 36 cc 1e 05 47 4a 32 4d 29 c5 15 18 89 6f 4e fb a0 86 59 be 97 ec 4f 61 4d 5a 68 5d c7 7e d4 4c b2 8a 46 a0 36 9a e7 46 b5 32 79 3f 92 00 a7 ea 28 1c 18 3b 01 39 c7 e0 3e 13 da 5d 0a b8 2e 23 9e 2b 74 43 5e 4e f6 8b b4 72 de 9f 5c a4 9f d1 5b 50 a8 a9 37 b6 db 50 d9 96 16 5f 60 02 1c 4d e3 17 a0 1b f6 82 cc 0a 66 35 f5 e5 03 66 94 ad 5d fd 84 95 58 d9 a2 d5 71 0e aa e5 06 63 a3 c5 4c c7 76 6d fd Data Ascii: ofo#k(ma`@I"+cKHWgz*8\u'25/_Omht&xq 6Ia(k>2nLT7]VvHhNZ6GJ2M)oNYOaMZh]~LF6F2y?(;9>].#+tC^Nr\[P7P_`Mf5f]XqcLvm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.8	49928	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:25 UTC	676	OUT	GET /assets/webfonts/subset-DMSans-Regular.woff2 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.synesgy.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.synesgy.com/assets/css/custom.min.css?v=5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:25 UTC	218	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Date: Mon, 15 Jan 2024 14:02:24 GMT Accept-Ranges: bytes ETag: "08529fa13e2d71:0" Connection: close Last-Modified: Thu, 25 Nov 2021 15:49:06 GMT Content-Length: 24680
2024-01-15 14:02:25 UTC	2721	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 60 68 00 11 00 00 00 00 ef a4 00 00 60 07 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 66 1b f0 0c 1c 83 2c 06 60 00 82 4c 08 60 09 9c 0c 11 08 0a 82 96 10 81 f7 32 0b 85 7a 00 01 36 02 24 03 8b 58 04 20 05 8e 44 07 8f 61 0c 81 3d 1b 23 dc 47 50 bd 76 9c 00 6e 1b c0 f3 54 76 6e e4 32 1b 61 bb 1d 44 09 fa 9d ad 82 1d 9b 0e b7 03 91 12 a7 bb 64 ff ff ff 27 27 0d 39 2c 39 96 bb b6 14 ac 63 d8 f6 0f 59 ee 6e 45 ca b9 0c 94 12 02 85 c6 80 d7 a9 ce 73 e1 69 59 83 96 34 a8 c6 16 c6 18 cf f6 b2 76 2c d6 82 b0 24 4b 3d ca 3e 0e 2d 58 28 10 4e 6f 38 24 e7 a8 09 ed a4 84 92 2e c3 27 bb 76 39 39 ce 2a 9a cb 76 27 7a 37 78 b7 01 c2 47 ab 16 fa d4 a0 81 a7 1c c5 aa ab 91 95 d0 12 c7 19 45 1c c6 17 97 1b 37 b6 Data Ascii: wOF2`h`f,`L`2z6$X Da=#GPvnTvn2aDd''9,9cYnEsiY4v,$K=>-X(No8$.'v99*v'z7xGE7
2024-01-15 14:02:25 UTC	11680	IN	Data Raw: b2 8b 11 07 03 01 60 28 38 6b 94 33 78 19 fa ec 73 c4 78 18 7e 13 88 08 15 d1 da de 87 a8 15 0d d1 3a 1d 3d 43 33 2e 73 a2 00 48 89 fe 53 8c 51 71 ac 70 34 8f 68 be 72 72 17 49 64 d1 30 5d 75 22 5f d4 08 cf 95 84 70 06 c3 c0 5f 08 21 5a 18 60 61 db b3 e6 68 e3 e1 f8 dd 22 14 92 92 91 b7 0f 43 65 8b b2 1c 0d 55 90 de 7e cc c6 c2 ca c6 1e 07 7d e7 50 b0 11 12 4e 04 51 31 09 49 29 69 99 76 bb 54 39 53 4d 2d d4 35 34 d3 42 5b 47 57 0f 68 90 61 9d b1 9b 3e fe d4 ea 66 75 69 e0 ae ac 00 21 98 8d 34 aa 1d 53 9f 93 79 c2 44 bb 93 68 72 17 25 41 16 d5 8b ce 2f 1a 7d 17 8c 98 8c 4d f4 2e b0 45 1a d8 88 12 34 8d 1e e3 62 80 9e c2 1f d0 5f c9 cd 61 48 1c 07 30 2c c1 01 00 f0 8c ab ed 67 e3 62 ea 59 97 32 ae 10 07 6d 62 a7 08 77 84 21 38 65 2f e6 fd b4 28 1a 0b 9f cd Data Ascii: `(8k3xsx~:=C3.sHSQqp4hrrId0]u"_p_!Z`ah"CeU~}PNQ1I)ivT9SM-54B[GWha>fui!4SyDhr%A/}M.E4b_aH0,gbY2mbw!8e/(
2024-01-15 14:02:25 UTC	8760	IN	Data Raw: c3 df b3 a1 2c a1 00 15 3a 7b 3d f5 07 f2 12 10 bb 06 40 e4 db 6a 03 66 32 c2 53 42 11 d9 a6 bf 4a 82 0c 58 0b a4 4b 99 0b b2 39 2d 9e 80 13 e3 72 f5 a8 ee bf 00 52 7d 4d 21 7b da b2 b0 a7 0c be 53 2d cb b4 d1 a4 c1 10 c1 ff 08 51 db c5 42 44 b7 6e 3b fe 18 8f 3f da 91 af 65 bb 06 50 b8 9f 70 c0 03 fd 76 42 51 57 cd fe 2b 28 bb 64 b7 14 ac ab 78 51 63 f3 55 ed 90 80 e1 f2 b1 f1 cb 36 6c 74 18 27 30 99 0f 50 30 06 83 82 f6 01 b2 33 d0 84 b9 83 c8 1e 61 2f 31 ba 3f db 25 1f ad c6 8f e0 cf 7c 65 86 4f 3a 13 43 e4 39 4e ad 46 e6 8f d2 df ef 4e b7 de fd ca fe 2a f0 57 d6 93 aa 89 03 d7 38 47 a3 24 94 10 60 26 ff 16 53 42 29 03 55 7d b5 f9 3a e7 ec 00 f2 fe 8f 36 a5 f4 0f 41 26 d5 45 1e b4 4e ad 2d ce 5f ef 67 d1 17 b6 ac 95 e2 62 55 e5 05 ca 78 9b 95 15 ed ca Data Ascii: ,:{=@jf2SBJXK9-rR}M!{S-QBDn;?ePpvBQW+(dxQcU6lt'0P03a/1?%\|eO:C9NFN*W8G$`&SB)U}:6A&EN-_gbUx
2024-01-15 14:02:25 UTC	1460	IN	Data Raw: a1 84 a1 38 71 dc 53 c1 73 72 a5 8a 89 fc b1 1a 3e 92 8f 3a ce e4 37 1a 71 2e ff a1 09 6f c9 7f 85 b2 c9 77 b5 c2 7b fa d6 01 9d f3 df e7 43 bc 90 34 82 bf b3 2d 1a 27 3d d1 c9 20 d9 45 28 06 49 1d a9 51 3e 7e 51 6b 68 9b c5 09 8f 69 77 82 39 97 39 d9 ce 99 76 44 b0 86 42 77 49 74 af 89 13 38 fb 9e 80 fd d4 ad 21 9c 91 af fc 79 fc 6a db 2f c3 57 07 22 9a b6 ad ea 56 4b 74 32 4c d9 e3 1b 72 27 fd c6 8b d9 1a 24 b5 c5 82 a2 ea 6b b1 de 3c 20 96 fa 3b a5 35 13 08 ed 85 e7 d5 5c 0e 67 9d d1 e1 17 c9 a5 11 fd e0 34 35 b7 a9 3e 7c 37 25 62 0d 3e 13 81 01 25 e4 a0 d0 0c 90 95 75 85 07 f3 2a 31 a1 b2 74 71 7f 10 b4 cb cc 5e 21 b8 7c 8b a0 e6 50 95 01 d0 4c f4 65 47 61 41 1b d5 18 0c ab 66 53 94 01 07 69 63 d3 c0 1b 5c 42 a3 4f c1 92 c3 6b b8 b1 1a f2 b8 ae 0b f0 Data Ascii: 8qSsr>:7q.ow{C4-'= E(IQ>~Qkhiw99vDBwIt8!yj/W"VKt2Lr'$k< ;5\g45>\|7%b>%u*1tq^!\|PLeGaAfSic\BOk
2024-01-15 14:02:25 UTC	59	IN	Data Raw: 9d 19 fa 35 7e 5f 3e 22 15 02 39 b8 8d 01 59 05 bc b1 7b af 2f 86 25 a3 8c 66 40 b5 24 59 ce 3c 8b ab 67 b3 55 83 f9 10 7c 8c 16 5c b6 71 b3 5a 66 60 bd fa ca 8d 2e 15 04 58 2c Data Ascii: 5~_>"9Y{/%f@$Y<gU\|\qZf`.X,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.8	49930	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:25 UTC	432	OUT	GET /assets/img/arrow-right-white.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:25 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:24 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 2350
2024-01-15 14:02:25 UTC	2350	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 70 78 22 20 68 65 69 67 68 74 3d 22 31 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 31 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 34 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 70 61 74 68 2d 31 22 20 70 6f 69 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="18px" height="18px" viewBox="0 0 18 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 4</title> <defs> <polygon id="path-1" poin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.8	49931	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:25 UTC	428	OUT	GET /assets/img/bg-world-leaf.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:26 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:25 GMT Accept-Ranges: bytes ETag: "0123efde632d81:0" Connection: close Last-Modified: Tue, 08 Mar 2022 12:21:08 GMT Content-Length: 3049
2024-01-15 14:02:26 UTC	3049	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 37 32 70 78 22 20 68 65 69 67 68 74 3d 22 36 37 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 32 20 36 37 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 31 33 20 43 6f 70 79 20 32 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 55 49 5f 61 67 67 69 6f 72 6e 61 74 61 22 20 73 74 72 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="672px" height="672px" viewBox="0 0 672 672" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 13 Copy 2</title> <g id="UI_aggiornata" stroke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.8	49932	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:26 UTC	430	OUT	GET /assets/img/social/linkedin.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:26 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:25 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 1018
2024-01-15 14:02:26 UTC	1018	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 76 65 6c 6c 6f 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 34 2e 38 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 34 2e 38 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 39 62 32 33 33 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="28" height="24.89" viewBox="0 0 28 24.89"> <defs> <style> .cls-1 { fill: #f9b233; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.8	49933	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:26 UTC	429	OUT	GET /assets/img/social/youtube.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:26 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:02:25 GMT Accept-Ranges: bytes ETag: "0babf8d7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:24:52 GMT Content-Length: 917
2024-01-15 14:02:26 UTC	917	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 69 76 65 6c 6c 6f 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 76 65 6c 6c 6f 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 30 22 20 68 65 69 67 68 74 3d 22 32 32 2e 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 20 32 32 2e 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 39 62 32 33 33 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Livello_1" data-name="Livello 1" xmlns="http://www.w3.org/2000/svg" width="30" height="22.5" viewBox="0 0 30 22.5"> <defs> <style> .cls-1 { fill: #f9b233; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.8	49934	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:26 UTC	428	OUT	GET /media/tkccxelm/synesgy_3.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:26 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:02:25 GMT Accept-Ranges: bytes ETag: "7d6ada92f773d81:0" Connection: close Last-Modified: Mon, 30 May 2022 07:33:36 GMT Content-Length: 7348829
2024-01-15 14:02:26 UTC	4179	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 13 61 00 00 0d b4 08 06 00 00 00 d2 36 81 35 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da ec bd 5b 9a e4 b6 d2 24 88 0b c9 88 4c e9 f4 ff f5 e6 66 4d b3 8f 59 c9 2c a9 8f a4 cc 08 92 00 fa 21 60 06 b8 91 51 17 55 96 aa 24 c1 5f b2 2a 33 82 c4 c5 ef ee 80 f9 ff ef ff fd 7f 8a 73 ce 95 e2 9c 73 ce e5 9c 9d 73 ce 15 f7 f8 45 0c c1 c5 10 eb ef 1e 54 72 7a fc 2d 4e ce 39 e7 e6 79 76 ce 39 97 f2 5e ff 5e 9f 51 1e 3f 53 ca 7c 86 f3 8f a7 ec fb e3 b3 cb b2 d4 ff 6f f5 67 aa cf 7c 3c 3b d7 67 c4 18 9c 77 de f5 84 f1 60 cc 53 7c bc 03 9f f3 f5 13 db 66 df 95 52 72 29 3d be 13 a6 c9 3c 03 3f 9d af ef f2 c1 39 e7 dc ba ae 8f cf fb c7 3b c2 3c b9 5c 9f e1 eb 67 b7 f4 Data Ascii: PNGIHDRa65pHYs.#.#x?v IDATx[$LfMY,!`QU$_*3sssETrz-N9yv9^^Q?S\|og\|<;gw`S\|fRr)=<?9;<\g
2024-01-15 14:02:26 UTC	16383	IN	Data Raw: 07 54 db 01 0f 7b a1 68 d3 51 ab 99 03 1a c0 52 77 f1 50 6b ec 9a 4e 1d 47 7f d6 8c df eb ba 6d 7b ea a0 e2 6f 7a e1 0b 9b 67 bb cb 49 c0 03 fa 0c 36 9d b2 c9 da ca 48 3b 38 dd f4 0d d4 e8 2e 17 58 6a f3 fb f4 e4 e0 70 7f a0 b2 1d 56 95 8b 72 a4 39 a8 5d c8 65 2f 17 7c 5c 2c f7 ec 40 65 12 59 b4 76 a4 04 7b 09 5a ca 7b 77 a1 a6 6d 1a e3 e5 74 1e fa da 36 41 82 5a 83 65 77 48 95 cf 9c 8d 1d c5 3a f2 10 4a 77 81 ab ba ed bd cd e8 7f 42 af 60 0e 90 65 fa 83 31 b2 79 90 eb 11 ed c1 0c ea c5 cf f8 2a c6 57 c4 25 87 d0 61 55 ff e8 01 53 1e 7a e9 e2 84 28 17 01 7a bd f4 c7 db f7 f3 40 42 6e 07 e3 b1 66 a9 d8 e6 f3 c6 8b 72 99 40 d9 0d 5f 3d c6 67 0f 22 43 6e 1b 1f d9 4b 4b b5 89 76 9e a7 83 3d d6 c0 4b 8b cb 58 8f 76 69 5b 6b a4 06 cf c5 10 3e 19 a0 b6 03 2c 49 Data Ascii: T{hQRwPkNGm{ozgI6H;8.XjpVr9]e/\|\,@eYv{Z{wmt6AZewH:JwB`e1y*W%aUSz(z@Bnfr@_=g"CnKKv=KXvi[k>,I
2024-01-15 14:02:26 UTC	26	IN	Data Raw: 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 Data Ascii: 4hA4hA4hA
2024-01-15 14:02:26 UTC	16383	IN	Data Raw: 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 ff 26 9a 80 d4 06 34 43 20 98 11 b1 b1 fb 30 50 e7 1a ba b1 a0 2e 0b fa fc f5 a5 21 98 67 41 2d c3 ad b0 3b 11 cf ec bd ee 44 8a 23 fa bc 77 15 94 aa 43 e4 05 ea 5f fd 44 b0 48 7e 40 ab 02 ba 38 2e a7 4b 7b ea d0 9d ec fb bc a0 20 63 5d 88 b6 91 db 5a 04 20 30 02 bd 51 90 70 66 5f 51 59 2b 02 18 c7 5b 3f 7f df 93 7b ad 6b 04 34 2c cc 6d 4d 16 dd 98 28 aa 1d 42 9c 73 0d b1 f7 be 6d 2e 17 41 89 c4 3a d5 05 6a 28 9c 8f cf 2d 82 98 ee 9d 77 b7 8a 50 e7 7d 34 9f 0d f2 5e 22 2c 00 1d b0 f2 4d 7f 59 20 d0 c1 b1 3f 40 2b 03 4a 20 d0 52 03 11 10 1f cf 58 80 8a 99 93 9b e6 68 f8 84 88 75 95 31 93 f0 5e 38 41 6b 55 5e 22 82 de 32 9b ff Data Ascii: 4hA4hA4hA4hA4hA&4C 0P.!gA-;D#wC_DH~@8.K{ c]Z 0Qpf_QY+[?{k4,mM(Bsm.A:j(-wP}4^",MY ?@+J RXhu1^8AkU^"2
2024-01-15 14:02:26 UTC	26	IN	Data Raw: a7 6c 45 ef 67 f2 4c 18 62 c2 81 3b 73 ee 2e 38 9c 7b c1 ef 35 1f f0 22 f5 e0 Data Ascii: lEgLb;s.8{5"
2024-01-15 14:02:27 UTC	11553	IN	Data Raw: 9e 0c 7f 9d b3 f2 ab 94 2a 79 5f 9c 6d 6d 75 b9 a8 5c ea cc 19 08 ae 75 a9 6e 5e bc 2a 98 be 84 b6 a7 e8 da 79 42 70 dc 61 8e fa 8c 5a d7 87 30 27 18 5f 23 be 22 4f 5c 0e e7 e8 d0 77 de 64 7e 02 31 c1 ac cf 6b f0 ac a0 e6 8f 9a 4f a4 c6 c7 8a ef 71 9f db e9 f3 0b 2d 47 99 38 eb f8 01 5c f7 ce b8 8d a7 39 ab 74 dc 93 aa 23 d5 b9 15 7b e8 87 3d b7 ac f2 ed 0c 4c 19 cd 3e ac 77 3c 7b c1 78 9d 75 bf 49 ce c5 9c 21 c4 79 bf 75 6d 67 07 77 89 c1 20 31 c7 b3 d0 5e ef 27 22 4f df ae 77 95 4b 73 ce 87 33 20 3c fb b1 27 75 6e 2d 99 b3 4d a8 97 af bf bc 32 e6 b6 bd ea 7e c4 1b 7e 16 d7 c4 f9 5e 0d 31 dd ba ae ed 6c c7 a4 e3 05 be ce 33 28 c1 99 f5 f4 c4 13 c1 c6 2f e2 09 7c b1 2c 60 aa 3a ff 36 8e c6 d1 7f c9 db a1 5f 08 ba 2f 07 2e 46 0c 93 47 c1 d9 b8 92 db 5e 91 Data Ascii: y_mmu\un^yBpaZ0'_#"O\wd~1kOq-G8\9t#{=L>w<{xuI!yumgw 1^'"OwKs3 <'un-M2~~^1l3(/\|,`:6_/.FG^
2024-01-15 14:02:27 UTC	15266	IN	Data Raw: 9e 5b 73 a9 5d ee 09 2a ff d5 0f e4 cc fe 7d fd 53 20 ff db f9 2a 46 f9 d6 f7 eb 23 f5 a1 8d cd 9d fa 54 4a 50 28 8f a7 31 63 9f e3 6c 02 72 d2 3e 56 8d 68 6a 8f 75 91 47 ac bf 20 ce 62 9c cd ba 68 95 ef 52 8a 0b 41 ab 60 23 cf 45 53 db 38 6f a6 cf a1 c2 7a 68 ea e6 ad 1e 9d fb 11 fd da 9b d8 8d a1 cb d5 3a 5e b0 d6 a1 40 c5 57 d6 7a 0a a7 78 e2 31 07 a6 3e fb fa 41 9c 7e e6 13 cc 41 b8 1f 55 90 8b ca e5 ee d0 8f 16 fa 02 7b 4f 1b df 21 9c fa e4 b3 3c d4 f7 88 36 ae 80 03 11 ef 1f 32 fb bc 87 7c 9c 92 5a 5b 5c bb 7d ae 1e f2 05 fa 6e 3b b7 6d fe 3e 94 bf cf e7 ee 30 5e db 63 77 7e dc ea 91 ee df 9a 6a b8 f4 09 26 37 e4 ae 27 b2 63 ef 6b 69 df ab 92 1f 78 e2 d7 a5 14 e2 2c 47 98 89 78 99 54 8c da 1c 5e e9 0b b5 cb 81 e8 17 c3 69 cf 65 6b 5e 2f f3 6a 39 04 Data Ascii: [s]}S F#TJP(1clr>VhjuG bhRA`#ES8ozh:^@Wzx1>A~AU{O!<62\|Z[\}n;m>0^cw~j&7'ckix,GxT^iek^/j9
2024-01-15 14:02:27 UTC	16383	IN	Data Raw: ed 5f f6 7d 20 dd 3b 24 dd fa 52 f8 11 fb a3 eb b5 05 39 0d 53 c1 6f c8 93 f3 a6 b4 04 ea 6f 3c ef 5f 57 ca 9b 02 ed 57 b5 78 29 a7 b7 78 fc 83 3e 23 12 ce 1f e2 1f c6 7b f2 b8 cf a6 81 d5 e7 f4 d2 12 86 fc 2e 52 cf eb d6 5f 57 29 58 af eb e7 5f 41 be fc 1a 3f 5a 8e 4f f0 4f ce ea 1b 0d a0 0e b5 1f f2 3d 14 ed 1b b8 ab 5e 79 45 7e c6 21 7e e1 cc c9 50 81 2f b8 8f 7c 8d db 1f 80 9f fc eb e7 94 9f 7c de 45 e4 97 5e fe df 00 a0 8d 19 1d 32 e4 fb 22 e5 9f 6b 84 e8 1b 52 ef e8 d7 c6 07 f2 4b ea 5b 5f 8b aa a1 3e 59 ea fa db d8 81 ee c5 f8 8a 3a f9 6f 30 c9 97 dd bd 7c 78 d1 cf b1 37 7e 0f f1 67 36 a3 fa 89 1f f8 b5 fc cd 28 6e 0c f9 b1 f9 8c 44 f9 a9 c6 f3 23 e7 c9 de 2b fe 6a 01 87 6e e4 af af fb 6b 3e 88 25 f5 a9 af f8 b4 02 69 fd 1a 79 f7 77 c8 c1 9f 49 1c Data Ascii: _} ;$R9Soo<_WWx)x>#{.R_W)X_A?ZOO=^yE~!~P/\|\|E^2"kRK[_>Y:o0\|x7~g6(nD#+jnk>%iywI
2024-01-15 14:02:27 UTC	26	IN	Data Raw: 24 d1 d8 d2 69 1c 9a 82 de 57 27 7b aa ea c3 fd e7 78 06 8b 71 db 7d f9 d8 d7 Data Ascii: $iW'{xq}
2024-01-15 14:02:27 UTC	16383	IN	Data Raw: 9c 52 12 cc c9 60 f1 88 f9 98 5b db 8b 74 1d 86 68 7b 00 69 4a a7 58 cb ba 6e a7 f8 e8 b6 6d c4 81 8f eb a6 b1 39 d9 73 5a 4f 6d c7 55 4f 5c 8d fb 69 82 3f d5 3d c7 f9 71 da c7 96 7a a8 a7 ad 6d 96 07 fb 80 70 e9 12 82 8c cd c4 32 67 70 46 ee a1 74 fa 59 55 34 13 20 bc 0f a9 dd 26 71 7d 7f 81 6d ba bb 9f b7 4d cf b2 db 6f 16 6f 2f 69 53 37 7f fc 9d dd c7 e2 6d b2 ed be fb 30 3f 32 b8 13 40 d8 b9 ef 36 8e ea 7e f0 23 fd ae e2 35 9e 75 50 0f f3 fb 37 21 0f ea 92 6f 52 08 d3 6f f8 11 c3 ad df f3 62 27 e3 b4 18 4f 35 ef 4d 0c 19 52 dd 77 d4 c5 b7 e0 f8 7e e4 1d bc 7f f3 33 71 c0 78 fc cf 1b 88 ff 51 ab ea 7f ed 7a fd 4c bd f0 6f c8 72 fc 1f 65 fd 6f c4 0b fa ef 97 32 0d 19 f2 ab f2 95 b7 70 d5 6f f5 fd f6 7d 98 3f ca 01 bd 99 d2 b2 76 ef 44 3e c8 91 fe 08 1b Data Ascii: R`[th{iJXnm9sZOmUO\i?=qzmp2gpFtYU4 &q}mMoo/iS7m0?2@6~#5uP7!oRob'O5MRw~3qxQzLoreo2po}?vD>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.8	49935	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:26 UTC	658	OUT	GET /assets/img/favicon.ico HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:26 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Date: Mon, 15 Jan 2024 14:02:25 GMT Accept-Ranges: bytes ETag: "0524cb754dd81:0" Connection: close Last-Modified: Mon, 11 Apr 2022 07:28:52 GMT Content-Length: 1150
2024-01-15 14:02:26 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f5 f5 f5 ff f5 f5 f5 ff f5 f5 f5 ff f5 f5 f5 ff f3 f4 f4 ff f3 f3 f4 ff f3 f3 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.8	49936	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:26 UTC	692	OUT	GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.synesgy.com/ Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2 Range: bytes=35481-22446079 If-Range: "38c551fcd022da1:0"
2024-01-15 14:02:26 UTC	280	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Date: Mon, 15 Jan 2024 14:02:26 GMT Accept-Ranges: bytes Content-Range: bytes 35481-22446079/22524464 ETag: "38c551fcd022da1:0" Connection: close Last-Modified: Wed, 29 Nov 2023 14:33:14 GMT Content-Length: 22410599
2024-01-15 14:02:26 UTC	1199	IN	Data Raw: c9 c3 5e 0c 51 6f 05 e5 f3 7c 94 94 05 e4 b5 48 44 07 c7 dc 4c 69 d6 18 e4 f4 12 7a 09 3d 05 67 bc 65 9e cf bb cd d9 eb 24 e6 f0 99 97 c6 66 77 c5 c9 b9 06 89 bc c8 a7 7f 00 81 6a a4 3e 41 c9 9e 32 b3 cb 3d ec c6 64 4f 15 a3 b8 4d f0 b9 24 c1 fa 32 5e 32 cc ae 92 96 78 be 26 f6 c5 32 32 1c 8f f1 f8 d5 2b 4e 27 54 4b d5 44 d8 46 8a 00 1b c2 35 2f 13 ee 61 a0 f9 20 4e e2 43 41 d5 08 8a 62 a3 1a 7f 1f bb e7 91 01 33 c9 04 6a 73 07 eb 8c 16 6e e7 d8 f1 37 ec 2c c1 f0 c0 59 a5 ec 64 92 b8 1b f8 cd 10 f7 1f c2 7d 34 e7 72 13 bb 33 65 3c dc 7e 6a 54 fd 34 27 8c ea 4d 2f bf 8e f7 60 98 40 12 7a 05 0a 74 00 02 b0 00 86 63 2f f1 9f 85 f4 6c b3 4e 6a 48 0a 16 ee cc 50 6c e0 01 39 58 21 1a 0c 52 f9 ff 80 05 05 ae 96 c7 d5 00 5f 7d f8 eb db 9d 5c e2 f9 99 c5 6b 77 12 Data Ascii: ^Qo\|HDLiz=ge$fwj>A2=dOM$2^2x&22+N'TKDF5/a NCAb3jsn7,Yd}4r3e<~jT4'M/`@ztc/lNjHPl9X!R_}\kw
2024-01-15 14:02:27 UTC	16383	IN	Data Raw: b6 bd 15 cf 4c 02 44 c7 b3 01 29 60 73 95 22 7c 2d 9c 4a dc 89 39 47 3c e5 c3 2d f6 06 fc b2 07 90 0e f9 2e 79 88 29 25 51 a8 18 ee 38 00 66 7e a8 45 01 80 ad 2a 8a da 72 e1 47 b1 30 75 c9 9f 17 dc f8 f9 e3 da f2 9a a6 aa 55 db 6f 08 2e e2 5a fd 80 15 45 89 fb d5 7d eb 5d 09 ed 7f 5d c2 35 2b 8b 9e b9 5e 46 42 be 03 30 c9 3b 7b eb 3f 0d 49 c2 22 3d a6 aa 9d d8 ab 64 3c 3a a3 87 07 4e 44 10 53 f8 39 68 44 29 ff aa a1 fc c1 97 e6 93 59 21 17 c8 e8 3d 7c a8 5a 9b c7 d1 69 b6 b5 ee d6 9f 56 6c ab 90 46 84 fb 20 ab d1 53 00 d9 34 83 8d 7e 3c 30 9e db 2d ae 45 63 7c df ca 11 4a cb 29 49 b4 71 4d 69 d9 c5 90 e9 0a 5c a8 ea ea df 56 95 1e 21 1a 4c ac 63 bf 80 02 82 e3 45 81 b0 f5 80 17 9a b9 c4 df d7 ed f5 7a ef 7a d5 48 ba 5b 2d db 72 6b 7a d5 48 17 1d 0e cf 9a Data Ascii: LD)`s"\|-J9G<-.y)%Q8f~E*rG0uUo.ZE}]]5+^FB0;{?I"=d<:NDS9hD)Y!=\|ZiVlF S4~<0-Ec\|J)IqMi\V!LcEzzH[-rkzH
2024-01-15 14:02:27 UTC	26	IN	Data Raw: bd 57 96 fe bf 91 ab ff 3b 96 ac 5d a4 1f a8 9a db dc 32 06 fe 52 2e e6 6c 40 Data Ascii: W;]2R.l@
2024-01-15 14:02:27 UTC	16383	IN	Data Raw: c1 a6 7b c5 33 86 49 da 0f a4 40 3c c3 53 c5 eb ea 9a 75 42 23 14 f1 79 5b dc 7c 39 59 c4 85 93 40 63 8b da e8 e7 c2 90 02 61 cf 44 fb f8 4b 75 17 6d ce 52 26 1a 6c af 8d 81 f1 8b 25 96 ac bb f8 a3 67 9d 59 c9 7c bd f3 2f a3 66 68 d7 d7 28 4e bf 11 1b e8 f9 b7 d4 48 e5 66 a3 26 cb 21 10 04 0c 23 87 2d 81 99 76 45 3b 5c 97 58 c0 f7 fc 16 b9 87 e4 fb 05 e7 16 9a 31 3a b4 00 38 32 c4 50 39 47 60 dd 3d 92 ef 9f b3 4f 7e 3e 35 cf c0 04 e9 0a c9 0a 63 e8 c8 5e 2d 1f 87 4f e1 4a d6 75 7d eb 37 ed 74 9c dc 92 a3 da ae f0 d5 62 69 e6 73 f4 11 4d fc 3c 55 89 f4 e4 8e de f6 14 5a 91 2b eb c4 13 e3 25 ff 39 e5 c3 47 ee 70 18 ec f5 4e 55 64 39 3a fa 18 2e 27 c8 c8 ac a2 b9 12 f1 9e 2d d0 b1 94 9e 29 ef 3b 9c 51 b6 64 d3 a1 a0 4c e9 9b d2 17 21 fc cc 0b ab ba b4 33 a7 Data Ascii: {3I@<SuB#y[\|9Y@caDKumR&l%gY\|/fh(NHf&!#-vE;\X1:82P9G`=O~>5c^-OJu}7tbisM<UZ+%9GpNUd9:.'-);QdL!3
2024-01-15 14:02:27 UTC	26	IN	Data Raw: 36 e3 7a c8 ff a8 37 6a bb 59 fa df ee 40 51 01 d8 60 56 21 e8 08 38 61 e0 43 Data Ascii: 6z7jY@Q`V!8aC
2024-01-15 14:02:27 UTC	16383	IN	Data Raw: 48 7c 0e da dc f3 7d 47 58 94 7b 8c 9a bb a7 c7 ba fc 33 04 8f 43 32 ed 99 31 eb 75 5e b7 0f 77 da 13 ac 7f 35 f0 7f 47 92 c2 2b 37 00 59 dd 15 2f 64 b4 d5 95 20 82 0f 42 87 7c ca 69 df c3 4c 0d 4f 5e f3 e9 6d 53 b6 4c 0b 4f 08 96 28 97 8e 64 cb 45 ea 56 a0 d4 cc b1 c0 00 00 00 a9 41 9b a0 2a 80 06 a4 71 5e 06 da 4c 8b 32 64 3d d4 c0 82 10 19 00 06 f5 22 0e 5e 06 58 43 64 e3 f4 9e 80 d8 8c 8b 60 56 8d a4 c5 fb bd 87 04 9e 01 2f c9 34 1a 00 b3 d7 c0 d7 1a 6a e6 1f 15 7d f7 11 e2 02 d2 d0 01 80 16 0f d3 88 cd 81 14 71 13 53 fb 76 90 35 a8 a0 f2 4e 20 19 36 27 56 46 82 28 a2 7e 2f da 37 4b a1 c0 e8 67 96 94 63 d3 ac 88 51 1f 9e 1c 0e fc 98 db 49 95 54 c0 83 7c 3c 3e 21 73 ed 28 05 2e 40 ff b9 48 52 0d 95 dc cc 62 9c 73 61 a0 13 0b 36 16 3c 1b c1 d9 06 87 84 Data Ascii: H\|}GX{3C21u^w5G+7Y/d B\|iLO^mSLO(dEVA*q^L2d="^XCd`V/4j}qSv5N 6'VF(~/7KgcQIT\|<>!s(.@HRbsa6<
2024-01-15 14:02:27 UTC	26	IN	Data Raw: 50 91 fc 06 89 a0 4a 22 0e ac 5e b9 84 60 f0 40 69 fe ba a5 4b bd 78 92 90 48 Data Ascii: PJ"^`@iKxH
2024-01-15 14:02:27 UTC	16383	IN	Data Raw: cc 15 5c 3e 1a 69 00 0f 55 06 40 80 02 00 01 01 1b 90 9e 00 80 30 52 c0 d4 d5 55 31 53 e3 e6 b9 b5 3e 3e f8 27 87 f9 c4 c3 74 3c 29 bf 7f bd 00 40 78 9b 00 56 3c 80 02 01 40 11 73 f0 3b f1 10 70 10 18 01 21 04 c1 e0 04 01 40 1c 00 92 60 01 8d a0 91 c0 cb f5 00 d1 66 ef 12 08 aa 60 1d 85 88 09 0f 18 38 80 02 00 01 01 10 0e 4c 0c 01 4c d0 5b 83 37 d8 01 23 53 dc 78 01 00 a0 08 00 59 33 ef 14 09 d4 c0 75 16 28 70 20 06 00 12 0c 80 21 1a 4a 31 5f de 80 02 66 e7 07 d0 c0 75 82 17 9f 9f 38 eb bc f2 eb bd 4a cb f3 b9 5c 65 9e d7 38 de ae 25 a5 50 c6 6a e9 ea 90 fb b6 6a ce 3b 3b 25 79 95 2a b5 13 a3 e3 e1 7d 34 af 40 a4 61 5b 9b c4 ee 65 cb 74 ae 25 6a 09 b0 90 6c a3 ed 72 1c c3 91 76 3c 4b 6c 4c af b0 05 76 3e 0a 4c 99 56 42 b6 81 ec 5f 85 5b 51 c6 0d a7 d9 f1 Data Ascii: \>iU@0RU1S>>'t<)@xV<@s;p!@`f`8LL[7#SxY3u(p !J1_fu8J\e8%Pjj;;%y*}4@a[et%jlrv<KlLv>LVB_[Q
2024-01-15 14:02:27 UTC	26	IN	Data Raw: af 2e 65 dc 22 09 12 bc c3 2b 1e 66 5f fb 7d 00 92 21 5b 07 ed 39 87 27 61 a1 Data Ascii: .e"+f_}![9'a
2024-01-15 14:02:27 UTC	16383	IN	Data Raw: f6 40 b9 b3 ee 69 83 53 96 55 a0 96 25 48 b0 a2 25 16 f7 d3 5c 9e e7 35 da ea 54 f1 4e d7 79 18 6f e2 c8 fb 80 8f 47 2f a2 89 7e ac 3c 3c cf d1 62 b8 d3 c3 b6 18 f1 f2 e1 43 e5 71 d9 e5 a4 0a 27 a1 00 19 92 b5 7a 08 a6 4e 25 5e 7d 68 2d d7 e1 4f 86 fa b1 c6 9e 21 1a 4e 51 b7 fe 00 02 56 e1 4a d7 08 59 e3 c7 eb df c3 c7 0f 37 99 a8 99 a4 d5 47 dd ea ae 54 c9 c2 eb fc 86 ec a6 4c 18 16 30 6a ce 83 2b 4c f3 66 02 04 d6 b8 29 a8 6c 2e 3f 6b ab 73 83 34 2e 9f be b3 74 b0 dc 92 70 35 8c 8f 19 ed ac 32 d0 60 f4 f3 7b 1b b1 e6 d8 97 6f 62 55 6d 7a 87 6e 91 5d 7a d0 0b 2a 03 54 fd be c6 f6 51 57 3d 6b 2e 22 46 65 56 ab 5f b2 d1 cf c8 dc 5a 8a 0e bd ce e9 66 ad 3c 6d 0c db 93 dc 6b dc 9c 9e 3b 05 bd 63 61 b4 c8 bf 29 6f 60 72 db 14 43 06 40 89 7d 06 c1 93 b9 34 1f Data Ascii: @iSU%H%\5TNyoG/~<<bCq'zN%^}h-O!NQVJY7GTL0j+Lf)l.?ks4.tp52`{obUmzn]z*TQW=k."FeV_Zf<mk;ca)o`rC@}4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.8	49938	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:27 UTC	422	OUT	GET /assets/img/favicon.ico HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:27 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Date: Mon, 15 Jan 2024 14:02:26 GMT Accept-Ranges: bytes ETag: "0524cb754dd81:0" Connection: close Last-Modified: Mon, 11 Apr 2022 07:28:52 GMT Content-Length: 1150
2024-01-15 14:02:27 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f5 f5 f5 ff f5 f5 f5 ff f5 f5 f5 ff f5 f5 f5 ff f3 f4 f4 ff f3 f3 f4 ff f3 f3 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 f4 f4 ff f4 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.8	49948	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:30 UTC	695	OUT	GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fprivacy-policy&cb=1705327349392 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://service.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:30 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: 9a0g2z6t85qw X-Cloud-Trace-Context: e4b62d412ec919ef2b35a1aa76fd2777 Date: Mon, 15 Jan 2024 14:02:30 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:30 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.8	49949	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:30 UTC	456	OUT	GET /uct?v=1&sid=o_tc3l2da&t=1&abv=&r=https%3A%2F%2Fservice.synesgy.com%2Ftr%2Fprivacy-policy&cb=1705327349392 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:31 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: 1exlrb4k4d68 X-Cloud-Trace-Context: 3e517d464a5829080ee2ead63caa56d1 Date: Mon, 15 Jan 2024 14:02:31 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:31 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.8	49970	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:43 UTC	699	OUT	GET / HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:43 UTC	185	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Cache-Control: private Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 14:02:43 GMT Connection: close Content-Length: 69482
2024-01-15 14:02:43 UTC	7157	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 20 53 79 6e 65 73 67 79 20 7c 20 54 68 65 20 45 53 47 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 20 63 6f 6d 70 61 6e 69 65 73 20 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 79 6e 65 73 67 79 20 69 73 20 74 68 65 20 70 61 72 74 6e 65 72 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 2c 20 74 68 72 6f 75 67 68 20 69 74 73 20 73 65 72 76 69 63 65 73 2c 20 66 69 72 6d 26 23 33 39 3b 73 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 20 74 6f 77 61 72 64 20 Data Ascii: <!doctype html><html lang="en"><head> <title> Synesgy \| The ESG platform for companies </title> <meta name="description" content="Synesgy is the partner that supports, through its services, firm's transformation process toward
2024-01-15 14:02:44 UTC	7300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 79 6e 65 73 67 79 2e 63 68 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 22 3e 53 77 69 74 7a 65 72 6c 61 6e 64 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a href="https://www.synesgy.ch" target="_blank" class="streched-link">Switzerland</a>
2024-01-15 14:02:44 UTC	4380	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 72 6f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 22 3e 52 6f 6d Data Ascii: <a href="https://service.synesgy.com/ro" target="_blank" class="streched-link">Rom
2024-01-15 14:02:44 UTC	11680	IN	Data Raw: 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 61 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 22 3e 55 6e 69 74 65 64 20 41 72 61 62 20 45 6d 69 72 61 74 65 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ref="https://service.synesgy.com/ae" class="streched-link">United Arab Emirates</a>
2024-01-15 14:02:44 UTC	10220	IN	Data Raw: 72 69 65 73 20 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 62 69 67 2d 6e 75 6d 62 65 72 73 22 3e 2b 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6f 75 6e 74 2d 6e 75 6d 22 3e 38 30 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 6c 61 62 65 6c 22 3e 43 6f 75 6e 74 72 69 65 73 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ries "> </div> <p class="big-numbers">+<span class="count-num">80</span></p> <p class="icon-label">Countries</p>
2024-01-15 14:02:44 UTC	879	IN	Data Raw: 72 67 22 2c 0d 0a 20 20 20 20 20 20 22 40 74 79 70 65 22 3a 20 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 0d 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 72 69 66 20 53 2e 70 2e 61 22 2c 0d 0a 20 20 20 20 20 20 22 62 72 61 6e 64 22 3a 20 22 53 79 6e 65 73 67 79 22 2c 0d 0a 20 20 20 20 20 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 22 2c 0d 0a 20 20 20 20 20 20 22 6c 6f 67 6f 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 67 2f 73 79 6e 65 73 67 79 2d 6c 6f 67 6f 2e 70 6e 67 22 0d 0a 20 20 20 20 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 3c 66 6f 6f 74 65 72 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 Data Ascii: rg", "@type": "Organization", "name": "Crif S.p.a", "brand": "Synesgy", "url": "https://www.synesgy.com/", "logo": "https://www.synesgy.com/assets/img/synesgy-logo.png" }</script> <footer> <div cla
2024-01-15 14:02:44 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2f 66 61 71 2f 22 3e 46 41 51 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2f 22 3e 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 3c 2f 61 Data Ascii: <a class="nav-link" href="/en/faq/">FAQ</a> </li> <li class="nav-item"> <a class="nav-link" href="/en/privacy-policy/">Privacy Policy</a
2024-01-15 14:02:44 UTC	26	IN	Data Raw: 69 6c 65 2d 66 6c 61 67 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 6d 67 30 6c Data Ascii: ile-flag" src="/media/mg0l
2024-01-15 14:02:44 UTC	11457	IN	Data Raw: 65 7a 72 6c 2f 75 6e 69 74 65 64 2d 61 72 61 62 2d 65 6d 69 72 61 74 65 73 2d 33 33 2d 33 33 78 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 61 65 22 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 20 6d 6f 62 69 6c 65 2d 63 6f 75 6e 74 72 79 22 3e 55 6e 69 74 65 64 20 41 72 61 62 20 45 6d 69 72 61 74 65 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ezrl/united-arab-emirates-33-33x.png" /> <a href="https://service.synesgy.com/ae" class="streched-link mobile-country">United Arab Emirates</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.8	49971	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:46 UTC	693	OUT	GET /media/kgleh2rn/70a19c3e-1a3f-4a46-92cd-3f4fd0792c9c.mp4 HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.synesgy.com/ Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2 Range: bytes=102316-22446079 If-Range: "38c551fcd022da1:0"
2024-01-15 14:02:46 UTC	281	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Date: Mon, 15 Jan 2024 14:02:46 GMT Accept-Ranges: bytes Content-Range: bytes 102316-22446079/22524464 ETag: "38c551fcd022da1:0" Connection: close Last-Modified: Wed, 29 Nov 2023 14:33:14 GMT Content-Length: 22343764
2024-01-15 14:02:46 UTC	2658	IN	Data Raw: f6 40 b9 b3 ee 69 83 53 96 55 a0 96 25 48 b0 a2 25 16 f7 d3 5c 9e e7 35 da ea 54 f1 4e d7 79 18 6f e2 c8 fb 80 8f 47 2f a2 89 7e ac 3c 3c cf d1 62 b8 d3 c3 b6 18 f1 f2 e1 43 e5 71 d9 e5 a4 0a 27 a1 00 19 92 b5 7a 08 a6 4e 25 5e 7d 68 2d d7 e1 4f 86 fa b1 c6 9e 21 1a 4e 51 b7 fe 00 02 56 e1 4a d7 08 59 e3 c7 eb df c3 c7 0f 37 99 a8 99 a4 d5 47 dd ea ae 54 c9 c2 eb fc 86 ec a6 4c 18 16 30 6a ce 83 2b 4c f3 66 02 04 d6 b8 29 a8 6c 2e 3f 6b ab 73 83 34 2e 9f be b3 74 b0 dc 92 70 35 8c 8f 19 ed ac 32 d0 60 f4 f3 7b 1b b1 e6 d8 97 6f 62 55 6d 7a 87 6e 91 5d 7a d0 0b 2a 03 54 fd be c6 f6 51 57 3d 6b 2e 22 46 65 56 ab 5f b2 d1 cf c8 dc 5a 8a 0e bd ce e9 66 ad 3c 6d 0c db 93 dc 6b dc 9c 9e 3b 05 bd 63 61 b4 c8 bf 29 6f 60 72 db 14 43 06 40 89 7d 06 c1 93 b9 34 1f Data Ascii: @iSU%H%\5TNyoG/~<<bCq'zN%^}h-O!NQVJY7GTL0j+Lf)l.?ks4.tp52`{obUmzn]z*TQW=k."FeV_Zf<mk;ca)o`rC@}4
2024-01-15 14:02:46 UTC	16383	IN	Data Raw: 89 8f 5e 3e 0d 4c ea eb c1 b2 ec ce d5 bb 65 5f bf ac f6 f6 38 92 48 b2 a1 7d 5c 7f bb 5b cf dd bb 3c f8 8a d9 cc d5 52 43 d1 97 a5 9c f2 4c be 6d 75 41 6e 95 90 ce 08 80 e0 21 1a 89 08 fb fe 00 03 1b 74 a3 68 60 3a d1 0b f6 f7 e3 ae 7e f9 e3 ea 5e 52 f2 f5 57 10 81 46 aa 75 51 c6 45 ff b0 8e ba cf fe f0 28 ae a5 f4 ed 41 08 be 5b fc ec e3 b9 62 ab 50 91 ff 84 ed 68 e2 7a b6 34 86 52 ab 7e a9 23 8f 39 6b 61 93 40 dd 71 c7 77 23 ba 08 b5 09 d0 39 0e 3f 16 d0 c3 e4 03 d1 66 e2 21 01 9c 6f 37 16 c6 d6 c3 f6 0d 44 e9 9c a3 c8 42 83 5d 61 5c f4 fc 31 ca 56 36 b3 78 e9 dd 15 9c 3d 68 6f e9 d6 3e a8 ac 00 b7 87 4d 0a a5 d3 d5 66 24 26 01 75 0c 39 25 0d 3f 38 3a 43 80 70 fa f4 6b be 75 b2 79 79 1e 24 3e 1d fd dd 4c 40 08 eb 95 23 5e 21 7f ad 71 ac d7 5c ce 3a ca Data Ascii: ^>Le_8H}\[<RCLmuAn!th`:~^RWFuQE(A[bPhz4R~#9ka@qw#9?f!o7DB]a\1V6x=ho>Mf$&u9%?8:Cpkuyy$>L@#^!q\:
2024-01-15 14:02:46 UTC	26	IN	Data Raw: 2d c7 e0 74 e1 1c 36 68 0b d8 be 58 8c 92 6b 84 04 dd 22 4a a5 08 87 99 11 95 Data Ascii: -t6hXk"J
2024-01-15 14:02:46 UTC	16383	IN	Data Raw: b3 c6 4f d0 2b c8 ee 28 94 35 a0 80 d2 7c b0 49 00 01 fc 9c f8 9c f8 3a 70 3c df 2a 0b 3f 19 ae 17 e4 17 f8 b3 36 a0 01 d1 1a 07 96 20 c4 6d 52 ba ad 24 b3 07 e5 9f 8c 85 4e 88 a8 24 a6 8f f8 6e 52 ea f0 9b 77 09 d3 22 f9 be 6f e3 a6 26 1f a3 27 0f 9e e1 3d 92 7d 32 86 4e a8 44 93 22 06 86 fd 1e 58 ff 13 27 b2 4d 19 66 77 8a 67 78 9f 3b c0 e7 c7 e8 6a 51 43 98 2c ea e2 aa 19 2b e5 82 24 15 2b e6 99 29 e3 3a 63 33 a8 1a 94 78 c5 5c 74 68 10 a9 b6 25 21 01 69 8c c3 cd 60 c1 51 8f c6 58 30 71 79 ea 49 cc 88 d7 1c b1 1d ef 7e 6c a0 a1 cf 31 3c 1c a9 99 e3 26 4a 10 2f 10 c0 61 1e 78 3d 73 fc 9b 47 73 f8 77 ac 21 6a 17 d1 f8 c9 df 2c c3 9f 70 c7 90 82 b5 74 4d 94 1a 7e 42 73 e3 cc 3c 9f c4 c2 b1 10 ce 59 b3 9a c9 c3 69 df c1 9c 0e dc 98 22 b8 72 2c 47 e3 27 9a Data Ascii: O+(5\|I:p<*?6 mR$N$nRw"o&'=}2ND"X'Mfwgx;jQC,+$+):c3x\th%!i`QX0qyI~l1<&J/ax=sGsw!j,ptM~Bs<Yi"r,G'
2024-01-15 14:02:46 UTC	26	IN	Data Raw: 87 98 a4 72 b0 4f b5 57 b8 84 94 2f 4e 8e d4 4a 94 b9 d2 35 a2 16 f9 97 6f 6f Data Ascii: rOW/NJ5oo
2024-01-15 14:02:47 UTC	16383	IN	Data Raw: 57 ab 25 49 a5 5c 96 8f 99 2d 34 96 d5 ff 80 a7 26 86 bc e2 18 97 1a f8 5d 15 25 7c 4d 7b b4 94 fb 1a d6 16 b6 e8 7c 91 eb ab e8 ed 17 ee 7f 6c 86 14 8e 98 f6 5d b1 04 d8 e4 97 45 55 4d 9c 82 9b 74 ec 8c 8c c9 53 c2 f7 b5 fe 2b 8a df 96 64 57 78 ad 1a 5f 06 27 84 5a 6e ad 6f 5c a7 7a ae cb 9f d7 57 46 31 d0 a6 47 5b 6d 96 dc 6d 2b c5 4b 46 3c fe e1 7e bc 08 20 4d b6 95 1d 51 c5 6d a9 23 ed b8 a5 97 74 0f 33 98 3e 34 58 90 55 bc a5 ce 84 6f 06 69 75 74 f9 2b 37 a8 57 6b 6a 64 6c 52 75 a5 09 e2 03 80 21 1a 0c 00 c3 fc 00 04 9d c6 8b 03 d7 08 5e f5 f1 ef d7 15 b9 c6 8a 97 79 75 69 1f ad 5d b5 23 52 3f 50 77 68 52 51 a7 78 f4 d1 4e a6 79 8b 59 f5 b4 5a 7e 1d 87 39 a5 5c 67 e6 86 51 dc ec a3 05 aa 21 ed 9e 24 f6 aa ee ec 88 ce 32 76 2b 7d 7b e9 dc a2 c1 07 c4 Data Ascii: W%I\-4&]%\|M{\|l]EUMtS+dWx_'Zno\zWF1G[mm+KF<~ MQm#t3>4XUoiut+7WkjdlRu!^yui]#R?PwhRQxNyYZ~9\gQ!$2v+}{
2024-01-15 14:02:47 UTC	26	IN	Data Raw: 5f 55 bc f8 8c ab 59 24 95 24 06 75 d6 52 a1 d4 69 86 57 ff 83 0d 8f c0 28 9e Data Ascii: _UY$$uRiW(
2024-01-15 14:02:47 UTC	16383	IN	Data Raw: cb d0 2c 2f b2 3d 1e d9 7e 17 b0 9b bd 79 d1 60 7e 8c 4e 3b 8d 64 b6 c2 08 ef 14 7b 7b 5c f5 61 76 d5 5f 18 28 d8 10 78 5a 26 71 c9 b0 b0 98 1c ce 2d e3 1a 28 25 27 ed 2f 42 e6 62 33 23 8d e3 cf 29 f8 8e b1 cf 4c 2a 2a df bf c4 79 ad 11 df 86 91 91 6d 92 28 9d 7f 05 f5 93 1a 65 f7 32 6c 08 3b 80 90 40 22 85 d8 72 77 e2 86 fb 26 a0 35 04 54 ee 99 5c 3d 04 0b a7 42 cf d0 28 4e ad 20 bc 00 00 01 34 41 9b c0 2a 80 02 7a 21 3f ff f1 9d 34 e1 4c 00 10 30 00 10 02 57 a0 1a 4c e1 fb 32 64 3e 0f f4 07 4c 00 37 91 18 d6 a0 64 1a 58 0c c0 31 a5 b8 c0 00 20 37 f9 84 c5 9e 5e 60 00 10 1b e4 f8 19 81 30 96 20 2a 8f 28 b5 42 6b e1 0a 0e fb 34 07 99 0d 18 18 b8 c2 f0 01 45 0e d7 a1 b6 aa 70 29 1e 70 0b 7d aa 90 9f 91 10 08 f0 1a f3 f5 92 6c 04 55 20 d0 00 e2 2a b5 99 68 Data Ascii: ,/=~y`~N;d{{\av_(xZ&q-(%'/Bb3#)L*ym(e2l;@"rw&5T\=B(N 4Az!?4L0WL2d>L7dX1 7^`0 (Bk4Ep)p}lU h
2024-01-15 14:02:47 UTC	26	IN	Data Raw: e6 1a a0 d8 ec 04 7b 26 54 56 c7 87 f0 8a 0b 56 8c 0c 32 e5 7a b4 e3 21 c7 04 Data Ascii: {&TVV2z!
2024-01-15 14:02:47 UTC	16383	IN	Data Raw: f2 5d 29 da e0 e2 84 96 a8 5b ad 84 89 c5 44 ca b2 6b 9c 54 ab b9 5e 15 00 10 34 54 91 82 8b 21 1c 7e 02 ef b8 73 cf 21 9d 4a 39 f5 8b fa e0 71 88 8a 8c f7 61 57 39 4f ad 87 e1 5e 45 cc da 8e b4 93 49 c2 03 80 21 1a 0f 69 ed ff f0 84 85 8e a0 c4 41 b1 08 3a 21 1e 84 46 f7 e7 8b f1 d2 a5 5e b9 d3 35 29 25 24 86 df 65 5c d4 fb b4 c3 26 f1 81 86 c8 e0 02 2e 38 3f 5b c3 77 be f1 06 d3 55 ca 87 48 8b 15 e8 7c 74 13 75 ac 4a b2 21 7e 18 f3 bf 83 7f 48 94 57 86 24 24 0f 56 fa e6 e8 3d 0a bd d6 40 00 d4 0a be 71 44 9b 4a fd 98 f1 66 5b 37 04 a0 27 e0 55 9d 24 02 83 76 39 63 08 56 4f 65 76 4b f0 73 6a 80 28 f4 2b a0 4a dd 31 99 10 01 92 79 27 b0 e5 f8 e7 4f 6c d6 b0 59 6e 2b 74 e7 2e 46 b1 4e fa 5e 81 b2 ea 25 b6 99 56 eb ee 52 04 14 1b eb a2 4e 4f f1 07 c6 5b 12 Data Ascii: ])[DkT^4T!~s!J9qaW9O^EI!iA:!F^5)%$e\&.8?[wUH\|tuJ!~HW$$V=@qDJf[7'U$v9cVOevKsj(+J1y'OlYn+t.FN^%VRNO[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.8	49972	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:47 UTC	668	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327366603 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:47 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: 182bdcdgb78u X-Cloud-Trace-Context: df21e06614bf22d5810d2c5179dc28fa Date: Mon, 15 Jan 2024 14:02:47 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:47 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.8	49973	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:48 UTC	433	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2F&cb=1705327366603 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:02:49 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: iaxk6w6xwznn X-Cloud-Trace-Context: fb49fa9014cd659cfa833ba55131a90f Date: Mon, 15 Jan 2024 14:02:49 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:02:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.8	49977	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:02:59 UTC	702	OUT	GET /en/ HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:02:59 UTC	185	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Cache-Control: private Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 14:02:59 GMT Connection: close Content-Length: 69485
2024-01-15 14:02:59 UTC	1317	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 20 53 79 6e 65 73 67 79 20 7c 20 54 68 65 20 45 53 47 20 70 6c 61 74 66 6f 72 6d 20 66 6f 72 20 63 6f 6d 70 61 6e 69 65 73 20 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 79 6e 65 73 67 79 20 69 73 20 74 68 65 20 70 61 72 74 6e 65 72 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 2c 20 74 68 72 6f 75 67 68 20 69 74 73 20 73 65 72 76 69 63 65 73 2c 20 66 69 72 6d 26 23 33 39 3b 73 20 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 20 70 72 6f 63 65 73 73 20 74 6f 77 61 72 64 20 Data Ascii: <!doctype html><html lang="en"><head> <title> Synesgy \| The ESG platform for companies </title> <meta name="description" content="Synesgy is the partner that supports, through its services, firm's transformation process toward
2024-01-15 14:02:59 UTC	2920	IN	Data Raw: 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 66 72 2f 22 20 2f 3e 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 52 4f 42 4f 54 53 22 20 43 4f 4e 54 45 4e 54 3d 22 49 4e 44 45 58 2c 20 46 4f 4c 4c 4f 57 22 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 65 6e 2f 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0d Data Ascii: href="https://www.synesgy.com/fr/" /> <META NAME="ROBOTS" CONTENT="INDEX, FOLLOW"> <link rel="canonical" href="https://www.synesgy.com/en/" /> ... Google Tag Manager --> <script> (function (w, d, s, l, i) {
2024-01-15 14:02:59 UTC	5840	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 6f 6c 6c 61 70 73 69 62 6c 65 20 77 72 61 70 70 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 6c 61 70 73 65 20 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 72 6f 77 20 75 73 65 72 2d 6d 65 6e 75 20 6d 65 6e 75 20 6e 61 76 62 61 72 2d 6e 61 76 20 6d 65 2d 61 75 74 6f 20 70 73 2d 6c 67 2d 30 20 70 72 2d 30 22 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: </button>--> ... Collapsible wrapper --> <div class="collapse navbar-collapse d-flex justify-content-end"> <ul class="row user-menu menu navbar-nav me-auto ps-lg-0 pr-0">
2024-01-15 14:03:00 UTC	4380	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 71 6b 6f 74 6f 31 78 2f 67 72 65 65 63 65 2d 33 33 2d 33 33 78 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 67 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <img src="/media/sqkoto1x/greece-33-33x.png" /> <a href="https://service.synesgy.com/gr" target="_blank"
2024-01-15 14:03:00 UTC	2920	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 72 6f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 22 3e Data Ascii: <a href="https://service.synesgy.com/ro" target="_blank" class="streched-link">
2024-01-15 14:03:00 UTC	2920	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 64 6b 32 6e 79 6f 66 74 2f 68 6f 6e 67 6b 6f 6e 67 2d 33 33 2d 33 33 78 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 68 6b 22 20 Data Ascii: <img src="/media/dk2nyoft/hongkong-33-33x.png" /> <a href="https://service.synesgy.com/hk"
2024-01-15 14:03:00 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 63 6f 75 6e 74 72 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 6d Data Ascii: </li> <li class="single-country"> <img src="/m
2024-01-15 14:03:00 UTC	26	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: </div>
2024-01-15 14:03:00 UTC	4844	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 62 6c 75 72 62 2d 68 20 6e 6f 2d 62 6f 72 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 77 72 61 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 66 69 6c 69 65 72 61 2d 69 63 6f 6e 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 62 35 6f 68 72 31 65 66 2f 66 6f 67 6c 69 61 2e 73 76 67 22 20 61 6c 74 3d 22 46 6f 67 6c 69 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: <div class="col-12 blurb-h no-border"> <div class="icon-wrap"> <img class="filiera-icon" src="/media/b5ohr1ef/foglia.svg" alt="Foglia"> </
2024-01-15 14:03:00 UTC	16383	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2f 66 61 71 2f 22 3e 46 41 51 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li class="nav-item"> <a class="nav-link" href="/en/faq/">FAQ</a> </li> <li class="nav-item">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.8	49980	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:00 UTC	673	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2F&cb=1705327379956 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:03:01 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: y46xqtb1ismx X-Cloud-Trace-Context: 2cac6f8a7d330bf9669cbf682946f2eb Date: Mon, 15 Jan 2024 14:03:00 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:03:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.8	49981	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:01 UTC	438	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2F&cb=1705327379956 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:03:01 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: lbhwdvjwma9u X-Cloud-Trace-Context: cd867324779cbe6e7a074c4c08ac8eb4 Date: Mon, 15 Jan 2024 14:03:01 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:03:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.8	49978	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:02 UTC	711	OUT	GET /en/audience/ HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:03 UTC	185	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Cache-Control: private Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 14:03:02 GMT Connection: close Content-Length: 64929
2024-01-15 14:03:03 UTC	2777	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 20 45 53 47 20 63 6f 6e 73 75 6c 74 69 6e 67 20 66 6f 72 20 63 6f 6d 70 61 6e 69 65 73 2c 20 62 61 6e 6b 73 20 61 6e 64 20 69 6e 73 75 72 61 6e 63 65 73 20 7c 20 53 79 6e 65 73 67 79 20 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 79 6e 65 73 67 79 20 6d 65 61 73 75 72 65 73 20 74 68 65 20 63 6f 6d 6d 69 74 6d 65 6e 74 20 6f 66 20 63 6f 72 70 6f 72 61 74 69 6f 6e 73 2c 20 62 61 6e 6b 73 20 61 6e 64 20 69 6e 73 75 72 61 6e 63 65 20 63 6f 6d 70 61 6e 69 65 73 20 6f 6e Data Ascii: <!doctype html><html lang="en"><head> <title> ESG consulting for companies, banks and insurances \| Synesgy </title> <meta name="description" content="Synesgy measures the commitment of corporations, banks and insurance companies on
2024-01-15 14:03:03 UTC	16383	IN	Data Raw: 68 65 20 63 6f 6d 6d 69 74 6d 65 6e 74 20 6f 66 20 63 6f 72 70 6f 72 61 74 69 6f 6e 73 2c 20 62 61 6e 6b 73 20 61 6e 64 20 69 6e 73 75 72 61 6e 63 65 20 63 6f 6d 70 61 6e 69 65 73 20 6f 6e 20 45 53 47 20 73 75 62 6a 65 63 74 73 20 69 6e 20 61 6e 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 66 69 6e 65 20 74 68 65 69 72 20 73 75 73 74 61 69 6e 61 62 69 6c 69 74 79 20 61 6e 64 20 74 72 61 6e 73 70 61 72 65 6e 63 79 2e 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 5f 6c 61 72 67 65 5f 69 6d 61 67 65 22 Data Ascii: he commitment of corporations, banks and insurance companies on ESG subjects in an attempt to define their sustainability and transparency." /> <meta property="og:image" content="" /> <meta property="twitter:card" content="summary_large_image"
2024-01-15 14:03:03 UTC	26	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 Data Ascii: class="streched
2024-01-15 14:03:03 UTC	16383	IN	Data Raw: 2d 6c 69 6e 6b 22 3e 55 6e 69 74 65 64 20 41 72 61 62 20 45 6d 69 72 61 74 65 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 63 6f 75 6e 74 72 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: -link">United Arab Emirates</a> </li> <li class="single-country">
2024-01-15 14:03:03 UTC	26	IN	Data Raw: 61 6e 63 69 61 6c 20 70 6c 61 79 65 72 73 20 74 6f 20 67 75 69 64 65 20 6c 65 Data Ascii: ancial players to guide le
2024-01-15 14:03:03 UTC	16383	IN	Data Raw: 6e 64 69 6e 67 20 73 74 72 61 74 65 67 69 65 73 20 74 6f 77 61 72 64 20 6d 6f 72 65 20 73 75 73 74 61 69 6e 61 62 6c 65 2c 20 72 65 73 70 6f 6e 73 69 62 6c 65 20 61 6e 64 20 74 72 61 6e 73 70 61 72 65 6e 74 20 63 6f 6d 70 61 6e 69 65 73 2e 3c 62 72 20 2f 3e 54 68 65 20 6c 61 74 74 65 72 20 6d 61 6b 65 73 20 69 74 20 70 6f 73 73 69 62 6c 65 20 74 6f 20 61 74 74 65 73 74 20 61 6e 64 20 6d 6f 6e 69 74 6f 72 20 63 6f 6d 70 61 6e 69 65 73 20 6e 6f 74 20 6f 6e 6c 79 20 71 75 61 6e 74 69 74 61 74 69 76 65 6c 79 20 62 75 74 20 61 6c 73 6f 20 71 75 61 6c 69 74 61 74 69 76 65 6c 79 20 6f 6e 20 69 73 73 75 65 73 20 72 65 6c 61 74 65 64 20 74 6f 3a 20 73 75 73 74 61 69 6e 61 62 69 6c 69 74 79 2c 20 73 6f 63 69 61 6c 20 63 6f 6e 63 65 72 6e 2c 20 61 6e 64 20 63 6f 72 Data Ascii: nding strategies toward more sustainable, responsible and transparent companies.<br />The latter makes it possible to attest and monitor companies not only quantitatively but also qualitatively on issues related to: sustainability, social concern, and cor
2024-01-15 14:03:03 UTC	26	IN	Data Raw: 61 2f 32 73 64 6e 62 35 70 7a 2f 66 6c 61 67 5f 6f 66 5f 76 69 65 74 6e 61 6d Data Ascii: a/2sdnb5pz/flag_of_vietnam
2024-01-15 14:03:03 UTC	12925	IN	Data Raw: 2d 73 76 67 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 76 6e 22 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 20 6d 6f 62 69 6c 65 2d 63 6f 75 6e 74 72 79 22 3e 56 69 65 74 6e 61 6d 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 Data Ascii: -svg.png" /> <a href="https://service.synesgy.com/vn" class="streched-link mobile-country">Vietnam</a> </li>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.8	49982	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:03 UTC	707	OUT	GET /media/0ptncnah/cribis_22-05_visualhero_achicirivolgiamo.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/audience/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:03 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:02 GMT Accept-Ranges: bytes ETag: "e2c58104064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:32:12 GMT Content-Length: 4443719
2024-01-15 14:03:03 UTC	1259	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 03 e8 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 07 01 01 01 01 01 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~CC@
2024-01-15 14:03:03 UTC	2920	IN	Data Raw: 06 50 a5 13 d7 b1 d3 a5 05 29 40 92 ad 6b 43 5d 3d 3f 93 fb 01 dc a8 c9 1a b3 01 c8 f5 11 db 8a fb 6c 73 43 81 ef bb e0 6d 26 d9 09 64 f2 d7 7b 50 05 45 83 b8 50 02 ab b8 24 d1 bb 20 77 1d c0 1e 1c 92 6b de 89 15 6b 74 b3 d4 94 20 86 c8 2a 5a 82 8e ca 80 04 a5 03 4a de 89 04 eb 7d 27 f5 78 7a d0 88 d0 59 ba 17 b4 76 27 e4 d1 15 43 91 43 ed e4 6e 00 86 89 8b 21 26 99 55 37 d3 13 cd 28 e0 76 f7 b3 63 bd 1e 3e 7b 9f 08 6d be 75 d0 90 a5 2c e9 3d 1f dc a5 1f 68 46 86 ba 86 fb 6c 82 0f ee 35 e1 24 75 03 6d 12 6f d2 56 bb fb 2f 73 f9 3d 87 c0 3d 8f 89 06 84 5d dd 0e f7 c8 00 0e 6e f9 a3 77 62 ec f3 d8 9f 04 5f 4b a9 74 a1 67 a3 b9 49 4e f6 41 03 f4 84 e8 76 1d b7 bd 14 9d 6d 3a d7 86 19 36 0b 6e 23 9d d4 a2 c0 04 d9 3c 9d df 8f 9e 41 ba ed e1 dc 65 3c bd ca 0b Data Ascii: P)@kC]=?lsCm&d{PEP$ wkkt *ZJ}'xzYv'CCn!&U7(vc>{mu,=hFl5$umoV/s==]nwb_KtgINAvm:6n#<Ae<
2024-01-15 14:03:03 UTC	4380	IN	Data Raw: c4 ac b3 2e c4 6e f1 f8 4a 70 d9 64 38 ed a2 60 a9 33 19 5b 2d ad 33 d9 7e 70 6a 74 67 2c 5b 68 39 55 35 e9 0c 38 9f 55 6b f1 1f a9 e8 d9 7a 9e 81 85 fd de 3f c4 4c 28 1a 26 14 44 52 c2 a6 81 a1 6a c0 ad 58 dc 7e 41 a1 b7 b2 b1 c0 16 18 16 a0 e1 81 ec dc 1d 9f c1 66 cd 96 b6 07 b5 ad 82 c9 17 9e 5e 39 3f 2b e7 9b e6 38 52 e2 87 f9 75 58 e6 04 ed 3c fc a6 dd c6 eb 68 28 ef eb 1c 8d 1a a2 c1 f6 63 5b 1e 8a 39 d0 2d 21 c7 7a 4a 08 6a 33 0c 38 87 16 42 16 a2 68 df 50 74 ad 23 a5 70 97 ab 34 dc d9 35 17 97 27 0f 2a 2c 6c 66 66 39 38 f3 30 f3 91 1e 48 9c c7 34 4f 0c a0 af 04 ee 1c 2d 95 1c 74 f3 51 63 0c fb c1 94 48 40 4e 77 1f 46 dd d4 15 48 61 7f 71 05 af df c4 65 89 64 39 fe 23 71 13 24 e4 2c 92 9e 4d 5e 7d 3b 32 e3 fe 42 8f 94 84 5d 25 89 58 f4 f5 56 57 4b Data Ascii: .nJpd8`3[-3~pjtg,[h9U58Ukz?L(&DRjX~Af^9?+8RuX<h(c[9-!zJj38BhPt#p45'*,lff980H4O-tQcH@NwFHaqed9#q$,M^};2B]%XVWK
2024-01-15 14:03:03 UTC	5840	IN	Data Raw: f2 0f 57 60 52 9d 10 3a 9c 92 3c c3 43 f8 7f f6 d5 f2 0f 6a e1 80 e7 dc 8e 7c 1d 01 09 47 d2 4b 55 1f 92 a7 90 3d bf 90 15 f9 1e 05 78 29 49 42 8a 54 df c2 77 a5 05 90 36 ae b0 94 85 03 bd 00 55 bd 8e 90 90 55 a1 a1 22 eb 92 28 8f cd fe 7d 40 7b 7f af 34 3f 84 a8 c0 33 0b 56 be 48 14 54 1e 3d c9 52 3b 12 14 70 7b 8b a3 e3 94 25 2b 42 92 e8 3d 7a 01 24 fe ad 6c 0d 91 f0 06 d4 3b e9 23 bf b7 ba 48 f0 bc 77 54 4f 14 08 15 54 4d f1 fe d7 7f ec 57 c1 5d 99 48 2b f6 dd 9e 07 03 e3 9b 3e d5 c9 37 fb 1b 27 23 d6 2d f2 94 eb a0 ed 43 7f 1d 7d 1d fb 80 48 07 5d 81 00 24 fc 1d 6d 09 f0 e6 34 f4 8e 36 8b 3d 8f dd c5 f3 cf b8 bf 9f 8a 22 87 86 d3 66 2a 06 20 96 52 01 00 f7 56 37 7b 47 16 28 55 10 79 ba 22 9b c2 e4 4a c7 ab 56 1d 49 69 d0 b2 ae a0 ae 95 38 12 53 b2 7f Data Ascii: W`R:<Cj\|GKU=x)IBTw6UU"(}@{4?3VHT=R;p{%+B=z$l;#HwTOTMW]H+>7'#-C}H]$m46="f* RV7{G(Uy"JVIi8S
2024-01-15 14:03:03 UTC	2920	IN	Data Raw: a0 43 0f e7 b8 fb 8f 62 3d b9 25 8f 83 02 56 e8 f3 f3 5f d2 fb 7f 32 2f f7 e0 05 76 45 ca 1f 56 80 4a bb eb 6a ec 34 75 ff 00 c3 6c ef b0 ed d5 f3 ff 00 d5 35 68 f9 b2 41 f8 e2 88 be df c4 40 f7 e7 fa d9 24 f8 51 5f 71 20 8a 3e d5 db 9f fd 3c 01 fc cf b1 06 c1 f0 b0 de 43 30 0f 6a 09 f8 20 92 ad 9f c7 c6 bb 7f 9d eb 5f 07 ab 5b f0 42 83 d8 81 fb a9 ff 00 eb ff 00 e5 e1 4e ff 00 cf fe 5c f3 df dc 77 26 cf 73 44 5f 8f 46 4f 6b b0 94 85 0e ff 00 09 da bb 68 ef f1 fe e7 b1 df 6e da 01 23 c1 4a 81 7c 8b 1e d7 ff 00 c3 bf ea 3f 9f 80 f0 7e 2d ad 84 82 9e b5 a8 95 9d 11 ee 4e 93 ff 00 7f f2 48 04 0e fa fc f6 f0 4f fa ff 00 ae 0f fd 7b 8e e0 40 27 81 ff 00 23 db f9 8f f7 fe b5 e1 59 b6 1d 7b 45 ce b0 0e ce ba f7 ff 00 7d ec 7c 8f 82 3e 77 f8 20 29 3c 4e df f5 ed Data Ascii: Cb=%V_2/vEVJj4ul5hA@$Q_q ><C0j _[BN\w&sD_FOkhn#J\|?~-NHO{@'#Y{E}\|>w )<N
2024-01-15 14:03:03 UTC	2920	IN	Data Raw: 8f df f3 ff 00 3a a3 c5 f1 62 81 07 c0 2a 59 fd 3d 47 47 b1 20 77 3f bf f6 90 9d 77 1f dc 4e f6 35 a3 e3 bf eb db fe 55 fd 79 fc d9 37 e0 ad d8 fe c7 fd bc 15 2a 3a fc ab fe ad 9d 8f cf f9 d8 fc 76 f8 1f 1a d0 1e 3b c7 0e 00 3d fb 7c 8e ff 00 b5 55 7e fe d6 2e af c0 45 40 82 4f 65 03 fb f6 d0 ff 00 70 3f f4 ed bf f3 bf 1d e0 c3 e3 e4 f3 f8 ef cf 6f e6 40 fc 8f 45 db 02 a1 bf ef d8 20 eb 7d 3f fa f6 ff 00 d3 f3 a3 df f3 a4 f7 8e 1f b5 72 3b 7e e7 80 3d 56 3f 0c 7e 09 ec 37 02 42 b7 d8 ff 00 ea 76 3f f6 1f f6 fc 7e 7b ef ba 82 bf 3f f5 fd 3d f8 fc 7c 6d b2 7c 01 17 60 8f 8f c7 ed f1 f1 ff 00 b7 bf 21 f4 a8 eb e4 eb e7 e4 83 bf c8 51 51 d6 ff 00 c8 ff 00 d3 5d c4 ff 00 f0 bf 1f 00 fe 6f 9b a6 5a e0 d7 62 51 cd 9b 20 0b e0 55 00 09 ed c5 9e 3f a0 f7 6e eb ea Data Ascii: :bY=GG w?wN5Uy7:v;=\|U~.E@Oep?o@E }?r;~=V?~7Bv?~{?=\|m\|`!QQ]oZbQ U?n
2024-01-15 14:03:03 UTC	5840	IN	Data Raw: d7 34 a0 39 11 4a 25 2a 49 24 77 d6 87 c6 b5 be a2 48 ec 4f c0 03 7a d9 d8 04 78 11 c5 d1 23 70 a6 fe 21 cf e2 bf e4 48 ec 2e 85 f6 ca ec 7f 6e 2b ff 00 a7 3f f5 cf 35 4e 59 4c a9 ad 14 25 49 50 f6 f7 5e ba b4 7b 92 00 23 e4 7c fb 75 ad 7e 77 e3 b9 af 6e ff 00 b5 ff 00 bf 61 fe a7 da fc 76 c2 28 83 cf bd 0a ed fb b3 77 e4 1e 3f 6b fe 13 0c bf 25 07 a7 fb 41 1a 20 00 4e f6 41 3e ed 77 20 8d 82 a5 0f c8 f1 d5 ec 7d fe 7d 85 f2 7d bb 7e 09 2a 7e 2a d5 4f df 9e df bf 1e de df 03 dc 7f 2f 07 15 30 9d 8d ec 28 04 8f dc 1f c9 1e ee a2 47 7d eb 43 43 b9 d8 05 44 f2 c0 22 c9 ab 3e c0 1e 40 e0 f2 7b 7c d7 b9 05 4f b7 5d 7f a0 bf cf fa 7b fb d5 f6 ec 38 f0 4b d4 24 95 12 41 de bb 6f 7b f8 24 68 8d 92 3e 36 49 3b 1f ba bc 71 8c 5b 72 78 ed fb 72 7e 7d bf 36 7d b8 ec Data Ascii: 49J%I$wHOzx#p!H.n+?5NYL%IP^{#\|u~wnav(w?k%A NA>w }}}~~*O/0(G}CCD">@{\|O]{8K$Ao{$h>6I;q[rxr~}6}
2024-01-15 14:03:03 UTC	5840	IN	Data Raw: 30 cb aa f5 ec ba 9f d3 8e 8a 87 41 e8 cf a7 b0 e6 e7 61 0d 2b 13 4d c3 30 8f 3a 3c 78 c4 50 c1 82 75 0c cb fd 46 5c f1 c2 8e 32 23 f2 a2 67 99 9d a5 00 9b 7a c3 f5 2c be 63 48 c9 72 3d 17 29 4c 96 ca 0b 59 a5 09 44 5a 2a ab 08 c7 a7 d5 eb 76 a8 1c 2d 81 61 eb 97 93 ab 0a cf e0 e4 3c bb cc 33 6e ee 32 68 72 64 da 49 87 83 d3 ae 74 b9 96 d0 24 28 32 e5 8d 9e 43 2a 34 f0 94 b8 1f b1 fb ac c2 b6 63 4a ec 24 2a bb f5 bb ac b5 ed 3f 4b c5 d5 35 fe 9e 6c 3e 93 e8 d9 f0 e3 d2 b2 50 c4 66 d6 f5 2c 95 58 c4 c1 24 95 63 87 1e 39 17 74 bb 84 4d 18 2d 2b b7 3b 16 9d aa 66 e4 6a 12 72 41 24 b5 b0 2d bc 96 b3 ea 2c 08 04 00 02 d0 1b 6a aa c9 3e 1f 7c e7 5e 9e 11 c0 32 fa 5e 2d c5 6d c4 17 18 c5 6c e5 3a 8a bb 1f ad 66 d2 10 7a 5e 45 35 86 8c 78 f2 20 b5 56 fb ef 09 93 Data Ascii: 0Aa+M0:<xPuF\2#gz,cHr=)LYDZv-a<3n2hrdIt$(2C4cJ$*?K5l>Pf,X$c9tM-+;fjrA$-,j>\|^2^-ml:fz^E5x V
2024-01-15 14:03:03 UTC	2920	IN	Data Raw: e7 38 cf 10 67 19 45 c6 2d 90 d2 a6 fe c7 0e ad 8f 8b c7 15 ef d1 5a 4f 53 93 e0 47 93 02 2f 41 53 56 a8 12 a5 30 f3 41 a6 99 95 1e 44 54 a5 9f 5d 1b 98 c1 c4 c2 c0 9f 3b 02 10 eb bd 4c af e6 16 3e 9e 4d ee 7b b0 bd 9a 90 57 16 45 f8 23 bc d9 28 e6 ed e3 02 42 a0 05 06 3f b5 a9 b7 13 6a 49 3b 45 ee 04 d9 5d 8a 7c 4c be 5c f9 d2 89 8e 40 e4 6c 26 e6 92 0b 99 5f 28 55 39 88 cf 9b 3d 13 98 72 c6 53 50 4c 09 15 32 94 12 a5 45 9b 26 ba 38 10 ac 5a 8b eb 26 6b 35 ee 29 65 86 dd 5f 8c a3 ea cf d3 1d 53 5e d3 b4 0d 7f 4d c9 27 1b a6 b5 08 b3 67 c3 46 50 25 82 59 87 f8 e9 ca 92 61 6d ae c8 7b c5 bb b9 0a de 18 c8 67 53 64 31 56 1c 77 34 80 d1 20 80 d4 a1 81 07 e0 9d b6 58 da cf 5c 53 e6 63 0c ae b5 c5 9e 93 91 59 42 c6 2a b3 17 ab e6 47 75 a8 8f db 45 b0 ac c4 c6 Data Ascii: 8gE-ZOSG/ASV0ADT];L>M{WE#(B?jI;E]\|L\@l&_(U9=rSPL2E&8Z&k5)e_S^M'gFP%Yam{gSd1Vw4 X\ScYB*GuE
2024-01-15 14:03:04 UTC	4380	IN	Data Raw: fc f3 7e 19 9c e2 4a 58 1c 9a e7 8b f6 e3 9e 3b 8a 0c 08 04 77 ae e0 2e 23 cd eb a4 ad 68 58 03 ab 43 a8 6c 12 35 dd 5b df f8 1d c0 24 ef 43 c2 47 1c a7 2a 6c 1f 71 cd 5f c5 91 7d c7 17 de 80 00 00 7c 28 27 89 ee c2 ab 29 ec 01 a3 da ef b1 e0 0f 85 ee d5 54 7c 06 e8 71 a4 8d 10 40 d1 1a 03 a8 11 be c3 be bf 04 fe 94 83 f2 36 76 12 70 9b 54 1d b4 43 76 1e d7 63 e6 8f 1d c0 27 d8 d1 a0 cc 64 d9 23 57 a8 33 58 23 9a e7 df 9b 3f 00 f3 c7 ec 3c 15 43 ae 21 2b 52 16 a6 d6 ea 54 da ba 49 d3 ac a8 6c b6 e8 1a 0b 4f 52 52 4b 6a da 77 d2 3a 52 a1 bf 0d 65 55 7a bd ac 7f 22 89 07 e2 e9 87 ec 3d bf 88 01 6a e4 11 65 49 25 68 70 38 2a c0 ff 00 0d 7f 98 71 bb b7 16 77 58 a1 7e b2 c1 e2 84 7a ef 28 25 29 47 a5 ea 2d 7d 28 48 09 4a 11 d6 be 90 da 53 d8 24 f6 4a 53 d2 81 Data Ascii: ~JX;w.#hXCl5[$CGlq_}\|(')T\|q@6vpTCvc'd#W3X#?<C!+RTIlORRKjw:ReUz"=jeI%hp8qwX~z(%)G-}(HJS$JS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.8	49986	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:03 UTC	684	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Faudience%2F&cb=1705327382938 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:03:04 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: pwwzrijfcb2g X-Cloud-Trace-Context: dbdd87b14b480af75a75cc9aaee4aef4 Date: Mon, 15 Jan 2024 14:03:03 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:03:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.8	49983	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:03 UTC	681	OUT	GET /media/rknbnk2t/icona_pmi-smes.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/audience/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:04 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:03:04 GMT Accept-Ranges: bytes ETag: "de15d68f586bd81:0" Connection: close Last-Modified: Thu, 19 May 2022 08:15:12 GMT Content-Length: 13997
2024-01-15 14:03:04 UTC	1261	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 c8 00 00 04 05 08 06 00 00 01 33 bf c4 f3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 36 4f 49 44 41 54 78 da ec dd 3d 52 83 40 18 80 e1 e0 30 43 1b 6f a2 27 10 3b 4a 8f 90 6b d0 d9 71 0c 8f 60 4b 17 8f e0 15 bc 81 2d 15 e2 d8 38 36 a0 61 05 3e 9e a7 49 a5 d9 ec be e1 4f 4c 0e 07 00 00 96 96 45 79 21 45 dd 9e 87 87 32 d2 e2 74 4d 95 49 94 d4 6f 9c a7 08 af e3 ca 52 ae da 9b c8 40 64 88 0c 91 81 c8 10 19 88 0c 91 21 32 10 19 22 23 a0 a2 6e 7b 91 61 4b 86 c8 40 64 88 8c 1d ca 47 ce 10 ae bb a6 7a 37 4d 4c 38 ab 7c 1e 1e 1e 66 3d 2d e5 5f 16 ee 71 03 63 ec e7 fc 65 27 cb 2e b2 6f 63 bb b1 42 22 4b 39 ae 63 d2 03 7f bb 4e 1c a7 c7 Data Ascii: PNGIHDR3tEXtSoftwareAdobe ImageReadyqe<6OIDATx=R@0Co';Jkq`K-86a>IOLEy!E2tMIoR@d!2"#n{aK@dGz7ML8\|f=-_qce'.ocB"K9cN
2024-01-15 14:03:04 UTC	12736	IN	Data Raw: 52 c8 00 84 0c 10 32 00 21 03 10 32 00 21 03 84 0c 40 c8 00 84 0c 40 c8 00 21 03 10 32 00 21 03 10 32 40 c8 00 86 cb 05 12 81 06 fb 92 39 22 03 9c 5a 02 08 19 80 90 01 08 19 20 64 00 42 06 20 64 00 42 06 08 19 80 90 01 08 19 80 90 01 42 06 d0 1f e3 9a 8f 7b ac 73 a9 8d 50 9e 1f 6b da 61 f0 d6 b1 bc d6 7c ec be d3 23 73 1d 33 48 43 ec eb a5 53 4b 00 21 03 84 0c 40 c8 00 84 0c 40 c8 00 21 03 10 32 00 21 03 10 32 40 c8 00 84 0c 40 c8 00 2a 19 9b 82 74 5c ae 48 90 a5 32 de 63 91 8f ac 75 21 c3 ce dd e7 68 bb 64 94 53 4b 00 21 03 10 32 00 21 03 84 ac ab 52 f9 27 6e 8c 73 63 f3 b4 ed b5 34 ce 2c 96 a9 90 f1 67 c7 22 5f 98 05 5a da f6 3e e3 e6 45 c8 00 84 0c 40 c8 00 21 03 10 32 00 21 03 10 32 40 c8 00 84 0c 40 c8 00 84 0c 10 32 00 21 03 10 32 00 21 03 84 0c 40 Data Ascii: R2!2!@@!2!2@9"Z dB dBB{sPka\|#s3HCSK!@@!2!2@@*t\H2cu!hdSK!2!R'nsc4,g"_Z>E@!2!2@@2!2!@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.8	49985	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:03 UTC	680	OUT	GET /media/n4gfog2a/icona-aziende.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/audience/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:04 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:03:04 GMT Accept-Ranges: bytes ETag: "dbd146ac7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:25:43 GMT Content-Length: 2111
2024-01-15 14:03:04 UTC	2111	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 35 70 78 22 20 68 65 69 67 68 74 3d 22 33 34 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 35 20 33 34 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 4e 75 6f 76 65 2d 70 61 67 69 6e 65 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="345px" height="345px" viewBox="0 0 345 345" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 17</title> <g id="Nuove-pagine" stroke="none"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.8	49984	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:03 UTC	692	OUT	GET /media/5f3fl3vq/icona_bancheassicurazioni.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/audience/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:04 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:03:04 GMT Accept-Ranges: bytes ETag: "b080c72d7658d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:29:20 GMT Content-Length: 4533
2024-01-15 14:03:04 UTC	4178	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 34 30 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 32 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 4e 75 6f 76 65 2d 70 61 67 69 6e 65 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="288px" height="401px" viewBox="0 0 288 401" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 27</title> <g id="Nuove-pagine" stroke="none"
2024-01-15 14:03:04 UTC	355	IN	Data Raw: 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 78 31 3d 22 31 34 32 2e 39 39 39 37 37 22 20 79 31 3d 22 31 39 35 2e 35 37 32 37 38 22 20 78 32 3d 22 31 34 32 2e 39 39 39 37 37 22 20 79 32 3d 22 32 30 36 2e 37 39 37 33 33 36 22 20 69 64 3d 22 53 74 72 6f 6b 65 2d 32 31 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 2f 6c 69 6e 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 78 31 3d 22 31 34 32 2e 39 39 39 37 37 22 20 79 31 3d 22 32 35 34 2e 33 32 30 36 34 22 20 78 32 3d 22 31 34 32 2e 39 39 39 37 37 22 20 79 32 3d 22 32 36 36 2e 39 37 31 37 22 20 69 64 3d 22 53 74 72 6f 6b 65 2d 32 33 22 20 Data Ascii: path> <line x1="142.99977" y1="195.57278" x2="142.99977" y2="206.797336" id="Stroke-21" stroke-linecap="round" stroke-linejoin="round"></line> <line x1="142.99977" y1="254.32064" x2="142.99977" y2="266.9717" id="Stroke-23"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.8	49987	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:04 UTC	449	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Faudience%2F&cb=1705327382938 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:03:04 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: vo7if3567pbm X-Cloud-Trace-Context: 693ea7f469b4aba99f090a93dabb4939 Date: Mon, 15 Jan 2024 14:03:04 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:03:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.8	49988	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:04 UTC	432	OUT	GET /media/n4gfog2a/icona-aziende.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:05 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:03:05 GMT Accept-Ranges: bytes ETag: "dbd146ac7558d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:25:43 GMT Content-Length: 2111
2024-01-15 14:03:05 UTC	2111	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 34 35 70 78 22 20 68 65 69 67 68 74 3d 22 33 34 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 35 20 33 34 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 4e 75 6f 76 65 2d 70 61 67 69 6e 65 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="345px" height="345px" viewBox="0 0 345 345" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 17</title> <g id="Nuove-pagine" stroke="none"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.8	49989	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:04 UTC	444	OUT	GET /media/5f3fl3vq/icona_bancheassicurazioni.svg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:05 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Mon, 15 Jan 2024 14:03:05 GMT Accept-Ranges: bytes ETag: "b080c72d7658d81:0" Connection: close Last-Modified: Mon, 25 Apr 2022 07:29:20 GMT Content-Length: 4533
2024-01-15 14:03:05 UTC	2718	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 34 30 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 72 6f 75 70 20 32 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 4e 75 6f 76 65 2d 70 61 67 69 6e 65 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="288px" height="401px" viewBox="0 0 288 401" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Group 27</title> <g id="Nuove-pagine" stroke="none"
2024-01-15 14:03:05 UTC	1815	IN	Data Raw: 32 34 31 33 34 39 37 31 20 43 31 36 30 2e 31 39 31 30 35 37 2c 35 2e 36 39 36 30 37 38 33 32 20 31 36 36 2e 35 34 33 31 33 2c 31 34 2e 38 39 30 38 32 36 38 20 31 37 31 2e 38 38 33 36 31 38 2c 32 36 2e 35 35 35 31 37 35 31 20 43 31 37 39 2e 36 38 35 32 35 32 2c 34 33 2e 36 36 33 33 35 35 37 20 31 38 35 2e 35 34 32 38 33 35 2c 36 38 2e 37 33 38 35 33 32 39 20 31 38 36 2e 34 37 38 31 32 37 2c 39 34 2e 32 30 32 37 35 36 36 22 20 69 64 3d 22 53 74 72 6f 6b 65 2d 31 31 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 32 2e 37 37 32 34 35 39 2c 31 35 37 2e 38 36 32 38 39 33 20 43 31 31 36 2e 30 32 39 30 33 33 2c 31 34 39 2e 37 35 36 33 34 37 20 31 31 31 2e 36 30 39 37 30 38 2c 31 34 30 2e 31 38 38 Data Ascii: 24134971 C160.191057,5.69607832 166.54313,14.8908268 171.883618,26.5551751 C179.685252,43.6633557 185.542835,68.7385329 186.478127,94.2027566" id="Stroke-11"></path> <path d="M122.772459,157.862893 C116.029033,149.756347 111.609708,140.188

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.8	49990	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:05 UTC	433	OUT	GET /media/rknbnk2t/icona_pmi-smes.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:05 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:03:05 GMT Accept-Ranges: bytes ETag: "de15d68f586bd81:0" Connection: close Last-Modified: Thu, 19 May 2022 08:15:12 GMT Content-Length: 13997
2024-01-15 14:03:05 UTC	7101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 c8 00 00 04 05 08 06 00 00 01 33 bf c4 f3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 36 4f 49 44 41 54 78 da ec dd 3d 52 83 40 18 80 e1 e0 30 43 1b 6f a2 27 10 3b 4a 8f 90 6b d0 d9 71 0c 8f 60 4b 17 8f e0 15 bc 81 2d 15 e2 d8 38 36 a0 61 05 3e 9e a7 49 a5 d9 ec be e1 4f 4c 0e 07 00 00 96 96 45 79 21 45 dd 9e 87 87 32 d2 e2 74 4d 95 49 94 d4 6f 9c a7 08 af e3 ca 52 ae da 9b c8 40 64 88 0c 91 81 c8 10 19 88 0c 91 21 32 10 19 22 23 a0 a2 6e 7b 91 61 4b 86 c8 40 64 88 8c 1d ca 47 ce 10 ae bb a6 7a 37 4d 4c 38 ab 7c 1e 1e 1e 66 3d 2d e5 5f 16 ee 71 03 63 ec e7 fc 65 27 cb 2e b2 6f 63 bb b1 42 22 4b 39 ae 63 d2 03 7f bb 4e 1c a7 c7 Data Ascii: PNGIHDR3tEXtSoftwareAdobe ImageReadyqe<6OIDATx=R@0Co';Jkq`K-86a>IOLEy!E2tMIoR@d!2"#n{aK@dGz7ML8\|f=-_qce'.ocB"K9cN
2024-01-15 14:03:05 UTC	6896	IN	Data Raw: a5 79 be 7a 15 1b f5 89 89 14 b9 0e 53 4c df c4 f2 35 ae 9f c7 7a 1c 98 0a bc e8 49 e8 7d 2c fb 71 9f 99 9a 4a 71 eb 70 3b 2e d2 7a 3c 8d eb 07 b1 0e f7 4d 65 b5 1c b2 5c ed 06 7d 93 af ee 8b b1 72 c5 ba 9b c4 b2 13 57 27 b1 7c 36 11 78 76 bf 77 90 63 ec 2c ee 37 1f c4 58 b1 fb bd 69 5a 7f 69 3d a6 f5 99 d7 2b 82 ac 58 69 03 1e a7 07 74 a3 a8 62 07 b5 9f 1f 70 be 98 06 fc d0 4d be bf 5c 1a 45 15 fb bd cb c5 f5 8a 20 2b d9 b9 11 54 e7 d8 08 e0 59 57 46 50 15 e7 ce 0a 32 00 0a f4 97 11 54 e5 4f 23 10 64 00 00 82 0c 00 00 41 06 00 20 c8 00 00 10 64 00 00 82 0c 00 00 41 06 00 20 c8 00 00 10 64 00 00 82 0c 00 00 41 06 00 20 c8 00 00 10 64 00 00 82 0c 00 00 41 06 00 20 c8 00 00 10 64 00 00 82 0c 00 00 41 06 00 20 c8 00 00 10 64 00 00 82 0c 00 00 41 06 00 20 c8 Data Ascii: yzSL5zI},qJqp;.z<Me\}rW'\|6xvwc,7XiZi=+XitbpM\E +TYWFP2TO#dA dA dA dA dA dA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.8	49991	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:06 UTC	459	OUT	GET /media/0ptncnah/cribis_22-05_visualhero_achicirivolgiamo.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:06 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:06 GMT Accept-Ranges: bytes ETag: "e2c58104064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:32:12 GMT Content-Length: 4443719
2024-01-15 14:03:06 UTC	10019	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 03 e8 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 00 07 01 01 01 01 01 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~CC@
2024-01-15 14:03:06 UTC	13140	IN	Data Raw: 42 bb fb 52 09 f6 81 d9 3a 3f e4 91 bd 86 93 04 73 b4 28 25 b7 13 44 70 39 a2 4f 63 c1 bf 6e 78 a0 05 78 6a 66 26 f7 3d 7a ae 87 00 fc 9b 00 57 f3 bb ee 2c 02 be 2c 17 1d d9 4c b3 a1 85 43 2e 16 13 77 2a b6 f6 2b 98 bc 8c c2 f6 b2 b9 96 55 2d 61 13 68 df 8c fc 75 ce 9d 0e 7a d0 c9 f4 dc 5a 20 a0 a0 82 b0 56 17 e2 26 68 9c 5b 06 70 08 24 a8 3e aa f6 20 0e 28 0b ed bb fc a4 9e e1 f6 03 c2 49 53 1a 2f 21 ca b5 7d c4 70 42 ee 03 6b 11 cd 10 54 7e fb 7c 24 65 36 35 17 b1 f3 2a bb 3e 3c a0 c1 33 28 79 05 63 b0 5a a5 8d 26 a9 b8 e6 3b 66 0d ed 44 e8 d2 dd 79 84 43 9c 80 d5 8d 7b ac 32 d3 2d ca 4f 53 6a 53 0f a9 4a 4a 05 c8 49 51 d2 70 d1 08 c8 64 65 b2 c7 9a 6d cb 5c 8e cb c0 ef f6 f1 ea 67 a8 65 24 13 84 91 26 b7 f3 0d a1 df 1a 52 ff 00 86 51 77 06 2c 18 7f 8a Data Ascii: BR:?s(%Dp9Ocnxxjf&=zW,,LC.w+U-ahuzZ V&h[p$> (IS/!}pBkT~\|$e65><3(ycZ&;fDyC{2-OSjSJJIQpdem\ge$&RQw,
2024-01-15 14:03:06 UTC	5840	IN	Data Raw: 6a 8e 6e f7 04 f0 f7 5a eb 5d 13 46 53 0e 34 9f de 19 49 c1 8f 18 86 85 3b 5f 9b 90 36 46 48 e6 91 4b 12 4d f0 02 ee 84 6c 3c dc f2 5e 61 54 cc 8e 2c c7 68 30 37 91 3e 4a 6f 32 5c 82 d2 b2 ea 7c c7 95 09 b3 12 b6 82 1c d6 50 fb 4f 30 95 4c 90 eb 0c 46 71 13 5f 66 23 ae 59 c5 2d 2d b7 ef ba 67 d0 7d 12 02 f2 eb 79 b9 1a d0 6e 22 80 9f d1 61 a0 06 cb ba a1 69 64 2a 54 52 96 08 79 a6 72 69 68 39 bf 52 33 67 dd 16 32 47 89 ea b2 76 1c 89 d9 4d 9a 01 b6 47 18 23 90 e0 bb 2f a4 79 6c 77 1f 01 71 fe 59 c6 78 dd cc 8c df 30 c3 72 ae 55 cf 67 d9 b7 0f 1b b9 e5 2c 36 7f 26 4c cb 27 a4 29 ab 5b 2e 2f c2 63 fd 93 8f 44 3a e9 a1 0d a2 cf 31 b2 b2 7a 2b 8b 47 d1 c2 9e ea 16 50 ff 00 5a e8 49 73 b1 63 d1 97 3f 23 45 d1 13 d3 26 2e 83 28 d3 5a 44 8d 94 ec 97 2d 0b 65 b2 Data Ascii: jnZ]FS4I;_6FHKMl<^aT,h07>Jo2\\|PO0LFq_f#Y--g}yn"aid*TRyrih9R3g2GvMG#/ylwqYx0rUg,6&L')[./cD:1z+GPZIsc?#E&.(ZD-e
2024-01-15 14:03:06 UTC	7300	IN	Data Raw: 16 3c 78 38 a8 e9 2d 95 12 a5 2f 49 4e cf 74 80 ae c9 1f 8f 68 1b 04 fc fc 04 f5 15 0f 06 31 a9 1b af dc 8f f3 15 06 e8 71 b7 b7 b5 f7 ae 08 20 97 41 65 60 d5 45 57 93 57 46 f8 e6 f9 b3 64 9a 1f d5 00 36 49 c8 ab 40 0e 7b 40 d9 e9 d7 c8 29 1f 3d f6 34 17 f3 df e3 b6 bb 02 53 f3 2a c8 04 10 39 e6 c0 f6 37 cf 6a 35 ef cf f9 b9 2a e1 67 52 76 7a 8f 72 dc 0f 6e 6b 8f 70 a7 de bb 6e a1 74 08 29 4b 53 9a 51 2a 3b d1 03 67 7f 20 f7 29 20 9d 69 43 da 34 15 a2 7a 88 50 55 26 2d 76 48 b1 62 c0 04 d7 75 fe 2a ef 7f 6f 61 d8 82 be 1d 85 40 97 d8 55 d9 e0 a9 ef d8 0f 7f fc d5 c7 16 39 2e ea 1a 3b 7b d9 ec 53 d2 d7 39 6b 6a eb 2f 3b 16 b9 97 19 61 f9 c6 34 77 24 ba 86 9c 92 eb 48 71 d5 b4 d2 cb 71 90 e0 7a 4b 89 0c c7 0a 79 69 f0 59 a4 da 85 87 16 07 23 96 ee 47 a0 d9 Data Ascii: <x8-/INth1q Ae`EWWFd6I@{@)=4S97j5gRvzrnkpnt)KSQ;g ) iC4zPU&-vHbuoa@U9.;{S9kj/;a4w$HqqzKyiY#G
2024-01-15 14:03:07 UTC	5304	IN	Data Raw: d7 61 bf 6a 87 cc 62 16 c5 1b 21 be 3b 0d b4 0d 5d db 5f 1e fc df 70 65 31 90 7b d7 75 20 d8 50 37 7a 8d d7 03 b5 1b 61 dc 8e 08 51 13 a4 a8 6f 60 15 28 12 a5 13 d8 f5 04 90 34 01 d7 7d 81 d5 bd 11 d8 77 f0 de 45 de 68 83 5f 22 80 1e 9a 17 c9 04 9e 39 fe 7e 9e 17 c1 1a c8 b1 de 81 00 0e fd 89 17 fe 6a 00 59 a1 f0 6e fc 77 0d 0e 36 ea 43 4b 92 82 b5 b6 7a 59 71 61 25 c4 a8 84 bb a4 a8 23 69 24 94 f6 d8 da 81 23 7e d6 83 0a 27 90 b3 46 28 92 2e 87 6e 6f e4 80 6b 8b bb f9 03 d2 a1 3c a3 ca 25 84 66 95 8d b0 1c 2f 72 b6 45 d9 ec 41 dd c5 91 c7 7b 11 c7 8e d3 e2 17 b4 39 86 41 1a 4d fb 35 56 4d d9 c8 87 0a c1 aa db 73 21 b0 43 32 51 26 5c 1b 28 ea 7d 87 02 5e 44 69 f1 9f 85 27 a0 36 f6 d0 a5 38 88 fe ac e8 c9 f5 fe 9e cb d3 f4 8d 4e 0d 2f 2a 75 06 39 e7 c7 39 Data Ascii: ajb!;]_pe1{u P7zaQo`(4}wEh_"9~jYnw6CKzYqa%#i$#~'F(.nok<%f/rEA{9AM5VMs!C2Q&\(}^Di'68N/*u99
2024-01-15 14:03:07 UTC	15266	IN	Data Raw: d2 82 41 bb f0 3e 15 98 68 9f ca 77 f2 34 3b 7f b1 f8 f9 d7 ed db b8 fc 8e 90 b3 df 82 47 26 b8 b3 63 e0 8f c1 b0 14 fb 55 80 7c 77 83 a9 40 d1 05 3d 3b ed fa ba b7 fe 47 ed ff 00 da 48 3a d7 80 f6 fe 7d bf 61 df fd 4f 80 b1 f2 3f af 81 02 47 c0 1d f5 fe 9d ff 00 f6 37 fe db ff 00 d3 5e 02 c9 ef fe f7 e1 3a a3 f7 0a ef c1 f7 03 f7 34 7b fb 7c 57 c7 8e 8a 0f 6d 81 f2 7f ed fb 7c 13 bf f6 d0 1f 81 be c3 c1 d5 4f 3d c7 15 da fb fe 09 1f f2 fc 91 e0 3d 3d bd 5f bd f7 e3 bd 70 3b f1 ed ef 55 cd 80 e4 60 7e 37 b2 3f 27 a8 1d 7f 82 09 de bf 20 7e 40 d1 d7 b4 d4 c3 b1 fd ec fe dc f3 bb fe 5f 15 54 54 ea c3 dc 9f e7 cf c7 82 8a 88 76 75 df b6 8f c0 d1 3a ff 00 04 92 3e 77 af cf cf 82 b5 d8 bf 80 6f 9f fd 83 df 8e c2 c8 f6 bf 07 06 f9 f9 f0 02 db 2d 92 0a 49 1f 3f Data Ascii: A>hw4;G&cU\|w@=;GH:}aO?G7^:4{\|Wm\|O===_p;U`~7?' ~@_TTvu:>wo-I?
2024-01-15 14:03:07 UTC	15266	IN	Data Raw: d3 e9 a7 65 44 a9 1f 04 10 37 d8 7f 81 db 60 1e fd f4 34 81 a0 7c 10 94 65 36 2c d3 0d a0 0e ff 00 24 d8 17 fb d8 16 2b b0 3e 13 62 37 1a a1 b5 8f 6e 6f e2 c1 3c 76 24 77 fc f7 bf 03 3a b6 7a da 49 0b 09 4a 12 da 81 52 bb 91 dc a9 23 41 20 77 03 5a 2a df 73 b5 6c 29 b4 90 c6 db 05 0a 0a 03 f3 5d c8 24 f2 3e 45 92 37 db 1a 5e 14 0f 04 51 21 43 b4 a8 24 96 1b 40 3c f6 a6 3d cf 17 c0 35 c1 f9 b2 1a 60 39 29 c5 18 a8 71 5d 4a 00 25 25 4e 2f 7f db d2 94 03 d4 ad f7 f8 df e4 e8 0f 0d 5f 0a 37 2e 54 00 a0 9a 16 38 1e df 93 c5 11 bb 6d 1f 9b 2a a7 39 2b 08 0b 29 00 80 48 ba 17 67 d5 b9 9b 92 36 9e c0 81 5d 89 bb 61 d5 8e da 20 21 c5 47 7e 3f 7d 15 4b 64 a5 0a 46 c1 5f 65 04 95 28 7b 89 4a 42 57 af 80 7d a3 c2 4d 83 c7 a4 15 24 8e f7 5f 8b 34 4d 8f 7f df 8b bd a4 Data Ascii: eD7`4\|e6,$+>b7no<v$w:zIJR#A wZsl)]$>E7^Q!C$@<=5`9)q]J%%N/_7.T8m9+)Hg6]a !G~?}KdF_e({JBW}M$_4M
2024-01-15 14:03:07 UTC	16383	IN	Data Raw: bf 23 df c7 a8 2d 6f f3 d8 ef 47 b7 e3 5f 8e ff 00 f7 04 10 75 af fa b8 b3 0e 76 8a fc 93 d8 fc 7a 8f ee 38 3d cf 7e fe 07 fe bf eb fe bd bf aa 9b 2d 32 e0 f6 a4 fe 09 f7 0e 90 7f 1a f9 1d 47 5f e9 3a f8 ea 4f 6e a2 79 8c 7f e1 af 60 6f f3 7d 89 e7 bf b5 f7 e0 fa 7c 00 2d da b9 e7 e2 bd c7 cf f4 ba ae 7b 70 58 07 a3 36 09 d9 ee 7f 63 dc 76 1d f7 ad 7c 8d fc 7e 9e dd 5a fd 26 0f 43 9a f8 ef 55 7c 76 08 7f f9 af e9 e0 7d 81 f6 3d b9 ef db fe 75 fb f8 4e 71 94 0d 9d 80 46 bf 56 ba 87 4f e7 e7 be be 7f 07 be bf 1a 51 83 12 01 d8 48 ed dc 71 c9 e2 f8 3f 70 3c d2 9d bd b7 0b 0d df f5 fe bf bf c7 ff 00 0b db c1 47 19 41 de fb 9e db ec 01 d6 ff 00 7d 9d 01 fe c3 fc 81 ad 05 43 b1 f6 f8 3c d5 f3 c9 ff 00 2f 6f e9 da 80 16 7c 06 d5 3c 55 7b 58 1c df fe ef 6a 1c ff Data Ascii: #-oG_uvz8=~-2G_:Ony`o}\|-{pX6cv\|~Z&CU\|v}=uNqFVOQHq?p<GA}C</o\|<U{Xj
2024-01-15 14:03:07 UTC	26	IN	Data Raw: bf 48 2a d8 48 1b 1b 3d fb 82 08 3d 23 c2 4b c4 7c f7 e4 9a ee 4f ee 07 c9 b3 Data Ascii: H*H==#K\|O
2024-01-15 14:03:07 UTC	16383	IN	Data Raw: 64 76 e4 8f 77 79 48 0e 66 dd a5 46 fe 3d 81 ec 68 f0 06 e2 41 be 2a f9 37 47 c0 71 c9 2d 15 68 9d 2c 6d 27 a5 20 9d ec 80 41 2a 51 3b 04 7e a0 77 ad 1d 2c a5 b3 31 fe 10 79 fd 85 f7 a0 39 fe 2f fd 3f 93 55 63 28 02 40 0b 28 f4 d8 20 db 00 38 04 86 e1 40 e6 c2 91 7c 76 e0 9e 88 52 c9 1e 9f 48 41 25 4a 0a 0a 48 07 e7 7b 20 a7 67 a5 3d f7 bf 84 92 07 57 84 c9 06 b9 ec 18 1a 1f 9f da ee be 0f 3d f9 bf 49 77 2a 80 37 6e 24 55 14 21 88 1d bd 9b b0 dc d6 0d fc 81 c0 f0 f3 c3 4b b0 d0 b9 9b f4 9a 65 f0 52 f0 57 bf d4 4e 95 a1 f8 4f 6d 1f df 5f 83 bd a5 e6 23 ec 56 bb ae cd ed f2 b7 54 38 3c 7f 94 d1 a2 56 fd 30 9a d0 12 4d 10 52 77 80 19 80 f6 53 db e0 93 60 82 45 8e 6e 80 1e 0b d8 59 0b 5b 89 52 3a db 05 d7 d5 df a1 2d 24 24 03 db 5a 48 ef f2 3d a8 49 ea 50 d2 Data Ascii: dvwyHfF=hA7Gq-h,m' AQ;~w,1y9/?Uc(@( 8@\|vRHA%JH{ g=W=Iw*7n$U!KeRWNOm_#VT8<V0MRwS`EnY[R:-$$ZH=IP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.8	49993	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:07 UTC	713	OUT	GET /en/who-we-are/ HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:07 UTC	185	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Cache-Control: private Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 14:03:07 GMT Connection: close Content-Length: 60173
2024-01-15 14:03:07 UTC	5697	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 20 20 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 79 6e 65 73 67 79 2e 63 6f 6d 2f 77 68 6f 2d 77 65 2d 61 72 65 2f 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c Data Ascii: <!doctype html><html lang="en"><head> <title> </title> <meta name="description" content=""> <link rel="alternate" hreflang="x-default" href="https://www.synesgy.com/who-we-are/"> <link rel="alternate" hrefl
2024-01-15 14:03:08 UTC	8760	IN	Data Raw: 2d 66 6c 65 78 20 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 74 61 72 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 70 72 2d 31 22 3e 43 6c 6f 73 65 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 26 74 69 Data Ascii: -flex align-self-start"> <span class="close-button pr-1">Close</span> <span class="close-icon" aria-hidden="true">&ti
2024-01-15 14:03:08 UTC	4380	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 74 72 65 63 68 65 64 2d 6c 69 6e 6b 22 3e 52 6f 6d 61 6e 69 61 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 63 6f 75 Data Ascii: class="streched-link">Romania</a> </li> <li class="single-cou
2024-01-15 14:03:08 UTC	16383	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 63 6f 75 6e 74 72 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </li> <li class="single-country">
2024-01-15 14:03:08 UTC	26	IN	Data Raw: 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 20 73 75 62 Data Ascii: <li class="nav-item sub
2024-01-15 14:03:08 UTC	6370	IN	Data Raw: 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2f 77 68 6f 2d 77 65 2d 61 72 65 2f 22 3e 57 68 6f 20 77 65 20 61 72 65 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 2d 62 74 6e 22 3e 53 75 62 6d 65 6e 75 3c 2f 62 75 74 74 6f 6e 3e 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c Data Ascii: menu-toggler"> <a class="nav-link" href="/en/who-we-are/">Who we are</a> ...<button class="submenu-toggler-btn">Submenu</button>--> <ul
2024-01-15 14:03:08 UTC	16383	IN	Data Raw: 61 73 73 3d 22 73 69 6e 67 6c 65 2d 63 6f 75 6e 74 72 79 20 6d 79 2d 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 66 6c 61 67 22 20 73 72 63 3d 22 2f 6d 65 64 69 61 2f 73 71 6b 6f 74 6f 31 78 2f 67 72 65 65 63 65 2d 33 33 2d 33 33 78 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 Data Ascii: ass="single-country my-2"> <img class="mobile-flag" src="/media/sqkoto1x/greece-33-33x.png" /> <a href="https
2024-01-15 14:03:08 UTC	26	IN	Data Raw: 63 74 69 6f 6e 20 3d 3d 20 27 64 6f 77 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 Data Ascii: ction == 'down') {
2024-01-15 14:03:08 UTC	2148	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 6c 69 73 74 61 5b 69 5d 29 2e 61 64 64 43 6c 61 73 73 28 27 76 69 73 69 62 6c 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 3a 20 27 39 35 25 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 24 28 27 2e 70 61 72 65 6e 74 27 29 2e 6f 6e 28 27 6d 6f 75 73 65 65 6e 74 65 72 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: $(lista[i]).addClass('visible'); } }, { offset: '95%' }); } </script> <script> $('.parent').on('mouseenter', function () {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.8	49992	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:08 UTC	701	OUT	GET /media/dyvpywmz/cribis_22-05_visualhero_chisiamo.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/who-we-are/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:08 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:07 GMT Accept-Ranges: bytes ETag: "1de7d17d4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:15 GMT Content-Length: 3947829
2024-01-15 14:03:08 UTC	16162	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 03 e8 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 04 03 01 01 01 01 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~CC@
2024-01-15 14:03:08 UTC	20	IN	Data Raw: 49 1e b6 bf fb d7 8d 79 fe bc 5d 0f 26 c0 f5 82 00 02 cd 7f Data Ascii: Iy]&
2024-01-15 14:03:08 UTC	16383	IN	Data Raw: 5e 7f ec 68 64 58 6f e7 c0 17 bd 66 58 00 07 c1 23 1e 23 03 8f 9e 31 87 f8 fc b8 1c f0 06 3d 6b 5b d1 f0 7f eb b0 48 de eb e2 f5 ba d9 36 47 ad 80 3f 3f 91 56 28 7f f4 aa fe 68 5f fa aa bd 64 4e 00 2c 48 5d 57 91 82 df 18 e3 83 8c 60 8e 57 9f c3 7c 9f 5e b3 ba a3 bf 1f 02 f2 d9 fc df ce cf fb 0a f5 83 46 c9 25 74 49 ff 00 7f 8f 83 ff 00 c0 1b fe 81 ed d6 01 27 ef 03 8d 70 07 ce 4f c3 1e 40 03 86 3f 04 e0 63 39 21 b6 27 43 b4 d5 de ff 00 ab d8 1e 76 74 3f 1b 27 d7 85 50 22 df 57 66 c1 aa d6 c5 2e fc f8 af 81 42 87 ac c2 ee c0 8d 7c 49 6d 70 3c 8f 39 d9 be 0e 06 4f c3 7c 78 a8 23 1e b5 27 11 64 93 74 3e 75 74 46 ae fc 8f 17 7b b2 7c 83 e2 8a d8 82 b5 89 ce c6 bb be 4d 51 dd 9f 14 3e 3c 83 93 63 b0 2a 3c 4e 48 cf 27 82 08 e0 81 f0 0f 1c 72 7f f6 02 15 72 2f Data Ascii: ^hdXofX##1=k[H6G??V(h_dN,H]W`W\|^F%tI'pO@?c9!'Cvt?'P"Wf.B\|Imp<9O\|x#'dt>utF{\|MQ><c*<NH'rr/
2024-01-15 14:03:08 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-01-15 14:03:08 UTC	9036	IN	Data Raw: 04 81 f1 f7 8f c0 c8 76 de 81 3a 24 11 76 74 7e d3 eb 21 f3 f0 49 fc f2 3c 87 96 70 40 fc 1e 0f 2d c7 3f 27 1e b5 36 6f 60 0f 8d 78 da d5 f8 ff 00 7a d7 f6 7f 12 da 01 db b5 b0 7c 9b fe 87 c8 14 76 4f f2 37 a1 a0 31 e0 0e 72 70 bf c7 c8 fc 7f 1c af f6 f3 ff 00 c2 f5 9a 3b aa 16 7e 6c 6f f3 74 7c fc e9 bf af 3a c1 2a c6 ec d5 af 9a f3 7d c0 ff 00 b7 f4 3f df e3 d7 d8 3a b0 20 90 01 6c f1 9c 13 c6 3e 71 9f 93 c8 c9 07 3f 03 18 be eb f1 74 3f 3b 17 63 e2 fe 36 46 ac 00 48 3a d7 60 0a b3 b2 ca 05 ec 78 04 9f ec 01 63 43 76 00 5a 03 e0 d9 00 92 72 0b 05 d7 8d b8 fc ff 00 1a fe 01 cf f9 38 3e b2 46 f5 f3 57 7f ee 7e 2b e7 f3 ad dd 7e 4f 81 26 99 b1 04 9f 83 f8 d6 aa 94 7c 1e ef 1b 06 fc fa c7 8e 18 1c 1f 8c 90 3e 7f 19 c6 b8 c1 e7 fc ff 00 23 92 d9 df cf 8a 37 Data Ascii: v:$vt~!I<p@-?'6o`xz\|vO71rp;~lot\|:*}?: l>q?t?;c6FH:`xcCvZr8>FW~+~O&\|>#7
2024-01-15 14:03:08 UTC	11444	IN	Data Raw: f1 e2 d4 6c 60 a3 29 3f 69 00 db 59 f8 dd 91 44 06 23 c9 a0 2c eb 15 07 d7 ca 76 c0 e0 38 c9 5f 80 30 40 27 83 ae 08 e5 79 c8 27 91 ce 07 ac 9d 5f e2 a8 e8 9f fb 7c 51 df 81 ff 00 53 bf 5e 06 fb 72 0c 48 04 06 ed 05 8e 57 42 ef 40 7c 95 fe b6 46 3e fe 32 4f 03 2c 47 1c 60 15 c0 3f f1 3c fc 7c 70 30 73 b7 ac 6e fc 7c 55 df fd 6e bf 23 63 fd ab cf c6 40 20 7d df 82 c3 fe 82 e8 f9 27 e2 c0 5f 04 80 01 f5 88 23 e3 18 3c 10 c0 78 85 fe 3f 9d 86 7f 9e 30 46 0f 05 73 46 ae fe 76 3c 92 4d 6f fd bf 3a fc 78 02 bd 67 b7 c7 cb 9d 10 2e 97 e1 68 d0 ba c6 b7 a3 f2 6c 1f 5f 67 e3 92 41 24 e3 1c 90 e7 8e 47 07 5e 31 9c 90 70 0e 01 27 d6 7c d8 a0 75 ff 00 4d 79 ff 00 e1 77 f0 7f ed ea 23 44 0a 24 ef c9 aa 23 7f 8f 1f 14 2b c0 03 c7 ac 70 c4 16 ce a0 67 81 f9 f9 e4 fc 82 Data Ascii: l`)?iYD#,v8_0@'y'_\|QS^rHWB@\|F>2O,G`?<\|p0sn\|Un#c@ }'_#<x?0FsFv<Mo:xg.hl_gA$G^1p'\|uMyw#D$#+pg
2024-01-15 14:03:08 UTC	15266	IN	Data Raw: 14 75 54 da 9a ad 49 1c f1 f1 90 3e 06 33 f1 90 47 e0 71 82 0e 78 24 8f 5b 88 5b 7a a3 77 56 77 7a de cd fc 9f 24 7f b1 17 ea 36 e6 f8 d0 15 a2 6e c6 87 da 3e df c8 06 c8 fc 9b b2 be b2 4a 98 c8 f9 07 23 3e 47 91 90 32 06 73 f3 ce 06 48 fc 96 1c 6b a9 8d 86 cd d7 fb 50 f9 f2 7f aa fe bc 81 fe fb 47 ca 8a 52 01 a1 7f c8 ff 00 b9 ba 35 f2 76 0e 3b af 9d 12 a7 7c 83 f1 9c 63 23 fc 64 90 39 1c 9c 9f e3 1c 0f 2c e7 d4 75 47 e4 8b bf fb e8 5f e7 1d 1d ff 00 bf f1 f4 57 ba bd d4 6e 81 35 f1 af 8f 80 4e be e1 63 e3 76 7d 63 dc 0b 9c 90 4a 80 4f f0 41 c7 2a 32 70 72 31 fd d8 ff 00 d9 83 92 a5 bc 5e f5 af fe 3f ee 28 fc f8 f8 bb 3e bc b2 01 ee 0b 1a a2 76 b4 6d 3f de ea c3 7e 77 44 ef 43 30 40 1c 1c 8c 92 4e 7e 3e e2 30 09 04 64 9c 60 0f 9e 46 38 1e b1 5e 3f ed bf Data Ascii: uTI>3Gqx$[[zwVwz$6n>J#>G2sHkPGR5v;\|c#d9,uG_Wn5Ncv}cJOA*2pr1^?(>vm?~wDC0@N~>0d`F8^?
2024-01-15 14:03:08 UTC	16383	IN	Data Raw: 0c 09 f9 d1 c8 03 1c 61 9b d2 78 9b db 2e a6 eb f0 45 59 26 f5 75 75 b2 2c 6c f8 ab a5 e9 1c be 24 7c ae 2a 14 96 8c 6e a5 98 63 ee b3 58 b5 45 0f b4 15 a0 c5 ac 6f 7a 04 da b2 8e 8a b4 43 5f 2e ee a5 01 12 b0 c6 ad 91 90 f8 0c a7 20 82 01 5d 86 49 d8 f1 b6 c3 48 5b cd 51 04 b8 66 04 9f e2 6a e8 1b 51 e7 7e 0d 1b 50 e6 53 04 c8 a8 31 62 96 cd 80 ac 40 d3 1b c4 10 58 d0 07 21 7f 9f 0c d9 57 67 a6 9a 92 68 b3 d8 59 0a e7 23 43 22 e3 28 ea c3 ed 6d b2 a7 80 72 38 c8 63 ae 6f 3c 4b 02 40 62 41 27 22 49 04 55 62 4b 13 60 d5 9a c6 83 6c 14 17 9d 2b 98 88 1d ec 18 1c b6 14 32 ef 5e 42 83 e0 9e e1 66 88 dd fa 08 86 b1 ed 15 8a 69 67 75 48 59 43 e5 81 59 3b 47 e1 89 7f 12 a7 27 20 0c 96 f9 ca 9d 87 9b 91 3c 3c 82 50 ba 28 53 a4 ee 15 62 db 1b 05 4d 0d ad 83 b3 61 Data Ascii: ax.EY&uu,l$\|*ncXEozC_. ]IH[QfjQ~PS1b@X!WghY#C"(mr8co<K@bA'"IUbK`l+2^BfiguHYCY;G' <<P(SbMa
2024-01-15 14:03:08 UTC	26	IN	Data Raw: f9 b5 d0 46 08 5a 3b 36 49 ad 8f cf c9 f2 0d ee aa fc 03 af 5e e8 46 7e 35 50 Data Ascii: FZ;6I^F~5P
2024-01-15 14:03:08 UTC	16383	IN	Data Raw: 07 1f 2d a9 e4 f2 4e 1b 24 11 8c 01 f8 1f 23 d7 af e6 cd 9d 8b 34 05 83 43 58 d8 34 46 ee ff 00 eb bc d5 6a 85 0d 1f c1 aa b2 3c d1 b3 60 6b fe b5 eb 16 27 50 98 19 3f 76 7e 4e 49 00 80 4e b8 c7 27 80 58 8c 70 79 6d 80 ee c8 f8 f1 f1 ba f8 b1 bb 24 0f 37 57 fd d0 d5 8f 68 52 b4 c4 6c 1d 91 67 46 be 3e 3e 56 f5 fe fe be 0a d9 5e 49 c3 16 6f c6 41 5f c1 39 e4 11 93 f2 48 fe 33 8f 5e 26 af 40 0a 00 13 67 77 f3 5e 05 6b c0 02 fc 1f 27 c0 1b 51 56 14 e4 6c d6 80 d0 00 78 37 47 ee 36 3e 4f ac 4a f1 20 c8 e0 85 c0 e4 e3 e7 23 e3 f9 ff 00 3f fb 3d 7b e5 4d 7c 5e fc 79 a0 2b 7b f8 f8 f2 7c eb d6 08 1d eb 47 cf 81 e2 9b cf c8 f0 2f 79 6f 44 05 aa f5 e9 19 c9 c9 c0 04 29 cf 24 95 d7 91 f9 e0 8c 7f 81 8c 31 39 5c 0f c5 8f ec 79 f9 bb ff 00 7b 02 fc 57 91 5e 0f 9a c8 Data Ascii: -N$#4CX4Fj<`k'P?v~NIN'Xpym$7WhRlgF>>V^IoA_9H3^&@gw^k'QVlx7G6>OJ #?={M\|^y+{\|G/yoD)$19\y{W^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.8	49994	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:08 UTC	706	OUT	GET /media/qssfso0o/cribis_22-05_visualcard02-supplychain.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/who-we-are/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:09 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:03:08 GMT Accept-Ranges: bytes ETag: "49ba72f9160d81:0" Connection: close Last-Modified: Thu, 05 May 2022 15:02:48 GMT Content-Length: 880026
2024-01-15 14:03:09 UTC	4181	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 18 00 00 02 ec 08 06 00 00 00 a1 87 ce 1f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 18 a0 03 00 04 00 00 00 01 00 00 02 ec 00 00 00 00 34 55 6b 82 00 00 40 00 49 44 41 54 78 01 9c bd 4b af 75 49 9a 98 b5 f7 b9 7d 97 fc 32 b3 ab b2 ba ca a4 64 21 d1 1e 32 eb 3f d0 9e 30 6d 1b d1 6a 06 58 48 0c 2d 33 40 6d 4f db 6e c4 0c 98 21 e6 88 91 55 86 86 21 6d 21 37 42 06 31 40 08 cb 46 46 76 23 21 41 ab 6f 55 59 55 99 df e5 dc 79 9e e7 8d d8 e7 7c 59 d5 16 b0 ce de 6b c5 e5 bd c7 1b 11 ef 8a 15 6b 9f e3 e1 ff e7 f1 0f ff d6 6f fe ca d9 ed c3 af 1f 8e 0f bf 7a 7c 3c Data Ascii: PNGIHDRgAMAa8eXIfMM*i4Uk@IDATxKuI}2d!2?0mjXH-3@mOn!U!m!7B1@FFv#!AoUYUy\|Ykkoz\|<
2024-01-15 14:03:09 UTC	11680	IN	Data Raw: 74 ae 9b 7e 78 02 ed ae 43 c5 ae 0b c1 cc 46 5c c9 7c fd 04 24 65 40 d0 d3 22 cf 0f 38 4f 30 cc 3d a2 3e 81 9a 3f 79 be 68 cf 8e cd 68 43 9f 34 8d 66 39 9d 19 9a fa 4c 73 0c d8 27 f9 49 0f 05 ea 53 fa 89 d7 c8 30 79 19 6a aa 27 3b 6f 7e 12 fb b6 a2 42 cf 81 7a d4 f3 7d 06 ae ae 5b ca 5d 6d 7b 9c 9a a2 8e 48 4d 5d 56 9b 40 c0 8f 00 f3 49 8f e8 7e 8b bc ac 36 3b af 1d c9 77 e2 b4 4b 57 15 f4 63 6c f6 f8 c3 ef fe e0 ec df fe 1f 7f f8 c3 f7 1f 01 59 f3 ed 02 0c 79 fc fb ff e6 af fd 5d 2a 7e 43 41 8d 27 b8 f7 3e 81 89 e0 c4 c9 27 c5 ca 03 e1 f5 dc c6 00 de bb 04 eb 47 b9 11 bc d5 0b ca b2 81 d0 7d 56 01 97 b9 1b c7 7c 27 ed 64 09 3d ea 3c ee 41 cc e8 a4 2d 12 cc 61 a0 01 22 1c 4d 2f fc ae 15 68 21 eb 7d a4 27 4b 19 30 0d 8c 27 cf 25 7f 0e 3e 93 dd 9e d0 4f 8c Data Ascii: t~xCF\\|$e@"8O0=>?yhhC4f9Ls'IS0yj';o~Bz}[]m{HM]V@I~6;wKWclYy]*~CA'>'G}V\|'d=<A-a"M/h!}'K0'%>O
2024-01-15 14:03:09 UTC	5840	IN	Data Raw: 08 83 f7 6b 66 6c 5d d8 55 2a 9f fd 3a 88 be d3 6e a4 7d e4 e1 db 2e 4d 70 f0 33 f8 73 49 d7 9f e3 77 23 e3 4c ac 72 b5 1f 48 9f b6 c7 46 78 51 93 a4 fb 3c 8c 2d 2e f0 09 27 0f fb eb 43 13 19 76 53 0e fc ae 37 42 f4 19 ec 39 9b 47 27 90 90 76 3e 85 6d 07 4f 1e 0e c0 32 a2 6d 60 d8 46 70 fd 05 9b 1b 00 f8 0c 3f fd 92 c1 60 59 8d 95 46 1f 02 5f 9a fe d9 76 c8 7f dd 40 80 8d 00 91 17 68 f9 2b 17 95 4a 27 fb 65 56 03 c6 de 2b 1d 75 b1 4b 18 f1 14 50 59 de 1f e5 d8 46 c4 91 44 20 e8 62 14 fb 8d 1b 45 af 68 77 1f cf c9 5a e9 b4 ed f8 16 ed 4e 1b 79 e3 11 16 c2 d8 65 3c 1c 1f 1e 09 22 9d 2c 94 c7 3d 6c 57 dc 21 bb a9 d8 d5 a9 57 6c fe 78 01 f0 57 f8 df 57 4c 5a df d0 96 b6 db 2d 3e e7 78 a9 ac dd 8c 49 4b be e8 0e 19 de 9c 43 2e 64 73 5c f3 71 96 01 9b 6f 84 1c Data Ascii: kfl]U*:n}.Mp3sIw#LrHFxQ<-.'CvS7B9G'v>mO2m`Fp?`YF_v@h+J'eV+uKPYFD bEhwZNye<",=lW!WlxWWLZ->xIKC.ds\qo
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 60 44 83 5c 57 d1 7c 9b ca d5 8e 7e 76 1c db bf bb 3d 67 82 e6 71 1e b8 ee ed 22 ce 5b fc 08 09 29 bb b8 bc 81 2e ed a7 4f 90 77 c8 71 a3 e3 2b 1e c1 1a 68 d9 8e fe 4e ca 3b 2a 5a 94 b4 3f a3 f1 ad fe a2 ec a4 b5 89 ff ba c1 37 96 0c 70 7f cc 0f b9 fc 84 40 a3 8d af 8c 55 ad 00 a1 93 13 d5 67 b4 95 2b 3f 9f a0 cc bf c4 3f ad fb f2 f3 4b 56 0f d0 13 dc 9f 31 6f 38 d4 68 db 1f c9 93 7e 6b 4b cd 9a 2c 37 23 da 1d be f6 bd e6 10 b8 2b f4 39 32 69 87 1e 0d 69 2a 72 4a a6 47 6b 21 6d ea 95 ed 5d d9 5c fb 6a 3f 7d e2 3d b8 1f 30 ce 8f c0 b3 3f e3 21 7d 5d f9 1b 5f ab b9 d2 d1 3b f5 a8 81 37 75 fa a7 38 1c 5c 3d fc 41 b9 ac e2 89 c3 fa a9 14 17 fe 1a 9d d4 5e 79 33 dd 4a 06 c5 75 29 fd 11 c0 45 0e 5a 56 3c e5 cb e6 58 d2 95 16 47 84 37 1d 33 d8 a4 8a 67 f5 8b a2 Data Ascii: `D\W\|~v=gq"[).Owq+hN;Z?7p@Ug+??KV1o8h~kK,7#+92iirJGk!m]\j?}=0?!}]_;7u8\=A^y3Ju)EZV<XG73g
2024-01-15 14:03:09 UTC	26	IN	Data Raw: be 76 b5 a9 4d 34 dc 0e 72 74 ad 01 af f9 70 2b e5 f7 e7 0a 41 68 b3 f3 87 cf Data Ascii: vM4rtp+Ah
2024-01-15 14:03:09 UTC	3473	IN	Data Raw: 60 4f 67 f1 bb 4e 51 b9 68 b5 0d 60 9f f8 da 05 26 58 b6 68 a0 d0 fa 7d 1d 43 67 1c db d9 c1 b6 2b 6d 04 cd 34 64 a3 f9 ba 0a fa 00 e8 23 33 e1 6b 28 77 a8 e7 ae 0f bc c8 06 7b 57 dd d5 2d 60 25 7b 84 af ba 6f 51 64 42 28 86 2b b8 10 0d 87 ae a2 2e 3f 87 df bf cd 58 13 43 f3 c1 d3 73 a7 10 e2 53 32 ae ba cf 37 83 1c 38 7d c9 8c 61 7e 3f f8 17 ef f8 60 0a c0 12 53 ed 9e 17 e8 cd 06 a3 57 7b d5 7d cf 2a 6b 2b 49 a9 70 25 9c 36 e8 6f bf f5 89 61 a3 f7 f8 8d a1 f0 2f 01 c7 87 c5 35 dd 1b 5e 70 51 55 10 da c2 5e f2 7d fc b9 c4 23 9c d6 73 84 cb 22 ef 6f 02 4f 23 fa fc b6 ae ae ef bc ef f1 cf f7 95 f3 9b dd eb 6f 4f 33 64 40 f2 ab ab f9 f0 79 3c 72 2f 2c 1a 87 b7 70 f3 73 3e 67 6d 85 77 36 f8 55 51 53 d1 bf 27 eb 97 af 5e 22 95 1e d2 d3 37 2b 1b 92 4b f0 37 c0 Data Ascii: `OgNQh`&Xh}Cg+m4d#3k(w{W-`%{oQdB(+.?XCsS278}a~?`SW{}*k+Ip%6oa/5^pQU^}#s"oO#oO3d@y<r/,ps>gmw6UQS'^"7+K7
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 2d 61 a4 8b fe c9 4d 4e 0b 66 f7 d8 1c 5b e2 db 66 e0 0e bf 5b 17 ef 1b 0c be 19 1c 94 e9 28 e4 31 c2 18 3c d2 df 7e 91 14 5c f5 f4 6d b1 ed f7 df d2 87 b5 2a 5e 35 5f 27 39 5f d0 b6 c6 0c 69 a0 0c d6 a0 34 9b 35 d0 2d e9 62 4f 75 fe c8 d9 f9 f8 de 4c 46 c0 bb f9 7c fa e3 f7 16 54 be ff a1 47 26 e2 2f ca 33 c1 68 a4 ef fd 28 1d 7b b4 2d 79 93 0c a0 af d7 e1 3f 74 4b 6c b6 4f 76 2a 27 d6 92 93 e8 36 00 f7 02 96 78 00 d0 67 c7 d1 70 cc 8e f0 2c 70 d4 b0 c3 8c 86 d0 5e 36 c5 ce ef f7 12 ac 8a 9c 80 6f db 55 64 ca d8 13 4c f0 a4 33 91 66 bf 1b 12 7e 45 92 32 76 91 1c 8c 9f d0 7f 4b 8e 79 82 37 58 99 26 4d 47 ab 0c ee e0 d1 69 c6 85 a2 bb a2 d9 ed 92 ad a6 ac 3a 63 9b 91 f8 ad 17 f0 fc d7 92 8b ff de 13 af bf ff de 6d 8d ec ff 7b 7a 32 3b e1 f5 fb f7 fe 0a af Data Ascii: -aMNf[f[(1<~\m^5_'9_i45-bOuLF\|TG&/3h({-y?tKlOv'6xgp,p^6oUdL3f~E2vKy7X&MGi:cm{z2;
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 74 46 43 df c0 50 67 73 8c 16 f3 a2 81 b5 66 b2 40 e6 1a 28 b0 58 02 b3 2a 97 Data Ascii: tFCPgsf@(X*
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 4c 5f fa 22 e3 26 38 2e a3 e0 77 b2 cd 04 41 5e d3 ae 5b b7 52 7a b2 d4 73 9f 2b f8 70 be 7a 3f 7a 3e 5f 8e c0 1a c4 83 4f 5d 46 fb 55 81 c1 26 54 d9 30 9e 76 ff 88 4e f1 13 5f 7d 0e fd f9 ed 5f 9b a9 28 b8 f0 b1 b9 7a 0a 01 c0 f3 53 b6 79 d3 fd 6e 76 ff b3 19 0b 41 c4 9b ff 90 98 26 67 39 67 b0 fd ac de 7e 2e 10 a9 70 b3 47 cf 0b 46 e2 b9 e9 5f 5f bd dc 0c 94 19 23 b1 ea 06 bf 78 c2 97 c0 aa 2b b3 c7 a6 75 1f 7e ee fe 78 83 94 2b b6 67 b3 48 a9 ef 40 85 67 89 d3 90 04 6f f4 36 27 dc a1 7c aa be 2a 9c b6 53 05 76 1a 8f a7 79 2c 7f 76 0f ff 8a 21 05 92 9e f9 d4 02 3e 79 06 c1 8e e1 3b f7 84 e5 c1 91 8c 68 20 2e ab 3a dc 61 bc 74 74 5e cd ce 2b 8c b6 32 b3 5b b3 72 59 6b 0b 77 e5 d5 af ca 8d 8e 6f 83 b1 b3 1f 3c 94 e9 4b 1d b4 e4 85 4f 37 b2 ce bc ca bb 2d Data Ascii: L_"&8.wA^[Rzs+pz?z>_O]FU&T0vN_}_(zSynvA&g9g~.pGF__#x+u~x+gH@go6'\|*Svy,v!>y;h .:att^+2[rYkwo<KO7-
2024-01-15 14:03:09 UTC	26	IN	Data Raw: ac f4 48 91 8d e2 85 7e e9 b0 16 73 e9 36 bf 5d 10 71 e5 0d 0b fb c1 9c 41 c1 Data Ascii: H~s6]qA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.8	49995	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:08 UTC	713	OUT	GET /media/ipddiko2/cribis_22-05_visualcard03-sostenibilit%C3%A0.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/who-we-are/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:09 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:08 GMT Accept-Ranges: bytes ETag: "95bc573de65d81:0" Connection: close Last-Modified: Thu, 12 May 2022 08:55:22 GMT Content-Length: 814048
2024-01-15 14:03:09 UTC	2720	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 cc a0 03 00 04 00 00 00 01 00 00 03 e8 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 03 e8 02 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~}!1AQa"q2#B
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: ae ca ed 6d 7d ad a3 5a 2e 64 d3 8c db 7f 87 d3 9c f2 39 ed 8e b8 04 64 16 21 77 15 e0 9c 9a 2d 65 f3 fc f6 f3 eb e9 d0 d6 0a ee ef d1 75 bf 7b fa 5f f4 b3 b2 71 b7 1c 58 50 00 52 5b 6e 38 fb bc e3 a1 63 82 41 c7 50 01 eb d7 35 9b 7a ea e4 ac ba 3d fa b7 77 bb b7 ab fc a3 a2 76 b2 5a a5 75 6e 5b 6b a7 5e 6d de fe 7b 6b 6f 7a d2 26 14 75 1d 71 d4 91 93 80 41 5c 00 77 65 7a 7b 95 38 35 9b d6 ee c9 77 ed a6 8a ff 00 d7 91 b4 15 95 ec d3 57 5a f6 f4 f4 fc bb 92 79 6a 3a 20 e4 73 82 32 06 33 8c 76 c1 fe 2e 3a 12 3e e9 0c af 7d 22 ff 00 bc dd f4 4b 77 ae 9b a5 6d fd 53 d0 be da 7f c1 fe b6 d2 df ac a7 58 b0 32 78 0a 31 8d b8 3d 33 dc e7 03 00 e4 2b 7d ec 7a d6 52 77 77 5a 25 d3 cf ba de dd 3f 25 64 92 2e 37 bf f9 eb 7f 3e 9f e1 ff 00 3d 50 a0 03 80 33 8e a4 fa Data Ascii: m}Z.d9d!w-eu{_qXPR[n8cAP5z=wvZun[k^m{koz&uqA\wez{85wWZyj: s23v.:>}"KwmSX2x1=3+}zRwwZ%?%d.7>=P3
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 38 eb 82 2b 2b ee f4 77 fe ae ad a7 e3 f2 96 bc b5 05 6d 6f 6e 6d 52 d5 da fa Data Ascii: 8++wmonmR
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 5d 75 bb f4 5b 75 b2 51 78 5c e0 0f 99 b0 36 b1 ef 8e c4 0d b8 e9 8e 0a 8e 80 ef 27 e5 4d d9 5d ff 00 5f d5 fb fd c5 c5 5d fd f7 fc 93 5b 5f 5e ba f7 69 59 32 45 8b 25 01 25 81 23 24 00 06 49 c0 c8 52 06 57 ee 9c fa fc c0 91 96 87 34 93 ef ad af f6 bb 5b b7 ad fb ed 64 55 ad 66 ef d7 e7 7b 5e f7 ba d5 f6 6b bd f7 91 6a 28 b1 c3 03 f2 9c 02 31 8e 57 23 19 38 23 9c ed c8 d8 3e 5c 9c 82 b3 29 5d 59 3d 1e fa 5b 4e 9f 8f 9f 6d ee 69 4a 37 6e 5b da fd 2f 6b 76 7d ad f8 eb 77 76 a3 66 34 23 81 86 e3 3b b9 c7 ca 70 54 e7 8e 4f 42 3a 63 b8 39 5c a4 f4 ea ae fa 2b df a7 7f 3f 3f 44 76 d3 e6 6d 69 a4 76 93 d1 24 ba 7c df 62 ea ae 38 c6 13 04 b1 20 0e 80 76 1d b1 cf 05 b9 dc 48 24 36 ec 9b bb bf f5 fd 7d de 8b 63 ba 10 b6 fb 38 bd 6e b7 7e 5d 3a de fb ef d4 7e 1b 86 Data Ascii: ]u[uQx\6'M]_][_^iY2E%%#$IRW4[dUf{^kj(1W#8#>\)]Y=[NmiJ7n[/kv}wvf4#;pTOB:c9\+??Dvmiv$\|b8 vH$6}c8n~]:~
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 1a 61 d6 7e 01 7c 6f d2 ce 18 5d 7c 26 f8 80 00 3c 92 60 f0 ce a5 76 01 5c 80 Data Ascii: a~\|o]\|&<`v\
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 5b 74 00 f1 9e 46 72 bb 6b 6a 72 e5 9c 65 05 79 5e ca f6 6b df 8c a0 bb 24 97 35 b5 d7 d7 e1 3a f0 97 fa cd 0b 6e ab 52 97 35 bf 92 71 9b bd b7 ba 8b d2 cf c9 6f cb f9 c3 ff 00 04 64 d5 9a ff 00 e0 37 c5 4d 1c 31 3f d8 1f 18 f4 db e6 5d c3 2a be 29 f0 2d 81 f9 57 e7 00 97 f0 f3 9e 06 18 af 24 63 e5 f2 70 d3 82 c5 55 8a 6f 9e 74 21 39 a7 b2 71 95 9b 4f 66 f5 57 b2 8d ac ad b9 f5 9c 53 49 a7 97 4e 38 74 97 26 22 9c b1 0a 6b f7 91 8d 6b 53 a7 c8 d2 71 e4 f7 e5 7b fb dc c9 6b cb 73 f6 a6 05 c2 8c e7 a0 1c 1c 93 df 24 64 67 ae 70 4b 74 cf 3c 2d 74 37 77 fd 7f 5b ff 00 c1 dc f9 be cb a2 fe 9e d6 b6 ba ec b7 eb 62 d0 cf 00 e4 8e 3e 51 b4 8f 4c 0e 99 fe 1f a6 79 dc 00 0c 9e d7 da eb 46 ff 00 a6 fe ff 00 4d 37 05 6b ef 6f eb e7 f2 f9 ed b9 2a 9e 4e 73 91 9f ba bc Data Ascii: [tFrkjrey^k$5:nR5qod7M1?])-W$cpUot!9qOfWSIN8t&"kkSq{ks$dgpKt<-t7w[b>QLyFM7koNs
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 7b 1f d5 dd 9a 6c 90 c6 41 c4 4e 53 e6 04 1c 21 20 e4 9e 3a 71 d0 9c e4 f3 b8 Data Ascii: {lANS! :q
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 05 ce 75 1a 8a b3 4d f2 de dd 1b 6d 59 6b 7d af a3 bb ed a1 f2 09 c6 dd 5d be 56 bb 5d 6d bd fa 2f 97 36 f1 e8 63 88 12 49 cb 64 8e a7 00 fd 78 e3 a9 00 f7 e8 36 f5 6e 4f 6b 26 94 62 b9 6d a6 9a fa 2b bf f2 e9 a5 f5 1a e6 ba 5c af 57 6d 1e ba be fb 5d bd 76 76 5d fe ce 92 29 ca 91 86 39 19 5f 9b 0a 46 38 04 63 77 4c 9f a6 39 eb 43 7a 3d 1e db db f4 bb b5 fc f6 f3 b2 72 f4 52 b2 4b b2 4b ee 2e 2a 02 e0 1c 0c e1 b1 9d fd fa 74 ce d1 f3 73 c7 27 1c 12 03 65 f2 d3 f4 db cb ef b7 a5 8b 4b 9a 56 bb b5 d2 e9 b7 77 e8 be 5d 3a 97 17 20 60 90 b9 25 41 e0 93 8f 4f bd d3 27 80 7a 71 fd d2 a5 ff 00 4f eb f4 db ee b3 3a e3 16 af 17 65 7b d9 ae 8b 7b 2b dd dd 6e bf 4d 51 28 e7 05 b7 1f 94 28 63 c8 ff 00 7b 07 18 ff 00 74 0f cb 02 a1 c9 eb 69 2d dd d5 ad a2 e8 ba 37 e6 Data Ascii: uMmYk}]V]m/6cIdx6nOk&bm+\Wm]vv])9_F8cwL9Cz=rRKK.*ts'eKVw]: `%AO'zqO:e{{+nMQ((c{ti-7
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 6e b1 d7 7d bb 2b db 4b de f6 5a 33 55 3a 2e d1 c6 76 86 25 b2 73 9c 9d a4 1e Data Ascii: n}+KZ3U:.v%s
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: bd 81 24 93 80 36 e4 54 9d 71 4d 45 26 af d1 f5 b7 f9 f6 db ee 2c 20 c9 38 6e 87 91 81 c7 38 e4 63 8c 9e 83 27 d0 e3 39 5c e7 2e 8b cf 7d 36 b3 d3 f0 dd 2d f4 7d 24 a3 24 ee ac 95 9f 4f d7 45 67 f3 6f be c5 c5 53 95 23 68 e3 8e 46 0e 7e 98 c1 e0 e7 76 73 d3 d0 be 57 f5 df 5d 1d d7 c9 da fd ec 9f 5e 97 f7 76 51 ba de d7 d3 6e b7 e9 d2 fe ab be f7 2f 47 f2 01 d8 10 09 0d f7 87 1c 15 e0 93 82 70 7a e7 db 39 ac e6 ed 76 f5 e9 64 f4 d3 5f 7b 7d 7e ed b7 7b 1b 46 c9 dd 6f 25 d6 ed bb ed 6d d2 b5 ff 00 1b 7b b7 bc 6c 00 09 c1 c8 c0 ea 30 0b f6 19 1d 73 ce 7a f5 3c e0 01 58 f3 25 d1 7a 2d 2d d7 b6 be ba 5f a4 5d 9a 96 cb 4b 2d f4 df fa ef e9 f7 13 81 db b0 c6 48 04 63 18 1e a4 63 00 0c e7 af 5c 54 f3 5d 35 7b fa ae fa df ca da df 75 a2 da e9 1a c1 3b a7 f8 df cb Data Ascii: $6TqME&, 8n8c'9\.}6-}$$OEgoS#hF~vsW]^vQn/Gpz9vd_{}~{Fo%m{l0sz<X%z--_]K-Hcc\T]5{u;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.8	49996	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:08 UTC	702	OUT	GET /media/ogwbmvul/cribis_22-05_visualcard01-network.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/who-we-are/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:09 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:03:08 GMT Accept-Ranges: bytes ETag: "fad0b1e9160d81:0" Connection: close Last-Modified: Thu, 05 May 2022 15:01:54 GMT Content-Length: 854572
2024-01-15 14:03:09 UTC	2721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 18 00 00 02 ec 08 06 00 00 00 a1 87 ce 1f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 18 a0 03 00 04 00 00 00 01 00 00 02 ec 00 00 00 00 34 55 6b 82 00 00 40 00 49 44 41 54 78 01 9c bd 4b 8f 6e 5b 76 a6 15 11 7b ef 73 c9 3c 4e 43 91 65 4b 29 41 c7 a6 81 54 3d ff 10 53 88 14 4d fa a8 e8 60 3a 74 8c 8d 90 90 b8 34 28 b9 a0 4b d1 2c 10 88 1f 42 0f 24 a4 b2 69 80 48 9c 59 18 c9 ce 93 99 e7 9c 7d 09 de e7 79 c7 98 6b c5 3e a7 d2 c6 73 47 ac 35 e7 18 ef 78 c7 65 ce 35 d7 fa be f8 22 f6 e3 c3 df b2 fd c3 7f fa d3 df 79 ff f0 fe f7 9f 9e 9f 7f ef f9 f1 f9 47 8f 1f Data Ascii: PNGIHDRgAMAa8eXIfMM*i4Uk@IDATxKn[v{s<NCeK)AT=SM`:t4(K,B$iHY}yk>sG5xe5"yG
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 88 c6 99 ef bd 8e b8 51 1f 5d 3a f4 9b cb 25 2f 43 c7 ea 0b f2 c1 c0 74 b5 4b 3d a6 0e ec 4d af b2 10 80 f1 ee 05 79 3e 26 ae d7 61 7e c3 3b 38 79 d0 fa 3e 3f 1e 89 cc 7d 65 1e 30 78 b8 f8 26 df ef 78 37 83 38 bc 71 f2 2e 43 6b c9 bb ee e3 3a e7 e7 87 ef e5 ed 95 ef fb 12 f4 21 76 8f 0f 6f 73 81 78 a3 35 03 90 dc b8 c8 e7 29 0f 69 f9 31 c9 87 57 e1 ce 03 86 f5 41 9e 3a e4 00 92 07 8e 6d 53 de 59 6f 2b 6d 0c e5 ef d5 b4 75 2a df ae 8d 04 19 ce 5d 11 f4 98 23 5c 3a 47 bc 1c c7 d5 4e 5c ba bb f6 2e 4f 93 ef 2d a6 c5 5c 51 42 03 ae ad 31 ef e8 86 a2 76 67 38 7a ae 99 e1 46 72 d4 e9 74 bd 96 b3 e8 c6 32 6e 3c f9 f0 c8 9c 2e c7 f0 81 3f d7 d8 5e 3f 8b b1 0e f1 1b f9 c6 6d 14 13 00 f3 a4 89 5c 54 ad cd 07 e6 28 c8 ff c4 89 56 ff d8 ac 34 32 30 60 fd 37 04 39 89 Data Ascii: Q]:%/CtK=My>&a~;8y>?}e0x&x78q.Ck:!vosx5)i1WA:mSYo+mu*]#\:GN\.O-\QB1vg8zFrt2n<.?^?m\T(V420`79
2024-01-15 14:03:09 UTC	26	IN	Data Raw: bc d8 b8 90 92 03 39 43 d4 3f 37 dd e8 44 c4 b8 15 80 60 3c 70 4a 63 3d f9 98 Data Ascii: 9C?7D`<pJc=
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: cb ab ac 5e f8 c6 68 fd e0 b3 ed 79 d6 bb b2 a9 13 35 52 3d 63 39 1a 55 0b b9 fa 18 d5 75 e1 66 51 76 e4 56 68 78 00 bc a2 20 74 26 de 41 f6 6d 77 07 ad 92 79 f5 22 6c fe d1 91 b3 75 0a 87 94 93 07 0f c7 f0 11 22 1f 56 24 47 e6 6e d7 0a 6a e7 51 fe 1e b0 a7 b6 cd 28 b6 80 d2 90 eb 3b bd be ab 36 be 22 ad 8e 23 3e 70 39 46 9c 27 96 6a 21 a9 4e 1f 09 0c 79 0f 74 f0 81 09 9e d0 34 76 e4 b6 28 fb b0 50 1a f3 08 9f 53 80 df fc 33 c6 c8 c8 a0 71 96 07 7b b9 a7 23 8f ce 1b a2 35 9c b1 6b 2b 38 de 91 e9 2b e2 58 46 b7 f6 03 6b 10 f0 a5 59 db 76 19 d9 db 5a 33 d0 76 6a 01 27 7f d6 dd 95 8d 62 1a 53 bf c3 9d 2b 50 9a 91 67 fe c9 1c 90 fb 96 8a 48 66 cd 60 db 0f b1 4e 04 4c ee 12 d2 a1 de d6 16 87 70 61 cb 57 b9 81 e0 17 59 5b 3b 1c 97 a6 fd 97 a3 a9 fa 1a c9 d1 3f Data Ascii: ^hy5R=c9UufQvVhx t&Amwy"lu"V$GnjQ(;6"#>p9F'j!Nyt4v(PS3q{#5k+8+XFkYvZ3vj'bS+PgHf`NLpaWY[;?
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 3c 6a b8 71 eb 13 98 55 5f fd 88 0f 43 e5 c8 18 73 06 af 4f 67 fe e1 2f 5d 8c Data Ascii: <jqU_CsOg/]
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: a8 c0 37 ae dd 20 e7 6a 91 73 e8 aa af 58 44 30 0d a5 b1 69 95 69 51 e7 84 88 bc e7 71 83 22 4b a1 b1 b5 4d 1a f2 58 d2 18 8f 02 ed aa 26 3c e9 31 cc 07 14 9e 7d 44 1f 9a f4 98 e4 3d e1 3e d7 04 35 2b 2a 9f 53 10 61 62 12 90 e1 eb b0 2c 70 4c b1 08 68 01 97 09 37 14 5a 89 07 5b 4c ed c0 7a e2 d4 de 13 18 b2 9c ec 95 54 a4 c9 ad a7 41 f9 0a ff b5 16 0c fd 2a 6b ec f3 e9 12 16 30 d8 64 12 f7 03 9b d2 f0 65 7f e9 7a 71 23 3d 7e 8f 84 77 cb 0f 9f 78 87 9f 5b 13 5c 3f a0 cd b3 11 6f f4 8c c5 83 70 b8 32 41 ce 96 1d f9 e2 f6 cb d7 fa 3e 0c 2d 08 74 25 83 09 fc 15 0b 04 e9 e2 0b d8 2f d5 e6 ea 02 8b 1b 92 a2 7f 02 49 5b f8 5c 61 e1 98 63 21 c3 a4 ff 52 bf a9 e2 e3 8b 85 91 e8 64 08 1d ae 8a d0 42 1d 1a 59 80 62 11 13 e1 a6 e4 4a 6e 24 b3 15 5d 20 5c f9 a0 df f8 Data Ascii: 7 jsXD0iiQq"KMX&<1}D=>5+Sab,pLh7Z[LzTAk0dezq#=~wx[\?op2A>-t%/I[\ac!RdBYbJn$] \
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 65 01 9b c9 4e 79 9d 58 0c 7b 85 3d e2 33 e6 e0 8e 4a fa 46 98 c3 99 aa 0b bf Data Ascii: eNyX{=3JF
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 0b 18 cd 87 dc 13 8c e6 43 b3 8c e4 7a 4c 8e 35 42 12 e8 b1 45 0d d7 b2 5d ab 4f b5 49 7b 02 e0 6d 0f e1 59 da f7 49 41 9b 4c c8 8e e3 49 90 dd 76 2b ce 58 85 3c 5b 5a 0c 6a b1 a5 35 b9 35 0a 63 4a f1 c8 6f f6 29 4d bd ba d0 7d 18 08 f3 e4 21 7d 59 f2 85 62 1d ea d1 48 2d 44 e2 57 5b be 49 5b 26 dc 28 f9 e3 dc 14 c3 b9 f3 98 24 2e 7b 81 77 fa 90 4f b7 1d d9 e0 a1 37 ac e3 f4 a9 d2 31 8b df da 86 5a 64 8d 4f dc f5 e9 7c 77 df c9 01 4b 37 9d c6 e0 9d a8 b7 dc 2a 63 80 af 59 c8 56 7a c3 dd a4 d4 e1 78 79 ae ba 7d 15 0e 94 3e 5b 9a fa 02 ee 58 b5 d0 58 da 0c 27 09 92 49 17 72 0a 36 98 26 90 c9 d4 9a 66 5b c8 14 df e3 cb 08 a1 c5 2e 75 fc 42 c8 14 4b a7 9e e5 b8 07 23 22 65 a4 c4 4c 1b 01 46 a2 59 5b 07 1a 3c fa 76 be 49 52 b0 9f 1a 68 de 20 08 52 ff 5b fd 89 Data Ascii: CzL5BE]OI{mYIALIv+X<[Zj55cJo)M}!}YbH-DW[I[&($.{wO71ZdO\|wK7*cYVzxy}>[XX'Ir6&f[.uBK#"eLFY[<vIRh R[
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 13 2a 1b d2 ba ed 4c c6 16 a1 c7 2e 39 ea 1d 2c ce 40 77 5e d7 ba 40 38 14 f4 Data Ascii: *L.9,@w^@8
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: e9 5d ef c6 39 1a 09 72 45 4d bd 29 44 a6 fa 0e c7 e3 c1 c4 78 e6 7e a0 2a 51 6b ca 9f b5 80 82 b8 33 55 a7 9a f5 75 5b 34 76 c7 f3 40 53 d6 ac 1a 04 3d 86 aa f7 57 7c fc c8 cb a1 24 6e 01 9d ee d7 3d 0a e8 e7 79 03 0e 39 f2 c0 0a c2 e3 1e 07 c5 45 fe f8 56 ca 0f 9a f1 83 61 9c 81 e0 80 fd dd eb 6f 25 ae df ed d0 bd 0f 7f 79 fb 83 7e c7 34 27 a7 bf d1 fd 0b df e8 4c c5 cf 8f 1f 0e 3f 7f e0 d1 51 5d d2 d0 c4 e2 7b bd e4 ea 2f af ff 74 f8 86 df 09 89 17 5e 66 51 79 56 03 2f 28 dc a4 79 c7 8c 41 c5 71 e3 9b ff 92 1b 30 7e d4 cb bf be d3 e4 e6 bb fb 37 87 ff 79 f3 b3 6c f2 b4 89 ee 15 d1 8d 98 9f e4 d7 93 6e 54 25 56 de e0 f9 4e 37 6f be d7 a5 1f dd d6 69 80 77 ba e7 e2 f1 51 2f d0 f2 d9 16 e2 24 c6 5c c6 c1 1b 9f ad 50 9c 4c 6a 7c 6f 07 7d 2e 9b e3 2c 86 ea Data Ascii: ]9rEM)Dx~*Qk3Uu[4v@S=W\|$n=y9EVao%y~4'L?Q]{/t^fQyV/(yAq0~7ylnT%VN7oiwQ/$\PLj\|o}.,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.8	49997	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:08 UTC	711	OUT	GET /media/fvafxw53/cribis_22-05_visualcard04-digital-platform.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/en/who-we-are/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:09 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:08 GMT Accept-Ranges: bytes ETag: "ec2c8d13de65d81:0" Connection: close Last-Modified: Thu, 12 May 2022 08:55:49 GMT Content-Length: 180004
2024-01-15 14:03:09 UTC	14399	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 03 e8 02 cc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~CC"
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 84 d7 c4 5f 0c 72 93 6e 0d 86 ce 59 82 d3 79 52 1f 42 3a 8e 42 f8 47 f9 47 72 b1 d2 8f 09 cc ad 6e 0c da 46 a5 d7 18 72 8b e4 5d 30 70 81 4e 45 00 43 50 bc 65 92 6b 28 ea 69 aa c5 ad 93 38 4d 25 9f 4c f0 b6 a4 dd a8 65 92 dd 1e de 5c a3 72 b6 55 da b8 ed 4c dc aa ba d2 c1 a6 68 7a da e3 b3 ec 1f b7 70 fa 5c 8a 9d 47 42 f8 47 f0 8d 1e 31 a6 f8 43 55 1d 8b a2 ac dc ed d4 10 d7 4e 50 9a fa 65 5a 17 5c 9d 0d 26 ba 7a 69 d9 e6 27 6f 30 47 1b 9b 54 cc 93 fa 62 98 da 69 9b 58 bc 64 f3 c6 cf 11 28 e6 2d fa c7 1b f6 67 da c1 c4 85 c2 20 ab 8b da d7 e2 8d e7 c2 8d a7 13 9e 4b 80 77 c5 13 1a 3c e5 5a 13 a4 ec cf 4f 09 d3 d4 47 74 0d b5 32 cd ce 53 5f 2e 53 43 4c e8 ec f2 18 c2 52 e6 08 ac 25 78 a5 f3 a3 70 12 ad 04 cc ab 83 65 fd a9 84 bc e1 0e e5 c2 85 98 fb 51 4c Data Ascii: _rnYyRB:BGGrnFr]0pNECPek(i8M%Le\rULhzp\GBG1CUNPeZ\&zi'o0GTbiXd(-g Kw<ZOGt2S_.SCLR%xpeQL
2024-01-15 14:03:09 UTC	26	IN	Data Raw: 00 00 72 0e 62 3a 00 5e 27 38 b9 8d 52 7a 76 8f 53 0f 30 e7 78 85 2a 43 87 ce Data Ascii: rb:^'8RzvS0x*C
2024-01-15 14:03:09 UTC	10817	IN	Data Raw: 93 43 93 23 aa 99 62 ff 00 5a a5 f5 2a 20 3e 14 c3 40 e6 3a c6 31 b3 1a 25 32 ea 57 f4 03 0f 01 66 74 73 65 00 ef 5f 9f 81 dd 46 b8 69 be 58 42 d6 4c 07 c0 9f 22 87 3b 8c 53 db cd d9 6d 19 6e a9 ad 90 e7 bb ff 00 08 e9 da 55 e4 aa d5 56 4b 88 ff 00 97 ef f4 42 29 fd 8a dc d0 9e 81 c5 04 a9 fd f4 9a 74 8f ce 14 e3 d1 fa 54 87 9b 71 1f 6c 9e b0 4d 40 f7 84 62 1c e4 d9 97 d3 ce 33 54 57 66 f8 65 59 96 65 51 85 6a 50 fb 99 83 15 3b fc 85 ff 00 1b 47 64 d4 2c 3a e5 37 91 82 19 54 e4 30 e9 87 b8 95 31 a6 68 d7 f2 60 2a 2e e5 cf c9 6d d2 e5 cc 09 1b eb 17 c8 61 a8 fc a3 75 28 f9 51 c9 a8 dd de e0 87 05 00 2c 26 31 84 06 0f 59 4d 61 2b 83 66 e5 1a e0 8c 73 77 0a 58 d9 60 83 a8 1c e3 2b 06 63 42 77 06 8d 11 89 96 6c 03 a5 38 74 84 c6 37 0f 28 1a 86 11 f7 41 67 e3 Data Ascii: C#bZ* >@:1%2Wftse_FiXBL";SmnUVKB)tTqlM@b3TWfeYeQjP;Gd,:7T01h`*.mau(Q,&1YMa+fswX`+cBwl8t7(Ag
2024-01-15 14:03:09 UTC	15266	IN	Data Raw: 02 88 fc e0 d7 30 43 4a 83 c4 23 0e 53 c5 6c a7 c2 1a d4 e9 1c aa cf cc 6f a5 ec 81 8f 18 c0 03 e5 1e 8f 18 a2 01 e5 0b 5c 8d 02 a7 48 09 4b 73 7b e0 5f d6 46 32 0c 53 e4 85 d9 b3 0a 7d ea 7c 81 39 fd 20 5a 3b 8f b0 6c ac 25 34 39 1d 29 e1 49 20 35 fe 11 c2 bd 94 e6 9b 9a e9 99 2f e3 50 03 f3 8e e6 61 3c e8 28 9d 9f 11 53 39 52 51 e1 0a 99 0d 9b a8 d8 23 6c 93 74 92 5d cc f4 9f f5 1b 7d 8a 33 6d 0d 8f 6a 7e d1 2c 54 32 8e 27 4d e8 fc 35 a6 54 39 df ce 1d 97 f6 e6 0e 60 89 44 40 0d 94 3c 46 11 02 87 2b de 28 55 b6 1d d8 a0 cf 86 9f 0c 72 7d f3 e1 47 75 de fb ea 3d d7 3f 2b df 77 bb 10 bf f9 cf 8c 4f 7e 51 16 d0 53 4c 39 63 45 e0 e4 81 ca cc 24 6e e5 9f 39 cc 81 23 64 ef a4 05 4c 92 44 30 87 b3 99 23 9c c1 d4 4c 17 e5 1c 9c 74 6b e9 0d 7c 2b 70 66 79 93 97 Data Ascii: 0CJ#Slo\HKs{_F2S}\|9 Z;l%49)I 5/Pa<(S9RQ#lt]}3mj~,T2'M5T9`D@<F+(Ur}Gu=?+wO~QSL9cE$n9#dLD0#Ltk\|+pfy
2024-01-15 14:03:09 UTC	15266	IN	Data Raw: 50 4d 95 32 2b 18 a7 97 10 57 ee eb a5 98 4e 22 3c 45 13 96 c6 00 1f 70 5a 21 f8 85 2d 70 b1 5b cd 81 82 89 a6 e4 9d e0 4c da e2 24 30 00 5d 54 bc ac 1e 22 8f 88 35 f7 01 47 53 25 a6 4d 1e b0 99 3c 19 db e5 0c 92 e0 81 0b b9 39 07 a1 4c 53 01 47 30 73 d3 f1 87 c9 82 86 35 36 9b b6 b2 ee f9 bb 2a ac b8 2c 47 44 3d b3 11 4c 81 fb 3d 6f af 15 fa 73 18 4b 6e 77 dc 75 52 8d 2d aa 25 35 50 52 e9 9a 6c da 72 88 26 a4 ac 97 70 e7 77 aa 44 cb af c0 a6 10 00 0b f2 13 58 62 ae 7d 3b 52 61 34 51 c9 8e 6d ea aa 0a 99 f3 6b 71 1b de f1 b1 c4 af d4 c2 2c 30 aa db 23 26 95 cd a5 b5 90 11 bc e5 82 cd 44 1d 4b d3 4c d7 32 ad cc 23 c0 7c d6 bd ae 17 f4 8d 71 ac 29 95 69 77 8d d6 4c c6 71 2b 98 93 7e c1 cf 45 93 1e 57 b7 23 07 23 17 a0 c7 3a bd 3b 5a df 33 b3 a4 ab be fb 96 Data Ascii: PM2+WN"<EpZ!-p[L$0]T"5GS%M<9LSG0s56*,GD=L=osKnwuR-%5PRlr&pwDXb};Ra4Qmkq,0#&DKL2#\|q)iwLq+~EW##:;Z3
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 12 b7 70 bb d6 04 32 26 64 b5 9e 36 03 6a c8 f7 d0 c5 1d 6e 98 8f 23 74 e4 30 57 bf 9a c2 94 b6 a7 06 62 9d 72 9a 33 e7 d2 87 07 ca d6 64 22 dc 44 79 11 40 11 dd a9 f0 36 9e e3 0c 27 ab 0a 2e 29 79 7a ea 7f ba 58 1c f2 e7 01 d7 87 52 08 fe e8 e5 0f 42 42 4c 4a 5b 77 5b 4c 4e 9f 02 6a 2b bd 48 49 a6 62 9b 88 a2 1e f0 d6 1e dd 18 95 44 85 e3 80 29 6f 36 68 0e 34 2f 85 d2 03 65 00 03 cc c5 1c fa 72 2c 1c 63 d8 54 e7 c3 1c 30 55 f1 6a cc 3f ae 69 35 0b 9d 57 8c 8b 37 60 1f 55 c3 51 b8 db de 91 d4 f7 e5 08 ab 56 5b a7 58 5b 4e cf 9f c8 67 88 af 2d 78 a3 07 86 ba 44 54 87 c9 94 14 01 21 ae 3d 00 4a 61 01 f4 80 d7 54 ab ea 06 ad 98 49 a6 a9 95 29 8c b5 73 37 70 40 30 1c 0a 70 1d 6c 21 cc 21 c9 5d 08 6d 46 4c de 4e c1 9a b2 47 57 62 c5 73 84 95 63 64 e6 34 f6 21 Data Ascii: p2&d6jn#t0Wbr3d"Dy@6'.)yzXRBBLJ[w[LNj+HIbD)o6h4/er,cT0Uj?i5W7`UQV[X[Ng-xDT!=JaTI)s7p@0pl!!]mFLNGWbscd4!
2024-01-15 14:03:09 UTC	26	IN	Data Raw: b7 7c 73 2d 76 47 09 a0 37 fa 53 14 6e 01 a6 ba c5 87 40 94 b2 1d 98 eb 45 4e Data Ascii: \|s-vG7Sn@EN
2024-01-15 14:03:09 UTC	16383	IN	Data Raw: 1c 73 a2 20 4f bc 52 ae 00 4f 70 80 91 6f 81 82 22 58 03 52 2d 48 63 04 92 6e dd a2 6f 56 95 2a 67 64 41 45 c1 12 9c 4a 43 0e a6 10 10 0b 73 86 28 f0 22 f8 6c 8c 4f 26 27 9d 4e 9e 3c 50 a5 22 8e d5 3a a7 0f aa 22 22 22 11 7f f6 4b b1 f9 c3 b4 6b 0a 4a 01 7d d4 dc 55 fc 11 3c 6b c4 c1 d7 7a 7c e1 41 e1 32 aa 18 e3 d7 98 88 c6 d4 76 22 c9 46 7d da 5f 87 a0 05 b9 5b f7 a7 03 f6 72 a0 68 6d 38 de 48 55 69 f9 19 6b f6 c3 54 29 23 da ec b2 8a 4d 64 72 62 30 66 d8 82 f2 71 2e 19 83 14 3e 84 47 e9 10 02 1c 4e 03 7b 5b 28 eb ac 45 cd 8a 92 85 3f 69 5e 6c b6 fc c3 ff 00 09 a2 16 6d 9b df fa b0 42 ae d1 8a e3 ff 00 eb 19 5b 4c 49 3f 98 53 7f 36 9c 88 92 62 ce 48 59 ca 8d c4 ad 8a 41 fd 58 fc 26 01 b8 80 88 f2 cd 05 7f b2 0a 5a e0 db a5 71 a7 0d df 38 fa 95 26 10 6e Data Ascii: s OROpo"XR-HcnoV*gdAEJCs("lO&'N<P":"""KkJ}U<kz\|A2v"F}_[rhm8HUikT)#Mdrb0fq.>GN{[(E?i^lmB[LI?S6bHYAX&Zq8&n
2024-01-15 14:03:09 UTC	26	IN	Data Raw: f2 16 ec 66 8a ce 66 86 2a af 66 ab ef 00 9e d1 ce 61 d0 00 3f 28 d8 2c 68 da Data Ascii: ff*fa?(,h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.8	49998	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:10 UTC	461	OUT	GET /media/fvafxw53/cribis_22-05_visualcard04-digital-platform.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:10 UTC	220	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:10 GMT Accept-Ranges: bytes ETag: "ec2c8d13de65d81:0" Connection: close Last-Modified: Thu, 12 May 2022 08:55:49 GMT Content-Length: 180004
2024-01-15 14:03:10 UTC	5639	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 03 e8 02 cc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~CC"
2024-01-15 14:03:11 UTC	8760	IN	Data Raw: ad b2 39 b5 5b 61 39 e5 8a 08 15 2c a6 d6 2b e9 a5 2a 2d 56 12 98 b1 b6 98 c3 2c 47 bd 28 20 42 80 45 0f 56 31 2a cb 18 0b 1d 7d 2e aa 6f 93 87 af d0 c2 2e f1 2b 25 a4 7e 21 0f c2 0b 09 29 8b a5 b3 44 c8 b2 1d e1 82 fe c8 40 cb 4e 94 ca 7b 36 8d ff 00 a8 39 3f a6 22 08 c8 c4 da 65 e9 07 12 46 05 d4 c5 fc 62 61 f3 2e e4 96 2f 10 75 84 4a 4b 45 43 65 0f ad 04 ab 36 0c b4 e9 11 f5 a5 a0 52 d8 21 21 a5 a2 a6 a1 9a f1 2a 4a 9e 36 6e 20 d6 0b 71 29 04 fc 3e e8 b5 54 07 45 91 45 25 a3 94 04 de 18 07 75 02 e6 b4 3d cd 5a 0a 45 e4 6c a5 86 e4 db 99 4d 43 8b 58 72 95 d5 c5 b8 25 81 bd 64 44 c1 09 14 63 f4 9a 43 e9 a5 a2 6f 64 d0 49 a5 67 31 af ec 80 da 09 48 5c a9 dc 6b 45 a8 97 41 83 54 4f 76 5b 43 a9 a5 7b b4 c4 78 4c 30 d7 35 30 15 1b 06 61 1e 81 17 19 5d e0 19 Data Ascii: 9[a9,+-V,G( BEV1}.o.+%~!)D@N{69?"eFba./uJKECe6R!!*J6n q)>TEE%u=ZElMCXr%dDcCodIg1H\kEATOv[C{xL050a]
2024-01-15 14:03:11 UTC	7300	IN	Data Raw: 84 d7 c4 5f 0c 72 93 6e 0d 86 ce 59 82 d3 79 52 1f 42 3a 8e 42 f8 47 f9 47 72 b1 d2 8f 09 cc ad 6e 0c da 46 a5 d7 18 72 8b e4 5d 30 70 81 4e 45 00 43 50 bc 65 92 6b 28 ea 69 aa c5 ad 93 38 4d 25 9f 4c f0 b6 a4 dd a8 65 92 dd 1e de 5c a3 72 b6 55 da b8 ed 4c dc aa ba d2 c1 a6 68 7a da e3 b3 ec 1f b7 70 fa 5c 8a 9d 47 42 f8 47 f0 8d 1e 31 a6 f8 43 55 1d 8b a2 ac dc ed d4 10 d7 4e 50 9a fa 65 5a 17 5c 9d 0d 26 ba 7a 69 d9 e6 27 6f 30 47 1b 9b 54 cc 93 fa 62 98 da 69 9b 58 bc 64 f3 c6 cf 11 28 e6 2d fa c7 1b f6 67 da c1 c4 85 c2 20 ab 8b da d7 e2 8d e7 c2 8d a7 13 9e 4b 80 77 c5 13 1a 3c e5 5a 13 a4 ec cf 4f 09 d3 d4 47 74 0d b5 32 cd ce 53 5f 2e 53 43 4c e8 ec f2 18 c2 52 e6 08 ac 25 78 a5 f3 a3 70 12 ad 04 cc ab 83 65 fd a9 84 bc e1 0e e5 c2 85 98 fb 51 4c Data Ascii: _rnYyRB:BGGrnFr]0pNECPek(i8M%Le\rULhzp\GBG1CUNPeZ\&zi'o0GTbiXd(-g Kw<ZOGt2S_.SCLR%xpeQL
2024-01-15 14:03:11 UTC	14600	IN	Data Raw: 6b a7 20 6d a7 f9 47 07 3f f3 08 4c 7a c9 12 9b e8 e4 92 72 7a 89 0c 7f e2 68 6b 53 a4 12 6b 7f d7 16 ab 4b f1 21 9e 04 3d ff 00 57 fc 8e a7 af de 27 fb 26 d2 b4 8b f6 5a 10 7f 88 0c 14 7c 4b 9c 93 36 47 29 23 fe 8d ba 65 fe 05 86 95 3a 41 27 2f 48 bf 16 a7 a9 5e 05 3e f1 44 8a 57 58 cf 67 ea 1d 23 4f 1c 22 7b 70 13 3e 50 38 f9 68 01 0d 53 69 c4 e5 ab 83 24 ed f4 c3 38 74 3a e6 b7 f1 86 cf 0e a1 0f 32 fa 98 8f 11 06 b3 32 77 84 43 42 29 fd 62 5f 1e b0 c5 37 25 66 c4 ba 71 8b bc 52 b7 c0 67 59 d2 ae 3f 68 b2 8a fd f3 08 ff 00 11 82 b7 41 e9 f8 42 c9 93 34 5a 3e 39 1b ad be 48 be 03 e5 b4 26 31 72 c0 77 1a ad 6c 13 6d 9f 59 15 c6 21 a6 a8 f2 6c 82 8a 87 bc 03 48 a9 31 e3 12 8b 21 07 ee 4c 7c a7 55 43 a8 23 ea 23 17 06 cf 0b 02 75 fe ec 7f af 6c a1 43 df a4 Data Ascii: k mG?LzrzhkSkK!=W'&Z\|K6G)#e:A'/H^>DWXg#O"{p>P8hSi$8t:22wCB)b_7%fqRgY?hAB4Z>9H&1rwlmY!lH1!L\|UC##ulC
2024-01-15 14:03:11 UTC	4380	IN	Data Raw: 6f 0b e5 e5 df 3e 28 43 73 1e 18 74 92 16 ef 2f f5 61 31 0a 4c da 8d 85 e5 3d f2 ae 6d 72 f8 87 96 58 ec 6e cf ab 16 4b 4f b6 bf 01 4a 99 43 f2 8e 4c ec 03 2b 05 2a 74 0d f5 46 d1 d3 aa 62 a8 f9 96 4a 90 01 ad 60 00 b7 ba 36 25 78 24 8c d2 59 6c d9 39 2d 58 53 65 2d ef ca 26 32 f7 00 ba 20 31 ad 58 77 88 01 35 9b 14 a0 7d 6f 68 d8 8a 51 c8 2c c4 83 e9 08 9c 36 bb 15 17 91 2d 61 74 d9 9c 42 34 ef 6f 0a c8 f2 dc 31 98 94 83 98 c0 91 ff 00 80 c6 e3 56 89 89 a5 a7 f7 46 88 76 82 4f 1b ca 68 79 97 79 3e 4b 90 40 23 46 91 5e a2 15 5b 11 91 c6 0c a2 e2 ae 7e b2 c6 c8 26 5c c3 af be 1d de 4f 9a b5 6f fb 52 dc b0 4d 60 d4 8f a7 0e d5 69 94 a4 39 c6 c3 10 29 e4 ad ce b9 87 94 7a 17 37 49 61 5c e0 a5 1a 96 bb 0d ab 67 89 3c 50 44 a7 88 63 a5 37 8a 88 c1 f3 06 ea 26 Data Ascii: o>(Cst/a1L=mrXnKOJCL+*tFbJ`6%x$Yl9-XSe-&2 1Xw5}ohQ,6-atB4o1VFvOhyy>K@#F^[~&\OoRM`i9)z7Ia\g<PDc7&
2024-01-15 14:03:11 UTC	902	IN	Data Raw: 0a 26 70 36 a5 10 89 25 5d 29 77 4c cd 1c cb df 20 a3 47 8c d4 32 4b a2 a1 6c 64 8c 03 61 01 08 82 4f 16 13 2c 68 e7 55 4d 23 b9 49 c6 45 97 54 49 5b e3 ad 34 7a aa 4c 89 52 9d 31 00 09 bb 32 73 3d bf ae 28 75 01 eb 11 b6 ff 00 42 d4 a1 c5 0d 78 43 5f 3d c3 aa c9 09 93 23 e6 c9 c0 aa 43 e0 5d 31 e6 51 f7 c5 ad 8c d4 2b 35 e5 ed aa ba 78 33 c8 66 ba 9c 81 cd 92 de d1 07 c8 2f ca 1f a4 a7 e5 b9 87 55 51 c6 4a 0f 81 36 05 63 12 f8 4d 56 95 63 8a 87 96 3b 10 23 c4 83 5d 3a 18 3d 4b fc 22 c8 da 9b 08 50 ac a4 49 56 52 12 a6 b6 64 81 47 20 96 bb f2 0f 25 42 dd 43 ac 6b c2 8b 5b 41 e2 8b b3 65 1c 6e 2c 9d e7 e8 b4 d5 52 9d 83 c1 10 68 75 39 10 c3 cd 31 bf 43 74 f5 8e 9d 2e 36 b3 8d a8 4d 4b c4 8f 25 0a b1 b8 f5 e7 09 16 36 63 5f a4 5a fb 51 60 b9 b0 c6 a8 ef 8c Data Ascii: &p6%])wL G2KldaO,hUM#IETI[4zLR12s=(uBxC_=#C]1Q+5x3f/UQJ6cMVc;#]:=K"PIVRdG %BCk[Aen,Rhu91Ct.6MK%6c_ZQ`
2024-01-15 14:03:11 UTC	15266	IN	Data Raw: f2 e1 98 42 3b 1a 6a 5e 1d 25 17 f1 38 d5 ea f8 95 1c 97 c0 03 75 2f ac 13 36 5b 31 4c 10 63 75 00 bc a1 34 c9 60 50 c3 ed 69 0e 97 02 88 fc e0 d7 30 43 4a 83 c4 23 0e 53 c5 6c a7 c2 1a d4 e9 1c aa cf cc 6f a5 ec 81 8f 18 c0 03 e5 1e 8f 18 a2 01 e5 0b 5c 8d 02 a7 48 09 4b 73 7b e0 5f d6 46 32 0c 53 e4 85 d9 b3 0a 7d ea 7c 81 39 fd 20 5a 3b 8f b0 6c ac 25 34 39 1d 29 e1 49 20 35 fe 11 c2 bd 94 e6 9b 9a e9 99 2f e3 50 03 f3 8e e6 61 3c e8 28 9d 9f 11 53 39 52 51 e1 0a 99 0d 9b a8 d8 23 6c 93 74 92 5d cc f4 9f f5 1b 7d 8a 33 6d 0d 8f 6a 7e d1 2c 54 32 8e 27 4d e8 fc 35 a6 54 39 df ce 1d 97 f6 e6 0e 60 89 44 40 0d 94 3c 46 11 02 87 2b de 28 55 b6 1d d8 a0 cf 86 9f 0c 72 7d f3 e1 47 75 de fb ea 3d d7 3f 2b df 77 bb 10 bf f9 cf 8c 4f 7e 51 16 d0 53 4c 39 63 45 Data Ascii: B;j^%8u/6[1Lcu4`Pi0CJ#Slo\HKs{_F2S}\|9 Z;l%49)I 5/Pa<(S9RQ#lt]}3mj~,T2'M5T9`D@<F+(Ur}Gu=?+wO~QSL9cE
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: 62 50 bc 9c 6e df 04 c1 83 53 ae 07 15 d3 70 36 28 db 86 e2 37 14 c6 f6 b8 18 2c 21 d6 05 d4 50 1f 47 49 2a 8e f2 58 1c 31 53 18 49 50 4d 95 32 2b 18 a7 97 10 57 ee eb a5 98 4e 22 3c 45 13 96 c6 00 1f 70 5a 21 f8 85 2d 70 b1 5b cd 81 82 89 a6 e4 9d e0 4c da e2 24 30 00 5d 54 bc ac 1e 22 8f 88 35 f7 01 47 53 25 a6 4d 1e b0 99 3c 19 db e5 0c 92 e0 81 0b b9 39 07 a1 4c 53 01 47 30 73 d3 f1 87 c9 82 86 35 36 9b b6 b2 ee f9 bb 2a ac b8 2c 47 44 3d b3 11 4c 81 fb 3d 6f af 15 fa 73 18 4b 6e 77 dc 75 52 8d 2d aa 25 35 50 52 e9 9a 6c da 72 88 26 a4 ac 97 70 e7 77 aa 44 cb af c0 a6 10 00 0b f2 13 58 62 ae 7d 3b 52 61 34 51 c9 8e 6d ea aa 0a 99 f3 6b 71 1b de f1 b1 c4 af d4 c2 2c 30 aa db 23 26 95 cd a5 b5 90 11 bc e5 82 cd 44 1d 4b d3 4c d7 32 ad cc 23 c0 7c d6 bd Data Ascii: bPnSp6(7,!PGIX1SIPM2+WN"<EpZ!-p[L$0]T"5GS%M<9LSG0s56,GD=L=osKnwuR-%5PRlr&pwDXb};Ra4Qmkq,0#&DKL2#\|
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 8c ac b0 9d 43 18 c6 31 8e 71 b8 88 f3 bc 00 46 f1 42 ee cc 6f 32 40 0c a5 83 Data Ascii: C1qFBo2@
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: ca 02 63 65 08 01 8d d4 60 d2 b0 a6 ef 80 5b c1 03 7d 68 50 c4 d9 4d 7f ab 08 ce a6 58 39 9a 99 4d ac 32 1c 8b 1f 0a 39 92 bc 27 5b 88 d7 f2 81 b7 70 00 df 40 e2 82 94 36 60 34 6b 48 ce e5 d8 2d 43 66 34 00 dc 45 b0 fc 63 26 37 51 80 e7 f2 08 be 08 74 2b 66 7a e2 59 da d1 b2 bb 4d 9f eb 27 8d 50 c6 ba 05 a1 d4 c3 39 fb b3 81 3e 78 6c 40 cc 79 52 c7 1d 44 d9 43 80 47 ea 86 ba 0d f9 fb 5d 51 93 4c 39 ab a6 52 19 db 27 12 b9 bc a1 c1 da 3c 6c b9 04 aa 37 54 82 20 62 98 a3 a8 08 08 40 e9 9a b2 65 42 d4 8c 27 32 67 ee a5 93 69 53 82 39 66 ed ba 82 9a ad d5 20 dc a6 29 83 50 10 18 df bd a3 29 66 3d b0 9b 2c b8 c6 da 41 8b 56 f8 eb 86 ec 48 df 11 24 0c c8 04 52 a0 68 40 b1 26 c8 90 35 31 ad a1 c0 2e 3c 3e 9a ab 82 1c dc 7c af 0d a1 b5 63 43 83 ee 1b fb 23 0d ab Data Ascii: ce`[}hPMX9M29'[p@6`4kH-Cf4Ec&7Qt+fzYM'P9>xl@yRDCG]QL9R'<l7T b@eB'2giS9f )P)f=,AVH$Rh@&51.<>\|cC#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.8	49999	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:10 UTC	451	OUT	GET /media/dyvpywmz/cribis_22-05_visualhero_chisiamo.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:10 UTC	221	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:10 GMT Accept-Ranges: bytes ETag: "1de7d17d4064d81:0" Connection: close Last-Modified: Tue, 10 May 2022 07:35:15 GMT Content-Length: 3947829
2024-01-15 14:03:10 UTC	5638	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 03 e8 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 04 03 01 01 01 01 00 00 00 00 00 00 00 Data Ascii: JFIFHH8Photoshop 3.08BIM8BIM%B~CC@
2024-01-15 14:03:10 UTC	4380	IN	Data Raw: 3a ab 3e 89 8b aa cc cd fa 64 60 c2 36 24 7b 97 91 77 27 38 54 6d a4 00 6e c6 89 21 88 38 85 6b a7 d6 94 55 f7 ae 80 eb 3b 45 9e 5e cd ce eb 64 9e b2 d4 bd bd e3 37 4b 4a 1a c8 21 91 0e 54 19 4c 26 22 a4 21 62 75 52 49 c7 ac cd 28 e2 b4 72 46 a4 34 6a bd c3 5b d5 13 6a 09 36 41 3f fc 01 f2 24 9b 8d 9f 1b 95 1f 20 32 f1 9d 19 59 09 0a af 9e c4 60 2e 27 ca d9 62 14 30 d0 a1 eb 96 fd 39 fa 90 89 3b 16 de b9 b2 d4 44 28 e7 4a 59 ae 56 a4 20 23 19 74 9e 4a 88 5a 40 ac 61 90 30 1a 36 42 29 1a 82 71 ea d7 d1 be b0 85 1f f4 dd 42 d5 55 83 02 22 ac 58 8b c8 37 dc 33 5b 66 c8 b0 5f 84 ee 15 58 ea 7f 45 4d ff 00 0d 1c 8e 2c 7f b9 8a 3a 36 6a 41 46 0c c1 0c 79 64 09 d0 5e fd 16 d1 6a 05 6e 77 44 49 d3 3d 63 31 b9 74 bd ce 9e e8 92 c8 65 8a 2a 6a a4 8a a2 25 8a 12 f2 Data Ascii: :>d`6${w'8Tmn!8kU;E^d7KJ!TL&"!buRI(rF4j[j6A?$ 2Y`.'b09;D(JYV #tJZ@a06B)qBU"X73[f_XEM,:6jAFyd^jnwDI=c1te*j%
2024-01-15 14:03:11 UTC	4380	IN	Data Raw: eb 1f 71 1e 6f 5f d8 a2 37 e2 ac 03 ab ed f3 f3 45 7d 7b ec 0d 44 03 58 8b 23 fd fe 37 4d f0 2c 8f ce c8 f5 e0 3b 00 48 c1 23 27 19 c0 1c 64 31 03 07 27 f8 cf f7 63 f2 57 24 51 f2 4d 1f 04 8f c5 f6 8f e8 11 56 7f 1b 24 77 6a 18 b5 2b ad 35 0b af 1a a1 46 fe d0 46 cf e4 82 7c 00 17 dd 4f e7 18 20 72 39 3f 38 c6 3c 70 40 fc e4 1e 73 8e 32 31 97 fb e8 fe 68 7c d9 d5 fc de ad bf e9 74 76 55 04 0c ce 88 35 5e 3e ef 24 7c 95 af 16 2e b5 74 4a fb a9 3c 1c 1c 1f 20 32 b9 fe 0e 4b 67 38 fc e7 cb 38 e7 82 31 67 cf 8b 04 0b dd 0d 7f 55 56 3c 56 be 3f 0d b0 00 5a d8 24 13 90 ee 14 06 86 b3 1e 46 ec 03 77 b1 40 57 84 12 32 48 3c 11 c7 ff 00 54 fe 71 cf 0a 57 f3 f3 80 46 74 0d 0b 5b 23 7f 3f d6 b5 af f7 0d 5a d0 b3 eb 5b 21 45 a2 b1 1a a1 be e3 75 b1 ba df 82 4d 1f fb Data Ascii: qo_7E}{DX#7M,;H#'d1'cW$QMV$wj+5FF\|O r9?8<p@s21h\|tvU5^>$\|.tJ< 2Kg881gUV<V?Z$Fw@W2H<TqWFt[#?Z[!EuM
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: d0 b0 77 40 d1 f3 f9 b2 3f db 7f 9b 04 e2 35 e4 36 41 39 fe ed 47 cf 21 71 90 33 90 bf 76 47 e3 20 0f 5b 1c bb 48 a2 35 f1 67 fa 26 eb c6 ff 00 1f dd 7a f3 28 5c 5b 05 6c 45 dd 56 43 c9 05 72 37 7a 03 42 80 17 64 91 eb 3c 00 0a e7 19 5c 91 9e 30 33 c9 ff 00 19 e3 07 f0 09 1f 1c eb 66 c1 f2 01 d6 bf f8 7c 00 40 de bf af fa 64 30 56 bb a0 cd 90 d6 89 f9 bf 8a 16 09 a3 b2 40 20 e5 97 ad 48 0e 32 09 f8 e1 4b 63 39 e7 3c 6b b1 ce 47 3f 1f 1c 67 3e b6 6f fb fc 93 56 07 8d 6c 31 1a d9 f1 fe c7 e3 43 88 39 1e d1 8a a8 17 60 f7 78 50 72 2a 40 b2 2f 2b 3b d5 77 79 96 6e 57 01 b2 76 04 90 32 c3 c7 18 e0 e4 8e 32 54 83 8e 78 19 c9 d1 a3 64 00 37 e4 d0 3b 1f d7 9d e8 ea f5 64 d4 41 42 b0 b0 6e e8 85 36 31 22 cd f9 20 d0 17 5b d9 1a 1e b2 0e 0a e0 f9 0c 9c 63 2e 70 06 Data Ascii: w@?56A9G!q3vG [H5g&z(\[lEVCr7zBd<\03f\|@d0V@ H2Kc9<kG?g>oVl1C9`xPr*@/+;wynWv22Txd7;dABn61" [c.p
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 3d 7a 5d 5b 18 39 f8 f9 e7 8c 0d 87 ce 49 c7 c7 f0 41 f2 fe 30 14 8b 04 79 1f Data Ascii: =z][9IA0y
2024-01-15 14:03:11 UTC	9590	IN	Data Raw: f4 bb d6 bf 15 b3 e0 10 7c 1d fa d8 ba b0 52 0a 93 63 1f 86 a1 a3 f8 a2 01 fc 1b 3e 48 a2 57 e5 62 0f f2 b9 e4 f0 4e 09 f9 3f fc 3d fe 7f 38 1e b2 40 af c1 d5 6f e6 aa bf ed af ef e7 d6 03 9c f6 b6 b6 6c ee ce ce f5 57 e7 2b ad df c5 fa f4 30 03 18 20 03 f8 c8 cf 3b 10 3f 3c b6 3f f8 7b 64 fd 9e b5 20 d9 37 f0 0e ff 00 ad 6f 44 1e db f8 ff 00 94 6c 64 b2 87 5a fb 58 57 c8 c6 cf 93 56 76 47 8f 8f fe 55 36 60 9d 73 f2 4f 39 23 1c fc 01 8f e4 60 01 c1 ce 3f 19 e7 04 0c ab c0 f1 e7 c0 ff 00 bf cd 9b bf fe 35 5e b6 56 5d 96 00 e4 49 b6 bb 1f 20 57 c7 e3 44 f8 a3 57 6d 88 20 60 03 f9 01 83 9e 40 07 9f 8f 8e 0e 57 04 60 ff 00 03 25 73 47 77 fd 90 40 a0 72 fc 1f 9f c6 c7 83 e4 9a 1e bd 68 48 34 49 34 0a 9a f2 6f c9 00 68 0a de 5f dd 0b 2c b9 12 71 f9 07 f3 c7 c7 Data Ascii: \|Rc>HWbN?=8@olW+0 ;?<?{d 7oDldZXWVvGU6`sO9#`?5^V]I WDWm `@W`%sGw@rhH4I4oh_,q
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: d7 bb b3 24 b0 a5 d9 00 56 43 54 00 ee 16 2f f9 03 5b 24 e8 86 f7 f2 49 00 1d 43 7d dc 9e 31 c6 73 c1 ff 00 c7 04 e7 cb 80 d8 dd 51 f1 64 7f b1 bb 3f 02 8f fd 4f cf 8d de c0 8b b6 50 68 93 60 e8 eb 55 7e 2b f2 4d de b5 6d eb 0f 24 38 52 06 76 08 09 cf 03 8f 2f 82 02 93 cf 1f 19 6c f0 7d 6d 56 2c f9 d6 54 08 37 5f 1e 41 2c 00 00 7f 5a d9 d6 09 6c 8e 21 48 3f 93 58 d5 8f f4 f8 1b ff 00 7a d9 f2 7d 65 f0 48 18 62 c4 36 b9 38 e0 11 92 72 bb 70 7f f5 70 48 38 c8 3e bd 44 d1 3f 00 8b 22 bc 90 3c 6f e6 f5 62 b4 7f db 56 5b 23 12 b4 69 a8 d1 af 95 07 c5 8a bf 02 c6 bc 59 f5 f1 e3 00 9e 14 9f 9c 0e 78 ca ae 36 3c 1d 40 24 7c 0e 7e 48 5c 00 c6 ff 00 27 e0 6a c7 e4 8b a1 ff 00 d2 3e 2e f2 6d 74 8d bb 20 96 36 05 77 5a 9a 00 13 a1 5b 35 f0 45 90 7b 7e c9 39 c9 07 52 Data Ascii: $VCT/[$IC}1sQd?OPh`U~+Mm$8Rv/l}mV,T7_A,Zl!H?Xz}eHb68rppH8>D?"<obV[#iYx6<@$\|~H\'j>.mt 6wZ[5E{~9R
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 56 35 f0 41 3f 1b d7 9d f8 f5 f6 c5 40 19 f0 d7 f2 39 e1 19 89 ff 00 05 b1 a8 Data Ascii: V5A?@9
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: fc 73 91 9f b9 b1 8d b1 24 6f 20 06 fc f7 01 5f dd 68 93 66 c8 ad 56 f5 4b 24 01 ac 97 20 08 ed 0c 5b 1a ad f8 b1 5e 07 9b 3e 0b 7c 11 8e bf 19 07 24 fd a4 06 39 23 00 83 f0 7f 24 90 46 01 e4 9f 58 2c 3f e8 41 d1 d8 bf 1a f8 f2 36 45 68 dd 1f 1e a4 6f 14 58 83 76 98 f8 04 78 b1 af 9c 48 d9 03 e3 c0 1e b1 64 e5 80 39 27 00 8d 7e 57 6d 80 3e 4b 82 71 c9 05 78 20 f2 70 06 e1 bc 1f 14 09 bb d0 25 68 91 a2 35 f1 77 7f ec 2f d6 8e 40 2a 08 b5 6d 9d 53 93 e0 ec 59 17 e6 a8 a8 af 9b ee f9 14 e5 78 04 02 55 8e 08 60 41 ce 50 e4 e4 7e 78 07 8c 7f 3e 38 63 40 ff 00 b5 8b df 91 e1 af 64 ff 00 db 77 e7 7e b1 48 36 01 0c df 68 0d 61 47 e4 e8 0b ab a2 57 57 76 4b 28 f5 eb ec 72 ac 41 05 86 03 7e 40 62 32 06 06 32 33 8c 16 cf f8 fc e5 48 f2 35 ad e3 af 3b 17 b3 e0 eb e3 Data Ascii: s$o _hfVK$ [^>\|$9#$FX,?A6EhoXvxHd9'~Wm>Kqx p%h5w/@*mSYxU`AP~x>8c@dw~H6haGWWvK(rA~@b223H5;
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 7e 7f 2c 30 3d 60 f0 c1 14 ae 40 3f 34 40 3e 7c 93 7f ef 66 ef cd 03 bf 58 1c Data Ascii: ~,0=`@?4@>\|fX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.8	50000	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:10 UTC	686	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Fwho-we-are%2F&cb=1705327387750 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.synesgy.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:03:10 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: uf0ma0iasply X-Cloud-Trace-Context: b4d823a4be955c5f00d141e628142780 Date: Mon, 15 Jan 2024 14:03:10 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:03:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.8	50001	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:11 UTC	456	OUT	GET /media/qssfso0o/cribis_22-05_visualcard02-supplychain.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:11 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:03:11 GMT Accept-Ranges: bytes ETag: "49ba72f9160d81:0" Connection: close Last-Modified: Thu, 05 May 2022 15:02:48 GMT Content-Length: 880026
2024-01-15 14:03:11 UTC	16165	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 18 00 00 02 ec 08 06 00 00 00 a1 87 ce 1f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 18 a0 03 00 04 00 00 00 01 00 00 02 ec 00 00 00 00 34 55 6b 82 00 00 40 00 49 44 41 54 78 01 9c bd 4b af 75 49 9a 98 b5 f7 b9 7d 97 fc 32 b3 ab b2 ba ca a4 64 21 d1 1e 32 eb 3f d0 9e 30 6d 1b d1 6a 06 58 48 0c 2d 33 40 6d 4f db 6e c4 0c 98 21 e6 88 91 55 86 86 21 6d 21 37 42 06 31 40 08 cb 46 46 76 23 21 41 ab 6f 55 59 55 99 df e5 dc 79 9e e7 8d d8 e7 7c 59 d5 16 b0 ce de 6b c5 e5 bd c7 1b 11 ef 8a 15 6b 9f e3 e1 ff e7 f1 0f ff d6 6f fe ca d9 ed c3 af 1f 8e 0f bf 7a 7c 3c Data Ascii: PNGIHDRgAMAa8eXIfMM*i4Uk@IDATxKuI}2d!2?0mjXH-3@mOn!U!m!7B1@FFv#!AoUYUy\|Ykkoz\|<
2024-01-15 14:03:11 UTC	20	IN	Data Raw: 68 82 8b 49 32 56 e3 ac c2 db 0a f8 90 ed 6c bb c8 6d da 98 Data Ascii: hI2Vlm
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: 84 34 e5 48 e1 4c 4c 5c e1 35 42 2c b9 04 43 b6 48 ad 74 6e 00 90 4d 27 ad 1b 2a dd 58 fb 15 37 6e aa ef db 3e 0c 51 f8 27 52 2f bf 30 6f 90 d7 de 42 fa b9 7e 6d a0 a6 5d 0b fe 10 c5 b1 df 3e e4 6f aa d8 bf 94 da ad ee fe be 93 01 89 8e f7 dd d7 97 87 2b e8 bf a3 6f 78 63 22 7e 37 46 e0 2a fa 04 16 db 07 97 d6 54 68 5f ad 01 d3 60 b4 71 79 cf 2a 34 1f 89 95 de 6d 21 85 5a 54 46 1d 5e b5 1b 87 7e c1 05 0f e3 b4 ca c8 c5 75 83 0b 46 81 2c fc 7d a1 91 cc f1 51 38 e5 a2 72 3e e8 8f 6f d9 df a5 1d 44 17 ea 6d 0b 80 f4 3b ab 3c 25 0f 90 29 bd 0b bd 4a d9 3e 34 75 5b 6c 28 7c 79 c1 23 f3 7e ff e2 cc c1 ce 95 8b 06 00 d9 d9 21 97 01 21 d8 5b 20 70 79 ec a1 ad 93 05 b6 77 99 d1 32 f4 d4 e0 c2 bb fc e9 f3 dd fd 7e ba 72 65 2c 95 80 33 e3 3d 5f 20 99 28 00 cb 71 1d Data Ascii: 4HLL\5B,CHtnM'X7n>Q'R/0oB~m]>o+oxc"~7FTh_`qy*4m!ZTF^~uF,}Q8r>oDm;<%)J>4u[l(\|y#~!![ pyw2~re,3=_ (q
2024-01-15 14:03:11 UTC	1	IN	Data Raw: ee Data Ascii:
2024-01-15 14:03:11 UTC	9036	IN	Data Raw: da 6c 90 39 9a cb f2 55 64 1c 98 5d d5 8c 4f b4 f1 85 9b 32 b4 8f 02 35 88 ac bd 2a fc 1a 30 cc ba c4 13 27 f0 31 60 52 fc 16 66 86 62 33 29 d0 c3 93 5e c8 48 ae 2d 4c ac e9 91 79 d2 a0 e9 a1 2f 03 64 fa eb 68 7a 10 84 f0 a4 43 19 2c 0d 18 ea 38 31 fe 38 37 d6 a6 2f 7c 21 07 62 c8 83 a1 c0 fe 07 3f ff 86 a5 22 68 fd b5 17 50 62 a7 e3 eb 2c 6f b6 7e 83 83 22 22 ce fb a0 0b 01 d6 90 19 8f ca e2 c5 15 b0 41 62 2e 05 77 76 c3 c3 4d 29 df 39 89 99 33 a0 68 d7 a6 fd 2b 20 5c 42 71 03 2e 5a d7 a9 55 87 13 e0 d8 50 7f 3c 30 37 38 df c4 9b 7e 1b 28 5e c9 dc 5e 00 14 af de d7 40 ff 0b b6 06 92 27 10 ae 4d 75 97 20 40 70 83 bf 20 44 67 1e 05 35 2e ef 49 a5 47 07 8d 5d a3 cf 0d 25 17 5b 64 9c cf 6e fd 06 7f 11 20 0a d8 74 b3 47 89 f2 1f b1 70 b7 38 fa d1 2b fe 7b 6e Data Ascii: l9Ud]O25*0'1`Rfb3)^H-Ly/dhzC,8187/\|!b?"hPb,o~""Ab.wvM)93h+ \Bq.ZUP<078~(^^@'Mu @p Dg5.IG]%[dn tGp8+{n
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: ef 1b 0c be 19 1c 94 e9 28 e4 31 c2 18 3c d2 df 7e 91 14 5c f5 f4 6d b1 ed f7 df d2 87 b5 2a 5e 35 5f 27 39 5f d0 b6 c6 0c 69 a0 0c d6 a0 34 9b 35 d0 2d e9 62 4f 75 fe c8 d9 f9 f8 de 4c 46 c0 bb f9 7c fa e3 f7 16 54 be ff a1 47 26 e2 2f ca 33 c1 68 a4 ef fd 28 1d 7b b4 2d 79 93 0c a0 af d7 e1 3f 74 4b 6c b6 4f 76 2a 27 d6 92 93 e8 36 00 f7 02 96 78 00 d0 67 c7 d1 70 cc 8e f0 2c 70 d4 b0 c3 8c 86 d0 5e 36 c5 ce ef f7 12 ac 8a 9c 80 6f db 55 64 ca d8 13 4c f0 a4 33 91 66 bf 1b 12 7e 45 92 32 76 91 1c 8c 9f d0 7f 4b 8e 79 82 37 58 99 26 4d 47 ab 0c ee e0 d1 69 c6 85 a2 bb a2 d9 ed 92 ad a6 ac 3a 63 9b 91 f8 ad 17 f0 fc d7 92 8b ff de 13 af bf ff de 6d 8d ec ff 7b 7a 32 3b e1 f5 fb f7 fe 0a af eb 96 4c d8 17 9c d2 d3 02 56 7a 83 43 60 26 0a 71 05 de 7b c1 5c Data Ascii: (1<~\m^5_'9_i45-bOuLF\|TG&/3h({-y?tKlOv'6xgp,p^6oUdL3f~E2vKy7X&MGi:cm{z2;LVzC`&q{\
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 02 b3 2a 97 4c 5f fa 22 e3 26 38 2e a3 e0 77 b2 cd 04 41 5e d3 ae 5b b7 52 7a Data Ascii: *L_"&8.wA^[Rz
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: b2 d4 73 9f 2b f8 70 be 7a 3f 7a 3e 5f 8e c0 1a c4 83 4f 5d 46 fb 55 81 c1 26 54 d9 30 9e 76 ff 88 4e f1 13 5f 7d 0e fd f9 ed 5f 9b a9 28 b8 f0 b1 b9 7a 0a 01 c0 f3 53 b6 79 d3 fd 6e 76 ff b3 19 0b 41 c4 9b ff 90 98 26 67 39 67 b0 fd ac de 7e 2e 10 a9 70 b3 47 cf 0b 46 e2 b9 e9 5f 5f bd dc 0c 94 19 23 b1 ea 06 bf 78 c2 97 c0 aa 2b b3 c7 a6 75 1f 7e ee fe 78 83 94 2b b6 67 b3 48 a9 ef 40 85 67 89 d3 90 04 6f f4 36 27 dc a1 7c aa be 2a 9c b6 53 05 76 1a 8f a7 79 2c 7f 76 0f ff 8a 21 05 92 9e f9 d4 02 3e 79 06 c1 8e e1 3b f7 84 e5 c1 91 8c 68 20 2e ab 3a dc 61 bc 74 74 5e cd ce 2b 8c b6 32 b3 5b b3 72 59 6b 0b 77 e5 d5 af ca 8d 8e 6f 83 b1 b3 1f 3c 94 e9 4b 1d b4 e4 85 4f 37 b2 ce bc ca bb 2d d5 b9 8e c7 2d 93 00 b9 66 41 4b e1 63 01 c4 77 a5 3f 36 aa b8 85 Data Ascii: s+pz?z>_O]FU&T0vN_}_(zSynvA&g9g~.pGF__#x+u~x+gH@go6'\|*Svy,v!>y;h .:att^+2[rYkwo<KO7--fAKcw?6
2024-01-15 14:03:11 UTC	26	IN	Data Raw: c1 9c 41 c1 87 ec c6 b1 fc f8 fd ef 6d 7b ea 47 c1 55 f7 73 fd 87 80 f0 cf 7c Data Ascii: Am{GUs\|
2024-01-15 14:03:12 UTC	16383	IN	Data Raw: 40 16 5f 86 e9 de f8 8c bc cc 38 df 79 29 8a 08 a8 6f a9 e8 2e f8 07 c6 f6 c4 48 c7 af fa 99 72 42 fe 15 f7 d1 06 39 6a 9f c1 fa b8 de 3d 30 9e 01 34 89 c2 e9 02 c8 97 7b d9 0f 45 fc 6d 11 b3 6e 41 d6 b5 59 e7 73 22 69 ed a7 76 5b be 45 d3 b6 5b a6 13 80 2c 2b 4c 47 86 97 b2 93 5d 9d 2b e1 70 f9 46 87 70 1c 78 2a 37 8e 4d c5 ca cb 5f 43 29 85 f2 b7 8a 5a d9 85 ee e8 ea ab c6 6e 32 47 65 5f f5 79 34 55 1f df 5f 62 47 0c e4 12 3b e2 7b f9 17 de af 87 83 fb 94 e1 e3 9c 2b 77 3f a1 c3 41 32 15 ea 00 fa db 7d 19 92 8c 9b d3 49 1f 56 34 59 f9 a0 6c 97 9a 26 35 54 55 70 55 1e 91 ba b9 7e b4 72 20 ed 5d 41 a2 b9 da 60 0c d2 bb cd 61 bd 44 96 5b 30 e1 36 83 fa f0 c8 53 b3 e3 ae 36 9b 89 18 0e 66 34 a0 73 d0 fe c2 73 06 74 83 2e f8 a3 62 58 e8 49 d6 e9 92 27 50 e5 Data Ascii: @_8y)o.HrB9j=04{EmnAYs"iv[E[,+LG]+pFpx*7M_C)Zn2Ge_y4U_bG;{+w?A2}IV4Yl&5TUpU~r ]A`aD[06S6f4sst.bXI'P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.8	50002	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:11 UTC	463	OUT	GET /media/ipddiko2/cribis_22-05_visualcard03-sostenibilit%C3%A0.jpg HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:11 UTC	219	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Mon, 15 Jan 2024 14:03:11 GMT Accept-Ranges: bytes ETag: "95bc573de65d81:0" Connection: close Last-Modified: Thu, 12 May 2022 08:55:22 GMT Content-Length: 814048
2024-01-15 14:03:11 UTC	4180	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 cc a0 03 00 04 00 00 00 01 00 00 03 e8 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 03 e8 02 cc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~}!1AQa"q2#B
2024-01-15 14:03:11 UTC	8760	IN	Data Raw: 6f 5e a8 b5 1a b6 71 c0 5c 72 00 cf 23 b9 eb 91 c6 38 3c 77 ce 6b 30 51 4e cf ef f3 ff 00 c9 95 b5 f2 fb ec 5a 8e 33 91 8c 63 b1 04 e3 39 ee 33 c6 3a f2 4e 7e 6c 10 7e 6a 36 df f3 b7 f5 b7 f5 73 42 d2 a6 00 23 3d 57 82 09 07 00 f1 9c fb 7f b5 c7 40 46 37 4b 6a db a4 fd 7b f5 eb d3 5f ce df 64 2d c5 11 38 38 c7 42 06 09 52 09 e3 1f 7b 90 70 32 0f 6e 87 21 6b 27 27 6f 2d dd df e3 e4 bc b5 fc 1b 88 bc ac ef b7 5e eb ef ec 5e 58 87 1d f0 78 24 67 92 72 7a 74 c6 7a fc c3 b1 ea 1e b2 73 77 6b a6 ab 7f 97 f2 f7 f3 5d bc e5 5a 59 f4 f2 ef db ad bb 5e df 76 ad 96 91 02 83 fc 47 aa 8c 6d e3 d0 12 dc e7 27 04 9c f5 24 b7 f0 e4 da f2 56 b5 fe 7f e7 eb a6 f6 8f da d6 94 6f bc 39 93 76 be d6 d2 ff 00 3b a7 db a7 5e 62 c2 a6 7a fe 67 9c 73 90 14 02 b8 c8 ed 91 ee 38 2b Data Ascii: o^q\r#8<wk0QNZ3c93:N~l~j6sB#=W@F7Kj{_d-88BR{p2n!k''o-^^Xx$grztzswk]ZY^vGm'$Vo9v;^bzgs8+
2024-01-15 14:03:11 UTC	4380	IN	Data Raw: b7 95 fb bd 03 e2 ba 7b 27 f7 db 7b ea ad d3 a2 ff 00 b7 8b 71 c4 07 24 02 47 55 23 af 70 46 dc 67 9c 01 93 ed c6 33 47 35 95 ed a3 ea bb fa 3b df bd 9a 5e ba 85 ad ad f4 49 fa db f0 b6 dd 13 f5 bd cb 69 11 dd b7 8c 10 37 77 18 03 af be 33 9c 83 f8 71 f2 97 56 bd f6 d1 3d ae df 4e 9e 5b c7 ce ee cc a4 b4 4d ec df 7d fd 15 df 6b db e5 ae f2 b6 91 ed e0 74 f5 c7 42 33 ef c8 c0 e3 d4 b7 6f bb 50 fd eb e8 b4 df cf a2 ed 66 ef b6 bd 2f 7d e3 b5 95 92 d1 ad 96 8a de 9a 2d 16 9f de ff 00 16 ec b0 b1 f1 c8 ce 33 d7 82 33 dc fd ec f6 ef 9f 73 9d aa 9a b5 ac dc 7a df 47 a5 ad 64 fb a7 d5 d9 3e 9d e4 5b aa d2 ed 3f bb a7 f5 6f c2 f2 b0 91 e7 8c 60 01 d8 0c 1e 7a 01 c1 fc b7 71 ce 4e 49 ac e5 2b 69 a3 d1 ad f5 f5 7e ee fa f9 7c ec 94 68 b7 1c 63 d0 f4 e8 78 fc 4e 7f Data Ascii: {'{q$GU#pFg3G5;^Ii7w3qV=N[M}ktB3oPf/}-33szGd>[?o`zqNI+i~\|hcxN
2024-01-15 14:03:11 UTC	1460	IN	Data Raw: 4e cb ce cc af cf fa fb bf ae ec b0 88 d9 e9 c1 fe f0 c7 63 d0 9d d9 ea 4f 19 07 6f 3d 76 d6 72 95 ec d3 7f 26 97 c9 d9 f4 ed 6d fa e8 d0 7f 5f d7 6f bf ee d0 b6 88 be 9d 3e 9c 7e 5c 9e 4e 7a 1e 98 19 c9 0b 98 16 d2 3c fc a4 05 c7 e1 eb f3 67 a0 f4 ea 3e bf c4 c9 be db d9 ff 00 c0 5e 5f 8d fe 57 89 bf a7 a3 d3 cd df bd ad b7 a5 cb b1 a6 0f 5c 7b f4 3e 80 83 cf 5c f3 9c 75 fe 2e 5a a5 b7 d6 d6 ea ed 75 7e d6 e6 d7 f0 ef a5 9a 90 a1 d1 2b b6 db 7f 7e d7 f2 b7 57 af 68 df de 98 21 e8 17 e5 e8 c0 72 47 4e ad 9c 92 09 e8 07 4f 5e 36 c4 b7 4d 36 ff 00 0b 79 2d ec bc af f7 e8 69 c9 e7 d3 aa be bd 75 bc 93 d3 fb bb f6 de 36 91 40 c7 72 3b 74 ce 3b 71 91 d4 9c e7 76 3a f3 8c a2 6d b4 b6 d3 b7 5b f9 59 5b 6e ef e4 25 17 b3 5b e9 fc d6 d7 d5 25 bf cf 56 9c 76 26 0a Data Ascii: NcOo=vr&m_o>~\Nz<g>^_W\{>\u.Zu~+~Wh!rGNO^6M6y-iu6@r;t;qv:m[Y[n%[%Vv&
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: e6 da 5b fe 0b 5b 69 6d f4 d6 c3 49 25 a7 fc 0f 45 a3 bb 77 f2 b7 5e e3 64 50 14 fa 6d 27 07 90 00 e0 e3 e5 e4 ee 19 27 18 23 90 1b f8 52 6f 7f 9f de be 4f 6f 3d 3c 83 a7 e5 e7 e9 a3 5e ba af 99 f9 31 ff 00 05 7e d3 7e d5 fb 30 f8 7a ff 00 68 67 d1 7e 2d 68 6c ae 14 ee 8c 6a 9e 1b f1 45 a3 61 bf 84 3c 8b 08 20 85 c9 0a 07 f0 8a c7 16 ff 00 d9 6b 49 ee a1 17 17 fc bf bc 50 d1 6b 7b f3 d9 bb 49 eb d7 59 47 e9 f8 4a 7c b9 c5 3a 7c a9 c6 b5 3a aa 56 5a 2e 48 c6 b6 b6 d9 35 49 a9 2b ad 52 69 ab f2 9f a0 1f b3 ae b2 3c 43 f0 2b e0 9e b0 79 7b ff 00 84 7f 0e e6 91 87 de de be 15 d3 21 97 3d 73 89 21 20 9f 46 03 e5 c9 2b ad f9 bd f4 db e7 4a 77 df 59 2e 67 da fa b7 b5 af e5 73 c9 c6 53 8d 3c 66 2a 9c 6e a3 0c 56 22 11 56 b5 a3 1a f3 51 7f 6a d7 8d 9d 95 ed b7 56 Data Ascii: [[imI%Ew^dPm''#RoOo=<^1~~0zhg~-hljEa< kIPk{IYGJ\|:\|:VZ.H5I+Ri<C+y{!=s! F+JwY.gsS<f*nV"VQjV
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 9e ac ac 43 f2 47 39 a9 d9 77 fd 7f 2f ba de 4a c5 6c ed 65 7b 6e 9b 5f 76 db Data Ascii: CG9w/Jle{n_v
2024-01-15 14:03:11 UTC	5696	IN	Data Raw: 7a 3b eb ae e4 ca 3a 67 e5 0d ce ec 12 49 03 a7 2c bb b8 e7 23 2a 3b e0 06 34 37 6b ed a6 f7 76 b2 ee f7 b7 f5 a3 b7 29 57 b6 9d d5 94 92 de f6 ff 00 16 ad ee ee be 7b 92 2a 1c 92 a0 90 09 e5 87 43 8c e4 0e 07 cc 7d f8 27 18 26 b3 6d 5a dd d6 89 49 a7 a3 bd b6 be cd 6d 7b df 54 92 5c cd 2b 6d b3 ef ba bb ba 76 56 5f 86 8b b2 d0 93 66 4a e0 75 e0 74 00 8f bb 9e 9c 1e 73 b7 80 b8 04 92 0e 56 5b 6e ee cd eb ae fa 35 67 ee bb db 7b 2d 1e bb dd 6a 5f 7b ab eb 6e b6 7a 77 d1 5b bd d5 df 95 d9 26 0a 16 ea 40 1f 33 13 93 93 8c 65 40 60 c7 24 e3 8e 7a 06 24 1a 8e 8d 6c 9e e9 c7 b5 de 97 eb 6e ab b6 a4 ae c9 da fa bb ad 92 e9 b3 d6 e9 6c d6 fa de c3 b6 2e 00 c3 63 d7 a6 37 75 2d c9 c9 e5 bf ba 71 c1 c0 e6 a5 4a f2 d5 e9 7b f4 57 b3 d9 6d 65 f3 e9 75 bd e2 b7 7d 3a Data Ascii: z;:gI,#;47kv)W{C}'&mZIm{T\+mvV_fJutsV[n5g{-j_{nzw[&@3e@`$z$lnl.c7u-qJ{Wmeu}:
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: 2e 17 3c 00 32 36 f5 1d 3b 60 f2 47 41 9f 6c e4 85 c9 bb df cd df fa 7a 3f c3 ee 11 65 40 04 1e 99 38 23 01 4f d0 1c 12 46 49 c7 40 3a ed e7 14 87 ab eb fa fe 49 fe 5f 71 28 03 20 91 90 46 40 ca e0 f1 d4 e0 60 fa 93 db 8c ed 24 16 1b b7 97 f5 7d 3b 5d 2d f4 f9 ec 6b 49 7b d7 69 b6 bd 15 bb 37 d7 ee f9 ee 4c 07 03 3c 0c f5 51 c1 c7 4f 5e 30 73 bb 8e a4 60 e4 9a c6 4e ed bd 55 be 6f f0 8f 7e ef d1 cb ec f6 45 5d ed e5 f7 f9 3b 5f af a6 fa ec 4c aa bd 3a 82 47 07 e6 c7 1c 12 d9 19 e4 1e 0e c0 0e 72 0f 06 b1 6d df 5b ab ef 6d 9a 4d bb 6b a6 da fd d6 4b 79 6f 18 5d 72 ea 9f 75 ba d7 44 95 97 cd b6 ee de 96 b9 61 32 3a 63 ae 73 d4 0c 13 8e 9c f6 1c 0c 00 38 c0 c9 15 1f d2 f4 ff 00 3e 9e 9a 74 3b 23 0d 3e 5a ef 77 6e 8e fb 25 a7 59 3d 6f d1 4a 53 c6 08 7d dd 76 Data Ascii: .<26;`GAlz?e@8#OFI@:I_q( F@`$};]-kI{i7L<QO^0s`NUo~E];_L:Grm[mMkKyo]ruDa2:cs8>t;#>Zwn%Y=oJS}v
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 6d c5 6a 1c fb 7f c3 ff 00 e4 9a 7d ef 7e b6 35 4e f7 b5 fb 7f c1 4e df a3 b7 Data Ascii: mj}~5NN
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: 9d cb 91 af 01 70 31 92 17 2d 8c 80 78 fd 72 3a fe 79 ac 9b b2 bf 96 df d5 fa f9 7a dc e8 8e 8b 6d b4 4d ab 7e 6f ab da e9 37 65 64 af 62 ea c6 36 8e 39 c7 07 fa e3 27 38 1d 46 7b 67 72 f1 59 39 37 f3 d1 af f8 36 5d fb 75 b6 a3 7e 5f f0 df e7 f8 fe 09 c6 c0 40 08 dc 73 82 40 e3 d7 a1 38 ce 40 c0 18 cb 01 90 48 e9 b6 7f af eb 6f cf d2 c5 2b be ae fe 5b fa bf 2f 36 fd 2f 62 e4 51 90 01 c1 1e bf de e4 91 d7 b9 ef 80 0f 4c 15 1c 0a c5 c9 bb f6 ed ff 00 06 cb f2 fb cd 52 ea f7 fb da f9 e9 f9 77 da ec b4 17 e6 1d 87 1e 9c e0 73 8e bc e4 9e 7b 7f b2 4e 56 75 29 26 ff 00 ce da 7e 9b f4 d7 ee 27 51 8c 13 ce 7b f5 c7 e3 c6 49 19 1d 41 ec 73 9f 9c fe bf af f8 7f b8 d6 31 4a cf ae 8f d1 fa dd fc f6 bf ce c5 f8 93 a7 20 e4 86 e4 02 4e 30 70 b9 c7 b1 e7 93 8e 87 18 ae Data Ascii: p1-xr:yzmM~o7edb69'8F{grY976]u~_@s@8@Ho+[/6/bQLRws{NVu)&~'Q{IAs1J N0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.8	50003	212.7.67.30	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:11 UTC	452	OUT	GET /media/ogwbmvul/cribis_22-05_visualcard01-network.png HTTP/1.1 Host: www.synesgy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-Mapping-gbpmidao=C8C62B23367D41F5F2961393975097B2
2024-01-15 14:03:11 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 14:03:11 GMT Accept-Ranges: bytes ETag: "fad0b1e9160d81:0" Connection: close Last-Modified: Thu, 05 May 2022 15:01:54 GMT Content-Length: 854572
2024-01-15 14:03:11 UTC	14401	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 18 00 00 02 ec 08 06 00 00 00 a1 87 ce 1f 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 18 a0 03 00 04 00 00 00 01 00 00 02 ec 00 00 00 00 34 55 6b 82 00 00 40 00 49 44 41 54 78 01 9c bd 4b 8f 6e 5b 76 a6 15 11 7b ef 73 c9 3c 4e 43 91 65 4b 29 41 c7 a6 81 54 3d ff 10 53 88 14 4d fa a8 e8 60 3a 74 8c 8d 90 90 b8 34 28 b9 a0 4b d1 2c 10 88 1f 42 0f 24 a4 b2 69 80 48 9c 59 18 c9 ce 93 99 e7 9c 7d 09 de e7 79 c7 98 6b c5 3e a7 d2 c6 73 47 ac 35 e7 18 ef 78 c7 65 ce 35 d7 fa be f8 22 f6 e3 c3 df b2 fd c3 7f fa d3 df 79 ff f0 fe f7 9f 9e 9f 7f ef f9 f1 f9 47 8f 1f Data Ascii: PNGIHDRgAMAa8eXIfMM*i4Uk@IDATxKn[v{s<NCeK)AT=SM`:t4(K,B$iHY}yk>sG5xe5"yG
2024-01-15 14:03:11 UTC	7300	IN	Data Raw: 81 e5 bc f5 b2 4f 04 d1 f7 fa 45 67 e8 59 03 6e 26 d1 f6 fa 32 0b fc dd 1c 79 3f d4 20 f9 3f e6 ff 4e e4 49 1e 60 5f 8d d1 2f 21 c9 3a b9 8c f3 8f 1a 94 88 23 cb 26 81 8d 67 74 2d 0b b6 6c ca 6d b5 b9 0a 46 2a 8c b8 f0 b7 81 a1 21 81 6e 6f b2 88 91 f1 6a b5 9d 9c d3 01 d3 05 42 e7 65 eb 94 56 6e 71 8c 0b 0c b2 7c 67 5c 77 24 df 8d ad e3 fa 71 13 48 40 fd c7 c5 c7 44 d7 47 63 5e f4 14 55 ec c4 01 b6 50 e3 43 7a 7e bc 82 6f 26 34 3e 8d df 58 32 6e 32 e6 58 e6 1c 91 51 1f 0a 33 7d e2 e1 13 ff 6e 26 a8 c2 dd 19 c0 49 bf 7d 42 8d 4d d4 67 19 40 41 fd 90 d1 cc 8f 73 be d1 b5 55 8b ab 7d 8b 97 5c b5 e5 2c b8 73 b8 16 9e 8f 3d 7c f9 a7 4d 84 83 07 d3 2a 29 30 4c 70 5b 23 57 c2 f8 21 4f e3 d1 19 f8 b4 08 78 b0 38 3a 44 f9 d7 48 06 8f 5a 70 75 8e 10 6c 18 39 eb 4f Data Ascii: OEgYn&2y? ?NI`_/!:#&gt-lmF!nojBeVnq\|g\w$qH@DGc^UPCz~o&4>X2n2XQ3}n&I}BMg@AsU}\,s=\|M)0Lp[#W!Ox8:DHZpul9O
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: 9f 7e b7 25 c9 d6 6a 6f da 0d 01 de 36 7a f9 26 1e 38 d6 07 ae b2 28 bb 41 2e 72 f4 19 ee c6 09 1b 3f 3a f4 c6 31 a4 ea a0 a4 00 39 70 22 e6 58 4f 2c cb 37 18 3d 33 c7 20 c0 e0 a7 18 f8 69 95 8d 3d ca 9d 23 2d cc 60 7c d4 17 f3 8b ad 7c 32 10 23 44 2d d2 b0 6a a8 1c 3f 9a 4c 12 c3 ab 69 e2 59 29 63 62 f9 78 dc ba 91 03 08 d8 f3 bd d7 6c 85 b1 21 bf b4 60 80 51 ef c9 38 fb 80 1a c8 93 7b 6d 53 59 d7 22 d8 c6 5e 2b 1e 08 10 b0 57 49 ed d2 c4 7e f4 cc 79 f8 5a 83 f1 e1 3c 54 8f 39 ab 43 8f b8 da 62 a3 46 0e af 5c 83 51 1a 09 58 fb 39 07 4b 1f 13 dd 4f df fd 42 82 21 9b 7c ce af 0d 33 86 23 18 10 f4 bd 3e 72 1e 8b 91 52 07 a2 68 24 d7 2a 0a 6e 81 31 2e 17 1c f4 63 63 90 45 5f 69 21 0f 6d 1a a7 7b dd 91 9d 35 02 f1 12 d2 f1 eb ee f9 a6 26 ae f8 da 3d 84 a0 74 Data Ascii: ~%jo6z&8(A.r?:19p"XO,7=3 i=#-`\|\|2#D-j?LiY)cbxl!`Q8{mSY"^+WI~yZ<T9CbF\QX9KOB!\|3#>rRh$*n1.ccE_i!m{5&=t
2024-01-15 14:03:11 UTC	26	IN	Data Raw: c2 8a 64 78 51 e6 24 36 09 b0 fd 13 20 ca 88 d9 67 4e b8 78 e8 f4 0c 82 51 44 Data Ascii: dxQ$6 gNxQD
2024-01-15 14:03:11 UTC	3495	IN	Data Raw: b8 f5 dd 72 d5 b7 ce e1 cd 11 a7 cd 01 38 39 a1 62 49 b7 55 d7 fe 2b b3 0e f1 8d 1e 3b cb 48 cf 7b db 49 9f d3 4e 8c c8 e8 2c 20 c2 4b f9 9d 2b 07 f1 9d 8f 53 b2 a0 f8 c2 43 89 fa b9 72 fa 33 1f c9 d4 04 af 15 4b f2 18 64 4d 15 3a 9d e9 54 2e 1d 4e d3 5e 64 c8 01 2c e3 36 a5 97 ad 2d 23 a2 6d 69 1c f9 9b 4b c5 c7 1e 8e 30 d9 53 5e e9 19 04 94 79 28 92 58 bc 58 11 8f a9 11 5d ae 08 10 2b 74 ca bb 4f 1f 60 78 91 c0 55 81 0f 7a de 81 45 11 0b 08 6c 7f 60 81 21 fe 4b 3d 8c f8 c0 3b 52 6c eb cf ef 56 25 87 9b 5c 26 7f cf 5b 57 fd 43 e1 0c 0d 6e ed 20 f3 4e 57 45 60 bf d6 33 19 c4 e2 8f 8f ca 8f 37 af 5e 6b 92 fa e1 d9 bb 8f 1f dc 1f 3f e9 0a 0a f8 b4 f1 97 bc f8 48 49 ba 6d 0f 3c e7 41 7c 4a b6 3a 2f 37 69 de 2b 8f 08 96 b9 2a 9b 5e 16 fe 78 f4 49 21 ef f2 a5 Data Ascii: r89bIU+;H{IN, K+SCr3KdM:T.N^d,6-#miK0S^y(XX]+tO`xUzEl`!K=;RlV%\&[WCn NWE`37^k?HIm<A\|J:/7i+*^xI!
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: 2b b0 41 58 ff f4 b6 06 8c e5 89 9d 3e 6f a1 16 f5 13 a4 dc bd df 3a 19 47 f4 5f ae 5a 04 4b b0 29 06 74 8f 62 2a 8e db 0f 35 ee d8 5d 99 a9 4b f4 0d 2f e1 fb f8 a7 26 3d 8e db 2f ba ba 01 c6 0f fa fe 0c be ff 25 b7 ed 84 c0 ea 54 f2 ba 82 91 87 38 7a 60 d8 23 81 81 ed 7e 32 21 9b 7c 07 04 1e d6 73 d5 ec f1 de 23 99 83 6a 74 d8 29 98 9d 0c fc a9 e7 91 01 e3 42 83 7f d2 c6 86 84 ec 57 b4 66 2b 9e 73 76 62 0e cd 12 a3 63 19 11 3a 90 7a e5 03 4f 76 34 d7 96 f5 7b 63 f4 60 e1 ab ad 56 11 de 59 86 7e c6 45 7f 36 57 15 45 ed 36 a2 5b a8 ca de db db 0f e7 a6 f9 23 cf 95 8c 13 ee 49 1d 09 b5 73 eb 43 a5 d9 17 ef 8f 64 4e f9 5d 6f c0 c4 93 21 b8 79 bb f6 c8 07 39 cb 3b 13 ca b2 a9 36 21 98 3a 3c 0b 1c 9b b1 76 50 b0 db 7e bc c1 c3 a3 95 94 26 87 7b f4 b9 b2 b1 79 Data Ascii: +AX>o:G_ZK)tb*5]K/&=/%T8z`#~2!\|s#jt)BWf+svbc:zOv4{c`VY~E6WE6[#IsCdN]o!y9;6!:<vP~&{y
2024-01-15 14:03:11 UTC	26	IN	Data Raw: ca b6 3c a7 8b 94 55 da b7 6a fb 32 c9 09 5b 2d 7b 1a 4f 5c 1d 28 fb 26 34 46 Data Ascii: <Uj2[-{O\(&4F
2024-01-15 14:03:11 UTC	16383	IN	Data Raw: a5 ff f0 cb ff d6 b2 3d 6a 7f b4 e0 83 c7 46 60 75 70 4e 6f b8 77 d7 3e db 19 e8 6d 6f 4b ce b6 03 82 fd 25 04 c5 4d 9d c9 05 bf c4 cb 2f b5 fa 80 2b 7b 19 d9 c8 08 05 47 78 02 e1 ea fa 70 cd e5 10 dd ac a9 37 41 48 57 87 74 fd a8 d9 e3 ed 7b dd 47 a1 fb 22 7c 2f 05 e3 10 87 d9 36 35 c2 b8 a7 43 00 fc 41 e7 8f c9 c6 f9 83 ce 6b 3c 3e 1e 6e f5 b9 7c ad 9b 42 2f de 68 d8 5c eb 56 8d 57 3a 3b a2 49 81 9f 36 f9 4d ea 0f 3a c0 e8 6c 89 7e 9a f7 e6 81 a7 4f 74 c0 51 ee 5f bf 7a 7d f8 8d fb 37 d4 e6 e9 8d 57 f2 ed 13 8f c2 ca 61 62 f0 69 7e f9 fd f0 80 2f 0a 81 89 8d 76 af 9f 35 c9 89 6f 9a 88 48 0e ef f8 77 e9 f5 d8 32 c4 17 cd 67 10 e5 bf 31 9d b3 16 24 31 db b2 ee 7f d6 7e 68 3a fd e9 fe 93 51 b4 3d f4 9c 1b 70 4e e1 36 6d bb 6e bc ad f5 a5 65 70 1b 33 31 da Data Ascii: =jF`upNow>moK%M/+{Gxp7AHWt{G"\|/65CAk<>n\|B/h\VW:;I6M:l~OtQ_z}7Wabi~/v5oHw2g1$1~h:Q=pN6mnep31
2024-01-15 14:03:11 UTC	26	IN	Data Raw: 2a ab 65 ab c7 3b 57 6d ab 92 4f ef ae b6 db 54 b3 57 9c 8a b3 45 c6 3a b2 5b Data Ascii: *e;WmOTWE:[
2024-01-15 14:03:12 UTC	16383	IN	Data Raw: 14 ba 1b fa aa df 1d 3c 14 ff 60 05 1c 72 44 67 31 18 89 60 a6 7a b5 a8 2e e8 40 4e d8 ca 37 5a ed 5c b4 d1 78 c7 c3 e3 56 ba 11 d4 58 86 c9 a0 25 32 76 0d 1e cc aa 77 47 3b e2 32 47 bd e9 98 ca 44 d8 12 34 8f 8a 73 53 83 d3 e8 65 4f 86 04 94 41 69 eb e5 7f 56 08 b5 1f f2 86 a6 18 b3 6b e1 89 68 ac 48 76 7d ef 00 b9 b3 2c 88 06 40 29 a7 3e a9 35 4e 62 ce 18 31 ba 64 9d 6f ec ba 26 e1 99 7c 42 b1 fd 5a 2d b2 a2 db 99 ce c9 d0 86 e1 12 7c aa 78 30 e5 a8 f3 97 f1 27 3d e7 cd 2a 9b c5 73 db 8d d1 0c d7 98 51 83 1e 5b 6d 2d 7c db 71 9c 70 89 53 63 6c e8 47 2b 08 53 9f 5a b2 84 3c a5 0e 60 ae 0b a7 3a c9 e3 36 60 e6 18 d6 0a d1 6a 0f d3 3f a5 fc cc 0a 8d 96 27 77 6b 5e a0 e7 5e ac 29 33 84 c1 8b b9 30 2b 56 c8 5d 60 af 1e d9 4e 1b 6b a1 af 58 3b 27 d6 e3 30 96 Data Ascii: <`rDg1`z.@N7Z\xVX%2vwG;2GD4sSeOAiVkhHv},@)>5Nb1do&\|BZ-\|x0'=*sQ[m-\|qpSclG+SZ<`:6`j?'wk^^)30+V]`NkX;'0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.8	50004	34.95.108.180	443	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 14:03:11 UTC	451	OUT	GET /uct?v=1&sid=G_xgCaSxD&t=1&abv=&r=https%3A%2F%2Fwww.synesgy.com%2Fen%2Fwho-we-are%2F&cb=1705327387750 HTTP/1.1 Host: uct.service.usercentrics.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 14:03:11 UTC	405	IN	HTTP/1.1 200 OK X-Powered-By: Express Content-Type: image/gif Cache-Control: no-store Function-Execution-Id: n3dquvjuipcd X-Cloud-Trace-Context: 542348a86eb9ce6a2efc5a1c028a2596 Date: Mon, 15 Jan 2024 14:03:11 GMT Server: Google Frontend Content-Length: 35 Via: 1.1 google Strict-Transport-Security: max-age=7776000 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 14:03:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Target ID:	0
Start time:	15:01:52
Start date:	15/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:01:53
Start date:	15/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2424 --field-trial-handle=2256,i,15237379981053713451,14415150338944036936,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:01:55
Start date:	15/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Windows Analysis Report
https://service.synesgy.com/tr/register?invitationId=8c39766d-0cbf-4adb-8c33-a3274fb7a497&surveyId=Survey1&lang=en