Edit tour

Windows Analysis Report
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081

Overview

General Information

Sample URL:	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081
Analysis ID:	1428206
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body contains password input but no form action

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2348,i,5047404311257161446,12878580934394640687,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: chromecache_370.2.dr

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_7e50eaa1-d

Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: <input type="password" .../> found

Source: https://acrobat.adobe.com/dcpreviewdropin/3.0.2_2.709.0/printHelper.html	HTTP Parser: No favicon
Source: https://documentcloud.adobe.com/proxy/pdfverbs-web/3.17.1_4.807.0/shared-storage.html	HTTP Parser: No favicon

Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl	HTTP Parser: No <meta name="author".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl	HTTP Parser: No <meta name="author".. found

Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...	HTTP Parser: No <meta name="copyright".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49826 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:50103 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49826 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157

Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.css HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.js HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "NGYwNzExZDQtMmRhMS00NjQ1LWFjNDQtYzAzOGNjYTAxMTVmL2pwZy8xMjAwLzAvdHJ1ZQ=="
Source: global traffic	HTTP traffic detected: GET /6gNXXegDB6rtHARrNKRF8w.js HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=w1oudzXu88M1BHu&MD=uN8eYsxD HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /t2/496015/web/track.js?_=1713451454393&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOjdkMDczYTk5LTllZWYtNDc3YS1hNTFhLTM0ODFiMzM1NjA4MSIsInIiOiIifX0%3D HTTP/1.1Host: by2.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pX9hzPBKzxkBLH3Ewh5U8lwbAzGYbQ3D.w.inkkqfmc-1713451443-1.0.1.1-ETZMakdiSYW_zM7p2SK8kAKxlVzh_AwMAJfTEW5Up6eW5XFAvh1Q2o.f4koCt5mh7xVUsZGGabs19ksymcG9cQ
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221229884555399587%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221229884555399587%22%7D&relay=f1737240-fb5c-4b02-bf14-e2173f5f76e8&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_inf
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221229884555399587%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221229884555399587%22%7D&relay=f1737240-fb5c-4b02-bf14-e2173f5f76e8&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=57630194325831186262394717830879234904&ts=1713451479463 HTTP/1.1Host: sstats.adobe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221229884555399587%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221229884555399587%22%7D&relay=f1737240-fb5c-4b02-bf14-e2173f5f76e8&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=57428490072431195322410364993179336662
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=57630194325831186262394717830879234904&ts=1713451479463 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s22409465732503 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s26478278529738 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s22409465732503?AQB=1&pccr=true&vidn=331098EC808D6C66-60001509A194687E&g=none&AQE=1 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|331098EC808D6C66-60001509A194687E[CE]
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s26478278529738?AQB=1&pccr=true&vidn=331098ED00FAB1A6-6000047780B9D801&g=none&AQE=1 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|331098ED00FAB1A6-6000047780B9D801[CE]
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=w1oudzXu88M1BHu&MD=uN8eYsxD HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s2603142597743 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|331098ED00FAB1A6-6000047780B9D801[CE]; fg=YL73JLRTFPP5UDEKHAQVYHAAWY======
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s21865140738804 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|331098ED00FAB1A6-6000047780B9D801[CE]; fg=YL73JLRTFPP5UDEKHAQVYHAAWY======

Source: unknown

DNS traffic detected: queries for: www.google.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713451412568&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_348.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_442.2.dr	String found in binary or memory: http://github.com/janl/mustache.js
Source: chromecache_370.2.dr, chromecache_457.2.dr	String found in binary or memory: http://iso.org/pdf/ssn
Source: chromecache_370.2.dr, chromecache_457.2.dr	String found in binary or memory: http://iso.org/pdf2/ssn
Source: chromecache_384.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_473.2.dr, chromecache_465.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: chromecache_473.2.dr, chromecache_465.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: chromecache_465.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017702
Source: chromecache_473.2.dr, chromecache_465.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: chromecache_465.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017704
Source: chromecache_465.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: chromecache_290.2.dr, chromecache_439.2.dr, chromecache_384.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_364.2.dr	String found in binary or memory: https://adobereview.uservoice.com/forums/598411-document-review
Source: chromecache_364.2.dr	String found in binary or memory: https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160
Source: chromecache_282.2.dr	String found in binary or memory: https://enventuniverse.buzz/)
Source: chromecache_418.2.dr	String found in binary or memory: https://ims-na1.adobelogin.com/
Source: chromecache_473.2.dr, chromecache_465.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_315.2.dr, chromecache_302.2.dr	String found in binary or memory: https://sso.behance.net/ims
Source: chromecache_277.2.dr, chromecache_343.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: chromecache_473.2.dr, chromecache_465.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: chromecache_465.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: chromecache_465.2.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: chromecache_465.2.dr	String found in binary or memory: https://use.typekit.net/af/a2527e/000000000000000000017704/27/
Source: chromecache_473.2.dr, chromecache_465.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: chromecache_473.2.dr, chromecache_465.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2348,i,5047404311257161446,12878580934394640687,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2348,i,5047404311257161446,12878580934394640687,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 402
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 282	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 402	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
dd20fzx9mj46f.cloudfront.net	52.85.151.74	true	false	high
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	3.217.3.83	true	false	high
widget.uservoice.com	104.17.31.92	true	false	high
api.echosign.com	52.71.63.231	true	false	high
detect.adobedccdn.com	127.0.0.1	true	false	unknown
cdn-sharing.adobecc.map.fastly.net	151.101.1.138	true	false	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	54.224.27.195	true	false	high
adobetarget.data.adobedc.net	63.140.39.240	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
adobe.com.ssl.d1.sc.omtrdc.net	63.140.39.130	true	false	unknown
www.google.com	74.125.138.147	true	false	high
by2.uservoice.com	104.17.31.92	true	false	high
prod.adobeccstatic.com	99.86.229.14	true	false	unknown
_49100._https.detect.adobedccdn.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	high
c.evidon.com	unknown	unknown	false	high
ims-na1.adobelogin.com	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
_39691._https.detect.adobedccdn.com	unknown	unknown	false	unknown
l.betrad.com	unknown	unknown	false	high
dc-api-v2.adobecontent.io	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	high
_19292._https.detect.adobedccdn.com	unknown	unknown	false	unknown
dc-api.adobecontent.io	unknown	unknown	false	unknown
adobe.tt.omtrdc.net	unknown	unknown	false	unknown
cdn-sharing.adobecc.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	high
static.adobelogin.com	unknown	unknown	false	high
files-download2.acrocomcontent.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack	false	unknown
https://by2.uservoice.com/t2/496015/web/track.js?_=1713451454393&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOjdkMDczYTk5LTllZWYtNDc3YS1hNTFhLTM0ODFiMzM1NjA4MSIsInIiOiIifX0%3D	false	high
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	false	unknown
about:blank	false	low
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	false	unknown
https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321	false	high
https://widget.uservoice.com/6gNXXegDB6rtHARrNKRF8w.js	false	high
https://dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321	false	high
https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://sso.behance.net/ims	chromecache_315.2.dr, chromecache_302.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_290.2.dr, chromecache_439.2.dr, chromecache_384.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	chromecache_473.2.dr, chromecache_465.2.dr	false		high
https://enventuniverse.buzz/)	chromecache_282.2.dr	false		unknown
https://use.typekit.net/af/a2527e/000000000000000000017704/27/	chromecache_465.2.dr	false		high
https://adobereview.uservoice.com/forums/598411-document-review	chromecache_364.2.dr	false		high
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/	chromecache_465.2.dr	false		high
https://use.typekit.net/af/cb695f/000000000000000000017701/27/	chromecache_473.2.dr, chromecache_465.2.dr	false		high
http://typekit.com/eulas/000000000000000000017704	chromecache_465.2.dr	false		high
https://static.adobelogin.com/imslib/imslib.min.js	chromecache_277.2.dr, chromecache_343.2.dr	false		high
http://typekit.com/eulas/000000000000000000017706	chromecache_465.2.dr	false		high
https://p.typekit.net/p.gif	chromecache_473.2.dr, chromecache_465.2.dr	false		high
http://typekit.com/eulas/0000000000000000000176ff	chromecache_473.2.dr, chromecache_465.2.dr	false		high
https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160	chromecache_364.2.dr	false		high
http://typekit.com/eulas/000000000000000000017701	chromecache_473.2.dr, chromecache_465.2.dr	false		high
http://typekit.com/eulas/000000000000000000017702	chromecache_465.2.dr	false		high
http://typekit.com/eulas/000000000000000000017703	chromecache_473.2.dr, chromecache_465.2.dr	false		high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/	chromecache_473.2.dr, chromecache_465.2.dr	false		high
http://github.com/janl/mustache.js	chromecache_442.2.dr	false		high
http://feross.org	chromecache_348.2.dr	false		high
http://iso.org/pdf2/ssn	chromecache_370.2.dr, chromecache_457.2.dr	false		high
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	chromecache_465.2.dr	false		high
https://ims-na1.adobelogin.com/	chromecache_418.2.dr	false		high
http://jedwatson.github.io/classnames	chromecache_384.2.dr	false	URL Reputation: safe	unknown
http://iso.org/pdf/ssn	chromecache_370.2.dr, chromecache_457.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.138	cdn-sharing.adobecc.map.fastly.net	United States	54113	FASTLYUS	false
74.125.138.147	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.31.92	widget.uservoice.com	United States	13335	CLOUDFLARENETUS	false
52.71.63.231	api.echosign.com	United States	14618	AMAZON-AESUS	false
54.225.234.85	unknown	United States	14618	AMAZON-AESUS	false
54.224.27.195	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
63.140.39.130	adobe.com.ssl.d1.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.39.15	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
52.85.151.74	dd20fzx9mj46f.cloudfront.net	United States	16509	AMAZON-02US	false
63.140.39.240	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
99.86.229.14	prod.adobeccstatic.com	United States	16509	AMAZON-02US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428206
Start date and time:	2024-04-18 16:42:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/423@50/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://acrobat.adobe.com/link/home/ Browse: https://acrobat.adobe.com/link/home/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 13:43:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.98097972322679
Encrypted:	false
SSDEEP:	48:80duTKKwH5iidAKZdA19ehwiZUklqehTy+3:85vfgy
MD5:	1F540D9C0DF2E7CC7AC078397BC63CAD
SHA1:	5542DC63CB5EF127B669ADEFD451539DAC6F773F
SHA-256:	EBC87E167087CC768E4AA27B45397D9EE652C0CB7165FA5EE49492F115E7D9C4
SHA-512:	CB8490ABEF8939BFC069E0ECCBA06BDED3E7ED439F254585596D1BF90A62CE2C07E011CD542D4EEABBBB0C6FD776DE5B2A666436D2A56B5C1DF88CAF322638F5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....(H....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xvu....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xvu....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xvu....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xvu..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xzu...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........J.i......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 16:43:49.978910923 CEST	53	58260	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:49.993333101 CEST	53	49242	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:50.596335888 CEST	53	55880	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.200566053 CEST	61825	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.200910091 CEST	59310	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.305071115 CEST	53	61825	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.305505037 CEST	53	59310	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.512267113 CEST	57666	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.512476921 CEST	54954	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.616520882 CEST	53	57666	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.618024111 CEST	53	54954	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.630173922 CEST	53325	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.630486965 CEST	60672	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.631274939 CEST	53339	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.631627083 CEST	57301	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.735104084 CEST	53	53325	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.735124111 CEST	53	60672	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.735445976 CEST	61234	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.736105919 CEST	57797	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.747442007 CEST	54296	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.748128891 CEST	63246	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.841052055 CEST	53	61234	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.852371931 CEST	53	63246	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.852452040 CEST	53	54296	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.860388994 CEST	54713	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.860573053 CEST	52513	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.894557953 CEST	53	57797	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.963797092 CEST	53	62742	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.976537943 CEST	53	65478	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:52.999161005 CEST	64118	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:52.999422073 CEST	57600	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.000396967 CEST	59083	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.000551939 CEST	53468	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.102463007 CEST	53	52082	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.103919983 CEST	53	64118	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.104783058 CEST	53	57600	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.118808031 CEST	63602	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.156193972 CEST	65315	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.167540073 CEST	49598	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.171098948 CEST	51092	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.279510975 CEST	53	51092	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.298078060 CEST	55825	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.298844099 CEST	55292	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.404542923 CEST	53	55292	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.409813881 CEST	64753	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.412046909 CEST	53	62480	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.413434029 CEST	51085	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.415385962 CEST	53	64967	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.421710968 CEST	59787	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.422239065 CEST	53979	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.526979923 CEST	60782	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.527504921 CEST	55686	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.529170990 CEST	53	59787	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.529613972 CEST	53	53979	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.635488987 CEST	53	60782	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.635970116 CEST	53	55686	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.647803068 CEST	53	59939	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.652451992 CEST	59274	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.654257059 CEST	60480	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.664887905 CEST	60673	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.665558100 CEST	53020	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:43:53.751235008 CEST	53	56471	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.769782066 CEST	53	53020	1.1.1.1	192.168.2.5
Apr 18, 2024 16:43:53.770176888 CEST	53	60673	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:01.058487892 CEST	60826	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:01.058868885 CEST	49754	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:01.163906097 CEST	53	49754	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:01.165586948 CEST	53	60826	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:01.263144016 CEST	53	57485	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:02.317868948 CEST	51353	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:02.318012953 CEST	60392	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:03.034425974 CEST	53	49581	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:06.564990044 CEST	53	63290	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:06.756849051 CEST	53	53531	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:08.599073887 CEST	53	63758	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:10.624092102 CEST	53	56074	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:12.729585886 CEST	53	63314	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:12.970052004 CEST	52077	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:12.970052004 CEST	49229	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:13.075756073 CEST	53	52077	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:13.077056885 CEST	53	49229	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:13.137895107 CEST	53	55050	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:13.171696901 CEST	53	50353	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:14.278520107 CEST	53	51513	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:15.626216888 CEST	52912	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:15.626481056 CEST	62534	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:15.731308937 CEST	53	52912	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:15.732141972 CEST	53	62534	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:18.261816978 CEST	54780	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:18.262103081 CEST	59787	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:18.367412090 CEST	53	59787	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:18.368499994 CEST	53	54780	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:28.022285938 CEST	53	64001	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:36.032589912 CEST	56620	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:36.032883883 CEST	62190	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:39.068464994 CEST	64640	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:39.068634033 CEST	57819	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:39.173472881 CEST	53	64640	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:39.173542023 CEST	53	57819	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:40.221554995 CEST	61149	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:40.222248077 CEST	51774	53	192.168.2.5	1.1.1.1
Apr 18, 2024 16:44:40.325768948 CEST	53	61149	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:40.326948881 CEST	53	51774	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:49.425139904 CEST	53	53400	1.1.1.1	192.168.2.5
Apr 18, 2024 16:44:49.436440945 CEST	53	59492	1.1.1.1	192.168.2.5
Apr 18, 2024 16:45:07.926759005 CEST	53	57438	1.1.1.1	192.168.2.5
Apr 18, 2024 16:45:18.099569082 CEST	53	54603	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:43:55 UTC	786	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://acrobat.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:43:56 UTC	1208	IN	HTTP/1.1 200 OK Connection: close Content-Length: 116517 Server: openresty Content-Type: application/pdf access-control-allow-credentials: true access-control-allow-headers: Authorization,Content-Type,X-Api-Key,User-Agent,If-Modified-Since,If-Match,expires,cache-control,pragma,X-Sharing-Password,X-Access-Token,X-Feature-Override,Captcha-Site-Key,Captcha-User-Response,X-Request-Id,Storage-Client,Uber-Trace-Id,Reminder-Duration,priority access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-expose-headers: Etag,Location,Password-Access,Retry-After,X-Latest-Version,Version,link access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081 build: 5841fd38 content-md5: KtwLGc3G2gvYKJ4BJqgVpA== etag: "5dd55810-776a-4d3b-970e-cb634e1dfc28" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true" link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective"
2024-04-18 14:43:56 UTC	1487	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 70 6f 6c 69 63 79 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 61 63 2f 70 6f 6c 69 63 79 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d Data Ascii: link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/ac/policy"link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-
2024-04-18 14:43:56 UTC	1316	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 2f 3a 61 70 70 6c 69 63 61 74 69 6f 6e 6d 65 74 61 64 61 74 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 6d 65 74 61 64 61 74 61 2f 61 70 70 6c 69 63 61 74 69 6f 6e 22 3b 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:applicationmetadata>; rel="http://ns.adobe.com/adobecloud/rel/metadata/application"; type="application/json"link: <https://cdn-sharing.adob
2024-04-18 14:43:56 UTC	1403	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 70 72 69 6d 61 72 79 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 64 69 72 65 63 74 6f 72 79 2f 72 65 70 6f 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 39 62 31 33 36 31 64 38 2d 35 61 37 36 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/primary"link: <https://platform-cs.adobe.io/content/directory/repo/urn:aaid:sc:VA6C2:9b1361d8-5a76
2024-04-18 14:43:56 UTC	16384	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 0a 25 b5 b5 b5 b5 0d 0a 31 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 43 61 74 61 6c 6f 67 2f 50 61 67 65 73 20 32 20 30 20 52 2f 4c 61 6e 67 28 65 6e 2d 55 53 29 20 2f 53 74 72 75 63 74 54 72 65 65 52 6f 6f 74 20 32 34 20 30 20 52 2f 4d 61 72 6b 49 6e 66 6f 3c 3c 2f 4d 61 72 6b 65 64 20 74 72 75 65 3e 3e 2f 4d 65 74 61 64 61 74 61 20 37 38 20 30 20 52 2f 56 69 65 77 65 72 50 72 65 66 65 72 65 6e 63 65 73 20 37 39 20 30 20 52 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 32 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 73 2f 43 6f 75 6e 74 20 31 2f 4b 69 64 73 5b 20 33 20 30 20 52 5d 20 3e 3e 0d 0a 65 6e 64 6f 62 6a 0d 0a 33 20 30 20 6f 62 6a 0d 0a 3c 3c 2f 54 79 70 65 2f 50 61 67 65 2f 50 61 72 65 6e 74 20 32 20 30 20 Data Ascii: %PDF-1.7%1 0 obj<</Type/Catalog/Pages 2 0 R/Lang(en-US) /StructTreeRoot 24 0 R/MarkInfo<</Marked true>>/Metadata 78 0 R/ViewerPreferences 79 0 R>>endobj2 0 obj<</Type/Pages/Count 1/Kids[ 3 0 R] >>endobj3 0 obj<</Type/Page/Parent 2 0
2024-04-18 14:43:56 UTC	16384	IN	Data Raw: 82 0a 9c 11 c8 23 a8 af 49 f0 57 8d 04 c2 3d 2f 53 90 09 06 04 17 0c 7e f7 60 ad ef e8 6b cd 68 04 86 c8 24 37 50 47 18 aa a7 51 c2 57 5b 18 62 f0 94 f1 10 71 97 c9 9f 44 fb 7a 71 46 2b 86 f0 47 8b 06 a1 1a 69 37 ee 3e d6 8b 88 64 63 fe b5 7d 0f fb 42 bb 42 e0 71 5e a5 3a 9c ea e8 f8 ec 46 1e 74 26 e1 22 5c fb d1 9f 4a aa f7 0a 07 5a 88 5d af ad 59 ce 5f cd 26 6a b2 dd 29 1d 69 de 72 75 a0 09 b3 4b 9a 83 ce 5f 5a 3c e5 f5 a0 09 f3 ed 46 45 41 e7 af ad 21 b8 5c f5 a0 0b 39 a3 35 5c 4e 87 a1 a9 37 8a 00 7e 68 aa d2 4c 10 9a 68 ba 5a 00 b7 47 7a ac 2e 14 d3 fc f5 f6 a0 09 c9 e2 92 a1 f3 d7 da 94 4a 0d 00 4b 45 33 75 3b 75 00 3a 92 9b bb de 93 75 00 3e 8a 66 ea 37 50 03 f1 46 05 37 75 1b 85 00 3e 8c d3 37 51 b8 50 03 b3 ef 46 7d e9 bb 85 1b 85 00 3f 34 99 f7 Data Ascii: #IW=/S~`kh$7PGQW[bqDzqF+Gi7>dc}BBq^:Ft&"\JZ]Y_&j)iruK_Z<FEA!\95\N7~hLhZGz.JKE3u;u:u>f7PF7u>7QPF}?4
2024-04-18 14:43:56 UTC	16384	IN	Data Raw: c7 c5 4c 98 6b fe 3c c6 98 f1 3a c6 0e 5f 7c cc 5f 8c 4c 61 8b d9 4a d6 8e af cd 6c 2b bb 98 3d cc de 66 0b d8 26 a8 2b d9 36 76 0b fb 25 0b b3 47 d9 af d9 eb ff ec 9f c0 f4 b4 c3 27 eb 97 30 ab 7a 1f 33 b0 24 c6 ba 0f 74 ef 3f 7c 0b d0 a5 4f e8 e1 b9 18 a9 24 9d f7 a8 a7 db de fd d9 71 be cf 0e 5f dc 6d 3f dc 65 48 64 66 ad 6e bc f2 12 bc 7f e2 87 ba 0f e0 95 8b 74 f7 60 91 56 b6 40 db b4 1a 5f 1a af 3b 7c f7 e1 5b 8f 9b 83 a9 6c 16 9b cd e6 b0 b9 ac 96 d5 61 fc 0d ac 99 2d c2 cc 9c c4 5a d8 12 b6 54 4b 2d 45 de 42 7c 36 21 35 1f a5 10 5e 34 7d b4 d4 32 d6 0a ac 60 6d 6c 15 5b 8d af 56 e8 95 d1 94 c8 5b ae a5 57 b1 35 f8 5a cb 4e 66 eb d8 29 6c 3d db 10 fd 5c a3 79 d6 23 67 9d 96 5e 0b 6c 64 a7 62 65 4e 63 a7 6b 4a 32 79 36 b1 33 d8 99 58 b5 2d ec 2c 76 Data Ascii: Lk<:_\|_LaJl+=f&+6v%G'0z3$t?\|O$q_m?eHdfnt`V@_;\|[la-ZTK-EB\|6!5^4}2`ml[V[W5ZNf)l=\y#g^ldbeNckJ2y63X-,v
2024-04-18 14:43:56 UTC	16384	IN	Data Raw: fe f8 61 88 34 82 e4 8f 67 0b 3a d5 1f 5f 86 48 21 a3 9d 90 4c b0 11 ac 84 24 82 85 90 48 48 20 98 09 f1 84 38 42 2c dd 21 86 ee 10 4d 46 13 c1 48 30 10 f4 84 28 82 8e a0 25 68 08 6a 82 8a fa 8c 24 44 90 51 49 50 10 44 82 40 e0 09 1c 01 64 70 41 42 80 d0 47 38 42 38 4c 38 44 f8 89 f0 23 e1 1f f2 6d b9 1f e4 11 71 df 93 f1 20 e1 ef 84 ef 08 df 12 0e 10 be 21 7c 4d e8 25 ec 27 7c 45 f8 92 f0 05 e1 73 c2 67 74 bf bf f9 e3 24 c4 5f 09 fb fc 71 b8 c0 b8 4f 09 9f f8 e3 4a 10 1f 13 3e f2 c7 8d 46 7c e8 8f ab 44 7c 40 78 9f f0 9e 3f ae 0a f1 ae 3f ae 1a f1 0e e1 6d c2 5b d4 f5 9b 84 37 a8 b3 d7 a9 b3 bd 84 d7 08 af 52 67 7f a1 76 af 10 5e 26 bc 44 d8 43 d8 4d d8 45 ed 5e a4 ae ff 4c 78 81 9c 7f 9e f0 1c dd ef 59 7f 5c 05 62 27 35 78 86 6e b4 83 bc 7e 9a 3a db 4e Data Ascii: a4g:_H!L$HH 8B,!MFH0(%hj$DQIPD@dpABG8B8L8D#mq !\|M%'\|Esgt$_qOJ>F\|D\|@x??m[7Rgv^&DCME^LxY\b'5xn~:N
2024-04-18 14:43:56 UTC	16384	IN	Data Raw: bf 74 12 1e 1a 2b c6 0c f9 0e 74 93 f3 48 37 b5 9c 9d 31 e2 89 31 5d 7b 1b 7b 4b 73 a4 35 ab b4 3b d2 ce d9 d5 1e e9 b5 27 ee c0 59 40 18 10 82 c1 45 84 00 31 8c b8 c3 61 fb 4d 21 60 af f9 eb 62 e8 bf d3 f7 2c f4 d5 8a 91 b7 4a 09 bc 37 1c a0 27 c7 1a c6 27 da d3 34 39 34 4a 9e 0f d3 ab 71 92 2f bd 2c 78 a9 52 82 04 58 29 e7 f1 5f e9 24 d1 22 12 19 65 12 4a 53 8d 01 ae 37 58 0e 33 3e 0d 0b 11 f8 e4 1b 64 38 a9 2b 11 3d 2c dd 42 9c 61 19 ab eb b6 4c fc bb 3e d3 e1 cc 73 d3 6a 77 d1 cd 1c da 5d d1 db f2 2f 08 7b 4d cb 7a cb 65 70 72 b6 f2 af de b2 fd 1d f2 4e 41 bb 3c b4 77 0a a2 00 e5 2e 0e 55 d7 d5 22 99 c4 e6 df b9 12 17 07 38 85 ad 5d 02 32 b6 fd 06 53 aa 66 d8 52 fc 36 fb a8 d7 08 6a b4 1d b5 1e c8 c7 65 29 61 5d 54 b4 a1 e4 e6 b1 b9 97 32 d9 8f 17 78 Data Ascii: t+tH711]{{Ks5;'Y@E1aM!`b,J7''494Jq/,xRX)_$"eJS7X3>d8+=,BaL>sjw]/{MzeprNA<w.U"8]2SfR6je)a]T2x
2024-04-18 14:43:56 UTC	16384	IN	Data Raw: ad f1 2c 37 48 1a fa e4 17 c0 3b 35 a9 98 12 c8 6d b0 f1 aa 54 d4 dd 6f b4 f0 db da a5 4f 0c d8 49 8f 03 85 6b c0 34 d5 d1 2b 03 03 7e 68 54 9c 6a 47 9a a5 91 71 0d d6 4a 84 18 c0 06 17 0e 9a 3d 44 5f ac be 7a a7 35 cb be 96 78 21 d5 ea b4 a5 91 9e ce 13 cd e6 d4 b3 b6 f4 58 3d cf f5 c0 f4 da c7 68 f4 c9 66 b3 33 1c 4c 41 26 2f 60 78 aa 22 00 4f 95 07 06 81 00 5c e2 bf 2d 5c bf 5e 0d fc b1 35 42 c0 3d 25 c3 e7 37 23 a6 a3 84 31 ee dc 77 21 cd e2 47 8b 01 c6 0c ec ec e5 02 44 7f 9c 48 05 23 a1 4d 78 c6 26 64 ed d5 cb fd 68 82 00 ce 2e 84 e9 c4 60 55 7d 25 e0 bc e3 14 46 98 25 60 41 90 c6 42 7e 59 2f 66 f1 e7 8a 2c a2 04 56 ec bf 7a b6 c5 f6 b6 b8 d0 4f da 4c 85 07 51 98 b5 dd ea 0a 6a 56 2b 59 8e 6e 2f e0 ce 88 4f ea 5e 78 54 72 50 5a e0 2e 8c a7 a4 f4 c1 Data Ascii: ,7H;5mToOIk4+~hTjGqJ=D_z5x!X=hf3LA&/`x"O\-\^5B=%7#1w!GDH#Mx&dh.`U}%F%`AB~Y/f,VzOLQjV+Yn/O^xTrPZ.
2024-04-18 14:43:56 UTC	16384	IN	Data Raw: 1b 3a e9 08 51 0f e2 2b 4f d9 0b 25 92 42 4f 59 82 46 75 96 a5 50 2e f1 94 bd d1 30 f2 9d b4 8a b2 8a ba 8a c9 8e 12 ba c4 5e 67 a7 8b ab 6b 26 d5 56 94 95 d7 d1 9b e8 58 53 8c 29 12 5e 31 11 f4 80 ea ea b2 71 0e 3a b5 ba b6 a6 ba d6 5e 57 51 5d 15 35 a4 c6 51 45 e7 db ab 9c 74 85 93 b6 d3 75 b5 f6 12 47 a5 bd 76 2c 5d 5d da 81 6e af 2a a1 2b ed 93 e8 d1 0e ba d6 51 56 e1 ac 73 d4 c2 38 15 55 74 b1 a3 b6 ce 0e df 31 f5 b5 15 ce 92 8a 62 96 a0 33 2a 26 2a c6 d4 87 fd 7f 85 7d 58 da 2c e9 c8 3c 47 59 fd 38 7b ed bd b1 3c 80 e1 8e 5a 27 f4 a1 d9 2e 29 ce 62 47 55 89 a3 b6 2b 77 e5 75 75 35 bd a3 a3 27 4c 98 10 65 f7 34 17 43 6b 54 71 75 65 74 dd a4 1a 47 89 c3 59 51 56 05 44 a2 ca eb 2a c7 0d aa 00 14 27 b0 56 cf d1 a9 2b 77 d0 29 35 f6 62 f8 78 5a 22 e8 8e Data Ascii: :Q+O%BOYFuP.0^gk&VXS)^1q:^WQ]5QEtuGv,]]n+QVs8Ut1b3&}X,<GY8{<Z'.)bGU+wuu5'Le4CkTquetGYQVD'V+w)5bxZ"

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:43:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 14:43:55 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=231593 Date: Thu, 18 Apr 2024 14:43:55 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:43:56 UTC	832	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://acrobat.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:43:57 UTC	1369	IN	HTTP/1.1 200 OK Connection: close Content-Length: 52923 Server: openresty Content-Type: image/jpeg access-control-allow-credentials: true access-control-allow-headers: Authorization,Content-Type,X-Api-Key,User-Agent,If-Modified-Since,If-Match,expires,cache-control,pragma,X-Sharing-Password,X-Access-Token,X-Feature-Override,Captcha-Site-Key,Captcha-User-Response,X-Request-Id,Storage-Client,Uber-Trace-Id,Reminder-Duration,priority access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-expose-headers: Etag,Location,Password-Access,Retry-After,X-Latest-Version,Version,link access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081 build: 5841fd38 etag: "NGYwNzExZDQtMmRhMS00NjQ1LWFjNDQtYzAzOGNjYTAxMTVmL2pwZy8xMjAwLzAvdHJ1ZQ==" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true" link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective" link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/ac/policy"
2024-04-18 14:43:57 UTC	1317	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 2f 3a 62 6c 6f 63 6b 5f 75 70 6c 6f 61 64 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 62 6c 6f 63 6b 2f 69 6e 69 74 22 3b 20 72 65 70 6f 3a 6d 61 78 53 69 6e 67 6c 65 54 72 61 6e 73 66 65 72 53 69 7a 65 3d 22 31 30 34 38 35 37 36 30 22 3b 20 72 65 70 6f 3a 6d 69 6e 42 6c 6f 63 6b 54 72 61 6e 73 66 65 72 53 69 7a 65 3d 22 31 22 0d 0a 6c 69 6e Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:block_upload>; rel="http://ns.adobe.com/adobecloud/rel/block/init"; repo:maxSingleTransferSize="10485760"; repo:minBlockTransferSize="1"lin
2024-04-18 14:43:57 UTC	1362	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 2f 3a 61 70 70 6c 69 63 61 74 69 6f 6e 6d 65 74 61 64 61 74 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 6d 65 74 61 64 61 74 61 2f 61 70 70 6c 69 63 61 74 69 6f 6e 22 3b 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:applicationmetadata>; rel="http://ns.adobe.com/adobecloud/rel/metadata/application"; type="application/json"link: <https://cdn-sharing.adob
2024-04-18 14:43:57 UTC	1366	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 70 72 69 6d 61 72 79 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 64 69 72 65 63 74 6f 72 79 2f 72 65 70 6f 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 39 62 31 33 36 31 64 38 2d 35 61 37 36 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/primary"link: <https://platform-cs.adobe.io/content/directory/repo/urn:aaid:sc:VA6C2:9b1361d8-5a76
2024-04-18 14:43:57 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 32 61 30 64 38 64 39 2c 20 32 30 32 33 2f 30 33 2f 31 34 2d 31 31 3a 31 39 3a 34 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.2a0d8d9, 2023/03/14-11:19:46 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-04-18 14:43:57 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 14:43:57 UTC	1371	IN	Data Raw: 06 07 08 02 04 05 03 01 09 0a 0b 01 01 00 02 03 01 01 00 03 01 00 00 00 00 00 00 00 00 05 06 01 04 07 03 02 08 09 0a 0b 10 00 01 03 03 01 02 07 03 07 0d 09 71 00 00 00 00 00 01 02 03 04 05 11 12 06 21 07 13 31 37 41 76 b5 14 22 51 15 23 71 81 91 a1 d2 16 17 32 38 42 52 53 54 61 62 73 92 b2 08 09 72 93 a3 b1 d1 e1 f0 0a 18 19 1a 24 25 26 27 28 29 2a 33 34 35 36 39 3a 43 44 45 46 47 48 49 4a 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 74 75 77 78 79 7a 82 83 84 85 86 87 88 89 8a 94 95 96 97 98 99 9a a2 a4 a5 a6 a7 a8 a9 aa b3 b4 b6 b7 b8 b9 ba c1 c2 c3 c4 c5 c6 c7 c8 c9 ca d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 01 02 01 05 04 07 04 11 73 05 00 00 00 00 00 01 02 11 03 04 05 12 21 31 22 41 51 61 06 13 71 81 91 Data Ascii: q!17Av"Q#q28BRSTabsr$%&'()*34569:CDEFGHIJUVWXYZcdefghijtuwxyzs!1"AQaq
2024-04-18 14:43:57 UTC	1371	IN	Data Raw: f4 bb 11 9c 28 6c d3 f7 35 27 55 f8 03 3d 18 ed 07 13 8b a7 d8 33 19 d3 06 78 7a 5d 8b 9a f0 95 b3 c8 b8 d3 3e 7e 02 cf 46 7c f6 87 5f 17 4f b0 7d 46 72 c2 e3 e9 76 2f c5 e1 2f 67 51 71 a6 7c fc 05 9e 8c cf 68 55 f1 74 fb 06 3a d2 c2 e3 e9 76 2f c7 70 9b b3 6d 5c 2b 6a 13 ee c6 7a 31 da 15 7c 5d 3e c1 8e b4 f0 b8 fa 5d 8b bf 45 b6 96 8a c6 ea 85 b2 aa 7b 56 b5 3f 6e 3c 6b c1 aa 9d ad ac 2c a2 9a f6 3b 7e 94 14 5e b9 27 98 df 44 78 cc bd df 19 76 ae d7 17 a9 a4 89 e5 37 d1 19 1f 24 db 4b 32 fb 13 cc 6f a2 03 f7 d2 ca cf f5 b3 cc 6f a2 03 f7 d2 c6 cf f5 b3 cc 6f a2 03 f5 36 c2 d2 be c4 f3 1b e8 80 26 d7 da 7e b6 79 8d f4 40 7e 2e d8 5a 13 d8 9e 63 7d 10 1f 46 ed 4d b5 cd d4 8d 93 1e 43 7d 10 1f 27 ed 95 a1 8b 87 24 89 e5 37 d1 01 c5 76 de c8 9c ab 27 98 df Data Ascii: (l5'U=3xz]>~F\|_O}Frv//gQq\|hUt:v/pm\+jz1\|]>]E{V?n<k,;~^'Dxv7$K2ooo6&~y@~.Zc}FMC}'$7v'
2024-04-18 14:43:57 UTC	1371	IN	Data Raw: 31 a8 87 d1 af 6b b9 14 cd 8b cb f7 bd c9 8b 31 a5 2f c7 48 c6 a6 55 70 82 cc dd f3 ee c8 1a bc a0 bc b9 b6 68 d7 7a 29 96 35 b8 f7 5c 0d 55 cb 8c 33 12 36 a6 17 ae e5 33 a8 89 7e 3e aa 16 f2 a9 f3 66 06 55 c2 ed c8 b9 32 3e bc 73 1a 99 53 36 1c 3b ae 25 dd a8 49 2e 6d 73 1f bd 17 38 03 9e 94 f0 01 c1 62 6a f4 20 1f 9d cd 16 73 a5 3c c0 39 24 6d e4 c0 0e 29 be 04 03 8a c1 1a f2 a0 1f ad 89 ad dc 9b 90 0e 4e 6a 63 90 0f ce 25 98 e4 01 c5 37 c0 80 38 a6 f8 10 0e 4d 6a 27 20 1f a0 30 98 c0 1f 9a 53 c0 03 43 7c 00 7e 68 6f 80 0f dd 2d f0 00 d0 df 00 0d 0d f0 00 d0 df 00 0d 0d f0 00 d0 df 00 1f a0 00 00 00 00 00 00 00 00 00 00 07 d6 97 e6 a6 2f 81 b7 e1 c0 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 1k1/HUphz)5\U363~>fU2>sS6;%I.ms8bj s<9$m)Njc%78Mj' 0SC\|~ho-/
2024-04-18 14:43:57 UTC	1371	IN	Data Raw: ed a0 a3 6f fa c0 e2 dd a4 a4 55 dc be 50 1f 4f 17 29 5c 99 e4 03 e4 eb c5 0b b7 aa 80 6d d2 8d cb b8 03 ae 94 68 b8 03 b1 4d 51 4b 3f a8 a8 1f b3 cf 4f 0e f5 03 a2 97 6a 35 95 1a 89 95 55 e8 03 d0 d5 12 c7 a9 c9 84 e5 03 cb a8 75 bd 5e ba b9 7c 80 3e 1c 55 b9 dc 98 01 f2 6c 63 70 b8 03 e6 b0 db 1d df 6e 03 f5 1b 6c 62 01 ca 28 68 24 7a 61 10 0f 6a 08 69 e2 85 31 c8 07 91 5a eb 73 9e e4 72 a6 53 94 0f 2d 69 ad aa ec e7 94 0e ed 3d 3d bd 1c 88 9b d4 0f 73 8b 85 29 f1 eb 20 78 f2 d3 db f8 c5 55 c6 72 07 de 0b 7d 04 8b b9 11 55 00 fb 54 d4 53 51 46 ad 54 dc 80 78 b2 5e 2d d2 3f 7a 65 40 fd 5a 8a 07 37 3a 40 f9 b2 6a 05 5c 23 40 f4 e9 6d 14 75 29 ab 09 80 3f 2a ad d4 34 99 4f 00 1d 16 d5 db 95 da 5d d0 07 66 35 b5 ee e4 03 ea ab 6f 44 dc a0 71 6f 89 e8 e4 55 Data Ascii: oUPO)\mhMQK?Oj5Uu^\|>Ulcpnlb(h$zaji1ZsrS-i==s) xUr}UTSQFTx^-?ze@Z7:@j\#@mu)?*4O]f5oDqoU
2024-04-18 14:43:57 UTC	1371	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 70 88 95 0b 51 4b c4 fb 0d d9 f7 60 22 70 3e e0 9c bb fd a8 1f 65 9e b9 39 10 0e 09 35 c9 5d 94 03 e8 8f af 54 de 80 7c 65 9e e0 c7 65 11 40 ef db e7 ab 91 ab c6 6e 03 ab 71 ee d4 7a f1 7c 9d 00 75 19 35 d7 38 54 5c 01 db 64 b5 c8 d4 ca 6f 03 f2 57 dc 55 b9 44 e4 03 aa e9 2e c8 b8 c6 e0 3f 52 6b 93 7b ec 72 01 ed da 6a 26 91 be 3a b8 50 3d a4 46 e9 00 88 cf 24 0f de f7 c0 03 4b 7d a0 1f a9 a7 a1 40 fd de 00 00 00 00 00 00 00 00 00 00 00 00 e1 22 aa 22 a8 1f 06 39 ca ed e0 76 5b c8 07 e8 1d 7a 9d 5a 1f a7 d4 b1 b8 08 95 7f 8a 29 37 7b c9 e0 03 83 6a 2e 4d 6e 00 f9 49 55 74 ce 10 04 55 57 77 2e 15 37 78 40 f5 ed b2 d5 6a 45 93 72 64 0f 7e 17 37 19 Data Ascii: pQK`"p>e95]T\|ee@nqz\|u58T\doWUD.?Rk{rj&:P=F$K}@""9v[zZ)7{j.MnIUtUWw.7x@jErd~7

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:43:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 14:43:56 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=231577 Date: Thu, 18 Apr 2024 14:43:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 14:43:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:01 UTC	563	OUT	GET /utilnav/9.2/utilitynav.css HTTP/1.1 Host: prod.adobeccstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:44:01 UTC	598	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 170927 Connection: close Last-Modified: Tue, 10 May 2022 06:05:18 GMT x-amz-storage-class: INTELLIGENT_TIERING Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 18 Apr 2024 10:20:54 GMT Cache-Control: max-age=43200 ETag: "f1502fac113b15d77b859c2478d9b136" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9fb7397504a65afc778db3eb0ee0bfa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C3 X-Amz-Cf-Id: zlzc3JE2-e-UmelqzqtpEdbVQdWn69KG9GucZcHcIiZj76xXqt4lVQ== Age: 18562 Cross-Origin-Resource-Policy: cross-origin
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 20 6f Data Ascii: /* * Copyright 2018 Adobe Systems Incorporated. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * o
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 64 69 73 70 6c 61 79 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 64 69 73 70 6c 61 79 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 20 65 6d Data Ascii: um-Heading1--display.spectrum-Heading1--quiet{font-size:45px;font-weight:300;line-height:1.3;font-style:normal;letter-spacing:0;text-transform:none;margin-bottom:8px;margin-top:8px}.utilnav-container .spectrum-Heading1--display.spectrum-Heading1--quiet em
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 6d 2d 42 6f 64 79 33 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 33 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 2d 2d 73 65 63 6f 6e 64 61 72 79 2c 2e 75 74 69 6c 6e 61 76 2d Data Ascii: m-Body3 strong,.utilnav-container .spectrum:lang(zh) .spectrum-Body3 strong{font-size:16px;font-weight:900;line-height:1.7;font-style:normal;letter-spacing:.05em;text-transform:none}.utilnav-container .spectrum:lang(ja) .spectrum-Body--secondary,.utilnav-
2024-04-18 14:44:01 UTC	14808	IN	Data Raw: 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 Data Ascii: ding2--strong strong,.utilnav-container .spectrum:lang(ko) .spectrum-Heading2--strong strong,.utilnav-container .spectrum:lang(zh) .spectrum-Heading2--strong strong{font-size:25px;font-weight:900;line-height:1.5;font-style:normal;letter-spacing:.05em;text
2024-04-18 14:44:01 UTC	450	IN	Data Raw: 72 75 6d 2d 48 65 61 64 69 6e 67 31 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 7b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2c 2e 75 74 69 6c 6e Data Ascii: rum-Heading1,.utilnav-container .spectrum--light .spectrum:lang(zh) .spectrum-Heading1{color:#2c2c2c}.utilnav-container .spectrum--light .spectrum:lang(ja) .spectrum-Heading2,.utilnav-container .spectrum--light .spectrum:lang(ko) .spectrum-Heading2,.utiln
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 33 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 33 7b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 34 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 Data Ascii: ectrum:lang(ko) .spectrum-Heading3,.utilnav-container .spectrum--light .spectrum:lang(zh) .spectrum-Heading3{color:#2c2c2c}.utilnav-container .spectrum--light .spectrum:lang(ja) .spectrum-Heading4,.utilnav-container .spectrum--light .spectrum:lang(ko) .sp
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 2d 2d 73 69 7a 65 58 53 20 69 6d 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 2d 2d 73 69 7a 65 58 53 20 73 76 67 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 77 69 64 74 68 3a 31 32 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 2d 2d 73 69 7a 65 53 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 2d 2d 73 69 7a 65 53 20 69 6d 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 2d 2d 73 69 7a 65 53 20 73 76 67 7b 68 65 69 67 68 74 3a 31 38 70 78 3b 77 69 64 74 68 3a 31 38 70 78 7d Data Ascii: iner .spectrum-Icon--sizeXS img,.utilnav-container .spectrum-Icon--sizeXS svg{height:12px;width:12px}.utilnav-container .spectrum-Icon--sizeS,.utilnav-container .spectrum-Icon--sizeS img,.utilnav-container .spectrum-Icon--sizeS svg{height:18px;width:18px}
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 3a 23 65 61 65 61 65 61 3b 63 6f 6c 6f 72 3a 23 62 33 62 33 62 33 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 3b 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a Data Ascii: :#eaeaea;color:#b3b3b3}.utilnav-container .spectrum--light .spectrum-Button--primary{background-color:transparent;border-color:#4b4b4b;color:#4b4b4b}.utilnav-container .spectrum--light .spectrum-Button--primary:hover{background-color:#4b4b4b;border-color:
2024-04-18 14:44:01 UTC	14808	IN	Data Raw: 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2e 69 73 2d 64 69 73 61 62 6c 65 64 2e 66 6f 63 75 73 2d 72 69 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 2e 66 6f 63 75 73 2d 72 69 6e 67 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2e 69 73 2d 64 69 73 61 62 6c 65 64 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 Data Ascii: m-FieldButton.is-disabled.focus-ring,.utilnav-container .spectrum--light .spectrum-FieldButton:disabled.focus-ring{box-shadow:none}.utilnav-container .spectrum--light .spectrum-FieldButton.is-disabled .spectrum-Icon,.utilnav-container .spectrum--light .sp
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 6e 7b 63 6f 6c 6f 72 3a 23 62 39 62 39 62 39 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2e 69 73 2d 73 65 6c 65 63 74 65 64 2e 66 6f 63 75 73 2d 72 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 65 33 65 33 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 36 38 30 65 62 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2e 69 73 2d 73 65 6c 65 63 74 65 64 2e 66 6f 63 75 73 2d 72 69 6e 67 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 7b 63 6f 6c 6f 72 Data Ascii: n{color:#b9b9b9}.utilnav-container .spectrum--dark .spectrum-ActionButton.is-selected.focus-ring{background-color:#3e3e3e;border-color:#2680eb;color:#fff}.utilnav-container .spectrum--dark .spectrum-ActionButton.is-selected.focus-ring .spectrum-Icon{color

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:01 UTC	548	OUT	GET /utilnav/9.2/utilitynav.js HTTP/1.1 Host: prod.adobeccstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:44:01 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 522263 Connection: close Last-Modified: Tue, 10 May 2022 06:05:18 GMT x-amz-storage-class: INTELLIGENT_TIERING Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 18 Apr 2024 14:18:41 GMT Cache-Control: max-age=43200 ETag: "4dd04062ef449c113de9536573f87393" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 75bba5dfd2aa92cc6ca63ecca3b5248c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C3 X-Amz-Cf-Id: 3CTj2TXlOwD2qXqvSRld7dU2mPttpliw14fe6MrDMhzl3eLihPiQZg== Age: 3954 Cross-Origin-Resource-Policy: cross-origin
2024-04-18 14:44:01 UTC	15773	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 20 6f Data Ascii: /* * Copyright 2018 Adobe Systems Incorporated. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * o
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 6c 65 6e 67 74 68 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 29 7d 2c 65 76 65 72 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5a 28 43 65 28 74 68 69 73 29 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 66 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 52 2e 61 70 70 6c 79 28 43 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 65 28 74 68 69 73 2c 4a 28 43 65 28 74 68 69 73 29 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 29 7d 2c 66 69 6e Data Ascii: length>2?arguments[2]:void 0)},every:function(e){return Z(Ce(this),e,arguments.length>1?arguments[1]:void 0)},fill:function(e){return R.apply(Ce(this),arguments)},filter:function(e){return Pe(this,J(Ce(this),e,arguments.length>1?arguments[1]:void 0))},fin
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 6f 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 72 28 65 29 7c 7c 65 2e 5f 74 21 3d 3d 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 21 22 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 Data Ascii: ports=Object.keys\|\|function(e){return r(e,o)}},function(e,t,n){"use strict";var r=n(3);e.exports=function(e,t){if(!r(e)\|\|e._t!==t)throw TypeError("Incompatible receiver, "+t+" required!");return e}},function(e,t,n){"use strict";var r="function"==typeof Sy
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 66 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 29 2e 6e 61 76 69 67 61 74 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 72 26 26 72 2e 75 73 65 72 41 67 65 6e 74 7c 7c 22 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 Data Ascii: (e,t,n){"use strict";t.f=Object.getOwnPropertySymbols},function(e,t,n){"use strict";var r=n(5).navigator;e.exports=r&&r.userAgent\|\|""},function(e,t,n){"use strict";var r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 79 6f 75 20 68 61 76 65 20 70 72 6f 76 69 64 65 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 6c 6f 63 61 6c 65 20 76 61 6c 75 65 20 61 6e 64 20 69 74 20 69 73 20 69 6e 20 74 68 65 20 6c 69 73 74 20 6f 66 20 73 75 70 70 6f 72 74 65 64 20 6c 6f 63 61 6c 65 73 2e 20 46 61 6c 6c 69 6e 67 20 62 61 63 6b 20 74 6f 20 64 65 66 61 75 6c 74 20 6c 6f 63 61 6c 65 20 65 6e 5f 55 53 22 29 2c 74 2e 6c 6f 63 61 6c 65 46 61 6c 6c 62 61 63 6b 28 29 2c 61 2e 64 65 66 61 75 6c 74 2e 6c 6f 67 28 22 6c 6f 63 61 6c 65 66 61 6c 6c 62 61 63 6b 20 69 6e 76 6f 6b 65 64 22 29 29 2c 75 29 7d 7d 2c 7b 6b 65 79 3a 22 6c 6f 63 61 6c 69 7a 65 55 52 4c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: lease check that you have provided the correct locale value and it is in the list of supported locales. Falling back to default locale en_US"),t.localeFallback(),a.default.log("localefallback invoked")),u)}},{key:"localizeURL",value:function(e,t){return e
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 69 73 2e 70 72 6f 70 73 2e 69 63 6f 6e 2c 74 3d 65 2e 64 6f 6d 41 74 74 72 69 62 75 74 65 73 2c 6e 3d 7b 7d 3b 74 26 26 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 5b 65 2e 6e 61 6d 65 5d 3d 65 2e 76 61 6c 75 65 7d 29 3a 6e 3d 74 29 3b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 63 6c 61 73 73 22 21 3d 3d 65 7d 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 6e 5b 74 5d 2c 65 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 2c 72 28 7b 7d 2c 6f Data Ascii: is.props.icon,t=e.domAttributes,n={};t&&(t instanceof Array?t.forEach(function(e){n[e.name]=e.value}):n=t);var o=Object.keys(n).filter(function(e){return"class"!==e}).reduce(function(e,t){return e[t]=n[t],e},{});return i.default.createElement("img",r({},o
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 66 65 61 74 75 72 65 73 2e 6a 73 6f 6e 22 2c 63 6f 6e 66 69 67 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 2e 61 64 6f 62 65 63 63 73 74 61 74 69 63 2e 63 6f 6d 2f 61 70 70 6c 2f 61 73 73 65 74 73 2f 63 6f 6e 66 69 67 2e 6a 73 6f 6e 22 2c 61 64 6f 62 65 43 43 53 74 61 74 69 63 42 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 2e 61 64 6f 62 65 63 63 73 74 61 74 69 63 2e 63 6f 6d 2f 61 70 70 6c 2f 22 2c 61 64 6f 62 65 43 43 53 74 61 74 69 63 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 64 2e 61 64 6f 62 65 63 63 73 74 61 74 69 63 2e 63 6f 6d 2f 61 70 70 6c 2f 22 2b 72 2e 64 65 66 61 75 6c 74 2e 61 70 70 4c 61 75 6e 63 68 65 72 2e 76 65 72 73 69 6f 6e 2b 22 2f 22 2c 66 6f 6f 74 65 72 3a 7b 7d 2c 74 68 65 6d 65 3a 22 6c Data Ascii: com/common/features.json",configUrl:"https://prod.adobeccstatic.com/appl/assets/config.json",adobeCCStaticBase:"https://prod.adobeccstatic.com/appl/",adobeCCStatic:"https://prod.adobeccstatic.com/appl/"+r.default.appLauncher.version+"/",footer:{},theme:"l
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 52 65 6a 65 63 74 69 6f 6e 45 76 65 6e 74 29 26 26 65 2e 74 68 65 6e 28 54 29 69 6e 73 74 61 6e 63 65 6f 66 20 74 26 26 30 21 3d 3d 43 2e 69 6e 64 65 78 4f 66 28 22 36 2e 36 22 29 26 26 2d 31 3d 3d 3d 5f 2e 69 6e 64 65 78 4f 66 28 22 43 68 72 6f 6d 65 2f 36 36 22 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 21 28 21 64 28 65 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 28 74 3d 65 2e 74 68 65 6e 29 29 26 26 74 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 2e 5f 6e 29 7b 65 2e 5f 6e 3d 21 30 3b 76 61 72 20 6e 3d 65 2e 5f 63 3b 67 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: function"==typeof PromiseRejectionEvent)&&e.then(T)instanceof t&&0!==C.indexOf("6.6")&&-1===_.indexOf("Chrome/66")}catch(e){}}(),N=function(e){var t;return!(!d(e)\|\|"function"!=typeof(t=e.then))&&t},D=function(e,t){if(!e._n){e._n=!0;var n=e._c;g(function()
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 73 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 7d 29 2c 6e 28 35 39 29 28 69 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 30 29 3b 72 28 72 2e 50 2c 22 41 72 72 61 79 22 2c 7b 66 69 6c 6c 3a 6e 28 39 38 29 7d 29 2c 6e 28 35 39 29 28 22 66 69 6c 6c 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 30 29 2c 6f 3d 6e 28 35 29 2e 69 73 46 69 6e 69 74 65 3b 72 28 72 2e 53 2c 22 4e 75 6d 62 65 72 22 2c 7b 69 73 46 69 6e 69 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 Data Ascii: s,e,arguments.length>1?arguments[1]:void 0)}}),n(59)(i)},function(e,t,n){"use strict";var r=n(0);r(r.P,"Array",{fill:n(98)}),n(59)("fill")},function(e,t,n){"use strict";var r=n(0),o=n(5).isFinite;r(r.S,"Number",{isFinite:function(e){return"number"==typeof
2024-04-18 14:44:01 UTC	16384	IN	Data Raw: 65 63 74 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 28 65 29 29 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 65 2e 6b 65 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 28 22 22 2b 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 7d 28 65 2e 6b 65 79 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 74 29 7b 65 2e 66 75 6e 63 2e 63 61 6c 6c 28 65 2e 63 6f 6e 74 65 78 74 2c 74 2c 65 2e 63 6f 75 6e 74 2b 2b 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d Data Ascii: ect"===(void 0===e?"undefined":r(e))&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+(""+e).replace(/[=:]/g,function(e){return t[e]})}(e.key):t.toString(36)}function L(e,t){e.func.call(e.context,t,e.count++)}function F(e,t,n){var r=

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:01 UTC	624	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1713494630_urn%3Aaaid%3Asc%3AVA6C2%3A7d073a99-9eef-477a-a51a-3481b3356081%3Bpublic_164b5a9ac3a37844cee504b6f6ad53fba81b2c1c&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:44:02 UTC	1285	IN	HTTP/1.1 200 OK Connection: close Content-Length: 52923 Server: openresty Content-Type: image/jpeg access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-expose-headers: Etag,Location,Password-Access,Retry-After,X-Latest-Version,Version,link access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081 build: 5841fd38 etag: "NGYwNzExZDQtMmRhMS00NjQ1LWFjNDQtYzAzOGNjYTAxMTVmL2pwZy8xMjAwLzAvdHJ1ZQ==" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true" link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective" link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081>; rel="http://ns.adobe.com/adobecloud/rel/ac/policy" link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:block_upload>; rel="http://ns.adobe.com/adobecloud/rel/block/init"; repo:maxSingleTransferSize="10485760"; repo:minBlockTransferSize="1"
2024-04-18 14:44:02 UTC	1289	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 6e 74 65 72 6e 61 6c 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 2f 3a 62 6c 6f 63 6b 5f 74 72 61 6e 73 66 65 72 5f 6c 65 67 61 63 79 7b 3f 6d 6f 64 65 2c 63 6f 6d 70 6f 6e 65 6e 74 5f 69 64 2c 72 65 70 6f 4d 65 74 61 50 61 74 63 68 2a 7d 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 63 63 61 70 69 2f 62 6c 6f 63 6b 75 70 6c 6f 61 64 22 3b 20 74 65 6d 70 6c 61 74 65 64 3d 22 74 72 75 65 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/internal/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:block_transfer_legacy{?mode,component_id,repoMetaPatch*}>; rel="http://ns.adobe.com/ccapi/blockupload"; templated="true"link: <htt
2024-04-18 14:44:02 UTC	1491	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 2f 3a 65 6d 62 65 64 64 65 64 6d 65 74 61 64 61 74 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 6d 65 74 61 64 61 74 61 2f 65 6d 62 65 64 64 65 64 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:embeddedmetadata>; rel="http://ns.adobe.com/adobecloud/rel/metadata/embedded"link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:
2024-04-18 14:44:02 UTC	1308	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 37 64 30 37 33 61 39 39 2d 39 65 65 66 2d 34 37 37 61 2d 61 35 31 61 2d 33 34 38 31 62 33 33 35 36 30 38 31 2f 3a 72 65 6e 64 69 74 69 6f 6e 7b 3b 70 61 67 65 2c 73 69 7a 65 2c 74 79 70 65 7d 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 72 65 6e 64 69 74 69 6f 6e 22 3b 20 74 65 6d 70 6c 61 74 65 64 3d 22 74 72 75 65 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081/:rendition{;page,size,type}>; rel="http://ns.adobe.com/adobecloud/rel/rendition"; templated="true"link: <https://cdn-sharing.adobecc.com/con
2024-04-18 14:44:02 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 32 61 30 64 38 64 39 2c 20 32 30 32 33 2f 30 33 2f 31 34 2d 31 31 3a 31 39 3a 34 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.2a0d8d9, 2023/03/14-11:19:46 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-04-18 14:44:02 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-18 14:44:02 UTC	1371	IN	Data Raw: 06 07 08 02 04 05 03 01 09 0a 0b 01 01 00 02 03 01 01 00 03 01 00 00 00 00 00 00 00 00 05 06 01 04 07 03 02 08 09 0a 0b 10 00 01 03 03 01 02 07 03 07 0d 09 71 00 00 00 00 00 01 02 03 04 05 11 12 06 21 07 13 31 37 41 76 b5 14 22 51 15 23 71 81 91 a1 d2 16 17 32 38 42 52 53 54 61 62 73 92 b2 08 09 72 93 a3 b1 d1 e1 f0 0a 18 19 1a 24 25 26 27 28 29 2a 33 34 35 36 39 3a 43 44 45 46 47 48 49 4a 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 74 75 77 78 79 7a 82 83 84 85 86 87 88 89 8a 94 95 96 97 98 99 9a a2 a4 a5 a6 a7 a8 a9 aa b3 b4 b6 b7 b8 b9 ba c1 c2 c3 c4 c5 c6 c7 c8 c9 ca d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 01 02 01 05 04 07 04 11 73 05 00 00 00 00 00 01 02 11 03 04 05 12 21 31 22 41 51 61 06 13 71 81 91 Data Ascii: q!17Av"Q#q28BRSTabsr$%&'()*34569:CDEFGHIJUVWXYZcdefghijtuwxyzs!1"AQaq
2024-04-18 14:44:02 UTC	1371	IN	Data Raw: f4 bb 11 9c 28 6c d3 f7 35 27 55 f8 03 3d 18 ed 07 13 8b a7 d8 33 19 d3 06 78 7a 5d 8b 9a f0 95 b3 c8 b8 d3 3e 7e 02 cf 46 7c f6 87 5f 17 4f b0 7d 46 72 c2 e3 e9 76 2f c5 e1 2f 67 51 71 a6 7c fc 05 9e 8c cf 68 55 f1 74 fb 06 3a d2 c2 e3 e9 76 2f c7 70 9b b3 6d 5c 2b 6a 13 ee c6 7a 31 da 15 7c 5d 3e c1 8e b4 f0 b8 fa 5d 8b bf 45 b6 96 8a c6 ea 85 b2 aa 7b 56 b5 3f 6e 3c 6b c1 aa 9d ad ac 2c a2 9a f6 3b 7e 94 14 5e b9 27 98 df 44 78 cc bd df 19 76 ae d7 17 a9 a4 89 e5 37 d1 19 1f 24 db 4b 32 fb 13 cc 6f a2 03 f7 d2 ca cf f5 b3 cc 6f a2 03 f7 d2 c6 cf f5 b3 cc 6f a2 03 f5 36 c2 d2 be c4 f3 1b e8 80 26 d7 da 7e b6 79 8d f4 40 7e 2e d8 5a 13 d8 9e 63 7d 10 1f 46 ed 4d b5 cd d4 8d 93 1e 43 7d 10 1f 27 ed 95 a1 8b 87 24 89 e5 37 d1 01 c5 76 de c8 9c ab 27 98 df Data Ascii: (l5'U=3xz]>~F\|_O}Frv//gQq\|hUt:v/pm\+jz1\|]>]E{V?n<k,;~^'Dxv7$K2ooo6&~y@~.Zc}FMC}'$7v'
2024-04-18 14:44:02 UTC	1371	IN	Data Raw: 31 a8 87 d1 af 6b b9 14 cd 8b cb f7 bd c9 8b 31 a5 2f c7 48 c6 a6 55 70 82 cc dd f3 ee c8 1a bc a0 bc b9 b6 68 d7 7a 29 96 35 b8 f7 5c 0d 55 cb 8c 33 12 36 a6 17 ae e5 33 a8 89 7e 3e aa 16 f2 a9 f3 66 06 55 c2 ed c8 b9 32 3e bc 73 1a 99 53 36 1c 3b ae 25 dd a8 49 2e 6d 73 1f bd 17 38 03 9e 94 f0 01 c1 62 6a f4 20 1f 9d cd 16 73 a5 3c c0 39 24 6d e4 c0 0e 29 be 04 03 8a c1 1a f2 a0 1f ad 89 ad dc 9b 90 0e 4e 6a 63 90 0f ce 25 98 e4 01 c5 37 c0 80 38 a6 f8 10 0e 4d 6a 27 20 1f a0 30 98 c0 1f 9a 53 c0 03 43 7c 00 7e 68 6f 80 0f dd 2d f0 00 d0 df 00 0d 0d f0 00 d0 df 00 0d 0d f0 00 d0 df 00 1f a0 00 00 00 00 00 00 00 00 00 00 07 d6 97 e6 a6 2f 81 b7 e1 c0 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 1k1/HUphz)5\U363~>fU2>sS6;%I.ms8bj s<9$m)Njc%78Mj' 0SC\|~ho-/
2024-04-18 14:44:02 UTC	1371	IN	Data Raw: ed a0 a3 6f fa c0 e2 dd a4 a4 55 dc be 50 1f 4f 17 29 5c 99 e4 03 e4 eb c5 0b b7 aa 80 6d d2 8d cb b8 03 ae 94 68 b8 03 b1 4d 51 4b 3f a8 a8 1f b3 cf 4f 0e f5 03 a2 97 6a 35 95 1a 89 95 55 e8 03 d0 d5 12 c7 a9 c9 84 e5 03 cb a8 75 bd 5e ba b9 7c 80 3e 1c 55 b9 dc 98 01 f2 6c 63 70 b8 03 e6 b0 db 1d df 6e 03 f5 1b 6c 62 01 ca 28 68 24 7a 61 10 0f 6a 08 69 e2 85 31 c8 07 91 5a eb 73 9e e4 72 a6 53 94 0f 2d 69 ad aa ec e7 94 0e ed 3d 3d bd 1c 88 9b d4 0f 73 8b 85 29 f1 eb 20 78 f2 d3 db f8 c5 55 c6 72 07 de 0b 7d 04 8b b9 11 55 00 fb 54 d4 53 51 46 ad 54 dc 80 78 b2 5e 2d d2 3f 7a 65 40 fd 5a 8a 07 37 3a 40 f9 b2 6a 05 5c 23 40 f4 e9 6d 14 75 29 ab 09 80 3f 2a ad d4 34 99 4f 00 1d 16 d5 db 95 da 5d d0 07 66 35 b5 ee e4 03 ea ab 6f 44 dc a0 71 6f 89 e8 e4 55 Data Ascii: oUPO)\mhMQK?Oj5Uu^\|>Ulcpnlb(h$zaji1ZsrS-i==s) xUr}UTSQFTx^-?ze@Z7:@j\#@mu)?*4O]f5oDqoU
2024-04-18 14:44:02 UTC	1371	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 70 88 95 0b 51 4b c4 fb 0d d9 f7 60 22 70 3e e0 9c bb fd a8 1f 65 9e b9 39 10 0e 09 35 c9 5d 94 03 e8 8f af 54 de 80 7c 65 9e e0 c7 65 11 40 ef db e7 ab 91 ab c6 6e 03 ab 71 ee d4 7a f1 7c 9d 00 75 19 35 d7 38 54 5c 01 db 64 b5 c8 d4 ca 6f 03 f2 57 dc 55 b9 44 e4 03 aa e9 2e c8 b8 c6 e0 3f 52 6b 93 7b ec 72 01 ed da 6a 26 91 be 3a b8 50 3d a4 46 e9 00 88 cf 24 0f de f7 c0 03 4b 7d a0 1f a9 a7 a1 40 fd de 00 00 00 00 00 00 00 00 00 00 00 00 e1 22 aa 22 a8 1f 06 39 ca ed e0 76 5b c8 07 e8 1d 7a 9d 5a 1f a7 d4 b1 b8 08 95 7f 8a 29 37 7b c9 e0 03 83 6a 2e 4d 6e 00 f9 49 55 74 ce 10 04 55 57 77 2e 15 37 78 40 f5 ed b2 d5 6a 45 93 72 64 0f 7e 17 37 19 Data Ascii: pQK`"p>e95]T\|ee@nqz\|u58T\doWUD.?Rk{rj&:P=F$K}@""9v[zZ)7{j.MnIUtUWw.7x@jErd~7

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Cryptography

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Windows Analysis Report
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:7d073a99-9eef-477a-a51a-3481b3356081

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:03 UTC	546	OUT	GET /6gNXXegDB6rtHARrNKRF8w.js HTTP/1.1 Host: widget.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:44:03 UTC	1036	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:03 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * etag: W/"3ad86af8a61d4f16a51e24228991c3d6" Cache-Control: public, max-age=14400 content-security-policy: x-request-id: 19faed0d1bfc9d2a1c863f8a34eab561 CF-Cache-Status: HIT Age: 873329 Expires: Thu, 18 Apr 2024 18:44:03 GMT Set-Cookie: __cf_bm=pX9hzPBKzxkBLH3Ewh5U8lwbAzGYbQ3D.w.inkkqfmc-1713451443-1.0.1.1-ETZMakdiSYW_zM7p2SK8kAKxlVzh_AwMAJfTEW5Up6eW5XFAvh1Q2o.f4koCt5mh7xVUsZGGabs19ksymcG9cQ; path=/; expires=Thu, 18-Apr-24 15:14:03 GMT; domain=.uservoice.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87656e40db8517ef-ATL
2024-04-18 14:44:03 UTC	333	IN	Data Raw: 37 62 39 35 0d 0a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 20 3d 20 7b 65 76 65 6e 74 73 3a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 7c 7c 5b 5d 2c 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 78 29 7d 2c 61 63 63 6f 75 6e 74 3a 7b 22 61 63 74 69 76 65 5f 77 69 64 67 65 74 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 22 3a 22 66 6f 6f 74 65 72 5f 70 6f 77 65 72 65 64 62 79 22 2c 22 6e 61 6d 65 22 3a 22 41 64 6f 62 65 22 2c 22 77 68 69 74 65 5f 6c 61 62 65 6c 65 64 22 3a 66 61 6c 73 65 2c 22 77 69 64 67 65 74 32 5f 64 6f 6d 61 69 6e 22 3a 22 61 63 72 6f 62 61 74 2e 75 73 65 72 76 6f 69 63 65 2e 63 6f 6d 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 73 73 6c Data Ascii: 7b95window.UserVoice = {events:window.UserVoice\|\|[],push:function(x){window.UserVoice.events.push(x)},account:{"active_widgets":[],"campaign":"footer_poweredby","name":"Adobe","white_labeled":false,"widget2_domain":"acrobat.uservoice.com","subdomain_ssl
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 73 75 62 64 6f 6d 61 69 6e 5f 6b 65 79 22 3a 22 61 63 72 6f 62 61 74 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 69 64 22 3a 34 39 36 30 31 35 2c 22 63 6c 69 65 6e 74 5f 6b 65 79 22 3a 22 36 67 4e 58 58 65 67 44 42 36 72 74 48 41 52 72 4e 4b 52 46 38 77 22 2c 22 63 6c 69 65 6e 74 5f 6f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 73 61 74 69 73 66 61 63 74 69 6f 6e 5f 61 75 74 6f 70 72 6f 6d 70 74 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 4c 6f 61 64 69 6e 67 22 3a 22 4c 6f 61 64 69 6e 67 22 2c 22 4f 70 65 6e 43 6f 6e 74 61 63 74 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 43 6f 6e 74 61 63 74 20 57 69 64 67 65 74 22 2c 22 4f 70 65 6e 46 65 65 64 62 61 63 6b 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 46 65 65 64 62 61 63 Data Ascii: subdomain_key":"acrobat","subdomain_id":496015,"client_key":"6gNXXegDB6rtHARrNKRF8w","client_options":null,"satisfaction_autoprompt_enabled":false,"messages":{"Loading":"Loading","OpenContactWidget":"Open Contact Widget","OpenFeedbackWidget":"Open Feedbac
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 77 69 64 67 65 74 32 2f 63 6c 6f 73 65 2d 38 38 38 37 37 32 30 38 62 36 30 34 63 32 37 35 61 64 63 31 37 65 61 63 32 37 35 31 33 32 33 30 64 36 38 63 63 30 32 32 32 65 33 61 34 63 62 31 34 37 62 62 63 30 66 65 62 61 35 64 32 36 37 63 2e 70 6e 67 22 2c 22 70 62 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 77 69 64 67 65 74 32 2f 55 73 65 72 56 6f 69 63 65 2d 6c 6f 67 6f 2d 6c 69 67 68 74 2d 63 34 30 61 66 32 66 30 35 63 35 66 31 64 66 65 30 36 64 65 31 61 38 33 38 37 35 37 33 30 35 35 33 64 39 62 36 63 38 63 36 36 33 66 39 38 30 65 37 30 30 65 31 63 35 61 31 66 31 66 61 63 35 36 2e 73 76 67 22 2c 22 73 63 72 65 65 6e 73 68 6f 74 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 6f 6d 6e 69 62 6f 78 2f 73 63 Data Ascii: ":"/pkg/clients/widget2/close-88877208b604c275adc17eac27513230d68cc0222e3a4cb147bbc0feba5d267c.png","pb":"/pkg/clients/widget2/UserVoice-logo-light-c40af2f05c5f1dfe06de1a83875730553d9b6c8c663f980e700e1c5a1f1fac56.svg","screenshot":"/pkg/clients/omnibox/sc
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 61 6d 65 22 2c 22 76 69 65 77 70 6f 72 74 22 29 2c 6d 65 74 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 2c 74 29 2c 65 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 65 74 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 69 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2c 6f 3d 30 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 2f 76 69 65 77 70 6f 72 74 2f 69 2e 74 65 73 74 28 69 5b 6f 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 29 29 7b 74 3d 69 5b 6f 5d 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 66 28 21 44 29 7b 76 61 72 20 74 3d 6c 28 29 2c 65 3d 2f 75 73 65 72 Data Ascii: ame","viewport"),meta.setAttribute("content",t),e.head.appendChild(meta)}function l(){for(var t,i=e.getElementsByTagName("meta"),o=0;o<i.length;o++)if(/viewport/i.test(i[o].getAttribute("name"))){t=i[o];break}return t}function c(){if(!D){var t=l(),e=/user
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 3d 74 3a 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 74 29 29 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 50 7c 7c 28 6d 28 22 23 75 76 54 61 62 2c 2e 75 76 2d 74 72 61 79 2c 2e 75 76 2d 69 63 6f 6e 2c 2e 75 76 2d 70 6f 70 6f 76 65 72 2c 2e 75 76 2d 62 75 62 62 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 22 2c 22 70 72 69 6e 74 22 29 2c 50 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 52 7c 7c 28 6d 28 22 2e 75 76 2d 69 63 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 22 29 2c 52 3d 21 30 29 7d 66 75 6e 63 74 69 Data Ascii: =t:o.appendChild(e.createTextNode(t)),e.getElementsByTagName("head")[0].appendChild(o)}function v(){P\|\|(m("#uvTab,.uv-tray,.uv-icon,.uv-popover,.uv-bubble{display:none!important}","print"),P=!0)}function b(){R\|\|(m(".uv-icon:hover{opacity:1}"),R=!0)}functi
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 3d 6e 2e 73 75 62 73 74 72 28 6c 2b 61 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6f 74 5b 74 5d 5b 65 5d 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 4f 2e 66 69 72 65 64 7c 7c 28 4f 2e 66 69 72 65 64 3d 21 30 2c 55 73 65 72 56 6f 69 63 65 2e 61 63 63 6f 75 6e 74 2e 64 65 61 63 74 69 76 61 74 65 64 7c 7c 28 65 74 2e 74 72 61 63 6b 65 72 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 56 69 65 77 28 29 2c 65 74 2e 74 72 61 63 6b 65 72 2e 72 65 61 64 79 28 29 29 2c 65 74 2e 73 63 61 6e 28 29 29 7d 76 61 72 20 54 3d 7b 7d 3b 54 2e 73 61 6e 69 74 69 7a 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: =n.substr(l+a.length)}return ot[t][e]=!0}function O(){O.fired\|\|(O.fired=!0,UserVoice.account.deactivated\|\|(et.tracker.trackExternalView(),et.tracker.ready()),et.scan())}var T={};T.sanitizeValue=function(t,e){function i(t){if("[object Date]"===Object.proto
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 29 2c 6e 3d 65 3e 3e 32 2c 73 3d 28 33 26 65 29 3c 3c 34 7c 69 3e 3e 34 2c 72 3d 28 31 35 26 69 29 3c 3c 32 7c 6f 3e 3e 36 2c 61 3d 36 33 26 6f 2c 69 73 4e 61 4e 28 69 29 3f 72 3d 61 3d 36 34 3a 69 73 4e 61 4e 28 6f 29 26 26 28 61 3d 36 34 29 2c 63 3d 63 2b 6c 2e 63 68 61 72 41 74 28 6e 29 2b 6c 2e 63 68 61 72 41 74 28 73 29 2b 6c 2e 63 68 61 72 41 74 28 72 29 2b 6c 2e 63 68 61 72 41 74 28 61 29 3b 72 65 74 75 72 6e 20 63 7d 2c 54 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 3b 69 3e 6f 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 5b 6f 5d Data Ascii: ),n=e>>2,s=(3&e)<<4\|i>>4,r=(15&i)<<2\|o>>6,a=63&o,isNaN(i)?r=a=64:isNaN(o)&&(a=64),c=c+l.charAt(n)+l.charAt(s)+l.charAt(r)+l.charAt(a);return c},T.extend=function(t){for(var e=Array.prototype.slice.call(arguments,1),i=e.length,o=0;i>o;o++)for(var n in e[o]
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 67 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 31 30 3e 74 3f 22 30 22 2b 74 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 61 2e 74 65 73 74 28 74 29 3f 27 22 27 2b 74 2e 72 65 70 6c 61 63 65 28 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6c 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 74 2e 63 68 61 Data Ascii: g&&"undefined"!=typeof console.log.apply&&console.log.apply(console,arguments)},function(){function e(t){return 10>t?"0"+t:t}function i(t){return a.lastIndex=0,a.test(t)?'"'+t.replace(a,function(t){var e=l[t];return"string"==typeof e?e:"\\u"+("0000"+t.cha
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 69 73 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 29 2b 22 5a 22 3a 6e 75 6c 6c 7d 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 4e 75 6d 62 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 7d 29 3b 76 61 72 20 6e 2c 73 2c 72 2c 61 3d 2f 5b 5c 5c 5c 22 5c 78 30 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 78 39 66 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 Data Ascii: is.getUTCHours())+":"+e(this.getUTCMinutes())+":"+e(this.getUTCSeconds())+"Z":null},String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(){return this.valueOf()});var n,s,r,a=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u
2024-04-18 14:44:03 UTC	1369	IN	Data Raw: 2e 73 74 6f 72 65 3d 6e 65 77 20 72 2c 74 68 69 73 2e 72 65 63 75 72 72 65 6e 74 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 28 22 72 22 29 2c 74 68 69 73 2e 73 74 6f 72 65 2e 73 65 74 28 22 72 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 65 3d 22 78 22 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3b 74 72 79 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 69 6e 20 74 26 26 74 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 74 68 69 73 2e 73 65 74 28 65 2c 65 29 2c 74 68 69 73 2e 67 65 74 28 65 29 21 3d 3d 65 3f 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3a 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 7d 63 61 74 63 68 28 69 29 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 Data Ascii: .store=new r,this.recurrent=this.store.get("r"),this.store.set("r",!0)}function r(){var e="x";this.storage=null;try{this.storage="sessionStorage"in t&&t.sessionStorage,this.set(e,e),this.get(e)!==e?this.storage=null:this.remove(e)}catch(i){this.storage=nu

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:06 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713451412568&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-18 14:44:06 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-18 14:44:06 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-18 14:44:06 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 6D0B3D3DA96148F48BB2F385A32FB42A Ref B: LAX311000108045 Ref C: 2024-04-18T14:44:06Z Date: Thu, 18 Apr 2024 14:44:06 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713451446.ba379af

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:06 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=w1oudzXu88M1BHu&MD=uN8eYsxD HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 14:44:06 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3d0e8d90-c208-47c0-af18-1219bc22de7c MS-RequestId: 981f5ad3-2a83-4814-9591-f6ce421bcb2c MS-CV: z1zqtFdqOkakF89W.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 14:44:05 GMT Connection: close Content-Length: 24490
2024-04-18 14:44:06 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-18 14:44:06 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:15 UTC	891	OUT	GET /t2/496015/web/track.js?_=1713451454393&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOjdkMDczYTk5LTllZWYtNDc3YS1hNTFhLTM0ODFiMzM1NjA4MSIsInIiOiIifX0%3D HTTP/1.1 Host: by2.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=pX9hzPBKzxkBLH3Ewh5U8lwbAzGYbQ3D.w.inkkqfmc-1713451443-1.0.1.1-ETZMakdiSYW_zM7p2SK8kAKxlVzh_AwMAJfTEW5Up6eW5XFAvh1Q2o.f4koCt5mh7xVUsZGGabs19ksymcG9cQ
2024-04-18 14:44:15 UTC	614	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 66 Connection: close Cache-Control: no-cache Cache-Control: private set-cookie: uvts=8da22c27-9b86-45fd-73bf-bc5fd4db9807; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None set-cookie: uvts=8da22c27-9b86-45fd-73bf-bc5fd4db9807; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None; Partitioned strict-transport-security: max-age=31536000; includeSubDomains expires: Thu, 18 Apr 2024 14:44:14 GMT CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87656e8d3e11454b-ATL
2024-04-18 14:44:15 UTC	66	IN	Data Raw: 5f 5f 75 76 53 65 73 73 69 6f 6e 44 61 74 61 30 28 7b 22 75 76 74 73 22 3a 22 38 64 61 32 32 63 32 37 2d 39 62 38 36 2d 34 35 66 64 2d 37 33 62 66 2d 62 63 35 66 64 34 64 62 39 38 30 37 22 7d 29 3b Data Ascii: __uvSessionData0({"uvts":"8da22c27-9b86-45fd-73bf-bc5fd4db9807"});

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:39 UTC	3604	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221229884555399587%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221229884555399587%22%7D&relay=f1737240-fb5c-4b02-bf14-e2173f5f76e8&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:44:39 UTC	956	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 14:44:39 GMT Content-Length: 0 Connection: close X-TID: W3Zl4rbARVg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321 DCS: dcs-prod-va6-1-v059-0d7e0f1b7.edge-va6.demdex.com 0 ms set-cookie: demdex=57428490072431195322410364993179336662; Max-Age=15552000; Expires=Tue, 15 Oct 2024 14:44:39 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:39 UTC	3662	OUT	GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713451478321 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221229884555399587%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221229884555399587%22%7D&relay=f1737240-fb5c-4b02-bf14-e2173f5f76e8&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=57428490072431195322410364993179336662
2024-04-18 14:44:40 UTC	827	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:40 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4122 Connection: close X-TID: kR6+QMWORYI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v059-0a6c8ec28.edge-va6.demdex.com 3 ms set-cookie: demdex=57428490072431195322410364993179336662; Max-Age=15552000; Expires=Tue, 15 Oct 2024 14:44:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 14:44:40 UTC	4122	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 37 36 33 30 31 39 34 33 32 35 38 33 31 31 38 36 32 36 32 33 39 34 37 31 37 38 33 30 38 37 39 32 33 34 39 30 34 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"57630194325831186262394717830879234904","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:40 UTC	4018	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=57630194325831186262394717830879234904&ts=1713451479463 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221229884555399587%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221229884555399587%22%7D&relay=f1737240-fb5c-4b02-bf14-e2173f5f76e8&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458679s%7CNONE%7CvVersion%7C5.4.0
2024-04-18 14:44:40 UTC	722	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 14:44:40 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C57630194325831186262394717830879234904; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 14:44:44 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 14:44:40 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 35 37 36 33 30 31 39 34 33 32 35 38 33 31 31 38 36 32 36 32 33 39 34 37 31 37 38 33 30 38 37 39 32 33 34 39 30 34 22 7d Data Ascii: {"mid":"57630194325831186262394717830879234904"}

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:40 UTC	4105	OUT	POST /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s22409465732503 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive Content-Length: 11144 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221229884555399587%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221229884555399587%22%7D&relay=f1737240-fb5c-4b02-bf14-e2173f5f76e8&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458679s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_cc=true
2024-04-18 14:44:40 UTC	11144	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 31 38 25 32 46 33 25 32 46 32 30 32 34 25 32 30 31 36 25 33 41 34 34 25 33 41 34 30 25 32 30 34 25 32 30 2d 31 32 30 26 6d 69 64 3d 35 37 36 33 30 31 39 34 33 32 35 38 33 31 31 38 36 32 36 32 33 39 34 37 31 37 38 33 30 38 37 39 32 33 34 39 30 34 26 61 61 6d 6c 68 3d 37 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 66 70 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 50 65 72 69 6f 64 73 3d 32 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 75 74 68 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 25 32 46 65 6e 5f 55 53 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 25 33 46 63 61 6c 6c 62 61 63 6b 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 69 6d 73 2d 6e 61 31 2e 61 64 6f 62 Data Ascii: AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2016%3A44%3A40%204%20-120&mid=57630194325831186262394717830879234904&aamlh=7&ce=UTF-8&cdp=2&fpCookieDomainPeriods=2&g=https%3A%2F%2Fauth.services.adobe.com%2Fen_US%2Findex.html%3Fcallback%3Dhttps%253A%252F%252Fims-na1.adob
2024-04-18 14:44:41 UTC	1292	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 14:44:41 GMT expires: Wed, 17 Apr 2024 14:44:41 GMT last-modified: Fri, 19 Apr 2024 14:44:41 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C57630194325831186262394717830879234904; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 14:44:44 GMT; set-cookie: s_ecid=MCMID%7C57630194325831186262394717830879234904; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 14:44:44 GMT; set-cookie: s_ecid=MCMID%7C57630194325831186262394717830879234904; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 14:44:44 GMT; set-cookie: s_ecid=MCMID%7C57630194325831186262394717830879234904; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 14:44:44 GMT; etag: 3679609037561626624-4618463790873981387 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 14:44:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:41 UTC	1006	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=57630194325831186262394717830879234904&ts=1713451479463 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
2024-04-18 14:44:41 UTC	652	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 14:44:41 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C57630194325831186262394717830879234904; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 14:44:44 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 14:44:41 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 35 37 36 33 30 31 39 34 33 32 35 38 33 31 31 38 36 32 36 32 33 39 34 37 31 37 38 33 30 38 37 39 32 33 34 39 30 34 22 7d Data Ascii: {"mid":"57630194325831186262394717830879234904"}

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:41 UTC	962	OUT	GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s22409465732503 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YL73JLRTFPP5EDEKFAQVYHAADQ======; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; gpv=Account:IMS:GetStarted:OnLoad; s_ecid=MCMID%7C57630194325831186262394717830879234904; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C57630194325831186262394717830879234904%7CMCAAMLH-1714056279%7C7%7CMCAAMB-1714056279%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713458680s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
2024-04-18 14:44:41 UTC	926	IN	HTTP/1.1 302 Found access-control-allow-origin: * vary: Origin date: Thu, 18 Apr 2024 14:44:41 GMT content-type: text/plain;charset=utf-8 expires: Wed, 17 Apr 2024 14:44:41 GMT last-modified: Fri, 19 Apr 2024 14:44:41 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_vi=[CS]v1\|331098EC808D6C66-60001509A194687E[CE]; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 14:44:44 GMT; location: https://sstats.adobe.com/b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s22409465732503?AQB=1&pccr=true&vidn=331098EC808D6C66-60001509A194687E&g=none&AQE=1 content-length: 0 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close