Edit tour

Windows Analysis Report
Acrobat_Set-Up.exe

Overview

General Information

Sample name:	Acrobat_Set-Up.exe
Analysis ID:	1430325
MD5:	c02da0a54b7990494d373b1bba38e53e
SHA1:	3b7e069798f38384fd29f51e3394f277b0aeec60
SHA256:	8eed5aa114f46123d245eb2b7531d85cd1a12dcbec03de92d751b24e7dbec675
Infos:

Detection

Score:	28
Range:	0 - 100
Whitelisted:	false
Confidence:	20%

Signatures

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Found strings related to Crypto-Mining

Query firmware table information (likely to detect VMs)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

Queries disk information (often used to detect virtual machines)

Queries information about the installed CPU (vendor, model number etc)

Queries keyboard layouts

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Suspicious Execution From GUID Like Folder Names

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Analysis Advice

Sample tries to load a library which is not present or installed on the analysis machine, adding the library might reveal more behavior

Sample may offer command line options, please run it with the 'Execute binary with arguments' cookbook (it's possible that the command line switches require additional characters like: "-", "/", "--")

Sample monitors window changes (e.g. starting applications), analyze the sample with the 'Simulates keyboard and window changes' cookbook

Sample searches for specific file, try point organization specific fake files to the analysis machine

Process Tree

System is w10x64_ra

Acrobat_Set-Up.exe (PID: 7100 cmdline: "C:\Users\user\Desktop\Acrobat_Set-Up.exe" MD5: C02DA0A54B7990494D373B1BBA38E53E)

msedgewebview2.exe (PID: 2180 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7100.2080.4400570537256243048 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6168 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7fff28fd8e88,0x7fff28fd8e98,0x7fff28fd8ea8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6496 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:2 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6532 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=1972 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:3 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6628 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2468 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6824 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1713867994185397 --launch-time-ticks=7229621524 --mojo-platform-channel-handle=3360 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:1 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 2464 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4544 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:2 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6188 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7100.2080.18407888704770657282 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6220 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7fff28fd8e88,0x7fff28fd8e98,0x7fff28fd8ea8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6484 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:2 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 1816 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2108 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:3 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6652 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2536 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6832 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1713867994182546 --launch-time-ticks=7229637667 --mojo-platform-channel-handle=3360 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:1 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 3284 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4800 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:2 MD5: 9909D978B39FB7369F511D8506C17CA0)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

Sigma detected: Suspicious Execution From GUID Like Folder Names

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7100.2080.18407888704770657282, CommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7100.2080.18407888704770657282, CommandLine|base64offset|contains: )^, Image: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe, NewProcessName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe, OriginalFileName: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe, ParentCommandLine: "C:\Users\user\Desktop\Acrobat_Set-Up.exe", ParentImage: C:\Users\user\Desktop\Acrobat_Set-Up.exe, ParentProcessId: 7100, ParentProcessName: Acrobat_Set-Up.exe, ProcessCommandLine: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7100.2080.18407888704770657282, ProcessId: 6188, ProcessName: msedgewebview2.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Bitcoin Miner

Found strings related to Crypto-Mining

Source: msedgewebview2.exe, 00000009.00000002.2579778165.000007480021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: jsecoin.com
Source: msedgewebview2.exe, 00000004.00000003.2285572081.0000092000D08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: coinhive.com/

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION Acrobat_Set-Up.exe

Jump to behavior

Source: Acrobat_Set-Up.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Acrobat_Set-Up.exe

Static PE information: certificate valid

Source: unknown	HTTPS traffic detected: 108.139.15.110:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49723 version: TLS 1.2

Source: Acrobat_Set-Up.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:

Binary string: D:\Jenkins\workspace\ccd-installer\main\build\win32\build\msvs_win32\Release\x86\sym\CCDInstaller\CCDInstaller\Set-up.pdb source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\Adobe\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Local Storage\	Jump to behavior

Source: Joe Sandbox View	IP Address: 20.25.227.174 20.25.227.174
Source: Joe Sandbox View	IP Address: 13.107.21.239 13.107.21.239
Source: Joe Sandbox View	IP Address: 172.64.155.179 172.64.155.179
Source: Joe Sandbox View	IP Address: 20.88.206.205 20.88.206.205
Source: Joe Sandbox View	IP Address: 162.159.61.3 162.159.61.3

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: global traffic	HTTP traffic detected: GET /ims/authorize/v3?client_id=CreativeCloudInstaller_v1_0&response_type=device&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&device_name=992547&redirect_uri=https://oobe.adobe.com/&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&locale=en_US&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&force_marketing_permission=true&dctx_id=v:2,s,bg:kaizen,0f006db0-9d68-11ee-ac84-4fb64a02ffee HTTP/1.1Host: ims-na1.adobelogin.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false HTTP/1.1Host: auth.services.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /api/browser/edge/navigate/3 HTTP/1.1Host: nav-edge.smartscreen.microsoft.comConnection: keep-aliveContent-Length: 2026Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoieWxDcmZGMW9EWHMyNXl5alhPdktDQT09IiwgImhhc2giOiJxZzBSclkyQzJVYz0ifQ==Content-Type: application/json; charset=utf-8Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /a9bc07eb5/styles.c7b051d2.css HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /img/generic/adobe_logo_black.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /a9bc07eb5/scripts.js HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /api/browser/edge/data/toptraffic/3 HTTP/1.1Host: data-edge.smartscreen.microsoft.comConnection: keep-aliveContent-Length: 1129Accept: application/octet-stream;application/x-patch-bsdiff;Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoiOXE2ZzFTRjlBU0ZRYWUzZktKWGhSUT09IiwgImhhc2giOiJKb0FIZ3BsYnBuMD0ifQ==Content-Type: application/json; charset=utf-8If-None-Match: "170540185939602997400506234197983529371"Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: POST /api/browser/edge/data/bloomfilter/x/3 HTTP/1.1Host: data-edge.smartscreen.microsoft.comConnection: keep-aliveContent-Length: 1129Accept: application/octet-stream;application/x-patch-bsdiff;Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoiOXE2ZzFTRjlBU0ZRYWUzZktKWGhSUT09IiwgImhhc2giOiJKb0FIZ3BsYnBuMD0ifQ==Content-Type: application/json; charset=utf-8If-None-Match: "636976985063396749.rel.v2"Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: POST /api/browser/edge/data/settings/3 HTTP/1.1Host: data-edge.smartscreen.microsoft.comConnection: keep-aliveContent-Length: 1129Accept: application/octet-stream;application/x-patch-bsdiff;Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoiOXE2ZzFTRjlBU0ZRYWUzZktKWGhSUT09IiwgImhhc2giOiJKb0FIZ3BsYnBuMD0ifQ==Content-Type: application/json; charset=utf-8If-None-Match: "2.0-0"Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /a9bc07eb5/en_US/messages.json HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /signin/v1/audit HTTP/1.1Host: auth.services.adobe.comConnection: keep-aliveContent-Length: 146sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/jsonAccept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378X-IMS-CLIENTID: CreativeCloudInstaller_v1_0sec-ch-ua-platform: "Windows"Origin: https://auth.services.adobe.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: POST /signin/v2/tokens?credential=sso&checkReauth=false&puser=&t2Only=false&euid=&pbaPolicy= HTTP/1.1Host: auth.services.adobe.comConnection: keep-aliveContent-Length: 2sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/jsonAccept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378X-IMS-CLIENTID: CreativeCloudInstaller_v1_0sec-ch-ua-platform: "Windows"Origin: https://auth.services.adobe.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /signin/v1/context/v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee/en_US HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Accept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378sec-ch-ua-mobile: ?0X-IMS-CLIENTID: CreativeCloudInstaller_v1_0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /signin/v2/configurations/CreativeCloudInstaller_v1_0 HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Accept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378sec-ch-ua-mobile: ?0X-IMS-CLIENTID: CreativeCloudInstaller_v1_0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/f_logo_RGB-Blue_58.png HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/apple.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/canvas/Kaizen.jpg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/a9bc07eb5/styles.c7b051d2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/sml-google-logo.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /ecr2zvs.js HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /signin/v1/passkey HTTP/1.1Host: auth.services.adobe.comConnection: keep-aliveContent-Length: 2sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/jsonAccept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378X-IMS-CLIENTID: CreativeCloudInstaller_v1_0sec-ch-ua-platform: "Windows"Origin: https://auth.services.adobe.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/sml-apple-logo.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/sml-round-microsoft-logo.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: demdex=85139728435958444882252136657756763596
Source: global traffic	HTTP traffic detected: OPTIONS /core/v1/messaging/ui-version HTTP/1.1Host: server.messaging.adobe.comConnection: keep-aliveAccept: /Access-Control-Request-Method: GETAccess-Control-Request-Headers: x-api-key,x-debug-id,x-ims-clientidOrigin: https://auth.services.adobe.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Sec-Fetch-Mode: corsSec-Fetch-Site: same-siteSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /core/v1/messaging/ui-version HTTP/1.1Host: server.messaging.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378X-IMS-CLIENTID: CreativeCloudInstaller_v1_0x-api-key: susi_auth_servicesec-ch-ua-platform: "Windows"Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /signin/v1/audit HTTP/1.1Host: auth.services.adobe.comConnection: keep-aliveContent-Length: 538sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/jsonAccept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378X-IMS-CLIENTID: CreativeCloudInstaller_v1_0sec-ch-ua-platform: "Windows"Origin: https://auth.services.adobe.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=85341411633831769662236559786824843586&ts=1713875269295 HTTP/1.1Host: sstats.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /img/social/round/google.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /img/social/round/facebook.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: POST /signin/v1/audit HTTP/1.1Host: auth.services.adobe.comConnection: keep-aliveContent-Length: 717sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/jsonAccept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378X-IMS-CLIENTID: CreativeCloudInstaller_v1_0sec-ch-ua-platform: "Windows"Origin: https://auth.services.adobe.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
Source: global traffic	HTTP traffic detected: GET /img/social/round/apple.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
Source: global traffic	HTTP traffic detected: GET /img/social/round/microsoft.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
Source: global traffic	HTTP traffic detected: POST /b/ss/adbims,adbadobenonacdcprod,adbadobeprototype/1/JS-2.22.4-LCS4/s24063614990498 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveContent-Length: 5199sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: text/plain;charset=UTF-8Accept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_cc=true
Source: global traffic	HTTP traffic detected: GET /af/cb695f/000000000000000000017701/27/l?subset_id=2&fvd=n4&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://auth.services.adobe.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://auth.services.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /af/eaf09c/000000000000000000017703/27/l?subset_id=2&fvd=n7&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://auth.services.adobe.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://auth.services.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://auth.services.adobe.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://auth.services.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: POST /b/ss/adbims,adbadobenonacdcprod,adbadobeprototype/1/JS-2.22.4-LCS4/s25532576123982 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveContent-Length: 5416sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: text/plain;charset=UTF-8Accept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /img/generic/jarvis_bubble_chat.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/a9bc07eb5/styles.c7b051d2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /p.gif?s=1&k=ecr2zvs&ht=tk&h=auth.services.adobe.com&f=7180.7182.7184&a=1164490&js=1.21.0&app=typekit&e=js&_=1713875277124 HTTP/1.1Host: p.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: POST /componentupdater/api/v1/update?cup2key=6:Uqes3HAGxR2XxTJykP0zs2DnVllXPRuU_vY0FxPhPbE&cup2hreq=fb38ed1d55496230a72f3033c1099ae991e3e1ca8070f5b1a3833fa34defef3e HTTP/1.1Host: edge.microsoft.comConnection: keep-aliveContent-Length: 4903X-Microsoft-Update-AppId: kpfehajjjbbcifeehjgfgnabifknmdad,oankkpibpaokgecfckkdkgaoafllipag,fppmbhmldokgmleojlplaaodlkibgikh,ohckeflnhegojcjlcpbfpciadgikcohk,fgbafbciocncjfbbonhocjaohoknlaco,ndikpojcjlepofdkaaldkinkjbeeebkl,ahmaebgpfccdhgidjaidaoojjcijckba,eeobbhfgfagbclfofmgbdfoicabjdbkn,ojblfafjmiikbkepnnolpgbbhejhlcim,jbfaflocpnkhbgcijpkiafdpbjkedane,alpjnmnfbgfkmmpcfpejmmoebdndednoX-Microsoft-Update-Interactivity: bgX-Microsoft-Update-Service-Cohort: 5992X-Microsoft-Update-Updater: msedge-117.0.2045.47Content-Type: application/jsonSec-Mesh-Client-Edge-Version: 117.0.2045.47Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 1X-Client-Data: CL/hygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: POST /componentupdater/api/v1/update?cup2key=6:tFZ5UCrdntPX_6fmQJV5BGOK6CxNMrlCeRqM6lpPbN0&cup2hreq=833c43bb0d4c05428b9a04764d90234365125d9769176603170febb89ad8f4c2 HTTP/1.1Host: edge.microsoft.comConnection: keep-aliveContent-Length: 4903X-Microsoft-Update-AppId: oankkpibpaokgecfckkdkgaoafllipag,ndikpojcjlepofdkaaldkinkjbeeebkl,kpfehajjjbbcifeehjgfgnabifknmdad,fppmbhmldokgmleojlplaaodlkibgikh,jbfaflocpnkhbgcijpkiafdpbjkedane,ohckeflnhegojcjlcpbfpciadgikcohk,eeobbhfgfagbclfofmgbdfoicabjdbkn,fgbafbciocncjfbbonhocjaohoknlaco,ahmaebgpfccdhgidjaidaoojjcijckba,alpjnmnfbgfkmmpcfpejmmoebdndedno,ojblfafjmiikbkepnnolpgbbhejhlcimX-Microsoft-Update-Interactivity: bgX-Microsoft-Update-Service-Cohort: 1624X-Microsoft-Update-Updater: msedge-117.0.2045.47Content-Type: application/jsonSec-Mesh-Client-Edge-Version: 117.0.2045.47Sec-Mesh-Client-Edge-Channel: stableSec-Mesh-Client-OS: WindowsSec-Mesh-Client-OS-Version: 10.0.19045Sec-Mesh-Client-Arch: x86_64Sec-Mesh-Client-WebView: 1X-Client-Data: CK3iygE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.140.165
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 20.88.206.205
Source: unknown	TCP traffic detected without corresponding DNS query: 20.88.206.205
Source: unknown	TCP traffic detected without corresponding DNS query: 20.88.206.205
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.155.179

Source: global traffic	HTTP traffic detected: GET /core/v5/products/all?channel=ccm&channel=sti&channel=services&channel=mobileApps&platform=win64,win32&_type=xml&productType=Desktop&payload=true&sapCode=APRO HTTP/1.1Connection: closeContent-Type: text/xml; charset=utf-8Accept: application/xmlUser-Agent: Creative Cloudx-adobe-app-id: CreativeCloudInstaller_win64Host: cdn-ffc.oobesaas.adobe.com
Source: global traffic	HTTP traffic detected: GET /certs/v2/CMjAxODA3MjAwMQ/N0ExN0U4RTNBMzBBMDM4N0VFMTQ5QjlEQjU3QjU3Q0I.der HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAccept: application/x-x509-ca-certUser-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200]X-Api-Key: CreativeCloudInstaller_v1_0X-Request-Id: Req-Id-0580641b-cf09-472c-89fe-83cc5e1153c2X-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216Content-Length: 0Host: resources.licenses.adobe.com
Source: global traffic	HTTP traffic detected: GET /certs/v2/IMjAxODA3MjAwMQ/M0M1QUIyMEU4RjY3Rjk5RThBQjI3MjY0NUVDREJGMzA.der HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAccept: application/x-x509-ca-certUser-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200]X-Api-Key: CreativeCloudInstaller_v1_0X-Request-Id: Req-Id-06b83430-aaf9-429f-b544-d7a5c20a588eX-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216Content-Length: 0Host: resources.licenses.adobe.com
Source: global traffic	HTTP traffic detected: GET /certs/v2/CMjAxODA3MjAwMQ/N0UxODEzQzhCNkYyMDAxRUQ4MUNDRThBRTc0RDg4NDQ.der HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAccept: application/x-x509-ca-certUser-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200]X-Api-Key: CreativeCloudInstaller_v1_0X-Request-Id: Req-Id-9409b262-333b-4689-85d2-f0c2a121c5f2X-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216Content-Length: 0Host: resources.licenses.adobe.com
Source: global traffic	HTTP traffic detected: GET /certs/v2/IMjAxODA3MjAwMQ/QjA0RjUwNUQ3ODFDNTgwRTU4MEY2NjQ4RjY5NDVCQTY.der HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAccept: application/x-x509-ca-certUser-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200]X-Api-Key: CreativeCloudInstaller_v1_0X-Request-Id: Req-Id-1a656ca9-954d-4b03-8ad5-93a063de73d4X-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216Content-Length: 0Host: resources.licenses.adobe.com
Source: global traffic	HTTP traffic detected: GET /ims/authorize/v3?client_id=CreativeCloudInstaller_v1_0&response_type=device&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&device_name=992547&redirect_uri=https://oobe.adobe.com/&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&locale=en_US&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&force_marketing_permission=true&dctx_id=v:2,s,bg:kaizen,0f006db0-9d68-11ee-ac84-4fb64a02ffee HTTP/1.1Host: ims-na1.adobelogin.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false HTTP/1.1Host: auth.services.adobe.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /a9bc07eb5/styles.c7b051d2.css HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /img/generic/adobe_logo_black.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /a9bc07eb5/scripts.js HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /a9bc07eb5/en_US/messages.json HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /signin/v1/context/v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee/en_US HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Accept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378sec-ch-ua-mobile: ?0X-IMS-CLIENTID: CreativeCloudInstaller_v1_0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /signin/v2/configurations/CreativeCloudInstaller_v1_0 HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Accept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378sec-ch-ua-mobile: ?0X-IMS-CLIENTID: CreativeCloudInstaller_v1_0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/f_logo_RGB-Blue_58.png HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/apple.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/canvas/Kaizen.jpg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/a9bc07eb5/styles.c7b051d2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/sml-google-logo.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /ecr2zvs.js HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /img/social/sml-apple-logo.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /img/social/sml-round-microsoft-logo.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: demdex=85139728435958444882252136657756763596
Source: global traffic	HTTP traffic detected: GET /core/v1/messaging/ui-version HTTP/1.1Host: server.messaging.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: application/json, text/plain, /X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378X-IMS-CLIENTID: CreativeCloudInstaller_v1_0x-api-key: susi_auth_servicesec-ch-ua-platform: "Windows"Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=85341411633831769662236559786824843586&ts=1713875269295 HTTP/1.1Host: sstats.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /img/social/round/google.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /img/social/round/facebook.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /img/social/round/apple.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
Source: global traffic	HTTP traffic detected: GET /img/social/round/microsoft.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
Source: global traffic	HTTP traffic detected: GET /af/cb695f/000000000000000000017701/27/l?subset_id=2&fvd=n4&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://auth.services.adobe.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://auth.services.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /af/eaf09c/000000000000000000017703/27/l?subset_id=2&fvd=n7&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://auth.services.adobe.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://auth.services.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"Origin: https://auth.services.adobe.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://auth.services.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /img/generic/jarvis_bubble_chat.svg HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/a9bc07eb5/styles.c7b051d2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /p.gif?s=1&k=ecr2zvs&ht=tk&h=auth.services.adobe.com&f=7180.7182.7184&a=1164490&js=1.21.0&app=typekit&e=js&_=1713875277124 HTTP/1.1Host: p.typekit.netConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: auth.services.adobe.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=falseAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0

Source: msedgewebview2.exe, 0000000D.00000003.1671023537.000001AE00DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: //sync-tm.everesttech.net/upi/pid/r7ifn0SL?redir=https%3A%2F%2Fwww.facebook.com%2Ffr%2Fb.php%3Fp%3D1531105787105294%26e%3D%24%7BTM_USER_ID%7D%26t%3D2592000%26o%3D0 equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000000D.00000003.1288238078.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1511353507.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1172830893.00002E5800898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://microsoftstart.msn.cn/https://rewards.microsoft.com/https://www.microsoftnews.com/https://www.facebook.com/www.staging-bing-int.comaction.getBadgeTextColorhttps://outlook.live.com/https://rewards.bing.com/https://www.microsoftnews.cn/*browserAction.openPopupmanifest:browser_action@ equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000000E.00000003.1207241325.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1172764332.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191258266.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://microsoftstart.msn.cn/https://rewards.microsoft.com/https://www.microsoftnews.com/https://www.facebook.com/www.staging-bing-int.comaction.getBadgeTextColorhttps://outlook.live.com/https://rewards.bing.com/https://www.microsoftnews.cn/translatorserp.bing.comhttps://translator.bing.com/ equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1288238078.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1511353507.00002E5800898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/* equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: chrome.cloudflare-dns.com

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1177778677.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://allyoucanleet.com/
Source: msedgewebview2.exe, 00000007.00000003.1165432060.00005D6000158000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165442910.0000592C00152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136H
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136edS
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: msedgewebview2.exe, 00000003.00000002.2763176170.00003E14025D4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584https://anglebug.com/7320
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: msedgewebview2.exe, 00000007.00000003.1165432060.00005D6000158000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165442910.0000592C00152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007ancedG
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007yH
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: msedgewebview2.exe, 00000004.00000003.1166485039.0000092000BE0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165593406.0000592C001C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658)
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750)
Source: msedgewebview2.exe, 00000004.00000003.1166485039.0000092000BE0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165593406.0000592C001C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881Y
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165593406.0000592C001C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906Y
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906useCullModeDynamicState
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: msedgewebview2.exe, 00000007.00000003.1165432060.00005D6000158000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165442910.0000592C00152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036)
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036ides
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279)
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370able
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406.
Source: msedgewebview2.exe, 00000004.00000003.1166485039.0000092000BE0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165593406.0000592C001C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488Y
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: msedgewebview2.exe, 00000007.00000003.1165432060.00005D6000158000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165442910.0000592C00152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724)
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724ancedG
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724gger
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165432060.00005D6000158000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760F
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760ancedS
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760ault
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280F
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280Y
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280ldData
Source: msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2596486683.000007480034C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2608625491.00000F2000268000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2612052677.00000F2000350000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2614282908.00000F20003E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/CloudflareIncECCCA-3.crt0
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1839821286.0000000003DF1000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2656503599.0000000001412000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2692521979.0000000003D4D000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007003000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2744713311.0000000007035000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2744713311.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007030000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000007030000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2596486683.000007480034C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2608625491.00000F2000268000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2612052677.00000F2000350000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2614282908.00000F20003E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/CloudflareIncECCCA-3.crl07
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2744713311.0000000007005000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1839821286.0000000003DF1000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007003000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2656503599.0000000001412000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2692521979.0000000003D4D000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007003000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: msedgewebview2.exe, 00000009.00000002.2618228119.000007480044C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2606822712.0000074800390000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2547077756.000007480017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2611376007.00000F2000298000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2560508893.00000F200016C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/Omniroot2025.crl0m
Source: msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2596486683.000007480034C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2608625491.00000F2000268000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2612052677.00000F2000350000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2614282908.00000F20003E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/CloudflareIncECCCA-3.crl0
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2656503599.0000000001412000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: msedgewebview2.exe, 0000000D.00000003.1170790073.00002E58006B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1170790073.00002E580069A000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1170736109.000046D800694000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crrev.com/c/2555698.
Source: msedgewebview2.exe, 0000000D.00000003.1353397497.00002E5801C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fb.me/use-check-prop-types
Source: msedgewebview2.exe, 0000000A.00000003.1218517543.00000F20003C3000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1834363359.000046D80170C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1229566482.000046D801974000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1280549424.000046D800EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://feross.org
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1177778677.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jedwatson.github.io/classnames
Source: msedgewebview2.exe, 0000000E.00000002.2751863155.000046D80039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://lists.w3.org/Archives/Public/public-svg-wg/2008JulSep/0347.html
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2656503599.0000000001412000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2596486683.000007480034C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2608625491.00000F2000268000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2612052677.00000F2000350000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2614282908.00000F20003E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: msedgewebview2.exe, 00000009.00000002.2618228119.000007480044C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2606822712.0000074800390000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2547077756.000007480017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2611376007.00000F2000298000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2560508893.00000F200016C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0:
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2744713311.0000000007035000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2744713311.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007030000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000007030000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1839821286.0000000003DF1000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2692521979.0000000003D4D000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007003000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: msedgewebview2.exe, 00000003.00000002.2714988035.00003E14023A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2766409882.00000920001A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://permanently-removed.invalid/
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://permanently-removed.invalid/v1/accountcapabilities:batchGet
Source: msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://permanently-removed.invalid/v1/accountcapabilities:batchGethttps://permanently-removed.invali
Source: msedgewebview2.exe, 0000000E.00000003.1199066691.000046D801384000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1199420768.000046D8014A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1198818296.000046D801536000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2490238574.000001FCE7CD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://typekit.com/eulas/000000000000000000014f4f
Source: msedgewebview2.exe, 0000000E.00000003.1201338294.000046D801590000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1201338294.000046D801535000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2490238574.000001FCE7CD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://typekit.com/eulas/000000000000000000014f51
Source: msedgewebview2.exe, 00000009.00000003.1598331114.00000748004A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1598481691.000007480040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2644565291.00000160EAED0000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2499229830.00000160E9ECF000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1919063203.00002E5801F08000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: msedgewebview2.exe, 00000009.00000003.1598331114.00000748004A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1598481691.000007480040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1697975200.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2644565291.00000160EAED0000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2499229830.00000160E9ECF000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1705367321.00002E58042B1000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1919063203.00002E5801F08000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: msedgewebview2.exe, 00000009.00000003.1598331114.00000748004A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1598481691.000007480040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1697975200.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2644565291.00000160EAED0000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2499229830.00000160E9ECF000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1919063203.00002E5801F08000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: msedgewebview2.exe, 0000000A.00000002.2529940336.00000F20000C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://wpad/wpad.dat
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: Acrobat_Set-Up.exe, 00000000.00000002.2724319600.0000000005E60000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2656503599.0000000001412000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007008000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2596486683.000007480034C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2608625491.00000F2000268000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2612052677.00000F2000350000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2614282908.00000F20003E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0v
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: msedgewebview2.exe, 00000003.00000002.2716522564.00003E14023B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2767852963.00000920001B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://zn728.tdg68.com
Source: msedgewebview2.exe, 00000009.00000002.2618228119.000007480044C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://.ser
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://17roco.qq.com
Source: msedgewebview2.exe, 00000003.00000002.2716522564.00003E14023B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2767852963.00000920001B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://656a.com
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://a.arkoselabs.com
Source: msedgewebview2.exe, 0000000E.00000003.1475293246.000002050050C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.a
Source: msedgewebview2.exe, 0000000D.00000003.1289926321.00002E5800A60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/gsi/
Source: msedgewebview2.exe, 0000000D.00000003.1289926321.00002E5800A60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://adobe-api.arkoselabs.com
Source: msedgewebview2.exe, 00000004.00000002.2765063943.0000092000194000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://adobe.c
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://alekberg.net/privacy
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: msedgewebview2.exe, 00000003.00000002.2763176170.00003E14025D4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320supportsImage2dViewOf3d
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.se.com
Source: msedgewebview2.exe, 00000004.00000002.2763593401.0000092000184000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://auth.ser
Source: msedgewebview2.exe, 00000009.00000002.2543712933.000007480016C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://auth.servi
Source: msedgewebview2.exe, 00000003.00000002.2721727389.00003E140240C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2775273332.000009200020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://azureedge.net/
Source: msedgewebview2.exe, 00000003.00000002.2763176170.00003E14025D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://baduk.hangame.com/?utm_source=baduk&utm_medium=icon&utm_campaign=shortcut
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1177778677.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bnjmnt4n.now.sh/
Source: msedgewebview2.exe, 00000004.00000003.1276459462.0000017EC941E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2636439811.0000017EC941E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://brazil.s
Source: msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-behance-stage.adobe.io
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-behance-stage.adobe.io/v2XL
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-behance.adobe.io/v2
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-behance.adobe.io/v2hL
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://cc-api-data-stage.adobe.io/ingest
Source: msedgewebview2.exe, 0000000E.00000003.1280366999.000046D80074C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data-stage.adobe.io/ingest/
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://cc-api-data-stage.adobe.io/ingest10_110_09_39_29_1In
Source: Acrobat_Set-Up.exe, 00000000.00000002.2692521979.0000000003D60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/
Source: Acrobat_Set-Up.exe, 00000000.00000002.2675076010.0000000001487000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1845383020.0000000007050000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1843010002.000000000146A000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003D93000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA1000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2744713311.0000000007050000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007048000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000007030000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingest
Source: msedgewebview2.exe, 0000000E.00000003.1280366999.000046D80074C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingest/
Source: Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingest5
Source: Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingestED
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingestInside
Source: Acrobat_Set-Up.exe, 00000000.00000003.1845383020.0000000007050000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2744713311.0000000007050000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000007048000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingestRC
Source: Acrobat_Set-Up.exe, 00000000.00000002.2656503599.000000000139B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingestX(
Source: Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003D93000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingestm
Source: Acrobat_Set-Up.exe, 00000000.00000002.2675076010.0000000001487000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1843010002.000000000146A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingests
Source: Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003D93000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io/ingestx
Source: Acrobat_Set-Up.exe, 00000000.00000002.2656503599.000000000139B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io:443/ingest5821611307024583822379672738671424573
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-data.adobe.io:443/ingestpps-catalog-M2FAAFAD54CA9F560A4C98A5
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cc-api-stage.adobe.io
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253541433.00002E5800AB4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254040547.00002E5800B04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254218141.00002E5800AF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.arkoselabs.com
Source: msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.designerapp.osi.office.net/
Source: msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.edog.designerapp.osi.office.net/
Source: msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/
Source: msedgewebview2.exe, 00000009.00000003.1616148260.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1547500578.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1167387671.0000074800118000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1694416409.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250063834.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1572399043.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1260024832.000007480011D000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1238218444.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1620917578.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1253216745.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1764856152.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.cloudflare-dns.com/dns-query
Source: msedgewebview2.exe, 00000009.00000003.1616148260.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1547500578.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1167387671.0000074800118000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1694416409.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250063834.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1572399043.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1260024832.000007480011D000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1238218444.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1620917578.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1253216745.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1764856152.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.cloudflare-dns.com/dns-queryed
Source: msedgewebview2.exe, 0000000E.00000002.2712523545.000046D800254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromereporting-pa.googleapis.com/v1/record
Source: msedgewebview2.exe, 0000000E.00000002.2712523545.000046D800254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: msedgewebview2.exe, 0000000E.00000002.2712523545.000046D800254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/6EAED1924DB611B6EEF2A664BD077BE7EAD33B8F4EB74897CB187C7633357C2FE8
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromium.dns.nextdns.io
Source: msedgewebview2.exe, 00000009.00000003.1616148260.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1547500578.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1167387671.0000074800118000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1694416409.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250063834.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1572399043.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1260024832.000007480011D000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1238218444.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1620917578.000007480011E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1253216745.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1764856152.000007480011C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cleanbrowsing.org/privacy
Source: msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: msedgewebview2.exe, 0000000D.00000003.1671023537.000001AE00DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=ODU
Source: msedgewebview2.exe, 0000000D.00000003.1671023537.000001AE00DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://commere.adobe
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://community.adobe
Source: msedgewebview2.exe, 00000004.00000002.2747147350.00000920000E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://config.edge.skype.com/config/v1/Edge/117.0.2045.47?clientId=-5970037945637333585&agents=Edge
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://core-ml-fraud-detection-production-public.azureedge.net
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://core-ml-fraud-detection-stage-public.azureedge.net
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://delegated-stg1.adobelogin.com
Source: Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delegated.adobelogin.com
Source: Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delegated.adobelogin.com7cbexpected.
Source: Acrobat_Set-Up.exe, 00000000.00000003.1843010002.000000000146A000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2675076010.0000000001483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delegated.adobelogin.com:
Source: msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp-dogfood.azurewebsites.net/
Source: msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp-int.azurewebsites.net/
Source: msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp.azurewebsites.net/
Source: msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp.azurewebsites.net/net//
Source: msedgewebview2.exe, 00000003.00000002.2771691687.00003E1402630000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp.officeapps.live.com/designerapp/TraceRequest.ashx
Source: msedgewebview2.exe, 00000003.00000002.2771691687.00003E1402630000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp.officeapps.live.com/designerapp/TraceRequest.ashxn_value
Source: msedgewebview2.exe, 00000003.00000002.2771691687.00003E1402630000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp.officeapps.live.com/designerapp/suggestions.ashx
Source: msedgewebview2.exe, 00000009.00000002.2500509172.0000074800088000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2522563257.00000F200009C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/
Source: msedgewebview2.exe, 00000009.00000002.2478805177.0000074800024000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developers.google.com/speed/public-dns/privacy
Source: msedgewebview2.exe, 00000009.00000002.2478805177.0000074800024000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developers.google.com/speed/public-dns/privacyquery
Source: msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns.google/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns.levonet.sk/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns.quad9.net/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns.sb/privacy/
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns.sb/privacy/Char
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns10.quad9.net/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns11.quad9.net/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dns64.dns.google/dns-query
Source: msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dnsnl.alekberg.net/dns-query
Source: msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh-01.spectrum.com/dns-query
Source: msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh-02.spectrum.com/dns-query
Source: msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.cleanbrowsing.org/doh/adult-filter
Source: msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.cleanbrowsing.org/doh/family-filter
Source: msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.cleanbrowsing.org/doh/security-filter
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.cox.net/dns-query
Source: msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.dns.sb/dns-query
Source: msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.familyshield.opendns.com/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.opendns.com/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.quickline.ch/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://doh.xfinity.com/dns-query
Source: msedgewebview2.exe, 00000004.00000002.2748788215.00000920000F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgi
Source: msedgewebview2.exe, 00000004.00000002.2748788215.00000920000F8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1480064961.000001AE00E8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9
Source: msedgewebview2.exe, 0000000D.00000003.1629497605.000001AE013C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dpm.demdex.net/id?d_visid_ver=5.4.0&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0
Source: msedgewebview2.exe, 0000000E.00000002.2751863155.000046D80039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drafts.csswg.org/css-color-adjust-1/#forced-colors-properties
Source: msedgewebview2.exe, 0000000E.00000003.1172764332.000046D8008AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://easyauth.edgebrowser.microsoft-falcon.io/
Source: msedgewebview2.exe, 0000000E.00000003.1172764332.000046D8008AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://easyauth.edgebrowser.microsoft-staging-falcon.io/
Source: msedgewebview2.exe, 0000000E.00000003.1172764332.000046D8008AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://easyauth.edgebrowser.microsoft-testing-falcon.io/
Source: msedgewebview2.exe, 00000009.00000002.2525267636.0000074800109000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2542066446.00000F2000101000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ecs.nel.measure.office.net/?TenantId=Edge&DestinationEndpoint=Edge-Prod-ATL33r5c&FrontEnd=AF
Source: msedgewebview2.exe, 0000000A.00000003.1171944480.00000F2000138000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ecs.nel.measure.office.net?TenantId=Edge&DestinationEndpoint=Edge-Prod-ATL33r5c&FrontEnd=AFD
Source: msedgewebview2.exe, 00000003.00000002.2739962890.00003E14024B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2791531840.000009200030C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000003.1172540403.000009200030C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://edge-conumer-static.azureedge.net/static/edropstatic/2023/09/13/2/static/css/main.ae43b158.c
Source: msedgewebview2.exe, 00000003.00000002.2739962890.00003E14024B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2791531840.000009200030C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000003.1172540403.000009200030C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://edge-conumer-static.azureedge.net/static/edropstatic/2023/09/13/2/static/js/main.2c5481de.js
Source: msedgewebview2.exe, 00000003.00000002.2716522564.00003E14023B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2767852963.00000920001B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://edge.ilive.cn
Source: msedgewebview2.exe, 00000004.00000003.1247654805.0000017EC940B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eu-9.smartscreen
Source: msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500342000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fb.me/react-async-component-lifecycle-hooks
Source: msedgewebview2.exe, 0000000E.00000002.2522345820.00000205002C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fb.me/react-polyfills
Source: msedgewebview2.exe, 0000000D.00000003.1345083353.00002E5800C40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fb.me/react-warning-dont-call-proptypes
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://federatedid-na1-stg1.ser
Source: msedgewebview2.exe, 0000000E.00000003.1280549424.000046D800EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://feross.org/opensource
Source: Acrobat_Set-Up.exe, msedgewebview2.exe, 0000000E.00000003.1197234985.000046D800EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gist.github.com/1129031
Source: msedgewebview2.exe, 0000000E.00000003.1170736109.000046D800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1170585932.000046D800834000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/6939#issuecomment-1016679588
Source: msedgewebview2.exe, 0000000D.00000003.1345083353.00002E5800C40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/webpack-contrib/style-loader#insertat)
Source: msedgewebview2.exe, 00000004.00000002.2775273332.000009200020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: msedgewebview2.exe, 00000003.00000002.2721727389.00003E140240C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/al
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://helpx.a
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://helpx.ado
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://helpx.adob
Source: msedgewebview2.exe, 0000000E.00000003.1170736109.000046D800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1170585932.000046D800834000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/C/#the-details-and-summary-elements
Source: msedgewebview2.exe, 0000000E.00000003.1170736109.000046D800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1170585932.000046D800834000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/rendering.html#flow-content-3
Source: msedgewebview2.exe, 0000000E.00000003.1170736109.000046D800694000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1170585932.000046D800834000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/rendering.html#hidden-elements
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ims-na1-qa2.adobelogin.com/ims
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://ims-na1-stg1.adobelogin.com
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ims-na1-stg1.adobelogin.com/ims
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ims-na1-stg1.adobelogin.com/imsI
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ims-na1.adobelogin.com/ims
Source: Acrobat_Set-Up.exe, 00000000.00000003.1835578828.0000000006FF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-na1.adobelogin.com/ims/authorize/v3?client_id=Creati
Source: msedgewebview2.exe, 00000004.00000003.1764856213.0000092001387000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000003.1251296484.00000920005D8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2634274924.0000017EC9265000.00000002.00000001.00040000.0000004B.sdmp, msedgewebview2.exe, 0000000D.00000003.1253342969.00002E5800A9C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253251718.00002E5800AA4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1251726467.00002E5800A94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ims-na1.adobelogin.com/ims/authorize/v3?client_id=CreativeCloudInstaller_v1_0&response_type=
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1839821286.0000000003DDB000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2709783800.0000000003DE8000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003DA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-prod06.adobelogin.com
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-prod06.adobelogin.com/ims/authorize/v3
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-prod06.adobelogin.com/ims/authorize/v300
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-prod06.adobelogin.com/ims/authorize/v3NF
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1839821286.0000000003DDB000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2709783800.0000000003DE8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-prod06.adobelogin.com3638cf
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-prod06.adobelogin.comQ
Source: Acrobat_Set-Up.exe, 00000000.00000003.1843010002.000000000146A000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2675076010.0000000001483000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ims-prod07.adobelogin.comDE
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2787413596.000046D8008C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://int.msn.cn/
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2787413596.000046D8008C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://int.msn.com/
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2787413596.000046D8008C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://int1.msn.cn/
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2787413596.000046D8008C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://int1.msn.com/
Source: msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://israel.smartscree
Source: msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://israel.smartscree.micros
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006fer
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097ure
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444ys
Source: msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2650940245.00005D6000153000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/2200699030
Source: msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2650940245.00005D6000153000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748abDropdown
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/2582074030
Source: msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2650940245.00005D6000153000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2643718842.00005D6000104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2659807350.0000592C00034000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2659807350.0000592C00024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: msedgewebview2.exe, 00000007.00000002.2614278062.00005D6000024000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2659807350.0000592C00024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273J
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-cops-dev.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-cops-stage.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003D93000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2656503599.0000000001412000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-cops.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2675076010.000000000143A000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1843010002.0000000001438000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lcs-cops.adobe.io/asnp/unlicensed/jwt/v1
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lcs-cops.adobe.io/asnp/unlicensed/jwt/v1bContex
Source: Acrobat_Set-Up.exe, 00000000.00000002.2675076010.000000000143A000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1843010002.0000000001438000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lcs-cops.adobe.io/on
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lcs-cops.adobe.io:443/asnp/unlicensed/jwt/v138671424573
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-cops.adobe.iohttps://lcs-robs-dev.adobe.iohttps://lcs-robs-stage.adobe.iohttps://lcs-rob
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-robs-dev.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-robs-stage.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003D93000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2656503599.0000000001412000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-robs.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003D93000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lcs-robs.adobe.iob
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-ulecs-dev.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-ulecs-stage.adobe.io
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://lcs-ulecs.adobe.io
Source: msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://localhost.msn.com/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login-us.microsoftonline.com/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.chinacloudapi.cn/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.cloudgovapi.us/
Source: msedgewebview2.exe, 00000003.00000002.2698193687.00003E1402304000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000003.00000002.2592304518.0000021406402000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000003.00000002.2601432635.000002140642F000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2730982125.0000092000070000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2653215843.0000017EC94AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: msedgewebview2.exe, 00000003.00000002.2601432635.000002140642F000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/Char
Source: msedgewebview2.exe, 00000004.00000002.2653215843.0000017EC94AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/cacheMemoryFullNotificationPercentagen
Source: msedgewebview2.exe, 00000003.00000002.2592304518.0000021406402000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.microso
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoft-ppe.com/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.de/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.us/
Source: msedgewebview2.exe, 00000003.00000002.2687394754.00003E14022A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2739175078.00000920000A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.partner.microsoftonline.cn/er
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.usgovcloudapi.net/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.windows-ppe.net/
Source: msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2530976055.0000017EC407E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local
Source: msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2530976055.0000017EC407E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.local/
Source: msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/
Source: msedgewebview2.exe, 00000003.00000002.2601432635.0000021406425000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2561195289.0000017EC40EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net/0
Source: msedgewebview2.exe, 00000003.00000002.2601432635.0000021406425000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2561195289.0000017EC40EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.net0
Source: msedgewebview2.exe, 00000004.00000002.2514211849.0000017EC402B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.windows.nets
Source: msedgewebview2.exe, 00000004.00000002.2767852963.00000920001B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lx.pub
Source: msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2540184103.0000017EC40B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://malaysia.smar
Source: msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://malaysia.smarscreen.
Source: msedgewebview2.exe, 00000004.00000002.2540184103.0000017EC40B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://malaysia.smarscreen.0
Source: msedgewebview2.exe, 0000000D.00000003.1671023537.000001AE00DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=auth.services.ado
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mcsprebe.io
Source: msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://microsoftstart.msn.cn/
Source: msedgewebview2.exe, 0000000E.00000002.2747828811.000046D800378000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://microsoftstart.msn.com/
Source: msedgewebview2.exe, 00000004.00000002.2775273332.000009200020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.cn/
Source: msedgewebview2.exe, 00000004.00000002.2775273332.000009200020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.com/
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1177778677.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mths.be/mit
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1177778677.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mths.be/platform
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://my.4399.com/yxmsdzls/
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://news.4399.com/aoqi/
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://news.4399.com/hxjy/
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://news.4399.com/pikatang/
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://news.4399.com/qiu/
Source: msedgewebview2.exe, 00000004.00000003.1247654805.0000017EC940B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://newzealand.smartscreen.mt=GwAWAd9tBAAU4MijKW4GiCCLggU/9urvxKw9DJgOZgAAEOTwuazqPyCL43EJxDEg94
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nextdns.io/privacy
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nextdns.io/privacyr
Source: msedgewebview2.exe, 0000000D.00000003.1352592557.00002E58015D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2787413596.000046D8008C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ntp.msn.cn/
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2787413596.000046D8008C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ntp.msn.com/
Source: msedgewebview2.exe, 0000000E.00000003.1172764332.000046D80089C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ntp.www.office.com/
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://odvr.nic.cz/doh
Source: msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://odvr.nic.cz/dohF
Source: msedgewebview2.exe, 00000004.00000002.2775273332.000009200020C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://office.net/
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.com/
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1288238078.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1511353507.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1172830893.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388160266.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1335934776.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1445230006.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1207241325.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1172764332.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191258266.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1200123489.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1183868052.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1274612704.000046D80089E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://p.ty
Source: msedgewebview2.exe, 0000000D.00000003.1253541433.00002E5800AB4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254040547.00002E5800B04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254218141.00002E5800AF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://p.typekit.net
Source: msedgewebview2.exe, 0000000D.00000003.1664316104.00002E5804060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://p.typekit.net/p.gif
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000003.00000002.2714988035.00003E14023A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2554457470.00000F2000148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/AddSession
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/GetCheckConnectionInfo
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standardbui-tes
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/ListAccounts?json=standard
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/Logout
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/LogoutYxABzen
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/MergeSession
Source: msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/MergeSessionhttps://permanently-removed.invalid/chrome/blank.htm
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/OAuthLogin
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/OAuthLogin?source=ChromiumBrowser&issueuberauth=1
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/RotateBoundCookies
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/chrome/blank.html
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/devicemanagement/data/api
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/reauth/chromeos
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/chrome/usermenu
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/kidsignin/chromeos
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/kidsignup/chromeos
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/v2/chromeos
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/windows
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/xreauth/chrome
Source: msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/xreauth/chromehttps://permanently-removed.invalid/embed
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop
Source: msedgewebview2.exe, 00000004.00000002.2730982125.0000092000070000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxABF
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/o/oauth2/revoke
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth/multilogin
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v1/userinfo
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v2/tokeninfo
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v4/token
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/reauth/v1beta/users/
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/signin/chrome/sync?ssp=1
Source: msedgewebview2.exe, 00000003.00000002.2736003110.00003E140248C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2785593796.0000092000290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/v1/events
Source: msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/v1/issuetoken
Source: msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/v1/issuetokenhttps://permanently-removed.invalid/reauth/v1beta/u
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/v1:GetHints
Source: msedgewebview2.exe, 0000000E.00000003.1485566282.00000205008C1000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190932000.000046D8013DC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500382000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485566282.0000020500840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/dev?id=4734916851270416020
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://public.dns.iij.jp/
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://public.dns.iij.jp/dns-query
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://public.dns.iij.jp/r
Source: msedgewebview2.exe, 00000004.00000002.2655814677.0000017EC94BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://qatar.smartscreen.micro
Source: msedgewebview2.exe, 0000000D.00000003.1347175995.00002E5801518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: msedgewebview2.exe, 0000000D.00000003.1347175995.00002E5801518000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/
Source: msedgewebview2.exe, 0000000D.00000003.1671023537.000001AE00DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://servedby.flashtalking.com/map/?key=a74thHgsfK627J6Ftt8sj5ks52bKe&gdpr=0&gdpr_consent=&url=ht
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ssjj.4399.com/
Source: msedgewebview2.exe, 0000000D.00000003.1673414625.000001AE00782000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sso.behance.net/ims
Source: msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sso.s2stagehance.com
Source: Acrobat_Set-Up.exe, 00000000.00000003.1202986961.0000000003D6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://stage.accol
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stats.m/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sts.windows-ppe.net/
Source: msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sts.windows.net/
Source: msedgewebview2.exe, 0000000E.00000003.1485566282.0000020500840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.apple.com/guide/safari/download-items-from-the-web-sfri40598/mac
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=63709049609681447
Source: msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&h
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1181943744.000046D800BD0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.000002050053E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=cs
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1485408915.0000020500883000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.00000205004C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190702078.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=da
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1485408915.0000020500883000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.00000205004C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=de
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.00000205004C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.0000020500552000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=es
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.00000205004E8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485566282.00000205008C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=fi
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500503000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.0000020500552000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190702078.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485566282.0000020500840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=fr
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.000002050050F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485566282.0000020500840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=it
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485484482.000002050086E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.000002050051A000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=ja
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500342000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.0000020500442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500522000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190932000.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=ko
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2522345820.00000205001C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.0000020500442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500522000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=nb
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=nl
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=pl
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190932000.000046D8013DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=pt
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=ru
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.0000020500552000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191099427.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=sv
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2522345820.00000205001C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.0000020500602000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191099427.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.00000205003C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=tr
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.0000020500602000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=zh-Hans
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.0000020500602000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1183726030.000046D800B2C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191495992.000046D8009F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=zh-Hant
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1181943744.000046D800BD0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.000002050053E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/cs-CZ/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1485408915.0000020500883000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.00000205004C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190702078.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/da-DK/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1485408915.0000020500883000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.00000205004C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/de-DE/kb/where-find-and-manage-downloaded-files-firefox
Source: msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/en-US/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.00000205004C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.0000020500552000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/es-ES/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.00000205004E9000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485566282.00000205008C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/fi-FI/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.0000020500552000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190702078.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500504000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485566282.0000020500840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/fr-FR/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.000002050050F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485566282.0000020500840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/it-IT/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485484482.000002050086E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.000002050051D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/ja-JP/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500342000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.0000020500442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500522000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190932000.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/ko-KR/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2522345820.00000205001C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.0000020500442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500522000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/nb-NO/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/nl-NL/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/pl-PL/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190932000.000046D8013DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/pt-BR/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/ru-RU/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.0000020500552000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191099427.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/sv-SE/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2522345820.00000205001C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.0000020500602000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191099427.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1481788986.00000205003C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/tr-TR/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.0000020500602000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/zh-CN/kb/where-find-and-manage-downloaded-files-firefox
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.0000020500602000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1183726030.000046D800B2C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191495992.000046D8009F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/zh-TW/kb/where-find-and-manage-downloaded-files-firefox
Source: msedgewebview2.exe, 0000000E.00000002.2751863155.000046D80039C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://svgwg.org/svg2-draft/single-page.html#render-OverflowAndClipProperties
Source: msedgewebview2.exe, 00000004.00000002.2643715260.0000017EC943A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: msedgewebview2.exe, 00000004.00000003.1267628740.0000017EC9412000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000003.1276459462.0000017EC941E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2636439811.0000017EC941E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/W0
Source: msedgewebview2.exe, 00000003.00000002.2601432635.0000021406425000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/cacheFileFullNotificationPercentageA==
Source: msedgewebview2.exe, 00000004.00000002.2641304238.0000017EC9423000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/rcC
Source: msedgewebview2.exe, 00000004.00000002.2643715260.0000017EC943A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: msedgewebview2.exe, 00000004.00000002.2641304238.0000017EC9423000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/&
Source: msedgewebview2.exe, 00000004.00000002.2641304238.0000017EC9423000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/.com/https://unitedstates2.ss.wd.microsoft.us/
Source: msedgewebview2.exe, 00000004.00000002.2641304238.0000017EC9423000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/https://unitedstates4.ss.wd.microsoft.us/
Source: msedgewebview2.exe, 00000004.00000002.2643715260.0000017EC943A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: msedgewebview2.exe, 00000004.00000002.2641304238.0000017EC9423000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/7
Source: msedgewebview2.exe, 00000004.00000003.1277544966.0000017EC9498000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/f9af31d4e40a87da3705edde89b048da
Source: msedgewebview2.exe, 00000004.00000002.2641304238.0000017EC9423000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2561195289.0000017EC40EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/m/
Source: msedgewebview2.exe, 0000000D.00000003.1253541433.00002E5800AB4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254040547.00002E5800B04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254218141.00002E5800AF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net
Source: msedgewebview2.exe, 0000000D.00000003.1352767428.00002E58015E0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1485484482.00000205008C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net/
Source: msedgewebview2.exe, 0000000D.00000003.1664316104.00002E5804060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: msedgewebview2.exe, 0000000D.00000003.1664316104.00002E5804060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: msedgewebview2.exe, 0000000D.00000003.1664316104.00002E5804060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
Source: msedgewebview2.exe, 0000000D.00000002.2469098154.0000016066BD7000.00000004.10000000.00040000.00000000.sdmp	String found in binary or memory: https://use.typekit.net/ecr2zvs.js
Source: msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://use.typekit.net;
Source: msedgewebview2.exe, 0000000E.00000002.2747828811.000046D800378000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://windows.msn.cn/
Source: msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://windows.msn.com/
Source: msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.2345.com/?
Source: msedgewebview2.exe, 0000000E.00000003.1485566282.0000020500840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.apple.com/macos/how-to-upgrade/
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/BramVanhaeren
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/TomHegen(
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/fkasmcca
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/leonardoworx
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/leonardoworxH
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/michaelschauer
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/michaelschauerh
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/palomarincon
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/tomanders
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/tracieching
Source: msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.behance.net/traciechingxC
Source: msedgewebview2.exe, 00000003.00000002.2698193687.00003E1402304000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2748788215.00000920000F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.catcert.net/verarrel
Source: msedgewebview2.exe, 00000009.00000002.2478805177.0000074800024000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.cisco.com/c/en/us/about/legal/privacy-full.html
Source: msedgewebview2.exe, 00000009.00000002.2618228119.000007480044C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1242927354.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2606822712.0000074800390000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1250256455.0000074800380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2547077756.000007480017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2611376007.00000F2000298000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2557956231.00000F2000164000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2560508893.00000F200016C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2536867427.00000F20000ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.huobi.com/?utm_source=UT&utm_medium=prodnews&inviter_id=
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1288238078.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1511353507.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1172830893.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388160266.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1335934776.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1445230006.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1207241325.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1172764332.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191258266.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1200123489.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1183868052.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1274612704.000046D80089E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.microsoftnews.cn/
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1288238078.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1511353507.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1172830893.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388160266.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1335934776.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1445230006.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1207241325.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1172764332.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191258266.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1200123489.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1183868052.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1274612704.000046D80089E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.microsoftnews.com/
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.cn/
Source: msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.nic.cz/odvr/
Source: msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.nic.cz/odvr/har
Source: msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.quad9.net/home/privacy/
Source: msedgewebview2.exe, 00000009.00000003.1276368226.0000074800510000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise.js?render=
Source: msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sogou.com/web?ie=
Source: msedgewebview2.exe, 0000000E.00000002.2747828811.000046D800378000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.staging-bing-int.com/
Source: msedgewebview2.exe, 00000004.00000002.2655814677.0000017EC94BB000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2561195289.0000017EC40EE000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2643715260.0000017EC943A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com
Source: msedgewebview2.exe, 00000003.00000002.2601432635.0000021406425000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/NT
Source: msedgewebview2.exe, 00000004.00000002.2666024019.0000017EC94EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com/Pe
Source: msedgewebview2.exe, 00000004.00000002.2655814677.0000017EC94BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com0ba7b553833441b0a01cdbbb2df0d391-17bb5f71-b127-49e2-91dd-e974216ec311-
Source: msedgewebview2.exe, 00000004.00000002.2655814677.0000017EC94BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://xsts.auth.xboxlive.com3

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 108.139.15.110:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.244.194.168:443 -> 192.168.2.16:49723 version: TLS 1.2

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_007E32B0	0_2_007E32B0
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_00912CEC	0_2_00912CEC
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_0091D800	0_2_0091D800
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_00939569	0_2_00939569
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_00619AE0	0_2_00619AE0
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_00618290	0_2_00618290
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_00933B9A	0_2_00933B9A
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: 0_2_0092C75E	0_2_0092C75E

Source: Acrobat_Set-Up.exe

Static PE information: Resource name: DICTIONARY type: DOS executable (COM, 0x8C-variant)

Source: Acrobat_Set-Up.exe, 00000000.00000000.1138583111.0000000000EFA000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameAdobe Installer@ vs Acrobat_Set-Up.exe
Source: Acrobat_Set-Up.exe, 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameAdobe Installer@ vs Acrobat_Set-Up.exe

Source: Acrobat_Set-Up.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: sus28.evad.mine.winEXE@27/246@8/15

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

File created: C:\Users\user\AppData\Roaming\com.adobe.dunamis\f65a88c9-12b3-4201-a633-87cf11b91fa8

Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\{3EBE6875-9C4E-4782-8A43-275AFFFCA6FB}
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Mutant created: NULL
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Mutant created: \Sessions\1\BaseNamedObjects\WAM.log
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Mutant created: \Sessions\1\BaseNamedObjects\.ADOBE_WEBVIEW_FLAGS_SERVER.CONFIG
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\17984755fe166b7170b9b5099053521c
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\359dca4322b8b4a0f7f92bf448150fb
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\_MSIExecute

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

File created: C:\Users\user\AppData\Local\Temp\CreativeCloud

Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: msedgewebview2.exe, 0000000D.00000003.1347175995.00002E5801518000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: select"===s\|\|"input"===s&&"file"===o.type?i=jt:Ue(o)?Rt?i=Ut:(i=$t,a=Lt):(s=o.nodeName)&&"input"===s.toLowerCase()&&("checkbox"===o.type\|\|"radio"===o.type)&&(i=Ft),i&&(i=i(e,t)))return At(i,r,n);a&&a(e,o,t),"blur"===e&&(e=o._wrapperState)&&e.controlled&&"number"===o.type&&Ct(o,"number",o.value)}},Vt=le.extend({view:null,detail:null}),qt={Alt:"altKey",Control:"ctrlKey",Meta:"metaKey",Shift:"shiftKey"};function zt(e){var t=this.nativeEvent;return t.getModifierState?t.getModifierState(e):!!(e=qt[e])&&!!t[e]}function Ht(){return zt}var Wt=0,Gt=0,Kt=!1,Yt=!1,Jt=Vt.extend({screenX:null,screenY:null,clientX:null,clientY:null,pageX:null,pageY:null,ctrlKey:null,shiftKey:null,altKey:null,metaKey:null,getModifierState:Ht,button:null,buttons:null,relatedTarget:function(e){return e.relatedTarget\|\|(e.fromElement===e.srcElement?e.toElement:e.fromElement)},movementX:function(e){if("movementX"in e)return e.movementX;var t=Wt;return Wt=e.screenX,Kt?"mousemove"===e.type?e.screenX-t:0:(Kt=!0,0)},movementY:function(e){if("movementY"in e)return e.movementY;var t=Gt;return Gt=e.screenY,Yt?"mousemove"===e.type?e.screenY-t:0:(Yt=!0,0)}}),Xt=Jt.extend({pointerId:null,width:null,height:null,pressure:null,tangentialPressure:null,tiltX:null,tiltY:null,twist:null,pointerType:null,isPrimary:null}),Zt={mouseEnter:{registrationName:"onMouseEnter",dependencies:["mouseout","mouseover"]},mouseLeave:{registrationName:"onMouseLeave",dependencies:["mouseout","mouseover"]},pointerEnter:{registrationName:"onPointerEnter",dependencies:["pointerout","pointerover"]},pointerLeave:{registrationName:"onPointerLeave",dependencies:["pointerout","pointerover"]}},Qt={eventTypes:Zt,extractEvents:function(e,t,r,n){var o="mouseover"===e\|\|"pointerover"===e,i="mouseout"===e\|\|"pointerout"===e;if(o&&(r.relatedTarget\|\|r.fromElement)\|\|!i&&!o)return null;if(o=n.window===n?n:(o=n.ownerDocument)?o.defaultView\|\|o.parentWindow:window,i?(i=t,t=(t=r.relatedTarget\|\|r.toElement)?L(t):null):i=null,i===t)return null;var a=void 0,s=void 0,c=void 0,u=void 0;"mouseout"===e\|\|"mouseover"===e?(a=Jt,s=Zt.mouseLeave,c=Zt.mouseEnter,u="mouse"):"pointerout"!==e&&"pointerover"!==e\|\|(a=Xt,s=Zt.pointerLeave,c=Zt.pointerEnter,u="pointer");var l=null==i?o:F(i);if(o=null==t?o:F(t),(e=a.getPooled(s,i,r,n)).type=u+"leave",e.target=l,e.relatedTarget=o,(r=a.getPooled(c,t,r,n)).type=u+"enter",r.target=o,r.relatedTarget=l,n=t,i&&n)e:{for(o=n,u=0,a=t=i;a;a=B(a))u++;for(a=0,c=o;c;c=B(c))a++;for(;0<u-a;)t=B(t),u--;for(;0<a-u;)o=B(o),a--;for(;u--;){if(t===o\|\|t===o.alternate)break e;t=B(t),o=B(o)}t=null}else t=null;for(o=t,t=[];i&&i!==o&&(null===(u=i.alternate)\|\|u!==o);)t.push(i),i=B(i);for(i=[];n&&n!==o&&(null===(u=n.alternate)\|\|u!==o);)i.push(n),n=B(n);for(n=0;n<t.length;n++)z(t[n],"bubbled",e);for(n=i.length;0<n--;)z(i[n],"captured",r);return[e,r]}};function er(e,t){return e===t&&(0!==e\|\|1/e==1/t)\|\|e!=e&&t!=t}var tr=Object.prototype.hasOwnProperty;function rr(e,t){if(er(e,t))return!0;if("object"!=typeof e\|\|null===e\|\|"object"!=typeof t\|\|nul
Source: msedgewebview2.exe, 0000000D.00000003.1428887573.00002E5803EE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: insertInto@a;X.xA
Source: msedgewebview2.exe, 00000003.00000002.2625024535.0000021406625000.00000002.00000001.00040000.0000002D.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: Acrobat_Set-Up.exe	String found in binary or memory: che stai cercando, puoi richiedere assistenza. Contatta il <a href=\\"#launch-jarvis\\">team del supporto</a> durante i normali orari di ufficio o <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">chiedi alla community</a> in qualsiasi
Source: Acrobat_Set-Up.exe	String found in binary or memory: "windows-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"No encuentro
Source: Acrobat_Set-Up.exe	String found in binary or memory: nt .questions-list-container.with-fixed-list .question-section-fixed{padding-top:.625rem}.get-help-popover-content .questions-list-container .question-section{margin-right:1.25rem}.get-help-popover-content .questions-list-container .question-section .list-head
Source: Acrobat_Set-Up.exe	String found in binary or memory: "mac-os","windows-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionTex
Source: Acrobat_Set-Up.exe	String found in binary or memory: rt.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_cn", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_cn", "cci.url.systemRequirements": "http://www.adobe.com/go/system
Source: Acrobat_Set-Up.exe	String found in binary or memory: ych godzinach pracy albo <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">zadaj pytanie na forum</a> o dowolnej porze.</p>"},"pageType":["download-instructions","email-campaign-compatible","email-campaign","single-app-plan"],"compatibi
Source: Acrobat_Set-Up.exe	String found in binary or memory: ,"id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How many computers can I install my apps on?","questionText":"","answerText":{
Source: Acrobat_Set-Up.exe	String found in binary or memory: ng{width:14.125rem;color:#4b4b4b;color:var(--spectrum-global-color-gray-800);font-weight:700;font-size:.875rem;padding-right:.8125rem;padding-left:.8125rem}.get-help-popover-content .questions-list-container .question-section .list-Item{width:14.125rem;color:#
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"Je ne trouve pas le
Source: Acrobat_Set-Up.exe	String found in binary or memory: tps://helpx.adobe.com/tw/download-install/using/install-apps-number-of-computers.html\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["
Source: Acrobat_Set-Up.exe	String found in binary or memory: tps://helpx.adobe.com/tw/download-install/using/install-apps-number-of-computers.html\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["
Source: Acrobat_Set-Up.exe	String found in binary or memory: b4b4b;color:var(--spectrum-global-color-gray-800);font-weight:400;font-size:.875rem;padding-right:.8125rem;padding-left:.8125rem;border-left-width:0;border-radius:.25rem;white-space:normal}.get-help-popover-content .questions-list-container .question-section .
Source: Acrobat_Set-Up.exe	String found in binary or memory: -lo para instalar outros aplicativos da Adobe. <a href=\\"https://helpx.adobe.com/br/download-install/using/download-install-new-computer.html\\">Saiba mais</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"co
Source: Acrobat_Set-Up.exe	String found in binary or memory: /helpx.stage.adobe.com/cn/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/cn", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/cn", "cci.url.error.install.support": "https://helpx.adobe.com/cn/c
Source: Acrobat_Set-Up.exe	String found in binary or memory: ist-Item.selectedItem{background-color:rgba(44,44,44,.04);background-color:var(--spectrum-alias-background-color-hover-overlay)}.get-help-popover-content .description-section{position:absolute;padding:1.25rem .625rem 1.25rem 1.25rem;right:100%;top:-.0625rem;bo
Source: Acrobat_Set-Up.exe	String found in binary or memory: nnen Sie damit andere Adobe-Applikationen installieren. <a href=\\"https://helpx.adobe.com/de/download-install/using/download-install-new-computer.html\\">Weitere Informationen</a></p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTa
Source: Acrobat_Set-Up.exe	String found in binary or memory: tentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How many computers can I install my
Source: Acrobat_Set-Up.exe	String found in binary or memory: eative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_cn", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_cn", "cci.url.download.installer": "http://www.adobe.com/go/download
Source: Acrobat_Set-Up.exe	String found in binary or memory: s":["general"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How many compute
Source: Acrobat_Set-Up.exe	String found in binary or memory: <a href=\\"#launch-jarvis\\"></a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"></a></p>"},"pageType":["download-instructions","
Source: Acrobat_Set-Up.exe	String found in binary or memory: "windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"No
Source: Acrobat_Set-Up.exe	String found in binary or memory: um-alias-dropshadow-color);outline:none}.get-help-popover-content .description-section.ipad-description-section{right:-1px;z-index:1}@media (max-width:600px){.get-help-popover-content .description-section{right:-1px;z-index:1}}.get-help-popover-content .descri
Source: Acrobat_Set-Up.exe	String found in binary or memory: s-notification",role:"status","aria-live":"polite"},"".concat(parseInt(s,10),"%")),o.a.createElement("div",{className:"cci-install-desc"},_e(c,{appName:a,isCCDOnly:r,inAppInstaller:i})))},Ka=a(219),Va=a.n(Ka),Ja=function(e){var t=e.initContext,a=t.appName,n=t.
Source: Acrobat_Set-Up.exe	String found in binary or memory: ML,l="get-help-$".concat(encodeURI(t),"-").concat(i).split(" ").join("-"),s=document.createElement("span");s.id=l,s.innerHTML=i,t.includes("#adobeid-email")?s.innerHTML=r.email\|\|"":rt[l]\|\|(rt[l]=Je.createLink(t,i,{onClick:function(e){return o(e,t,i)}})),e.pare
Source: Acrobat_Set-Up.exe	String found in binary or memory: pode usar os aplicativos em um computador por vez. <a href=\\"https://helpx.adobe.com/br/download-install/using/install-apps-number-of-computers.html\\">Saiba mais</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["gener
Source: Acrobat_Set-Up.exe	String found in binary or memory: pode usar os aplicativos em um computador por vez. <a href=\\"https://helpx.adobe.com/br/download-install/using/install-apps-number-of-computers.html\\">Saiba mais</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["gener
Source: Acrobat_Set-Up.exe	String found in binary or memory: ://helpx.adobe.com/cn/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/cn/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/cn/download-ins
Source: Acrobat_Set-Up.exe	String found in binary or memory: ://helpx.adobe.com/cn/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/cn/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/cn/download-ins
Source: Acrobat_Set-Up.exe	String found in binary or memory: tion-section .desc-scroll-section{overflow-y:auto}.get-help-popover-content .description-section .desc-scroll-section .desc-heading{color:#4b4b4b;color:var(--spectrum-global-color-gray-800);font-weight:700;font-size:.875rem;line-height:1.375rem;margin-bottom:.
Source: Acrobat_Set-Up.exe	String found in binary or memory: nnen Sie Ihre Applikationen auf mehreren Computern installieren und sich auf bis zu zwei Computern anmelden, Ihre Applikationen jedoch nur auf jeweils einem Computer verwenden. <a href=\\"https://helpx.adobe.com/de/download-install/using/install-apps-number-of
Source: Acrobat_Set-Up.exe	String found in binary or memory: nnen Sie Ihre Applikationen auf mehreren Computern installieren und sich auf bis zu zwei Computern anmelden, Ihre Applikationen jedoch nur auf jeweils einem Computer verwenden. <a href=\\"https://helpx.adobe.com/de/download-install/using/install-apps-number-of
Source: Acrobat_Set-Up.exe	String found in binary or memory: l"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative
Source: Acrobat_Set-Up.exe	String found in binary or memory: all/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/cn/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore": "https://www.adobe.com/go/cc_b
Source: Acrobat_Set-Up.exe	String found in binary or memory: ows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"I cant find the ins
Source: Acrobat_Set-Up.exe	String found in binary or memory: 25rem;margin-right:1.25rem;width:14.125rem;display:flex}.get-help-popover-content .description-section .desc-scroll-section .desc-content{color:#6e6e6e;color:var(--spectrum-global-color-gray-700);font-weight:400;font-size:.875rem;line-height:1.375rem;margin-ri
Source: Acrobat_Set-Up.exe	String found in binary or memory: s":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg finner ikke installasjonsfilen.","answer
Source: Acrobat_Set-Up.exe	String found in binary or memory: .adobe.com/es/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_es", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_es", "cci.url.systemRequirements": "http://www.
Source: Acrobat_Set-Up.exe	String found in binary or memory: ntTags":null,"platformTags":["windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-screen","nonLousersedQuestionText":"Why can\'t I install my apps
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"Je ne tro
Source: Acrobat_Set-Up.exe	String found in binary or memory: "windows-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"No en
Source: Acrobat_Set-Up.exe	String found in binary or memory: ht:1.25rem;width:14.125rem}.get-help-popover-content .description-section .desc-scroll-section .desc-content a{color:#0d66d0;color:var(--spectrum-global-color-blue-600);text-decoration:none}.get-help-popover-content .description-section .desc-scroll-section .d
Source: Acrobat_Set-Up.exe	String found in binary or memory: ady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative Cloud starting in trial mode when I have a paid subscription?","questionText":"Warum wird Creative Cloud als Testversion gesta
Source: Acrobat_Set-Up.exe	String found in binary or memory: le.stage": "https://helpx.stage.adobe.com/es/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/es", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/es", "cci.url.error.install.support": "https://h
Source: Acrobat_Set-Up.exe	String found in binary or memory: sc-content a.focus-ring{outline:none;text-decoration:underline;text-decoration-style:double}.get-help-popover-content .description-section .desc-scroll-section .desc-content a:hover{text-decoration:underline}.get-help-popover-content .description-section .desc
Source: Acrobat_Set-Up.exe	String found in binary or memory: o. <a href=\\"https://helpx.adobe.com/br/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Saiba mais</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],"installWorkflowTags":["g
Source: Acrobat_Set-Up.exe	String found in binary or memory: o. <a href=\\"https://helpx.adobe.com/br/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Saiba mais</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],"installWorkflowTags":["g
Source: Acrobat_Set-Up.exe	String found in binary or memory: patibilityTags":["incompatible"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompa
Source: Acrobat_Set-Up.exe	String found in binary or memory: lpx.adobe.com/es/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_es", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_es", "cci.url.download.installer": "http://www.ad
Source: Acrobat_Set-Up.exe	String found in binary or memory: scroll-section .desc-content ul{padding-left:1.25rem}.get-help-popover-content .description-section .desc-scroll-section .back-icon{display:none}.get-help-popover-content .description-section .desc-scroll-section .back-icon.ipad-back-icon{display:inherit}@medi
Source: Acrobat_Set-Up.exe	String found in binary or memory: (max-width:600px){.get-help-popover-content .description-section .desc-scroll-section .back-icon{display:inherit}}.get-help-popover-content .description-section .desc-scroll-section .back-icon button{padding-bottom:.55rem;padding-left:0;min-width:22px}.spectr
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg finner ikke in
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"Je ne trouv
Source: Acrobat_Set-Up.exe	String found in binary or memory: nderung angezeigt wird. <a href=\\"https://helpx.adobe.com/de/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Weitere Informationen</a></p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["gene
Source: Acrobat_Set-Up.exe	String found in binary or memory: nderung angezeigt wird. <a href=\\"https://helpx.adobe.com/de/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Weitere Informationen</a></p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["gene
Source: Acrobat_Set-Up.exe	String found in binary or memory: More.stage": "https://helpx.adobe.com/es/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/es/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.
Source: Acrobat_Set-Up.exe	String found in binary or memory: More.stage": "https://helpx.adobe.com/es/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/es/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.
Source: Acrobat_Set-Up.exe	String found in binary or memory: eTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"I cant find the install file.","answerText":{"html":"<p>Sear
Source: Acrobat_Set-Up.exe	String found in binary or memory: om/es/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/es/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore": "https://ww
Source: Acrobat_Set-Up.exe	String found in binary or memory: om/es/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/es/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore": "https://ww
Source: Acrobat_Set-Up.exe	String found in binary or memory: ontentTags":null,"platformTags":["windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-screen","nonLousersedQuestionText":"Why can\'t I install my
Source: Acrobat_Set-Up.exe	String found in binary or memory: "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_tw", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_tw", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_tw", "c
Source: Acrobat_Set-Up.exe	String found in binary or memory: 0,0,0,0)}.spectrum-Accordion-itemHeading{margin:0}.spectrum-Accordion-itemHeader{position:relative;display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;-ms-flex-pack:start;justify-content:flex-start;box-sizing:border-box;padding:12px 16px
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg finner ikke i
Source: Acrobat_Set-Up.exe	String found in binary or memory: <a href=\\"https://helpx.adobe.com/jp/download-install/using/download-install-new-computer.html\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"inst
Source: Acrobat_Set-Up.exe	String found in binary or memory: w/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/tw", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/tw", "cci.url.error.install.support": "https://helpx.adobe.com/tw/creative-cloud/kb/trouble
Source: Acrobat_Set-Up.exe	String found in binary or memory: indows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing happene
Source: Acrobat_Set-Up.exe	String found in binary or memory: },{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"I cant find the install file.","answerText":{"html":"<p>Search for the <a href=\\"#placeholder\\">filename</a>
Source: Acrobat_Set-Up.exe	String found in binary or memory: -os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jag hittar inte inst
Source: Acrobat_Set-Up.exe	String found in binary or memory: hoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_tw", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_tw", "cci.url.download.installer": "http://www.adobe.com/go/download_{productName}_zh_TW",
Source: Acrobat_Set-Up.exe	String found in binary or memory: super() hasn't been called");return e}function _(e,t){return(_=Object.setPrototypeOf\|\|function(e,t){return e.__proto__=t,e})(e,t)}a.d(t,"default",(function(){return M}));var I="get-help-popover-content",j="desc-scroll-section",A="question-section-scroll",L="q
Source: Acrobat_Set-Up.exe	String found in binary or memory: support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_pl", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_pl", "cci.url.systemRequirements": "http://www.adobe.com/go/s
Source: Acrobat_Set-Up.exe	String found in binary or memory: m podpory</a> nebo se kdykoli <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">se zeptejte komunity</a>.</p>"},"pageType":["download-instructions","email-campaign-compatible","email-campaign","single-app-plan"],"compatibilityTags":["co
Source: Acrobat_Set-Up.exe	String found in binary or memory: ar om je te helpen. Neem tijdens kantooruren contact op met ons <a href=\\"#launch-jarvis\\">ondersteuningsteam</a> of <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">vraag het aan de gemeenschap</a> wanneer je maar wilt.</p>"},"pageT
Source: Acrobat_Set-Up.exe	String found in binary or memory: eative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/tw/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/tw/download-install/kb/installer-missin
Source: Acrobat_Set-Up.exe	String found in binary or memory: eative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/tw/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/tw/download-install/kb/installer-missin
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg finner ikke ins
Source: Acrobat_Set-Up.exe	String found in binary or memory: che stai cercando, puoi richiedere assistenza. Contatta il nostro <a href=\\"#launch-jarvis\\">team di supporto</a> durante il normale orario di ufficio o <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">chiedi alla community</a> in q
Source: Acrobat_Set-Up.exe	String found in binary or memory: tps://helpx.stage.adobe.com/pl/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/pl", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/pl", "cci.url.error.install.support": "https://helpx.adobe.com
Source: Acrobat_Set-Up.exe	String found in binary or memory: auto}.spectrum-BarLoader-percentage{-ms-flex-item-align:start;align-self:flex-start;margin-left:12px}.spectrum-BarLoader--sideLabel{display:-ms-inline-flexbox;display:inline-flex;-ms-flex-flow:row;flex-flow:row;-ms-flex-pack:justify;justify-content:space-betw
Source: Acrobat_Set-Up.exe	String found in binary or memory: -os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jag hittar inte ins
Source: Acrobat_Set-Up.exe	String found in binary or memory: ych godzinach pracy albo <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">zadaj pytanie na forum</a> o dowolnej porze.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"p
Source: Acrobat_Set-Up.exe	String found in binary or memory: "general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing happened.","questionText":"Ik klik
Source: Acrobat_Set-Up.exe	String found in binary or memory: pl/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_pl", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_pl", "cci.url.download.installer": "http://www.adobe.com/go/dow
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://helpx.adobe.com/pl/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/pl/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/pl/downloa
Source: Acrobat_Set-Up.exe	String found in binary or memory: https://helpx.adobe.com/pl/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/pl/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/pl/downloa
Source: Acrobat_Set-Up.exe	String found in binary or memory: -os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jag hittar inte insta
Source: Acrobat_Set-Up.exe	String found in binary or memory: nch-jarvis\\"></a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg finne
Source: Acrobat_Set-Up.exe	String found in binary or memory: ],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","non
Source: Acrobat_Set-Up.exe	String found in binary or memory: n ander systeem.</p><p>Als je niet kunt vinden wat je zoekt, staan we klaar om je te helpen. Neem tijdens kantooruren contact op met ons <a href=\\"#launch-jarvis\\">ondersteuningsteam</a> of <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-start
Source: Acrobat_Set-Up.exe	String found in binary or memory: ror.init.networkPath": "This application cannot be run from a network drive. Please copy it to a local folder and re-launch it.", "cci.error.init.anotherInstallerRunning": "{appName} cannot be installed if another Adobe installer is running. All other Adobe
Source: Acrobat_Set-Up.exe	String found in binary or memory: doby nebo <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">se zeptejte komunity</a>.</p>"},"pageType":["download-instructions","single-app-plan"],"compatibilityTags":["compatible","older-version-compatible"],"installWorkflowTags":["cc
Source: Acrobat_Set-Up.exe	String found in binary or memory: -install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/pl/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore": "https://www.adobe.com/go
Source: Acrobat_Set-Up.exe	String found in binary or memory: -install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/pl/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore": "https://www.adobe.com/go
Source: Acrobat_Set-Up.exe	String found in binary or memory: ef=\\"#launch-jarvis\\"></a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":
Source: Acrobat_Set-Up.exe	String found in binary or memory: ndows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing happened
Source: Acrobat_Set-Up.exe	String found in binary or memory: -os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jag hittar
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg finner
Source: Acrobat_Set-Up.exe	String found in binary or memory: orkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQues
Source: Acrobat_Set-Up.exe	String found in binary or memory: .adobe.com/es/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_la", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_la", "cci.url.systemRequirements": "http://www.
Source: Acrobat_Set-Up.exe	String found in binary or memory: wnload-install_tr", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_tr", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_tr", "cci.url.systemRequirements.stage": "https://helpx.stage.adobe.co
Source: Acrobat_Set-Up.exe	String found in binary or memory: top:auto}.no-flexbox .cci-install-complete{height:5.625rem;margin:auto}.no-flexbox .cci-install-complete .spectrum-Toast-body,.no-flexbox .cci-install-complete .spectrum-Toast-buttons,.no-flexbox .cci-install-complete .spectrum-Toast-typeIcon{display:inline-bl
Source: Acrobat_Set-Up.exe	String found in binary or memory: :void 0,i=Tt[e],l="",s="";if(!i){switch(e){case g.INSTALL_COMPLETE:s=Se["cci.installation.toast.almostComplete"].replace("{appName}",n),i=o.a.createElement(gt.Toast,{variant:"info",className:"cci-install-complete",closable:!0},_e("cci.installation.toast.almost
Source: Acrobat_Set-Up.exe	String found in binary or memory: /tr/creative-cloud/system-requirements.html", "cci.url.dllMissingKbArticle": "http://www.adobe.com/go/error_on_launch_tr", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/tr/download-install/kb/error_on_launch.html", "cci.url.adobe
Source: Acrobat_Set-Up.exe	String found in binary or memory: ck}.no-flexbox .cci-install-complete .spectrum-Toast-body{width:80%}.no-flexbox .cci-install-complete .spectrum-Toast-buttons{position:relative;top:-.3125rem}.no-flexbox .spectrum-Dialog{-ms-transform:translateX(-50%) translateY(-50%) translateY(1.25rem)}.no-f
Source: Acrobat_Set-Up.exe	String found in binary or memory: tatus": "https://status.adobe.com/tr", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/tr", "cci.url.error.install.support": "https://helpx.adobe.com/tr/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "h
Source: Acrobat_Set-Up.exe	String found in binary or memory: port.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_fr", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_fr", "cci.url.systemRequirements": "http://www.adobe.com/go/syst
Source: Acrobat_Set-Up.exe	String found in binary or memory: lpx.adobe.com/es/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_la", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_la", "cci.url.download.installer": "http://www.ad
Source: Acrobat_Set-Up.exe	String found in binary or memory: cnica</a> durante el horario comercial o <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">pregunta a la comunidad</a> en cualquier momento.</p>"},"pageType":["download-instructions","email-campaign-compatible","email-campaign","single-
Source: Acrobat_Set-Up.exe	String found in binary or memory: riant:"info",className:"cci-install-delay",closable:!0},a),l);break;case g.INSTALL_ERROR:s=Se["cci.error.common.errorCode"].replace("{appName}",n),i=o.a.createElement(gt.Toast,wt({closable:!0},a),_e("cci.error.common.errorCode",t));break;case g.FEEDBACK_SUBMIT
Source: Acrobat_Set-Up.exe	String found in binary or memory: -os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jag hittar in
Source: Acrobat_Set-Up.exe	String found in binary or memory: tibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install"
Source: Acrobat_Set-Up.exe	String found in binary or memory: flex:0 0 auto;-ms-flex-align:start;align-items:flex-start}.spectrum-Toast-buttons .spectrum-Button+.spectrum-Button,.spectrum-Toast-buttons .spectrum-Button+.spectrum-ClearButton,.spectrum-Toast-buttons .spectrum-ClearButton+.spectrum-Button,.spectrum-Toast-bu
Source: Acrobat_Set-Up.exe	String found in binary or memory: et kunt vinden wat je zoekt, staan we klaar om je te helpen. Neem tijdens kantooruren contact op met ons <a href=\\"#launch-jarvis\\">ondersteuningsteam</a> of <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">vraag het de gemeenschap</
Source: Acrobat_Set-Up.exe	String found in binary or memory: :["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: Adobe <a href=\\"https://helpx.adobe.com/cn/download-install/using/download-install-new-computer.html\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"
Source: Acrobat_Set-Up.exe	String found in binary or memory: ://helpx.stage.adobe.com/fr/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/fr", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/fr", "cci.url.error.install.support": "https://helpx.adobe.com/fr
Source: Acrobat_Set-Up.exe	String found in binary or memory: arnMore": "https://helpx.adobe.com/tr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/tr/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx
Source: Acrobat_Set-Up.exe	String found in binary or memory: arnMore": "https://helpx.adobe.com/tr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/tr/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx
Source: Acrobat_Set-Up.exe	String found in binary or memory: orted. Please choose a different volume for installation.","cci.error.init.networkPath":"This application cannot be run from a network drive. Please copy it to a local folder and re-launch it.","cci.error.init.anotherInstallerRunning":"{appName} cannot be inst
Source: Acrobat_Set-Up.exe	String found in binary or memory: creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_fr", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_fr", "cci.url.download.installer": "http://www.adobe.com/go/downlo
Source: Acrobat_Set-Up.exe	String found in binary or memory: di un computer, accedervi da un massimo di due computer, ma utilizzarle da un solo computer alla volta. <a href=\\"https://helpx.adobe.com/it/download-install/using/install-apps-number-of-computers.html\\">Altre info</a>.</p>"},"pageType":["general"],"compati
Source: Acrobat_Set-Up.exe	String found in binary or memory: di un computer, accedervi da un massimo di due computer, ma utilizzarle da un solo computer alla volta. <a href=\\"https://helpx.adobe.com/it/download-install/using/install-apps-number-of-computers.html\\">Altre info</a>.</p>"},"pageType":["general"],"compati
Source: Acrobat_Set-Up.exe	String found in binary or memory: -install","nonLousersedQuestionText":"How many computers can I install my apps on?","questionText":"","answerText":{"html":"<p>
Source: Acrobat_Set-Up.exe	String found in binary or memory: ilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subsc
Source: Acrobat_Set-Up.exe	String found in binary or memory: ref=\\"https://helpx.adobe.com/cn/download-install/using/install-apps-number-of-computers.html\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["g
Source: Acrobat_Set-Up.exe	String found in binary or memory: ref=\\"https://helpx.adobe.com/cn/download-install/using/install-apps-number-of-computers.html\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["g
Source: Acrobat_Set-Up.exe	String found in binary or memory: hrt", "cci.error.generic.title": "Installation fehlgeschlagen", "cci.error.info.generic.title": " {appName}-Installation fehlgeschlagen", "cci.error.generic.retry.title": "Installation wiederholen", "cci.error.generic": "Installation fehlgeschlagen
Source: Acrobat_Set-Up.exe	String found in binary or memory: ps://helpx.adobe.com/fr/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/fr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/fr/download-i
Source: Acrobat_Set-Up.exe	String found in binary or memory: ps://helpx.adobe.com/fr/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/fr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/fr/download-i
Source: Acrobat_Set-Up.exe	String found in binary or memory: stall/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/fr/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore": "https://www.adobe.com/go/cc
Source: Acrobat_Set-Up.exe	String found in binary or memory: cnica</a> durante el horario comercial o <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">pregunta a la comunidad</a> en cualquier momento.</p>"},"pageType":["download-instructions","single-app-plan"],"compatibilityTags":["compatible",
Source: Acrobat_Set-Up.exe	String found in binary or memory: e-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: /br/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_br", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_br", "cci.url.systemRequirements": "http://www.adobe.com/
Source: Acrobat_Set-Up.exe	String found in binary or memory: pp-plan"],"compatibilityTags":["incompatible"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-m
Source: Acrobat_Set-Up.exe	String found in binary or memory: ":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-screen","nonLousersedQuestionText":"Why can\'t I install my apps?","questionText":"Hvorfor kan jeg ikke installere applikasjonene mine?","answer
Source: Acrobat_Set-Up.exe	String found in binary or memory: -Toast{margin:8px;pointer-events:all}.react-spectrum-ToastContainer--top{top:0}.react-spectrum-ToastContainer--bottom{flex-direction:column-reverse;top:unset;bottom:0}.react-spectrum-ToastContainer--left{align-items:flex-start}.react-spectrum-ToastContainer--c
Source: Acrobat_Set-Up.exe	String found in binary or memory: "https://helpx.stage.adobe.com/br/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/pt?mv=product&mv2=accc", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/pt?mv=product&mv2=accc", "cci.url.erro
Source: Acrobat_Set-Up.exe	String found in binary or memory: .install.support": "https://helpx.adobe.com/br/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_br", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_br", "cci.url.downl
Source: Acrobat_Set-Up.exe	String found in binary or memory: ri-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: color:var(--spectrum-global-color-gray-50)}.cci-survey .survey-content .collapsible-questionList.spectrum-Accordion .spectrum-Accordion-item .spectrum-Accordion-itemHeading .spectrum-Accordion-itemHeader:focus:after{inline-size:0;inset-inline-start:none;inset-
Source: Acrobat_Set-Up.exe	String found in binary or memory: r.html", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/br/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/br/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore
Source: Acrobat_Set-Up.exe	String found in binary or memory: r.html", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/br/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/br/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore
Source: Acrobat_Set-Up.exe	String found in binary or memory: lock-start:none;inset-block-end:none}.cci-survey .survey-content .collapsible-questionList.spectrum-Accordion .spectrum-Accordion-item .spectrum-Accordion-itemHeading .spectrum-Accordion-itemHeader:hover{background-color:var(--spectrum-global-color-gray-50)}.c
Source: Acrobat_Set-Up.exe	String found in binary or memory: stage": "https://helpx.adobe.com/br/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/br/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.log
Source: Acrobat_Set-Up.exe	String found in binary or memory: stage": "https://helpx.adobe.com/br/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/br/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.log
Source: Acrobat_Set-Up.exe	String found in binary or memory: serTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ich kann die Installationsdatei nicht
Source: Acrobat_Set-Up.exe	String found in binary or memory: nstallatieprogramma", "cci.menu.About Adobe Installer": "Over {0}-installatieprogramma", "cci.menu.Hide Adobe Installer": "Verberg {0}-installatieprogramma", "cci.menu.Hide Others": "Verberg andere", "cci.menu.Show All": "Toon alles", "cci.menu.
Source: Acrobat_Set-Up.exe	String found in binary or memory: fox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: uit Adobe Installer": "Stop {0}-installatieprogramma", "cci.menu.File": "Bestand", "cci.menu.Close": "Sluiten", "cci.menu.Close All": "Alles sluiten", "cci.menu.Edit": "Bewerk", "cci.menu.Undo": "Herstel", "cci.menu.Redo": "Opnieuw", "cci.
Source: Acrobat_Set-Up.exe	String found in binary or memory: download-install_nl", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_nl", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_nl", "cci.url.systemRequirements.stage": "https://helpx.stage.adobe.
Source: Acrobat_Set-Up.exe	String found in binary or memory: om/nl/creative-cloud/system-requirements.html", "cci.url.dllMissingKbArticle": "http://www.adobe.com/go/error_on_launch_nl", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/nl/download-install/kb/error_on_launch.html", "cci.url.ado
Source: Acrobat_Set-Up.exe	String found in binary or memory: different network.</p>\\n<p>If you are not able to find what you were looking for, we\'re here to help. Contact our <a href=\\"#launch-jarvis\\">support team</a> during business hours or <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"
Source: Acrobat_Set-Up.exe	String found in binary or memory: nd-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"","answerText":{"html":"<p>
Source: Acrobat_Set-Up.exe	String found in binary or memory: eStatus": "https://status.adobe.com/nl", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/nl", "cci.url.error.install.support": "https://helpx.adobe.com/nl/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac":
Source: Acrobat_Set-Up.exe	String found in binary or memory: rowser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: ible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLoca
Source: Acrobat_Set-Up.exe	String found in binary or memory: "https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">vraag het de gemeenschap</a> wanneer je maar wilt.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general"],"bro
Source: Acrobat_Set-Up.exe	String found in binary or memory: rmTags":["mac-os","windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\"
Source: Acrobat_Set-Up.exe	String found in binary or memory: ualisiere dein Betriebssystem, um {appName} zu installieren.", "cci.error.init.compatibility.osVersion.misMatch.kaizenOneAvailable.mac": "Dieses von dir heruntergeladene {appName}-Installationsprogramm funktioniert auf deinem Computer nicht. Lade das Instal
Source: Acrobat_Set-Up.exe	String found in binary or memory: rsion-compatible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safa
Source: Acrobat_Set-Up.exe	String found in binary or memory: ationsprogramm herunter, das mit deiner macOS-Version kompatibel ist.", "cci.error.init.compatibility.osVersion.misMatch.kaizenOneAvailable.win": "Dieses von dir heruntergeladene {appName}-Installationsprogramm funktioniert auf deinem Computer nicht. Lade d
Source: Acrobat_Set-Up.exe	String found in binary or memory: m podpory</a> nebo <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">se zeptejte komunity</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general"],
Source: Acrobat_Set-Up.exe	String found in binary or memory: ll,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-screen","nonLousersedQuestionText":"Why can\'t I install my apps?","questionText":"Miksi en pysty asentamaan sovelluksiani?","answerText":{"html":"<p>Adoben tietokonesovell
Source: Acrobat_Set-Up.exe	String found in binary or memory: learnMore": "https://helpx.adobe.com/nl/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/nl/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://hel
Source: Acrobat_Set-Up.exe	String found in binary or memory: learnMore": "https://helpx.adobe.com/nl/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/nl/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://hel
Source: Acrobat_Set-Up.exe	String found in binary or memory: stallWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuest
Source: Acrobat_Set-Up.exe	String found in binary or memory: ons <a href=\\"#launch-jarvis\\">ondersteuningsteam</a> tijdens normale kantooruren of <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">vraag het de gemeenschap</a> wanneer je maar wilt.</p>"},"pageType":["general"],"compatibilityTags
Source: Acrobat_Set-Up.exe	String found in binary or memory: :["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: \\n<p>If you are not able to find what you were looking for, we\'re here to help. Contact our <a href=\\"#launch-jarvis\\">support team</a> during business hours or <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">ask the community</a>
Source: Acrobat_Set-Up.exe	String found in binary or memory: ible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLoc
Source: Acrobat_Set-Up.exe	String found in binary or memory: m podpory</a> nebo se <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">se zeptejte komunity</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general
Source: Acrobat_Set-Up.exe	String found in binary or memory: rsion-compatible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-fire
Source: Acrobat_Set-Up.exe	String found in binary or memory: s .spectrum-BarLoader-label,.cci-progress .spectrum-BarLoader-percentage{color:#fff;font-size:.9375rem}.cci-progress .cci-install-desc{font-size:.75rem;margin-top:.5rem;text-align:center;width:100%}.cci-progress .cci-progress-notification,.cci-progress .cci-pr
Source: Acrobat_Set-Up.exe	String found in binary or memory: ows-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: riation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":".","
Source: Acrobat_Set-Up.exe	String found in binary or memory: width:47%;margin:0 2px;align-items:flex-start}.cci-survey .survey-options .survey-radio-options.multi-column .spectrum-Radio .spectrum-Radio-label{margin-top:-.25rem;white-space:normal}.cci-survey .survey-options .survey-checkbox-options{display:flex;flex-dire
Source: Acrobat_Set-Up.exe	String found in binary or memory: rsion-compatible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edg
Source: Acrobat_Set-Up.exe	String found in binary or memory: ible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLocal
Source: Acrobat_Set-Up.exe	String found in binary or memory: lapplication Creative Cloud, vous pouvez lutiliser pour installer dautres applications Adobe. <a href=\\"https://helpx.adobe.com/fr/download-install/using/download-install-new-computer.html\\">En savoir plus</a>.</p>"},"pageType":["general"],"c
Source: Acrobat_Set-Up.exe	String found in binary or memory: support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_dk", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_dk", "cci.url.systemRequirements": "http://www.adobe.com/go/s
Source: Acrobat_Set-Up.exe	String found in binary or memory: t team</a> during business hours or <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">ask the community</a> anytime.</p>\\n"},"pageType":["download-instructions","email-campaign-compatible","email-campaign","single-app-plan"],"compatibi
Source: Acrobat_Set-Up.exe	String found in binary or memory: d-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"","answerText":{"html":"<p>
Source: Acrobat_Set-Up.exe	String found in binary or memory: s.multi-column .option-Checkbox{width:47%;margin:0 2px;align-items:flex-start}.cci-survey .survey-options .survey-checkbox-options.multi-column .option-Checkbox .spectrum-Checkbox-label{margin-top:-.25rem;white-space:normal}.cci-survey .survey-options .survey-
Source: Acrobat_Set-Up.exe	String found in binary or memory: tps://helpx.stage.adobe.com/dk/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/da?mv=product&mv2=accc", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/da?mv=product&mv2=accc", "cci.url.error.in
Source: Acrobat_Set-Up.exe	String found in binary or memory: nstalleerd, kun je deze gebruiken om andere Adobe-apps te installeren. <a href=\\"https://helpx.adobe.com/nl/download-install/using/download-install-new-computer.html\\">Meer informatie</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"install
Source: Acrobat_Set-Up.exe	String found in binary or memory: rsion-compatible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-intern
Source: Acrobat_Set-Up.exe	String found in binary or memory: tall.support": "https://helpx.adobe.com/dk/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_dk", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_dk", "cci.url.download.
Source: Acrobat_Set-Up.exe	String found in binary or memory: ible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer"
Source: Acrobat_Set-Up.exe	String found in binary or memory: "master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":".","answ
Source: Acrobat_Set-Up.exe	String found in binary or memory: orkflowTags":["general"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How ma
Source: Acrobat_Set-Up.exe	String found in binary or memory: c-os","windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing
Source: Acrobat_Set-Up.exe	String found in binary or memory: orkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQu
Source: Acrobat_Set-Up.exe	String found in binary or memory: action-left{align-self:flex-start}.cci-survey .actions .action-right{display:flex;align-self:flex-end;margin-right:-.5rem;margin-left:auto}.cci-survey h1{color:var(--spectrum-global-color-gray-900);font-size:1.125rem;line-height:1;margin:0;padding-bottom:.75re
Source: Acrobat_Set-Up.exe	String found in binary or memory: la fois. <a href=\\"https://helpx.adobe.com/fr/download-install/using/install-apps-number-of-computers.html\\">En savoir plus</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags"
Source: Acrobat_Set-Up.exe	String found in binary or memory: la fois. <a href=\\"https://helpx.adobe.com/fr/download-install/using/install-apps-number-of-computers.html\\">En savoir plus</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags"
Source: Acrobat_Set-Up.exe	String found in binary or memory: cnico</a> durante el horario comercial normal o <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started?profile.language=es\\">pregunta a la comunidad</a> en cualquier momento.</p>"},"pageType":["general"],"compatibilityTags":["general"],"instal
Source: Acrobat_Set-Up.exe	String found in binary or memory: ml", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/dk/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/dk/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.sta
Source: Acrobat_Set-Up.exe	String found in binary or memory: ml", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/dk/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/dk/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.sta
Source: Acrobat_Set-Up.exe	String found in binary or memory: n computer tegelijk gebruiken. <a href=\\"https://helpx.adobe.com/nl/download-install/using/install-apps-number-of-computers.html\\">Meer informatie</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTag
Source: Acrobat_Set-Up.exe	String found in binary or memory: n computer tegelijk gebruiken. <a href=\\"https://helpx.adobe.com/nl/download-install/using/install-apps-number-of-computers.html\\">Meer informatie</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTag
Source: Acrobat_Set-Up.exe	String found in binary or memory: ["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative Cloud starting in trial mode when I ha
Source: Acrobat_Set-Up.exe	String found in binary or memory: e": "https://helpx.adobe.com/dk/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/dk/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginIt
Source: Acrobat_Set-Up.exe	String found in binary or memory: e": "https://helpx.adobe.com/dk/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/dk/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginIt
Source: Acrobat_Set-Up.exe	String found in binary or memory: n:62.5rem 0}}.survey-skeleton .skeleton-row{-webkit-animation:wiper 2.5s linear 0s infinite;animation:wiper 2.5s linear 0s infinite;background:-webkit-gradient(linear,left top,right top,color-stop(0,var(--spectrum-global-color-gray-100)),color-stop(50%,var(--s
Source: Acrobat_Set-Up.exe	String found in binary or memory: ":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative Cloud starting i
Source: Acrobat_Set-Up.exe	String found in binary or memory: rsion-compatible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-majo
Source: Acrobat_Set-Up.exe	String found in binary or memory: ms-flex-align:start;align-items:flex-start;position:relative;min-height:32px;max-width:100%;margin-right:16px;vertical-align:top}.spectrum-Radio-input{font-family:inherit;font-size:100%;line-height:1.15;margin:0;overflow:visible;box-sizing:border-box;padding:0
Source: Acrobat_Set-Up.exe	String found in binary or memory: variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: in kullanabilirsiniz. <a href=\\"https://helpx.adobe.com/tr/download-install/using/download-install-new-computer.html\\">Daha fazla bilgi edinin</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":n
Source: Acrobat_Set-Up.exe	String found in binary or memory: ible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","
Source: Acrobat_Set-Up.exe	String found in binary or memory: ll,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How many computers can I install my apps on?","
Source: Acrobat_Set-Up.exe	String found in binary or memory: connecter de lapplication Creative Cloud, puis vous reconnecter pour voir le changement. <a href=\\"https://helpx.adobe.com/fr/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">En savoir plus</a>.</p>"},"pageType":["download-instruct
Source: Acrobat_Set-Up.exe	String found in binary or memory: connecter de lapplication Creative Cloud, puis vous reconnecter pour voir le changement. <a href=\\"https://helpx.adobe.com/fr/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">En savoir plus</a>.</p>"},"pageType":["download-instruct
Source: Acrobat_Set-Up.exe	String found in binary or memory: ,"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant
Source: Acrobat_Set-Up.exe	String found in binary or memory: n om de wijziging te zien. <a href=\\"https://helpx.adobe.com/nl/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Meer informatie</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["genera
Source: Acrobat_Set-Up.exe	String found in binary or memory: n om de wijziging te zien. <a href=\\"https://helpx.adobe.com/nl/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Meer informatie</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["genera
Source: Acrobat_Set-Up.exe	String found in binary or memory: zca bir bilgisayarda kullanabilirsiniz. <a href=\\"https://helpx.adobe.com/tr/download-install/using/install-apps-number-of-computers.html\\">Daha fazla bilgi edinin</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["gene
Source: Acrobat_Set-Up.exe	String found in binary or memory: zca bir bilgisayarda kullanabilirsiniz. <a href=\\"https://helpx.adobe.com/tr/download-install/using/install-apps-number-of-computers.html\\">Daha fazla bilgi edinin</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["gene
Source: Acrobat_Set-Up.exe	String found in binary or memory: al"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative
Source: Acrobat_Set-Up.exe	String found in binary or memory: umn;margin-top:1.25rem}.cci-install-complete{width:25.625rem}.cci-install-delay{max-width:35rem}.spectrum-Dialog{width:30rem}.f-row{display:flex;flex-direction:row}.f-col{display:flex;flex-direction:column;padding-top:.0625rem}.f-col.ac,.f-row.ac{align-items:c
Source: Acrobat_Set-Up.exe	String found in binary or memory: master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":".","
Source: Acrobat_Set-Up.exe	String found in binary or memory: support", "cci.url.customerSupport.stage": "https://helpx.stage.adobe.com/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-downloa
Source: Acrobat_Set-Up.exe	String found in binary or memory: "browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing happened.","questio
Source: Acrobat_Set-Up.exe	String found in binary or memory: ont-size:.875rem}.cci-topnav .cci-top-nav-right-nav .cci-topnav-marker{font-size:1.125rem}.cci-topnav .cci-top-nav-right-nav .cci-topnav-marker.mac{font-size:.875rem}.get-help-popover-content{left:auto!important;max-width:20rem;position:fixed!important;right:.
Source: Acrobat_Set-Up.exe	String found in binary or memory: helpx.stage.adobe.com/se/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_se", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_se", "cci.url.systemRequirements": "
Source: Acrobat_Set-Up.exe	String found in binary or memory: rem}.get-help-popover-content .description-section{background-color:#fff;border-color:#cacaca;box-shadow:-.125rem .0625rem .25rem -.125rem rgba(0,0,0,.15)}@media (-ms-high-contrast:active),(-ms-high-contrast:none){.optionCard{border:.0625rem solid #eaeaea}.opt
Source: Acrobat_Set-Up.exe	String found in binary or memory: z gerekebilir. <a href=\\"https://helpx.adobe.com/tr/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Daha fazla bilgi edinin</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],
Source: Acrobat_Set-Up.exe	String found in binary or memory: z gerekebilir. <a href=\\"https://helpx.adobe.com/tr/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Daha fazla bilgi edinin</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],
Source: Acrobat_Set-Up.exe	String found in binary or memory: -install", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements", "cci.url.systemRequirements.stage": "https://helpx.stage.adobe.com/creative-cloud/system-requirements.html", "cci.url.dllMissingKbArticle": "http://www.adobe.com/g
Source: Acrobat_Set-Up.exe	String found in binary or memory: singKbArticle.stage": "https://helpx.stage.adobe.com/se/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/sv?mv=product&mv2=accc", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/sv?mv=product&mv2=ac
Source: Acrobat_Set-Up.exe	String found in binary or memory: e.com/fr/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_ca_fr", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_ca_fr", "cci.url.systemRequirements": "http://www
Source: Acrobat_Set-Up.exe	String found in binary or memory: "mac-os","windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"File di in
Source: Acrobat_Set-Up.exe	String found in binary or memory: /error_on_launch", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/", "cc
Source: Acrobat_Set-Up.exe	String found in binary or memory: c", "cci.url.error.install.support": "https://helpx.adobe.com/se/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_se", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_s
Source: Acrobat_Set-Up.exe	String found in binary or memory: .url.error.install.support": "https://helpx.adobe.com/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_en", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_en", "cci.ur
Source: Acrobat_Set-Up.exe	String found in binary or memory: KbArticle.stage": "https://helpx.stage.adobe.com/fr/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/fr", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/fr", "cci.url.error.install.support": "ht
Source: Acrobat_Set-Up.exe	String found in binary or memory: ud/kb/cc-log-collector.html", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/se/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/se/download-install/kb/installer-missing-components.html", "cci.u
Source: Acrobat_Set-Up.exe	String found in binary or memory: ud/kb/cc-log-collector.html", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/se/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/se/download-install/kb/installer-missing-components.html", "cci.u
Source: Acrobat_Set-Up.exe	String found in binary or memory: gs":["incompatible"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-scr
Source: Acrobat_Set-Up.exe	String found in binary or memory: <a href=\\"#launch-jarvis\\"> </a> <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"> </a>
Source: Acrobat_Set-Up.exe	String found in binary or memory: ps://helpx.adobe.com/fr/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_ca_fr", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_ca_fr", "cci.url.download.installer": "
Source: Acrobat_Set-Up.exe	String found in binary or memory: lector.html", "cci.url.lct.learnMore.stage" : "https://helpx.adobe.com/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore" : "https://helpx.adobe.com/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMor
Source: Acrobat_Set-Up.exe	String found in binary or memory: lector.html", "cci.url.lct.learnMore.stage" : "https://helpx.adobe.com/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore" : "https://helpx.adobe.com/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMor
Source: Acrobat_Set-Up.exe	String found in binary or memory: :["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I cli
Source: Acrobat_Set-Up.exe	String found in binary or memory: l.vcRedist.learnMore.stage": "https://helpx.adobe.com/se/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/se/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.h
Source: Acrobat_Set-Up.exe	String found in binary or memory: l.vcRedist.learnMore.stage": "https://helpx.adobe.com/se/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/se/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.h
Source: Acrobat_Set-Up.exe	String found in binary or memory: ndows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-screen","nonLousersedQuestionText":"Why can\'t I install my apps?","questionText":"Warum kann ic
Source: Acrobat_Set-Up.exe	String found in binary or memory: serTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"File di installazione non dispo
Source: Acrobat_Set-Up.exe	String found in binary or memory: .stage" : "https://helpx.adobe.com/download-install/kb/installer-missing-components.html", "cci.url.contactSupport" : "https://helpx.adobe.com/contact.html", "cci.url.contactSupport.stage" : "https://helpx.stage.adobe.com/contact.html", "cci.url.login
Source: Acrobat_Set-Up.exe	String found in binary or memory: .stage" : "https://helpx.adobe.com/download-install/kb/installer-missing-components.html", "cci.url.contactSupport" : "https://helpx.adobe.com/contact.html", "cci.url.contactSupport.stage" : "https://helpx.stage.adobe.com/contact.html", "cci.url.login
Source: Acrobat_Set-Up.exe	String found in binary or memory: ", "cci.url.customerSupport": "http://www.adobe.com/go/cust_support_kr", "cci.url.customerSupport.stage": "https://helpx.stage.adobe.com/kr/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_kr",
Source: Acrobat_Set-Up.exe	String found in binary or memory: url.lct.learnMore.stage": "https://helpx.adobe.com/fr/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/fr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https:/
Source: Acrobat_Set-Up.exe	String found in binary or memory: url.lct.learnMore.stage": "https://helpx.adobe.com/fr/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/fr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https:/
Source: Acrobat_Set-Up.exe	String found in binary or memory: l.esdDirectDownload":"http://www.adobe.com/go/ccd-download-install","cci.url.esdDirectDownload.stage":"http://www.adobe.com/go/ccd-download-install","cci.url.systemRequirements":"http://www.adobe.com/go/system_requirements","cci.url.systemRequirements.stage":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_kr", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_kr", "cci.url.systemRequirements.stage": "https://helpx.stage.adobe.com/kr/creative-cloud/sys
Source: Acrobat_Set-Up.exe	String found in binary or memory: s-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg kan ikke finde
Source: Acrobat_Set-Up.exe	String found in binary or memory: helpx.adobe.com/fr/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/fr/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore"
Source: Acrobat_Set-Up.exe	String found in binary or memory: helpx.adobe.com/fr/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/fr/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore"
Source: Acrobat_Set-Up.exe	String found in binary or memory: em-requirements.html", "cci.url.dllMissingKbArticle": "http://www.adobe.com/go/error_on_launch_kr", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/kr/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://statu
Source: Acrobat_Set-Up.exe	String found in binary or memory: ttps://helpx.stage.adobe.com/creative-cloud/system-requirements.html","cci.url.dllMissingKbArticle":"http://www.adobe.com/go/error_on_launch","cci.url.dllMissingKbArticle.stage":"https://helpx.stage.adobe.com/download-install/kb/error_on_launch.html","cci.url.
Source: Acrobat_Set-Up.exe	String found in binary or memory: n":"master","id":"cannot-find-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"","answerText":{"html":"<p>
Source: Acrobat_Set-Up.exe	String found in binary or memory: .adobe.com/ko?mv=product&mv2=accc", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/ko?mv=product&mv2=accc", "cci.url.error.install.support": "https://helpx.adobe.com/kr/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url
Source: Acrobat_Set-Up.exe	String found in binary or memory: dobeStatus":"https://status.adobe.com","cci.url.adobeStatus.stage":"https://status.stage.adobe.com/","cci.url.error.install.support":"https://helpx.adobe.com/creative-cloud/kb/troubleshoot-download-install-logs.html","cci.url.upgrade.mac":"https://www.adobe.co
Source: Acrobat_Set-Up.exe	String found in binary or memory: gs":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"File di installazione non disponibile.","answerText":{"html":"<p>Ce
Source: Acrobat_Set-Up.exe	String found in binary or memory: ,"cci.url.lct.learnMore":"https://helpx.adobe.com/creative-cloud/kb/cc-log-collector.html","cci.url.lct.learnMore.stage":"https://helpx.adobe.com/creative-cloud/kb/cc-log-collector.html","cci.url.vcRedist.learnMore":"https://helpx.adobe.com/download-install/kb
Source: Acrobat_Set-Up.exe	String found in binary or memory: pectrum-Menu-checkmark{display:block}.spectrum-Menu-item .spectrum-Icon,.spectrum-Menu-item .spectrum-Menu-itemIcon{-ms-flex-negative:0;flex-shrink:0;-ms-flex-item-align:start;align-self:flex-start}.spectrum-Menu-item .spectrum-Icon+.spectrum-Menu-itemLabel,.s
Source: Acrobat_Set-Up.exe	String found in binary or memory: s-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg kan ikke finde
Source: Acrobat_Set-Up.exe	String found in binary or memory: installer-missing-components.html","cci.url.vcRedist.learnMore.stage":"https://helpx.adobe.com/download-install/kb/installer-missing-components.html","cci.url.contactSupport":"https://helpx.adobe.com/contact.html","cci.url.contactSupport.stage":"https://helpx.
Source: Acrobat_Set-Up.exe	String found in binary or memory: installer-missing-components.html","cci.url.vcRedist.learnMore.stage":"https://helpx.adobe.com/download-install/kb/installer-missing-components.html","cci.url.contactSupport":"https://helpx.adobe.com/contact.html","cci.url.contactSupport.stage":"https://helpx.
Source: Acrobat_Set-Up.exe	String found in binary or memory: i.url.vcRedist.learnMore": "https://helpx.adobe.com/kr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/kr/download-install/kb/installer-missing-components.html", "cci.url.contactSupport
Source: Acrobat_Set-Up.exe	String found in binary or memory: i.url.vcRedist.learnMore": "https://helpx.adobe.com/kr/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/kr/download-install/kb/installer-missing-components.html", "cci.url.contactSupport
Source: Acrobat_Set-Up.exe	String found in binary or memory: ":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"","answerText":{"html":"<p>
Source: Acrobat_Set-Up.exe	String found in binary or memory: eckbox{display:-ms-inline-flexbox;display:inline-flex;-ms-flex-align:start;align-items:flex-start;position:relative;min-height:32px;max-width:100%;margin-right:16px;vertical-align:top}.spectrum-Checkbox-input{font-family:inherit;font-size:100%;line-height:1.15
Source: Acrobat_Set-Up.exe	String found in binary or memory: ull,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"File di installazione non disponibile.","answerText":{"html":"<p>Cerca il file del programma di ins
Source: Acrobat_Set-Up.exe	String found in binary or memory: calc(100% - 24px)}.spectrum-Menu-itemLabel--wrapping{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.spectrum-Menu-checkmark{display:none;-ms-flex-item-align:start;align-self:flex-start}.spectrum-Menu-checkmark,.spectrum-Menu-chevron{-ms-flex-positi
Source: Acrobat_Set-Up.exe	String found in binary or memory: t_fi", "cci.url.customerSupport.stage": "https://helpx.stage.adobe.com/fi/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_fi", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-down
Source: Acrobat_Set-Up.exe	String found in binary or memory: apps. <a href=\\"https://helpx.adobe.com/download-install/using/download-install-new-computer.html\\">Learn more</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general"],
Source: Acrobat_Set-Up.exe	String found in binary or memory: oad-install_fi", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_fi", "cci.url.systemRequirements.stage": "https://helpx.stage.adobe.com/fi/creative-cloud/system-requirements.html", "cci.url.dllMissingKbArticle": "http://www
Source: Acrobat_Set-Up.exe	String found in binary or memory: ctrum-UIIcon-CrossMedium,.spectrum-UIIcon-CrossSmall{width:8px;height:8px}.spectrum-UIIcon-DashSmall{width:10px;height:10px}.spectrum-UIIcon-DoubleGripper{width:16px;height:4px}.spectrum-UIIcon-FolderBreadcrumb,.spectrum-UIIcon-HelpMedium{width:18px;height:18p
Source: Acrobat_Set-Up.exe	String found in binary or memory: <a href=\\"#launch-jarvis\\"></a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"></a></p>
Source: Acrobat_Set-Up.exe	String found in binary or memory: on-compatible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox
Source: Acrobat_Set-Up.exe	String found in binary or memory: s-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg kan ikke finde i
Source: Acrobat_Set-Up.exe	String found in binary or memory: browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How many computers can I install my apps on?","questionText":"How many compute
Source: Acrobat_Set-Up.exe	String found in binary or memory: adobe.com/go/error_on_launch_fi", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/fi/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/fi", "cci.url.adobeStatus.stage": "https://status.stag
Source: Acrobat_Set-Up.exe	String found in binary or memory: nnen Sie jederzeit die <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">Community fragen</a>.</p>"},"pageType":["download-instructions","email-campaign-compatible","email-campaign","single-app-plan"],"compatibilityTags":["compatible","
Source: Acrobat_Set-Up.exe	String found in binary or memory: }.spectrum-UIIcon-HelpSmall{width:14px;height:14px}.spectrum-UIIcon-InfoMedium{width:18px;height:18px}.spectrum-UIIcon-InfoSmall{width:14px;height:14px}.spectrum-UIIcon-Magnifier{width:16px;height:16px}.spectrum-UIIcon-SkipLeft,.spectrum-UIIcon-SkipRight{width
Source: Acrobat_Set-Up.exe	String found in binary or memory: .adobe.com//fi", "cci.url.error.install.support": "https://helpx.adobe.com/fi/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_fi", "cci.url.upgrade.win": "https://www.adobe.com/go
Source: Acrobat_Set-Up.exe	String found in binary or memory: lder-version-compatible"],"installWorkflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation
Source: Acrobat_Set-Up.exe	String found in binary or memory: formTags":["mac-os","windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\
Source: Acrobat_Set-Up.exe	String found in binary or memory: _variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"File di installazione non disponibile.","answerText":{"html":"<p>Cerca il file del programma di installazione
Source: Acrobat_Set-Up.exe	String found in binary or memory: installere andre Adobe-applikasjoner. <a href=\\"https://helpx.adobe.com/no/download-install/using/download-install-new-computer.html\\">Finn ut mer</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTa
Source: Acrobat_Set-Up.exe	String found in binary or memory: ntTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart
Source: Acrobat_Set-Up.exe	String found in binary or memory: e.com/download-install/using/install-apps-number-of-computers.html\\">Learn more</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"source
Source: Acrobat_Set-Up.exe	String found in binary or memory: e.com/download-install/using/install-apps-number-of-computers.html\\">Learn more</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"source
Source: Acrobat_Set-Up.exe	String found in binary or memory: s-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg kan ik
Source: Acrobat_Set-Up.exe	String found in binary or memory: ags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative Cloud starting in trial mode when I have a paid subscription?","questionText":"Why i
Source: Acrobat_Set-Up.exe	String found in binary or memory: indows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"Nie m
Source: Acrobat_Set-Up.exe	String found in binary or memory: s":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How many computers can I install my apps o
Source: Acrobat_Set-Up.exe	String found in binary or memory: /creative-cloud/kb/cc-log-collector.html", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/fi/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/fi/download-install/kb/installer-missing-components.htm
Source: Acrobat_Set-Up.exe	String found in binary or memory: /creative-cloud/kb/cc-log-collector.html", "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/fi/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/fi/download-install/kb/installer-missing-components.htm
Source: Acrobat_Set-Up.exe	String found in binary or memory: kflowTags":["kaizen"],"contentTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":
Source: Acrobat_Set-Up.exe	String found in binary or memory: ", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/fi/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/fi/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.
Source: Acrobat_Set-Up.exe	String found in binary or memory: ", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/fi/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/fi/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.
Source: Acrobat_Set-Up.exe	String found in binary or memory: <a href=\\"#launch-jarvis\\"></a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">
Source: Acrobat_Set-Up.exe	String found in binary or memory: n datamaskin om gangen. <a href=\\"https://helpx.adobe.com/no/download-install/using/install-apps-number-of-computers.html\\">Finn ut mer</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"pl
Source: Acrobat_Set-Up.exe	String found in binary or memory: n datamaskin om gangen. <a href=\\"https://helpx.adobe.com/no/download-install/using/install-apps-number-of-computers.html\\">Finn ut mer</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"pl
Source: Acrobat_Set-Up.exe	String found in binary or memory: sit <a href=\\"https://account.adobe.com/\\">account.adobe.com</a>. You might need to sign out of the Creative Cloud app and then sign in again to see the change. <a href=\\"https://helpx.adobe.com/manage-account/kb/stop-creative-cloud-trial-mode-after-purchas
Source: Acrobat_Set-Up.exe	String found in binary or memory: sit <a href=\\"https://account.adobe.com/\\">account.adobe.com</a>. You might need to sign out of the Creative Cloud app and then sign in again to see the change. <a href=\\"https://helpx.adobe.com/manage-account/kb/stop-creative-cloud-trial-mode-after-purchas
Source: Acrobat_Set-Up.exe	String found in binary or memory: tformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative Cloud starting in trial mod
Source: Acrobat_Set-Up.exe	String found in binary or memory: "_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"File di installazione non disponibile.","answerText":{"html":"<p>Cerca il file del programma di installazion
Source: Acrobat_Set-Up.exe	String found in binary or memory: s-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"Jeg kan ikke
Source: Acrobat_Set-Up.exe	String found in binary or memory: load-install_jp", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_jp", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_jp", "cci.url.systemRequirements.stage": "https://helpx.stage.adobe.com/
Source: Acrobat_Set-Up.exe	String found in binary or memory: nnen Sie jederzeit die <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">Community fragen</a>.</p>"},"pageType":["download-instructions","single-app-plan"],"compatibilityTags":["compatible","older-version-compatible"],"installWorkflowTa
Source: Acrobat_Set-Up.exe	String found in binary or memory: p/creative-cloud/system-requirements.html", "cci.url.dllMissingKbArticle": "http://www.adobe.com/go/error_on_launch_jp", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/jp/download-install/kb/error_on_launch.html", "cci.url.adobeSt
Source: Acrobat_Set-Up.exe	String found in binary or memory: tTags":null,"platformTags":["mac-os","windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find t
Source: Acrobat_Set-Up.exe	String found in binary or memory: se endringen. <a href=\\"https://helpx.adobe.com/no/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Finn ut mer</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],"installWork
Source: Acrobat_Set-Up.exe	String found in binary or memory: se endringen. <a href=\\"https://helpx.adobe.com/no/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\">Finn ut mer</a>.</p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],"installWork
Source: Acrobat_Set-Up.exe	String found in binary or memory: D:\Jenkins\workspace\ccd-installer\main\build\win32\build\git\adobe\ccd\dunamis-sdk\dunamis-ingest\source\dunamis\ingest\session\dunamis.cpp
Source: Acrobat_Set-Up.exe	String found in binary or memory: s":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing happened.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: tus": "https://status.adobe.com/ja?mv=product&mv2=accc", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/ja?mv=product&mv2=accc", "cci.url.error.install.support": "https://helpx.adobe.com/jp/creative-cloud/kb/troubleshoot-download-install-lo
Source: Acrobat_Set-Up.exe	String found in binary or memory: D:\Jenkins\workspace\ccd-installer\main\build\win32\build\git\adobe\ccd\dunamis-sdk\dunamis-internal\dunamis-core\source\dunamis\core\utils\exceptionhelper.hpp
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"Je ne trouve pas l
Source: Acrobat_Set-Up.exe	String found in binary or memory: D:\Jenkins\workspace\ccd-installer\main\build\win32\build\git\adobe\ccd\dunamis-sdk\dunamis-ingest\source\dunamis\ingest\main\ingest.cpp
Source: Acrobat_Set-Up.exe	String found in binary or memory: Tags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"","answerText":{
Source: Acrobat_Set-Up.exe	String found in binary or memory: fout als volgt op:", "cci.error.incompatibilityTitle": "Details van incompatibiliteit", "cci.error.anotherInstallerRunning.title": "Er is al een ander Adobe-installatieprogramma actief", "cci.error.anotherSameInstallerRunning.title": "Het installatiep
Source: Acrobat_Set-Up.exe	String found in binary or memory: .systemReq": "Systemanforderungen anzeigen", "cci.common.installCreativeCloud": "Creative Cloud installieren", "cci.common.continueInstall": "Installation fortsetzen", "cci.menu.Adobe Installer": "{0}-Installationsprogramm", "cci.menu.About Adobe I
Source: Acrobat_Set-Up.exe	String found in binary or memory: llector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/jp/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/jp/download-install/kb/installer-missing-components.html", "c
Source: Acrobat_Set-Up.exe	String found in binary or memory: llector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/jp/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/jp/download-install/kb/installer-missing-components.html", "c
Source: Acrobat_Set-Up.exe	String found in binary or memory: staller": "Info zum {0}-Installationsprogramm", "cci.menu.Hide Adobe Installer": "{0}-Installationsprogramm verbergen", "cci.menu.Hide Others": "Andere ausblenden", "cci.menu.Show All": "Alles einblenden", "cci.menu.Quit Adobe Installer": "{0}-Inst
Source: Acrobat_Set-Up.exe	String found in binary or memory: D:\Jenkins\workspace\ccd-installer\main\build\win32\build\git\adobe\ccd\dunamis-sdk\dunamis-ingest\source\dunamis\ingest\session\session_configprovider.hpp
Source: Acrobat_Set-Up.exe	String found in binary or memory: ll,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-chrome","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ik kan het installatiebestand niet vinden.","answerText":{"html":"<p>Zoek het installatiebestand <
Source: Acrobat_Set-Up.exe	String found in binary or memory: ws-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"Je ne trouve pas
Source: Acrobat_Set-Up.exe	String found in binary or memory: D:\Jenkins\workspace\ccd-installer\main\build\win32\build\git\adobe\ccd\dunamis-sdk\dunamis-ingest\source\dunamis\ingest\session\session.cpp
Source: Acrobat_Set-Up.exe	String found in binary or memory: :["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-screen","nonLousersedQuestionText":"Why can\'t I install my apps?","questionText":"Hvorfor kan jeg ikke installere mine apps?","answerText":{"htm
Source: Acrobat_Set-Up.exe	String found in binary or memory: plan"],"compatibilityTags":["incompatible"],"installWorkflowTags":["general"],"contentTags":null,"platformTags":["windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-a
Source: Acrobat_Set-Up.exe	String found in binary or memory: /helpx.stage.adobe.com/cz/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_cz", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_cz", "cci.url.systemRequirements":
Source: Acrobat_Set-Up.exe	String found in binary or memory: D:\Jenkins\workspace\ccd-installer\main\build\win32\build\git\adobe\ccd\dunamis-sdk\dunamis-internal\dunamis-core\source\dunamis\core\utils\taskengine.hpp
Source: Acrobat_Set-Up.exe	String found in binary or memory: null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ik kan het installatiebestand niet vinden.","answerText":{"html":"<p>Zoek het installatiebestand
Source: Acrobat_Set-Up.exe	String found in binary or memory: ssingKbArticle.stage": "https://helpx.stage.adobe.com/cz/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/cz", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/cz", "cci.url.error.install.support"
Source: Acrobat_Set-Up.exe	String found in binary or memory: download-install_ru", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_ru", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_ru", "cci.url.systemRequirements.stage": "https://helpx.stage.adobe.
Source: Acrobat_Set-Up.exe	String found in binary or memory: "https://helpx.adobe.com/cz/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_cz", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_cz", "cci.url.download.installer": "h
Source: Acrobat_Set-Up.exe	String found in binary or memory: ["general"],"contentTags":null,"platformTags":["windows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-install-my-apps-incompatible-os-screen","nonLousersedQuestionText":"Why can\'t
Source: Acrobat_Set-Up.exe	String found in binary or memory: om/ru/creative-cloud/system-requirements.html", "cci.url.dllMissingKbArticle": "http://www.adobe.com/go/error_on_launch_ru", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/ru/download-install/kb/error_on_launch.html", "cci.url.ado
Source: Acrobat_Set-Up.exe	String found in binary or memory: eStatus": "https://status.adobe.com/ru", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/ru", "cci.url.error.install.support": "https://helpx.adobe.com/ru/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac":
Source: Acrobat_Set-Up.exe	String found in binary or memory: ad": "http://www.adobe.com/go/ccd-download-install_de", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_de", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requirements_de", "cci.url.systemRequirements.s
Source: Acrobat_Set-Up.exe	String found in binary or memory: ":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ik kan het installatiebestand niet vinden.","answerText":{"html":"<p>Zoek het installatiebestand <a href=\\"#
Source: Acrobat_Set-Up.exe	String found in binary or memory: rl.lct.learnMore.stage": "https://helpx.adobe.com/cz/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/cz/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://
Source: Acrobat_Set-Up.exe	String found in binary or memory: rl.lct.learnMore.stage": "https://helpx.adobe.com/cz/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/cz/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://
Source: Acrobat_Set-Up.exe	String found in binary or memory: age": "https://helpx.stage.adobe.com/de/creative-cloud/system-requirements.html", "cci.url.dllMissingKbArticle": "http://www.adobe.com/go/error_on_launch_de", "cci.url.dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/de/download-install/kb/erro
Source: Acrobat_Set-Up.exe	String found in binary or memory: "mac-os","windows-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"Kur
Source: Acrobat_Set-Up.exe	String found in binary or memory: elpx.adobe.com/cz/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/cz/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore":
Source: Acrobat_Set-Up.exe	String found in binary or memory: elpx.adobe.com/cz/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/cz/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore":
Source: Acrobat_Set-Up.exe	String found in binary or memory: _on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/de", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/de", "cci.url.error.install.support": "https://helpx.adobe.com/de/creative-cloud/kb/troubleshoot-download-install-logs
Source: Acrobat_Set-Up.exe	String found in binary or memory: learnMore": "https://helpx.adobe.com/ru/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/ru/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://hel
Source: Acrobat_Set-Up.exe	String found in binary or memory: learnMore": "https://helpx.adobe.com/ru/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/ru/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://hel
Source: Acrobat_Set-Up.exe	String found in binary or memory: ttps://helpx.stage.adobe.com/it/support.html#/top_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_it", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_it", "cci.url.systemRequireme
Source: Acrobat_Set-Up.exe	String found in binary or memory: },{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ik kan het installatiebestand niet vinden.","answerText":{"html":"<p>Zoek het installatiebestand <a href=\\"#placehold
Source: Acrobat_Set-Up.exe	String found in binary or memory: ector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/de/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/de/download-install/kb/installer-missing-components.html", "cci
Source: Acrobat_Set-Up.exe	String found in binary or memory: ector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/de/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://helpx.adobe.com/de/download-install/kb/installer-missing-components.html", "cci
Source: Acrobat_Set-Up.exe	String found in binary or memory: che stai cercando, puoi richiedere assistenza. Contatta il <a href=\\"#launch-jarvis\\">team del supporto</a> durante il normale orario di ufficio o <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">chiedi alla community</a> in qualsia
Source: Acrobat_Set-Up.exe	String found in binary or memory: "mac-os","windows-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ku
Source: Acrobat_Set-Up.exe	String found in binary or memory: "#launch-jarvis\\"></a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"></a></p>"},"pageType":["general"],"compatibilityTags":["general"],"instal
Source: Acrobat_Set-Up.exe	String found in binary or memory: .dllMissingKbArticle.stage": "https://helpx.stage.adobe.com/it/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/it", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/it", "cci.url.error.install.su
Source: Acrobat_Set-Up.exe	String found in binary or memory: op_products", "cci.url.esdDirectDownload": "http://www.adobe.com/go/ccd-download-install_no", "cci.url.esdDirectDownload.stage": "http://www.adobe.com/go/ccd-download-install_no", "cci.url.systemRequirements": "http://www.adobe.com/go/system_requireme
Source: Acrobat_Set-Up.exe	String found in binary or memory: ,"windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ne
Source: Acrobat_Set-Up.exe	String found in binary or memory: port": "https://helpx.adobe.com/it/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_it", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_it", "cci.url.download.installe
Source: Acrobat_Set-Up.exe	String found in binary or memory: ows-os"],"browserTags":["general"],"sourceTags":["ccweb"],"productTags":null,"locReady":false},{"_variation":"master","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing happened."
Source: Acrobat_Set-Up.exe	String found in binary or memory: general"],"contentTags":null,"platformTags":["general"],"browserTags":["general"],"sourceTags":["general"],"productTags":null,"locReady":true},{"_variation":"master","id":"how-many-computers-allowed-to-install","nonLousersedQuestionText":"How many computers ca
Source: Acrobat_Set-Up.exe	String found in binary or memory: "windows-os"],"browserTags":["chrome-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-safari","nonLousersedQuestionText":"I cant find the install file.","questionText":"No encuentro
Source: Acrobat_Set-Up.exe	String found in binary or memory: nnen Sie jederzeit die <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started?profile.language=de\\">Community fragen</a>.</p>"},"pageType":["general"],"compatibilityTags":["general"],"installWorkflowTags":["general"],"contentTags":null,"platfo
Source: Acrobat_Set-Up.exe	String found in binary or memory: ge.adobe.com/no/download-install/kb/error_on_launch.html", "cci.url.adobeStatus": "https://status.adobe.com/nb?mv=product&mv2=accc", "cci.url.adobeStatus.stage": "https://status.stage.adobe.com/nb?mv=product&mv2=accc", "cci.url.error.install.support":
Source: Acrobat_Set-Up.exe	String found in binary or memory: "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/it/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/it/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "ht
Source: Acrobat_Set-Up.exe	String found in binary or memory: "cci.url.lct.learnMore.stage": "https://helpx.adobe.com/it/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/it/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "ht
Source: Acrobat_Set-Up.exe	String found in binary or memory: "mac-os","windows-os"],"browserTags":["firefox-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-edge","nonLousersedQuestionText":"I cant find the install file.","questionText":"Kuru
Source: Acrobat_Set-Up.exe	String found in binary or memory: ps://helpx.adobe.com/it/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/it/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learn
Source: Acrobat_Set-Up.exe	String found in binary or memory: ps://helpx.adobe.com/it/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/it/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learn
Source: Acrobat_Set-Up.exe	String found in binary or memory: "https://helpx.adobe.com/no/creative-cloud/kb/troubleshoot-download-install-logs.html", "cci.url.upgrade.mac": "https://www.adobe.com/go/update-mac_no", "cci.url.upgrade.win": "https://www.adobe.com/go/update-win_no", "cci.url.download.installer": "ht
Source: Acrobat_Set-Up.exe	String found in binary or memory: </a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"></a></p>"},"pageType":["download-instructions","email-campaign-compatible","email-campaign","single-app-plan"],"compatibilityTa
Source: Acrobat_Set-Up.exe	String found in binary or memory: },{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ik kan het installatiebestand niet vinden.","answerText":{"html":"<p>Zoek het installatiebestand <a href=
Source: Acrobat_Set-Up.exe	String found in binary or memory: ych godzinach pracy albo <a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\">zadaj pytanie na forum</a> o dowolnej porze.</p>"},"pageType":["download-instructions","single-app-plan"],"compatibilityTags":["compatible","older-version-compat
Source: Acrobat_Set-Up.exe	String found in binary or memory: ,"windows-os"],"browserTags":["ie-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"Nemo
Source: Acrobat_Set-Up.exe	String found in binary or memory: . <a href=\\"https://helpx.adobe.com/kr/download-install/using/install-apps-number-of-computers.html\\"> </a></p
Source: Acrobat_Set-Up.exe	String found in binary or memory: . <a href=\\"https://helpx.adobe.com/kr/download-install/using/install-apps-number-of-computers.html\\"> </a></p
Source: Acrobat_Set-Up.exe	String found in binary or memory: ll,"locReady":true},{"_variation":"master","id":"cc-starting-in-trial-mode-with-paid-subscription","nonLousersedQuestionText":"Why is Creative Cloud starting in trial mode when I have a paid subscription?","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: "windows-os"],"browserTags":["safari-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-firefox","nonLousersedQuestionText":"I cant find the install file.","questionText":"No encuentr
Source: Acrobat_Set-Up.exe	String found in binary or memory: l.lct.learnMore.stage": "https://helpx.adobe.com/no/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/no/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://h
Source: Acrobat_Set-Up.exe	String found in binary or memory: l.lct.learnMore.stage": "https://helpx.adobe.com/no/creative-cloud/kb/cc-log-collector.html", "cci.url.vcRedist.learnMore": "https://helpx.adobe.com/no/download-install/kb/installer-missing-components.html", "cci.url.vcRedist.learnMore.stage": "https://h
Source: Acrobat_Set-Up.exe	String found in binary or memory: ter","id":"clicked-restart-installation-not-working","nonLousersedQuestionText":"I clicked on \\"Restart the installation\\" and nothing happened.","questionText":"
Source: Acrobat_Set-Up.exe	String found in binary or memory: lpx.adobe.com/no/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/no/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore":
Source: Acrobat_Set-Up.exe	String found in binary or memory: lpx.adobe.com/no/download-install/kb/installer-missing-components.html", "cci.url.contactSupport": "https://helpx.adobe.com/no/contact.html", "cci.url.contactSupport.stage": "https://helpx.stage.adobe.com/contact.html", "cci.url.loginItem.learnMore":
Source: Acrobat_Set-Up.exe	String found in binary or memory: "mac-os","windows-os"],"browserTags":["edge-browser"],"sourceTags":["ccweb"],"productTags":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-internet-explorer","nonLousersedQuestionText":"I cant find the install file.","questionT
Source: Acrobat_Set-Up.exe	String found in binary or memory: rum-global-color-blue-600);--spectrum-alias-icon-color-error:var(--spectrum-global-color-red-400);--spectrum-alias-toolbar-background-color:var(--spectrum-global-color-gray-100)}.get-help-popover-content{padding:1.25rem .625rem 1.25rem 1.25rem;min-width:unset!
Source: Acrobat_Set-Up.exe	String found in binary or memory: gs":null,"locReady":true},{"_variation":"master","id":"cannot-find-install-file-non-major-browser","nonLousersedQuestionText":"I cant find the install file.","questionText":"Ik kan het installatiebestand niet vinden.","answerText":{"html":"<p>Zoek het ins
Source: Acrobat_Set-Up.exe	String found in binary or memory: mportant}.get-help-popover-content.gh-with-description{border-top-left-radius:0;border-bottom-left-radius:0;box-shadow:.125rem .0625rem .25rem -.125rem rgba(0,0,0,.15);box-shadow:.125rem .0625rem .25rem -.125rem var(--spectrum-alias-dropshadow-color)}.get-help
Source: Acrobat_Set-Up.exe	String found in binary or memory: /helpx.adobe.com/kr/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\"> </a></p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],"installWorkflowTags"
Source: Acrobat_Set-Up.exe	String found in binary or memory: /helpx.adobe.com/kr/manage-account/kb/stop-creative-cloud-trial-mode-after-purchase.html\\"> </a></p>"},"pageType":["download-instructions","single-app-plan","app-picker"],"compatibilityTags":["general"],"installWorkflowTags"
Source: Acrobat_Set-Up.exe	String found in binary or memory: Adobe <a href=\\"https://helpx.adobe.com/tw/download-install/using/download-install-new-computer.html\\"></a></p>"},"pageType":["general"],"comp
Source: Acrobat_Set-Up.exe	String found in binary or memory: popover-content .spectrum-Dialog-content{overflow-y:hidden}.get-help-popover-content .questions-list-container{max-height:-webkit-fill-available}.get-help-popover-content .questions-list-container .question-section-scroll{overflow-y:auto}.get-help-popover-cont
Source: Acrobat_Set-Up.exe	String found in binary or memory: <a href=\\"#launch-jarvis\\"></a><a href=\\"https://community.adobe.com/t5/Get-Started/bd-p/get-started\\"></a></p>"},"pageType":["download-instr

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

File read: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: msxml3.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: sensapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: sensapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kbdus.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: omadmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dmcmnutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iri.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mscms.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coloradapterclient.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.security.authentication.web.core.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mf.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfplat.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rtworkq.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dolbydecmft.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfperfhelper.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwritecore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: aadwamextension.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.web.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: tenantrestrictionsplugin.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.userprofile.diagnosticssettings.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kbdus.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: omadmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dmcmnutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iri.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mscms.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coloradapterclient.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.security.authentication.web.core.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mf.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfplat.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rtworkq.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dolbydecmft.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfperfhelper.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.security.authentication.onlineid.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: webauthn.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptngc.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwritecore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.devices.bluetooth.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.networking.hostname.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.networking.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: biwinrt.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.networking.connectivity.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.userprofile.diagnosticssettings.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: tenantrestrictionsplugin.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.devices.enumeration.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.devices.radios.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.web.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.diagnostics.telemetry.platformtelemetryclient.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mswsock.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rasadhlp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncrypt.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncryptprov.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mswsock.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rasadhlp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncrypt.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncryptprov.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mf.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfplat.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rtworkq.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dolbydecmft.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfperfhelper.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12core.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d10warp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxilconv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3dscache.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: userenv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mf.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfplat.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rtworkq.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dolbydecmft.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfperfhelper.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d12core.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d10warp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxilconv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3dscache.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: userenv.dll

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InprocServer32

Jump to behavior

Source: Acrobat_Set-Up.exe

Static PE information: certificate valid

Source: Acrobat_Set-Up.exe

Static file information: File size 3160568 > 1048576

Source: Acrobat_Set-Up.exe

Static PE information: Raw size of UPX1 is bigger than: 0x100000 < 0x2f5600

Source: Acrobat_Set-Up.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:

Source: Acrobat_Set-Up.exe

Static PE information: real checksum: 0x311b10 should be: 0x30c3ab

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Code function: 0_2_0093D391 push ecx; ret

0_2_0093D3A4

Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1

Hooking and other Techniques for Hiding and Protection

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Source: initial sample

Icon embedded in binary file: icon matches a legit application icon: download (133).png

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes			Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes			Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

System information queried: FirmwareTableInformation

Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Window / User API: threadDelayed 2904			Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Window / User API: threadDelayed 6103			Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe TID: 7408	Thread sleep time: -145200s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe TID: 7420	Thread sleep time: -72500s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe TID: 7472	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe TID: 7420	Thread sleep time: -67000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe TID: 7408	Thread sleep time: -305150s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809			Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809			Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystemProduct
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystemProduct

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\js FullSizeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\wasm FullSizeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\blob_storage\388cc1ca-8317-45f1-b53c-ea7c589f7e88 FullSizeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\js FullSizeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\wasm FullSizeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\blob_storage\0931b7b5-6d14-44e4-9404-6631fb1a63df FullSizeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user FullSizeInformation

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\Adobe\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File opened: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Local Storage\	Jump to behavior

Source: msedgewebview2.exe, 00000003.00000002.2683993836.00003E1402280000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: Acrobat_Set-Up.exe, 00000000.00000002.2709783800.0000000003DDD000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1839821286.0000000003DDB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW validate=0 json={"cci.webContext":"{ \"aid\" : \"\", \"AMCV_D6FAAFAD54CA9F560A4C98A5@AdobeOrg\" : \"-637568504\|MCMID\|65821611307024583822379672738671424573\|MCIDTS\|19837\|MCAAMLH-1714479806\|7\|MCAAMB-1714479806\|j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI\|MCOPTOUT-1713882206s\|NONE\|vVersion\|5.1.1\", \"AppMeasurementVersion\" : \"2.23.0\", \"browser\" : \"microsoft edge\", \"campaign_id\" : \"24179\|2021-10-cme-1\|2023-04-kaizenSSOLoggedOut\|2023-09-apps-catalog-M2\", \"compo
Source: Acrobat_Set-Up.exe, 00000000.00000003.1843010002.0000000001438000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: stringComputer System ProductComputer System ProductZPXK580CC82742-52E4-CC1D-A08F-D3A4823E8F04VMware, Inc.Noney*
Source: Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ^iAdobe.CC.XD.Prerelease_adky2gkssdxteAdobe.XD.Prerelease_adky2gkssdxteAdobe Experience Design CC (Beta)Adobe.CC.XD_adky2gkssdxteAdobe Experience Design CC (Prerelease)Adobe.CC.XD.Dev_adky2gkssdxteAdobe Experience Design CC (Prerelease) (No CC moniker)Adobe.XD.Dev_adky2gkssdxteGeminiAdobe.Fresco_pc75e8sa7ep4eGemini PrereleaseAdobe.Fresco.Prerelease_pc75e8sa7ep4eAdobe Experience Design CC (Beta) (No CC moniker)Adobe.XD_adky2gkssdxteAdobeXD Acceptance Tests.Adobe.CSDK.SampleApp_adky2gkssdxteGeminiTestAppGemini_7cg12t602rmqcNGLApp_RE7a1e375c-f7a3-4776-812a-eeb47e4b928c_enpm4xejd91ycGemini DevAdobe.Fresco_mm324r2fpj8r0Gemini Dev PrereleaseAdobe.Fresco.Prerelease_mm324r2fpj8r0Adobe Experience Design (Prerelease)Adobe.XD.Prerelease_pc75e8sa7ep4eAdobe Experience DesignAdobe.XD_pc75e8sa7ep4eNGLApp7a1e375c-f7a3-4776-812a-eeb47e4b928c_bjmg4ec3qaa5yAdobe Experience Design (Dev)Adobe.XD.Dev_pc75e8sa7ep4eAdobe.XD.Beta_pc75e8sa7ep4eyyyy-MM-dd%s %s-%.3dhh'-'mm'-'ssCommon FilesAdobeAdobe Desktop Commonx64CEF.ADOBE_WEBVIEW_FLAGS_SERVER.CONFIGWEBVIEW_FLAGS_LOCAL.CONFIGWEBVIEW_FLAGS_DEVICE.CONFIGcom.adobe.ngl-EnableIEBrowserWF.CONFIGnetworkInterfaceipAddressmacAddressipVersionIPV4OSUtilcom.adobe.ngl-nullSOFTWARE\Microsoft\Internet ExplorerSOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}SOFTWARE\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}EnabledWindowssvcVersionSOFTWARE\Adobe\Identity\UserSpecificIdentitySOFTWARE\Policies\Adobe\NGL\AuthInfoSOFTWARE\Adobe\NGL\SyncAuthWQLHypervisorPresentManufacturerModelIsWow64Processkernel32ROOT\CIMV2SELECT * FROM Win32_ComputerSystemMicrosoftGoogleVirtualOpenStackVMwareVirtualBoxXenQEMUIsVirtualEnvironment%s: VM detection exception!!IsWow64Process2lFnIsWow64Process2 not availableSELECT * FROM Win32_ComputerSystemProductUUIDEC2OSUtilsPROCESSOR_REVISIONGetProcessorId%s: x86 ARM emulation ProcessorId is calculated%s: Exception in ProcessorId generationARM64x86UnknownPROCESSOR_LEVEL%s: Exception while expanding environment string%s: GetKnownFolderPath failed%s: Exception while invoking GetKnownFolderPathCEF:\\.\PhysicalDrive0%ProgramW6432%GetPathTillCommonFilesAdobe%s: Expanding Environment String failed, error code: %luInside GetOSDetailsDeprecated. IsWow64Process failed with %dInside GetOSDetailsDeprecated. Failed to find IsWow64ProcessHKEY_CLASSES_ROOTHKEY_CURRENT_USER1.999.0.0IE-IE-8.0.0.0SetEmbeddedBrowserVersion: EmbeddedBrowserVersion: %sHKEY_PERFORMANCE_NLSTEXTHKEY_PERFORMANCE_TEXTgetRegistryValue: RegOpenKeyExW failed with error %ldgetRegistryValue: RegQueryValueExW failed with error %ldHKEY_LOCAL_MACHINEHKEY_USERSHKEY_CURRENT_CONFIGHKEY_PERFORMANCE_DATAHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionInside GetACC64Path \| Failed to get ACC64 path\Adobe\Adobe Creative Cloudversion.dllgetRegistryValue%s: Unknown error has occuredInside GetACC64Path \| API not supported on 32bit OSProgramFilesDirGetFileVersionInfoSizeA%s: GetFileVersionInfoSizeA failed wi
Source: Acrobat_Set-Up.exe	Binary or memory string: Lq+dGKZU7vYUw8GU1xIczgSjzZzPaiKgbWp8KwTzHMY3AbXtV7ZOqz9P3VGr7ppIIiaphcFSp7RkklxXRHFNQiXT0k8hHGfSeyZS+OTiqcmu1PJ8DfFI2Zf2G9TGAkMWxOaZBdiYJ+Zi3KaepSIT4ufUuSNiDdq5lVGbLVZPoxFQlVl0IUgxcD4eWRvhYxx1no+NUBXr80tu/hx9GX0fBnXotJqyzobV3ZNtB1h5L3NGc/SmdMdCJt1q98SxFqGX04LJ
Source: Acrobat_Set-Up.exe, 00000000.00000003.1843010002.0000000001438000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.
Source: Acrobat_Set-Up.exe	Binary or memory string: 5Zj6xPNiAbko3IxmQTsinZjGxOtiBbkq3IRLI1CZCgpTtMTBIhLaSVtJEo2YZsS7Yj25MdyI5kJxIjcXIrSZIUaSeTyGTSQaaQqWQamU5mkE4yk+xMZpHZZA7pIruQuWQemU8WkF3JbmR3sgdZSPYkaXIROZgcQu4mp5JLyaHkHlJHbiZXkHvJfeRGciB5kDxEDieHkYfJI+QWciW5ijxKLiQJcgx5nbxB3iRvkbfJseQd8i55j7xPPiA3kePJOeRDcg
Source: Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tComputer System ProductZPXK580CC82742-52E4-CC1D-A08F-D3A4823E8F04VMware, Inc.Noney*
Source: Acrobat_Set-Up.exe	Binary or memory string: n39VK9WC/TS/ANFqmxyA8m1HKdYhN9pU7SyZyqWqnW/JAzEMLbVtmFcOsnM/qPLFpBwyDEnlgK2rtHogiK2jwujlCUQEmUQmmEIRxlUBYRKIfyiLTnnIpwUMlmtgdeVEYV+ILnnGhUQ3XUQE3UQm3UQV3UQwzqIxYN0BCN0NhmT1M0Qxya2xxqiVZojTZ4G8/gWZtNz6E9OqAjOuF5vIAX8RJeRmd0QVebXN3xCl5FD/REL/RGH/RFv+CpaiD+56FGYR
Source: Acrobat_Set-Up.exe	Binary or memory string: 9VK9WC/TS/ANFqmxyA8m1HKdYhN9pU7SyZyqWqnW/JAzEMLbVtmFcOsnM/qPLFpBwyDEnlgK2rtHogiK2jwujlCUQEmUQmmEIRxlUBYRKIfyiLTnnIpwUMlmtgdeVEYV+ILnnGhUQ3XUQE3UQm3UQV3UQwzqIxYN0BCN0NhmT1M0Qxya2xxqiVZojTZ4G8/gWZtNz6E9OqAjOuF5vIAX8RJeRmd0QVebXN3xCl5FD/REL/RGH/RFv+CpaiD+56FGYRAG
Source: msedgewebview2.exe, 00000004.00000002.2540184103.0000017EC40B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: NXTVMWare
Source: msedgewebview2.exe, 00000004.00000002.2748788215.00000920000F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: USB device added: path=\\?\usb#vid_0e0f&pid_0003#5&2dda038&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} vendor=3599 "VMware", product=3 "VMware Virtual USB Mouse", serial="", driver="usbccgp", guid=ac4cc384-b075-4d0b-97e3-6d1ed631c8de
Source: Acrobat_Set-Up.exe, 00000000.00000003.1219470891.0000000006FFA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: msedgewebview2.exe, 0000000E.00000003.1198060988.000046D80163A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 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
Source: Acrobat_Set-Up.exe	Binary or memory string: si5Zj6xPNiAbko3IxmQTsinZjGxOtiBbkq3IRLI1CZCgpTtMTBIhLaSVtJEo2YZsS7Yj25MdyI5kJxIjcXIrSZIUaSeTyGTSQaaQqWQamU5mkE4yk+xMZpHZZA7pIruQuWQemU8WkF3JbmR3sgdZSPYkaXIROZgcQu4mp5JLyaHkHlJHbiZXkHvJfeRGciB5kDxEDieHkYfJI+QWciW5ijxKLiQJcgx5nbxB3iRvkbfJseQd8i55j7xPPiA3kePJOeRD
Source: Acrobat_Set-Up.exe, 00000000.00000003.1841806680.0000000003DA6000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003D90000.00000004.00000020.00020000.00000000.sdmp, Acrobat_Set-Up.exe, 00000000.00000002.2704522212.0000000003DA1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx&
Source: msedgewebview2.exe, 00000003.00000002.2511974227.0000021401052000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2521005237.0000017EC4053000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000002.2457410539.000001E765E4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Code function: 0_2_0090E6DE IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_0090E6DE

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Code function: 0_2_0090E6DE IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_0090E6DE

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7fff28fd8e88,0x7fff28fd8e98,0x7fff28fd8ea8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:2	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=1972 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2468 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1713867994185397 --launch-time-ticks=7229621524 --mojo-platform-channel-handle=3360 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:1	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4544 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:2	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7fff28fd8e88,0x7fff28fd8e98,0x7fff28fd8ea8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:2	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2108 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2536 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1713867994182546 --launch-time-ticks=7229637667 --mojo-platform-channel-handle=3360 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:1	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4800 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:2	Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetLocaleInfoW,	0_2_009388A6
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: EnumSystemLocalesW,	0_2_009384E2
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetLocaleInfoW,	0_2_0093843B
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetLocaleInfoW,	0_2_0093106C
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: EnumSystemLocalesW,	0_2_009385C8
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_009389CF
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: EnumSystemLocalesW,	0_2_0093852D
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: EnumSystemLocalesW,	0_2_00930AA9
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetLocaleInfoW,	0_2_00938AD5
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_00938236
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_00938653
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_00938BAB

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\CreativeCloud\ACC\WAM.log VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\Trust Protection Lists\manifest.json VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\MEIPreload\preloaded_data.pb VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\Trust Protection Lists\manifest.json VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\WidevineCdm\manifest.json VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\MEIPreload\preloaded_data.pb VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\SCT Auditing Pending Reports VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\SCT Auditing Pending Reports VolumeInformation

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\Acrobat_Set-Up.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	21 Windows Management Instrumentation	1 Scripting	11 Process Injection	11 Masquerading	OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	12 Command and Scripting Interpreter	1 DLL Side-Loading	1 DLL Side-Loading	14 Virtualization/Sandbox Evasion	LSASS Memory	141 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Modify Registry	Security Account Manager	14 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	14 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Obfuscated Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	1 Remote System Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	1 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	64 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://anglebug.com/4633	0%	URL Reputation	safe
https://anglebug.com/7382	0%	URL Reputation	safe
https://dns11.quad9.net/dns-query	0%	URL Reputation	safe
http://anglebug.com/6929	0%	URL Reputation	safe
https://anglebug.com/7246	0%	URL Reputation	safe
https://anglebug.com/7369	0%	URL Reputation	safe
https://anglebug.com/7489	0%	URL Reputation	safe
https://unitedstates1.ss.wd.microsoft.us/	0%	URL Reputation	safe
http://anglebug.com/4722	0%	URL Reputation	safe
http://anglebug.com/3502	0%	URL Reputation	safe
http://anglebug.com/3623	0%	URL Reputation	safe
http://anglebug.com/3625	0%	URL Reputation	safe
http://anglebug.com/3624	0%	URL Reputation	safe
http://anglebug.com/3862	0%	URL Reputation	safe
https://dns.google/dns-query	0%	URL Reputation	safe
http://anglebug.com/4836	0%	URL Reputation	safe
http://anglebug.com/3970	0%	URL Reputation	safe
http://anglebug.com/5901	0%	URL Reputation	safe
http://anglebug.com/3965	0%	URL Reputation	safe
https://anglebug.com/7161	0%	URL Reputation	safe
https://www.quad9.net/home/privacy/	0%	URL Reputation	safe
https://anglebug.com/7162	0%	URL Reputation	safe
https://doh.cleanbrowsing.org/doh/adult-filter	0%	URL Reputation	safe
http://anglebug.com/5906	0%	URL Reputation	safe
http://anglebug.com/2517	0%	URL Reputation	safe
http://anglebug.com/4937	0%	URL Reputation	safe
https://login.windows.local/	0%	URL Reputation	safe
http://anglebug.com/3832	0%	URL Reputation	safe
https://community.adobe	0%	Avira URL Cloud	safe
https://unitedstates2.ss.wd.microsoft.us/.com/https://unitedstates2.ss.wd.microsoft.us/	0%	Avira URL Cloud	safe
http://anglebug.com/7724gger	0%	Avira URL Cloud	safe
http://anglebug.com/7724)	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/OAuthLogin?source=ChromiumBrowser&issueuberauth=1	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/v1/events	0%	Avira URL Cloud	safe
https://brazil.s	0%	Avira URL Cloud	safe
https://www.microsoftnews.cn/	0%	Avira URL Cloud	safe
https://dns.sb/privacy/Char	0%	Avira URL Cloud	safe
https://malaysia.smar	0%	Avira URL Cloud	safe
http://anglebug.com/5750)	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxABF	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/v1:GetHints	0%	Avira URL Cloud	safe
https://nextdns.io/privacy	0%	Avira URL Cloud	safe
https://p.ty	0%	Avira URL Cloud	safe
https://easyauth.edgebrowser.microsoft-staging-falcon.io/	0%	Avira URL Cloud	safe
https://nextdns.io/privacyr	0%	Avira URL Cloud	safe
http://anglebug.com/7724ancedG	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/v1/issuetoken	0%	Avira URL Cloud	safe
https://easyauth.edgebrowser.microsoft-testing-falcon.io/	0%	Avira URL Cloud	safe
http://permanently-removed.invalid/	0%	Avira URL Cloud	safe
http://anglebug.com/5881Y	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/reauth/v1beta/users/	0%	Avira URL Cloud	safe
http://anglebug.com/7406.	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/RotateBoundCookies	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/embedded/setup/chrome/usermenu	0%	Avira URL Cloud	safe
https://designerapp-int.azurewebsites.net/	0%	Avira URL Cloud	safe
https://mths.be/mit	0%	Avira URL Cloud	safe
https://cdn.arkoselabs.com	0%	Avira URL Cloud	safe
https://malaysia.smarscreen.	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/MergeSession	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/embedded/setup/kidsignup/chromeos	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	162.159.61.3	true	false	unknown
d1n897799gitxr.cloudfront.net	108.139.15.110	true	false	high
resources-prod.licensingstack.com	18.244.194.168	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171	false		high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://doh.familyshield.opendns.com/dns-query	msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4633	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://dns.sb/privacy/Char	msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://anglebug.com/7382	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://permanently-removed.invalid/v1/events	msedgewebview2.exe, 00000003.00000002.2736003110.00003E140248C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2785593796.0000092000290000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://unitedstates2.ss.wd.microsoft.us/.com/https://unitedstates2.ss.wd.microsoft.us/	msedgewebview2.exe, 00000004.00000002.2641304238.0000017EC9423000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://brazil.s	msedgewebview2.exe, 00000004.00000003.1276459462.0000017EC941E000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2636439811.0000017EC941E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/7724gger	msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://malaysia.smar	msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2540184103.0000017EC40B8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.adobe	Acrobat_Set-Up.exe	false	Avira URL Cloud: safe	unknown
https://gist.github.com/1129031	Acrobat_Set-Up.exe, msedgewebview2.exe, 0000000E.00000003.1197234985.000046D800EC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7724)	msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/OAuthLogin?source=ChromiumBrowser&issueuberauth=1	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.microsoftnews.cn/	msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1288238078.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1511353507.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1172830893.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388160266.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1335934776.00002E5800898000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1445230006.00002E580089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1207241325.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1172764332.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1191258266.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1200123489.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1183868052.000046D80089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1274612704.000046D80089E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://dns11.quad9.net/dns-query	msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/	msedgewebview2.exe, 00000009.00000002.2500509172.0000074800088000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2522563257.00000F200009C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/v1:GetHints	msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxABF	msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=ko	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.0000020500102000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500342000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.0000020500442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500522000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190932000.000046D8013D0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6929	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.behance.net/leonardoworxH	msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5750)	msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://p.ty	msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://nextdns.io/privacy	msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://anglebug.com/7246	msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000169000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ims-na1-stg1.adobelogin.com	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp	false		high
https://int.msn.cn/	msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2787413596.000046D8008C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7369	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://anglebug.com/7489	msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.behance.net/palomarincon	msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://dpm.demdex.net/id?d_visid_ver=5.4.0&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0	msedgewebview2.exe, 0000000D.00000003.1629497605.000001AE013C5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://unitedstates1.ss.wd.microsoft.us/	msedgewebview2.exe, 00000004.00000002.2643715260.0000017EC943A000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://fb.me/react-async-component-lifecycle-hooks	msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500342000.00000004.00000800.00020000.00000000.sdmp	false		high
https://doh.opendns.com/dns-query	msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://easyauth.edgebrowser.microsoft-staging-falcon.io/	msedgewebview2.exe, 0000000E.00000003.1172764332.000046D8008AF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://nextdns.io/privacyr	msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://issuetracker.google.com/161903006	msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=nl	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7724ancedG	msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=nb	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2522345820.00000205001C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.0000020500442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500522000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/v1/issuetoken	msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://easyauth.edgebrowser.microsoft-testing-falcon.io/	msedgewebview2.exe, 0000000E.00000003.1172764332.000046D8008AF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/4722	msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165456021.00005D6000171000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://permanently-removed.invalid/reauth/v1beta/users/	msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://permanently-removed.invalid/	msedgewebview2.exe, 00000003.00000002.2714988035.00003E14023A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2766409882.00000920001A0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/embedded/setup/chrome/usermenu	msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/5881Y	msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=auth.services.ado	msedgewebview2.exe, 0000000D.00000003.1671023537.000001AE00DC2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7406.	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sso.behance.net/ims	msedgewebview2.exe, 0000000D.00000003.1673414625.000001AE00782000.00000004.00000800.00020000.00000000.sdmp	false		high
https://npms.io/search?q=ponyfill.	msedgewebview2.exe, 0000000D.00000003.1352592557.00002E58015D8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/RotateBoundCookies	msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/3502	msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/3623	msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000AC000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/3625	msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000AC000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://designerapp-int.azurewebsites.net/	msedgewebview2.exe, 00000003.00000002.2723930824.00003E140241C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2777044960.000009200021C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/3624	msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2673965451.0000592C000AC000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://my.4399.com/yxmsdzls/	msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://xsts.auth.xboxlive.com	msedgewebview2.exe, 00000004.00000002.2655814677.0000017EC94BB000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2561195289.0000017EC40EE000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2643715260.0000017EC943A000.00000004.00000020.00020000.00000000.sdmp	false		high
http://anglebug.com/3862	msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=pt	Acrobat_Set-Up.exe, Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1190932000.000046D8013DC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://dns.google/dns-query	msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/4836	msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://issuetracker.google.com/issues/166475273	msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2659807350.0000592C00034000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2659807350.0000592C00024000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.behance.net/tomanders	msedgewebview2.exe, 0000000D.00000003.1382734548.00002E5803AC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://localhost.msn.com/	msedgewebview2.exe, 0000000E.00000002.2784225069.000046D8008A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://sts.windows.net/	msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=pl	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	false		high
https://outlook.com/	msedgewebview2.exe, 00000003.00000002.2782209975.00003E140269C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2719321460.000046D800290000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cdn.arkoselabs.com	msedgewebview2.exe, 0000000D.00000003.1254389404.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253541433.00002E5800AB4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254040547.00002E5800B04000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1254218141.00002E5800AF0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1253015178.00002E5800B00000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mths.be/mit	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1177778677.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/0000000000000000000176ff	msedgewebview2.exe, 00000009.00000003.1598331114.00000748004A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000009.00000003.1598481691.000007480040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2644565291.00000160EAED0000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000002.2499229830.00000160E9ECF000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1919063203.00002E5801F08000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3970	msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://malaysia.smarscreen.	msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://login.chinacloudapi.cn/	msedgewebview2.exe, 00000003.00000002.2730235519.00003E1402464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2781826927.0000092000254000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ims-prod06.adobelogin.com/ims/authorize/v3NF	Acrobat_Set-Up.exe, 00000000.00000003.1220269752.0000000003DCC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://odvr.nic.cz/doh	msedgewebview2.exe, 00000009.00000002.2474877461.000007480000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2493236056.00000F200000C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5901	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/cs-CZ/kb/where-find-and-manage-downloaded-files-firefox	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1498794377.00000205000C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1181943744.000046D800BD0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.000002050053E000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2600619098.0000020500382000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3965	msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://anglebug.com/7161	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	msedgewebview2.exe, 0000000D.00000003.1664316104.00002E5804060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.2126493394.00002E5803EC8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1626414011.00002E5800AD8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.quad9.net/home/privacy/	msedgewebview2.exe, 00000009.00000002.2537731394.000007480015C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://anglebug.com/7162	msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.google.com/chrome/answer/95759?visit_id=637090496096814473-703968052&rd=1&hl=ru	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2628682509.00000205005C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475300741.0000020500402000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1491850873.000002050098B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp	false		high
https://doh.cleanbrowsing.org/doh/adult-filter	msedgewebview2.exe, 0000000A.00000002.2499598872.00000F2000024000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/5906	msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165593406.0000592C001C0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165539245.0000592C00185000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://doh-01.spectrum.com/dns-query	msedgewebview2.exe, 0000000A.00000002.2549885897.00000F200012C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/2517	msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165682659.0000592C001A5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://permanently-removed.invalid/MergeSession	msedgewebview2.exe, 00000003.00000002.2675315537.00003E1402220000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2719512577.000009200001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1497304268.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1289272677.00002E58009B6000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000D.00000003.1388609397.00002E58009B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1278504028.000046D8009AC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/4937	msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.google.com/chrome/answer/95759?visit_id=63709049609681447	Acrobat_Set-Up.exe	false		high
https://issuetracker.google.com/166809097	msedgewebview2.exe, 00000008.00000003.1165513323.0000592C00174000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2679524659.0000592C00104000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2690311083.0000592C00218000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2685070579.0000592C00148000.00000004.00000800.00020000.00000000.sdmp	false		high
https://login.windows.local/	msedgewebview2.exe, 00000003.00000002.2529010693.00000214010C5000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2530976055.0000017EC407E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://permanently-removed.invalid/embedded/setup/kidsignup/chromeos	msedgewebview2.exe, 00000003.00000002.2685129675.00003E140228C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000004.00000002.2733202818.0000092000080000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000002.2708342309.000046D800238000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.sogou.com/web?ie=	msedgewebview2.exe, 00000003.00000002.2785663950.00003E14026C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/nb-NO/kb/where-find-and-manage-downloaded-files-firefox	Acrobat_Set-Up.exe, 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmp, msedgewebview2.exe, 0000000E.00000002.2522345820.00000205001C2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1179545341.000046D801204000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293324.0000020500442000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1177872941.000046D801404000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000000E.00000003.1475293246.0000020500522000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3832	msedgewebview2.exe, 00000007.00000003.1165681269.00005D60001AE000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2608628288.00005D600000C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000003.1165587016.00005D60001B8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000007.00000002.2655456473.00005D600020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2689202356.0000592C0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000008.00000002.2655820139.0000592C0000C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
20.25.227.174	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.21.239	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.64.155.179	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.140.165	unknown	United States	13335	CLOUDFLARENETUS	false
18.244.194.168	resources-prod.licensingstack.com	United States	16509	AMAZON-02US	false
20.88.206.205	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
52.202.135.73	unknown	United States	14618	AMAZON-AESUS	false
63.140.39.82	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
23.221.212.210	unknown	United States	35994	AKAMAI-ASUS	false
204.79.197.239	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
54.225.234.85	unknown	United States	14618	AMAZON-AESUS	false
108.139.15.110	d1n897799gitxr.cloudfront.net	United States	16509	AMAZON-02US	false
23.221.212.212	unknown	United States	35994	AKAMAI-ASUS	false
172.64.41.3	unknown	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430325
Start date and time:	2024-04-23 14:26:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	30
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	Acrobat_Set-Up.exe
Detection:	SUS
Classification:	sus28.evad.mine.winEXE@27/246@8/15
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.42.16, 23.22.254.206, 54.227.187.23, 52.5.13.197, 52.202.204.11, 13.226.100.23, 13.226.100.58, 13.226.100.91, 13.226.100.103, 64.233.177.94, 64.233.176.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, cdn-ffc.oobesaas.adobe.com, resources.licenses.adobe.com, cc-api-data.adobe.io, fe3cr.delivery.mp.microsoft.com, l-0007.config.skype.com, config-edge-skype.l-0007.l-msedge.net, cdn-geo-ffc.oobesaas.adobe.com, msedge.b.tlu.dl.delivery.mp.microsoft.com, lcs-cops.adobe.io, www.gstatic.com, l-0007.l-msedge.net, config.edge.skype.com, mira.config.skype.com, client.messaging.adobe.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtEnumerateValueKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: Acrobat_Set-Up.exe

Simulations

Behavior and APIs

Time	Type	Description
14:27:10	API Interceptor	1660955x Sleep call for process: Acrobat_Set-Up.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
162.159.61.3	ShadowFury.exe	Get hash	malicious	Unknown	Browse
	ShadowFury.exe	Get hash	malicious	Unknown	Browse
	Sonic-Glyder.exe	Get hash	malicious	Stealit	Browse
	SenPalia.exe	Get hash	malicious	Unknown	Browse
	Sonic-Glyder.exe	Get hash	malicious	Stealit	Browse
	SenPalia.exe	Get hash	malicious	Unknown	Browse
	UnderWars.exe	Get hash	malicious	Unknown	Browse
	SenPalia.exe	Get hash	malicious	Unknown	Browse
	SenPalia.exe	Get hash	malicious	Unknown	Browse
	ppop_verification_request.zip	Get hash	malicious	Unknown	Browse
20.25.227.174	https://ecouterrepondeurvocal.pro/35-hnJZib	Get hash	malicious	Unknown	Browse
	http://shsh.ca	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Win32.CrypterX-gen.12642.14495.exe	Get hash	malicious	PureLog Stealer, XWorm	Browse
	edge_x86_KB91412024.exe	Get hash	malicious	Unknown	Browse
	https://stackauth-bainlk.cz/save/sharefile/	Get hash	malicious	Unknown	Browse
13.107.21.239	https://ecouterrepondeurvocal.pro/35-hnJZib	Get hash	malicious	Unknown	Browse
	https://alu-met.com/downloads	Get hash	malicious	Unknown	Browse
	http://shsh.ca	Get hash	malicious	Unknown	Browse
	http://shsh.ca	Get hash	malicious	Unknown	Browse
	BraveBrowserSetup-BRV010.exe	Get hash	malicious	Unknown	Browse
	BraveBrowserSetup-BRV010.exe	Get hash	malicious	Unknown	Browse
	Acrobat_Set-Up.exe	Get hash	malicious	Unknown	Browse
	BraveBrowserSetup-BRV002.exe	Get hash	malicious	Unknown	Browse
	BraveBrowserSetup-BRV002.exe	Get hash	malicious	Unknown	Browse
	FW EXT Serge Bozhko sent you Air Lease Corporation-VRC CH 12032024 via PandaDoc.msg	Get hash	malicious	Unknown	Browse
172.64.155.179	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:af39b5a2-dad8-480b-b876-bffaa9d66a9b	Get hash	malicious	HTMLPhisher	Browse
	Acrobat_Set-Up.exe	Get hash	malicious	Unknown	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:US:3d2485f1-66fb-4754-9e3e-e691da8d9d04	Get hash	malicious	HTMLPhisher	Browse
	https://ddec1-0-en-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2facrobat.adobe.com%2fid%2furn%3aaaid%3asc%3aVA6C2%3a2a138187%2d69c4%2d4ab4%2d842d%2dee0003585bc9&umid=48a0bf19-c23f-4ede-a21a-c8110fd2ff5e&auth=3396b606d81544f1fa36c033f23b9c9aa919296a-56125daf7e96fa7cc3eab78dc35383db072b630f	Get hash	malicious	Unknown	Browse
	https://ddec1-0-en-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2facrobat.adobe.com%2fid%2furn%3aaaid%3asc%3aVA6C2%3a2a138187%2d69c4%2d4ab4%2d842d%2dee0003585bc9&umid=48a0bf19-c23f-4ede-a21a-c8110fd2ff5e&auth=3396b606d81544f1fa36c033f23b9c9aa919296a-56125daf7e96fa7cc3eab78dc35383db072b630f	Get hash	malicious	HTMLPhisher	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:aa27f609-25f0-4828-b7d2-b06346f88949?viewer%21megaVerb=group-discover	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
20.88.206.205	https://ecouterrepondeurvocal.pro/35-hnJZib	Get hash	malicious	Unknown	Browse
	http://shsh.ca	Get hash	malicious	Unknown	Browse
	http://shsh.ca	Get hash	malicious	Unknown	Browse
	https://stackauth-bainlk.cz/save/sharefile/	Get hash	malicious	Unknown	Browse
	fB3vD2jWQm.exe	Get hash	malicious	RisePro Stealer	Browse
	SecuriteInfo.com.Trojan.Siggen26.6766.29781.19786.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
d1n897799gitxr.cloudfront.net	Acrobat_Set-Up.exe	Get hash	malicious	Unknown	Browse	108.139.29.98
	0nEuHt4Yr4.exe	Get hash	malicious	Phemedrone Stealer	Browse	13.226.224.37
	0nEuHt4Yr4.exe	Get hash	malicious	Phemedrone Stealer	Browse	13.226.224.52
	SecuriteInfo.com.BScope.Trojan.Wacatac.24873.13450.exe	Get hash	malicious	Unknown	Browse	143.204.203.49
	MsYJ3XxLoA.exe	Get hash	malicious	Unknown	Browse	52.84.170.58
chrome.cloudflare-dns.com	ShadowFury.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	ShadowFury.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	Sonic-Glyder.exe	Get hash	malicious	Stealit	Browse	162.159.61.3
	SenPalia.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	UnderWars.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	Sonic-Glyder.exe	Get hash	malicious	Stealit	Browse	162.159.61.3
	SenPalia.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	UnderWars.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	https://edbullardcompany-my.sharepoint.com/:f:/g/personal/eric_rosario_bullard_com/EoLKvcaqSE1Go3fA5to5CQABtxAftKTD0ktrakp7rbi4Xg?e=Mvbf0D	Get hash	malicious	HTMLPhisher	Browse	172.64.41.3
	SenPalia.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
resources-prod.licensingstack.com	Acrobat_Set-Up.exe	Get hash	malicious	Unknown	Browse	18.164.124.172
	0nEuHt4Yr4.exe	Get hash	malicious	Phemedrone Stealer	Browse	18.154.132.164
	SecuriteInfo.com.BScope.Trojan.Wacatac.24873.13450.exe	Get hash	malicious	Unknown	Browse	99.86.8.219

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://www.ne16.com/t/4177044/70602841/2927387/1/124665/?f8785874=aHR0cHM6Ly93b29kLWRlY2sub3JnL3BkZi85SWRac1p5aTJEeWh3ZUcvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWEM4YXAvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWTJOc1lYSmxRR0psYkd4d1lYSjBibVZ5YzJsdVl5NWpiMjA9	Get hash	malicious	HTMLPhisher	Browse	40.126.29.23
	oVOImRIAaz.elf	Get hash	malicious	Mirai	Browse	20.56.176.248
	NMdpQecbkg.elf	Get hash	malicious	Mirai	Browse	40.123.105.170
	768.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	j36lCJ7IcT.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	YY8EqpwVDY.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	sora.arm.elf	Get hash	malicious	Mirai	Browse	20.119.231.126
	sora.x86.elf	Get hash	malicious	Mirai	Browse	20.49.104.122
	kOX6mvvEZv.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	EvRwwa6vJW.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://www.ne16.com/t/4177044/70602841/2927387/1/124665/?f8785874=aHR0cHM6Ly93b29kLWRlY2sub3JnL3BkZi85SWRac1p5aTJEeWh3ZUcvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWEM4YXAvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWTJOc1lYSmxRR0psYkd4d1lYSjBibVZ5YzJsdVl5NWpiMjA9	Get hash	malicious	HTMLPhisher	Browse	40.126.29.23
	oVOImRIAaz.elf	Get hash	malicious	Mirai	Browse	20.56.176.248
	NMdpQecbkg.elf	Get hash	malicious	Mirai	Browse	40.123.105.170
	768.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	j36lCJ7IcT.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	YY8EqpwVDY.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	sora.arm.elf	Get hash	malicious	Mirai	Browse	20.119.231.126
	sora.x86.elf	Get hash	malicious	Mirai	Browse	20.49.104.122
	kOX6mvvEZv.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	EvRwwa6vJW.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
CLOUDFLARENETUS	https://www.ne16.com/t/4177044/70602841/2927387/1/124665/?f8785874=aHR0cHM6Ly93b29kLWRlY2sub3JnL3BkZi85SWRac1p5aTJEeWh3ZUcvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWEM4YXAvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWTJOc1lYSmxRR0psYkd4d1lYSjBibVZ5YzJsdVl5NWpiMjA9	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://hr-lumentum.com	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	http://hr-lumentum.com	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	S9a6M5G4R2v0t05579802009.html	Get hash	malicious	Unknown	Browse	172.67.215.47
	copy#10476235.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	Wire Transfer Payment Receipt#2024-22-04.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	DHL_RF_20200712_BN_OTN 0095673441.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	104.26.12.205
	tributario_fdo.zip	Get hash	malicious	Unknown	Browse	1.1.1.1
	BARSYL SHIPPING Co (VIETNAM).exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	http://diversityjobs.com	Get hash	malicious	Unknown	Browse	1.1.1.1
CLOUDFLARENETUS	https://www.ne16.com/t/4177044/70602841/2927387/1/124665/?f8785874=aHR0cHM6Ly93b29kLWRlY2sub3JnL3BkZi85SWRac1p5aTJEeWh3ZUcvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWEM4YXAvYTFmM2IxODIyN2RiNTc4NjIzOGE2ZTc0NTE3YWQ4MDEvWTJOc1lYSmxRR0psYkd4d1lYSjBibVZ5YzJsdVl5NWpiMjA9	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://hr-lumentum.com	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	http://hr-lumentum.com	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	S9a6M5G4R2v0t05579802009.html	Get hash	malicious	Unknown	Browse	172.67.215.47
	copy#10476235.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	Wire Transfer Payment Receipt#2024-22-04.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	DHL_RF_20200712_BN_OTN 0095673441.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	104.26.12.205
	tributario_fdo.zip	Get hash	malicious	Unknown	Browse	1.1.1.1
	BARSYL SHIPPING Co (VIETNAM).exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	http://diversityjobs.com	Get hash	malicious	Unknown	Browse	1.1.1.1

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	768.xla.xlsx	Get hash	malicious	Unknown	Browse	18.244.194.168 108.139.15.110
	Gam.xls	Get hash	malicious	Unknown	Browse	18.244.194.168 108.139.15.110
	szamla_sorszam_8472.xlsm	Get hash	malicious	Unknown	Browse	18.244.194.168 108.139.15.110
	iPUk65i3yI.exe	Get hash	malicious	LummaC	Browse	18.244.194.168 108.139.15.110
	asbpKOngY0.exe	Get hash	malicious	LummaC	Browse	18.244.194.168 108.139.15.110
	VdwJB2cS5l.exe	Get hash	malicious	Remcos, DBatLoader	Browse	18.244.194.168 108.139.15.110
	https://www.epa.gov/climateleadership/simplified-ghg-emissions-calculator	Get hash	malicious	Unknown	Browse	18.244.194.168 108.139.15.110
	SecuriteInfo.com.Win32.RATX-gen.9491.24773.exe	Get hash	malicious	Remcos, DBatLoader	Browse	18.244.194.168 108.139.15.110
	https://mota-engil.caf0sa.com/tiyamike.chikabadwa56078874fessdGl5YW1pa2UuY2hpa2FiYWR3YUBtb3RhLWVuZ2lsLnB097140964?5101245168264822=2215800694735574#dGl5YW1pa2UuY2hpa2FiYWR3YUBtb3RhLWVuZ2lsLnB0	Get hash	malicious	Unknown	Browse	18.244.194.168 108.139.15.110
	Purchase order.exe	Get hash	malicious	Remcos, DBatLoader	Browse	18.244.194.168 108.139.15.110

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	38
Entropy (8bit):	3.990705473685235
Encrypted:	false
SSDEEP:	3:DxLDcGmLY:1Es
MD5:	69C872FFE2ABD3BD0DDD1E6946777D2E
SHA1:	4C12E57427BD16E7DFB52C1472ECDF91A5F9AE66
SHA-256:	19D137A23D9316733E504555B1C7EE5994BDCE4A915C41BCF2AF966FE8B13ECC
SHA-512:	53A7BD4004E53605B2DE3B594BF2A568CD37ECB814ADD6A610C9C605C229B3E0ED7A40C12277C0458FD3B793DEEF03AC63C6B0AEABE1843BEB0F728BADBAAD85
Malicious:	false
Preview:	{9647A0FC-DCE6-4CDE-A3FC-BAC3DC268517}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\0a5c9686-bf2f-4836-9261-89a937cf8358.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.717744296493529
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEMcE2HbQ2xBzaeC1mdWONLlBbvXR/QQRCYfYg:YqfaRE2HbQeBzZCm7lDvhYB0
MD5:	56231407C76E8A353F4F31D7E7F91E08
SHA1:	CA595F401EB8836BBABACB092D86A5E4B290200B
SHA-256:	DD9839DED1C681EC5FA6D095A2D29191AB1B6919EAE8069838B7062C6B35189E
SHA-512:	76E9A7176CA96ADF6C7718D526EABCCE85679414BD62C54A03782D47CB7BDEC05029087D2D5BDC82C9A6F58BCE4E87CD6FEF542E78EB101CD4359FE7C489E0A8
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1179,"pseudo_low_entropy_source":5431,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101874","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\1790bab6-6ae5-409d-9978-81abfc52873e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2051
Entropy (8bit):	5.4626794878207825
Encrypted:	false
SSDEEP:	48:YDEFMsFiHC0afaRE2HbQcwi5naHB+QdrxWBzZCm7hRDThYBG/d2a:PNkC1fa17U0MB9MRZCmzDTqI4a
MD5:	9174CEC12C7ED84E5C1873C2EFC9E1A1
SHA1:	AE6064D12217A7A11933DAB35DB19A0DD0FF6EC7
SHA-256:	7A4D332CFC29786FA89189C900F4A73180F497D29D57A857E8BE8F51D21B6D98
SHA-512:	C18957EDF49A12A35BFF2A60D1AE4364967D24299949DD4AC4C065614C2437EF42B251A79E8DAB6E689320A02A10EE8F0F0AE440DAC162EDBF69CA4BBD2FBBEE
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"policy":{"last_statistics_update":"13358348823285802"},"profile":{"info_cache":{},"profile_counts_reported":"13358348823299812","profiles_order":[]},

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\52dfa16d-6029-467b-8f6c-c65c886558da.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17918
Entropy (8bit):	6.067284941891138
Encrypted:	false
SSDEEP:	384:nDF5g/rZP0/jpq4eVYCxmxf91UM2SNBSWZc+rgtQHKhv:DF5kruq4eV5xmx3QyprgtEe
MD5:	A51CB9C0D5191713D6F965C652788DDA
SHA1:	059187674666D5F374D0C77721E102E0EAEEABAE
SHA-256:	A02E741ED575B9E823DD1AD441E4B0BBC7BF21042FA42641013C61AC402326CD
SHA-512:	8D4FADCCDB4D942D7E193166087E4F6DABD1BE9FA75072636E6ABAD2154B8D60F74606A06176AD5038ADA0F429373FAD7C07E4EDD5DB405B161F586F0B0ACDD7
Malicious:	false
Preview:	{"domain_actions_config":"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

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	1045BFD216AE1AE480DD0EF626F5FF39
SHA1:	377E869BC123602E9B568816B76BE600ED03DBD0
SHA-256:	439292E489A0A35E4A3A0FE304EA1A680337243FA53B135AA9310881E1D7E078
SHA-512:	F9F8FCC23FC084AF69D7C9ABB0EF72C4684AC8DDF7FA6B2028E2F19FD67435F28534C0CF5B17453DFE352437C777D6F71CFE1D6AD3542AD9D636263400908FD2
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	1045BFD216AE1AE480DD0EF626F5FF39
SHA1:	377E869BC123602E9B568816B76BE600ED03DBD0
SHA-256:	439292E489A0A35E4A3A0FE304EA1A680337243FA53B135AA9310881E1D7E078
SHA-512:	F9F8FCC23FC084AF69D7C9ABB0EF72C4684AC8DDF7FA6B2028E2F19FD67435F28534C0CF5B17453DFE352437C777D6F71CFE1D6AD3542AD9D636263400908FD2
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	1.8887884248653348
Encrypted:	false
SSDEEP:	3:FiWWltlhozwwZ1Hl/t/NEjYb1gmlx/ll:o1+cQfCmlZl
MD5:	BC1331B5E8F8E689CC333FABADC5F3E8
SHA1:	6FAA6AA7A0B047ACA858CAED96EFC59A509BFD68
SHA-256:	FEA563122148B7589F0D0800F8C70CE7C1674296283C6991036DCA220140BEC0
SHA-512:	CB0217FE416B21456AFB788E124249F4BC10346CBA05341111E751F7DBE6E6806071F469C21C5B447C3261A8EED14CB329B48D2AEAC46787B249C6DCD4EE95C1
Malicious:	false
Preview:	sdPC.....................^l...C.."<...................................................................................................................................................................................................{F3017226-FE2A-4295-8BDF-00C3A9A7E4C.}C:........

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Crashpad\throttle_store.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.6219280948873624
Encrypted:	false
SSDEEP:	3:8g6Vvn:8g6Vv
MD5:	9E4E94633B73F4A7680240A0FFD6CD2C
SHA1:	E68E02453CE22736169A56FDB59043D33668368F
SHA-256:	41C91A9C93D76295746A149DCE7EBB3B9EE2CB551D84365FFF108E59A61CC304
SHA-512:	193011A756B2368956C71A9A3AE8BC9537D99F52218F124B2E64545EEB5227861D372639052B74D0DD956CB33CA72A9107E069F1EF332B9645044849D14AF337
Malicious:	false
Preview:	level=none expiry=0.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\550ee668-e570-499a-9f73-4b7b39c825b0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5897
Entropy (8bit):	4.798404025450924
Encrypted:	false
SSDEEP:	96:stAE/lJs13zb9gG8zq85eh6Cb7/x+6Mhmuecm3eV42MR7K:stAIvsoGkq88bV+Fi31PhK
MD5:	F4D9DF9413A9FE99C562336A4E337189
SHA1:	9E506B0ED39AB9A368CB1C2A7E2F68B40E22459A
SHA-256:	400056BE4C870891D22EEAFE38AB2AD037BDF671F908D8EB6502B4352F9BC20D
SHA-512:	B0FA3B64D7F7DE386A4D2D849524A7C9B613B200D155297C123734677917186639D424B8A371564F29926A094D19E70B433AD0547FBF3F146925858AE44D16E6
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823542304","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823781520","domain_diversity":{"last_reporting_timestamp":"13358348823880857"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\5b49605a-9938-47d0-b609-35a95eef27b3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5835
Entropy (8bit):	4.791951686216704
Encrypted:	false
SSDEEP:	96:stAE/lJs13zb9gG8zq85eh6Cb7/x+6Mhmuecm3eVm2MR7K:stAIvsoGkq88bV+Fi3rPhK
MD5:	F4D8749B5EDFB25BC7E176E5D7F65D62
SHA1:	56967C1CB29909AA30CAC53FE21F3EDC3964BD3C
SHA-256:	465E875ABFC7A1AC7A49E298A941648465054E0114227C30EA41B9F6FAED0FDB
SHA-512:	428B221FA127B55A90F44FD9650976A9A375FBAEC4E5678297648160FA1D0496B4E2CBA18FEDDAFB81E63705EB6A9A5F551A57C2350A02650E9519C1C7E3462E
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823542304","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823781520","domain_diversity":{"last_reporting_timestamp":"13358348823880857"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.020348126547166192
Encrypted:	false
SSDEEP:	3:MsFlTlrllkl2CfjUkflYRpgKXXnMSm4Rt:/F02CfjUkNYRFXXDJt
MD5:	97AE31F506493BAE54AD04B403E765D2
SHA1:	03D7165D143BEB25717D9E45894DFDFC5D7BABAB
SHA-256:	961E8DFD7270D08263B498C1CE25D18546504F45B23370125976B0CA1DA3B4D3
SHA-512:	6051DC84AD0D05B05A001FBA4CB854F314052957061DD35CACAF53F91D5012E024EBB3CBE2D474059006AA13AAF15AB78191324BF37125686AED5473B8C28333
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	dBase III DBT, next free block index 3238316739, block length 1024
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.01524513623456419
Encrypted:	false
SSDEEP:	6:/M/LlEtXFzlqhfMRHAAf+R/uCl8nZ1BVwfMRHAAf+RqX:U/+FsJMRR+h+nZ1OMRR+o
MD5:	B4EC3164A5A191B88E1814A6708EC6FC
SHA1:	CD1F51BE5CBAF7FDEFA983A8C3C4CDDA5FF77566
SHA-256:	C692CBD2FC1AAD37040CA23E2C684C86F73ED95787752A514C0F8876D6F29404
SHA-512:	16D053E1919C7C85323579393C778FFC77BD5B2261C93CF6B6212679485D9388F290F3747FDBD47AB67B11AE3DBD14EEC3D1036087B59C841B7CCC561E680AF0
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1056768
Entropy (8bit):	0.11308221492276127
Encrypted:	false
SSDEEP:	96:tzljemPubT1jkwbtQXsPfOpjeD5k5adFw9bT1jkwbtQXs:VljemQJZbtMsPGpjeFV45JZbtMs
MD5:	A407A525EB7F421FD6474DAB4BF15851
SHA1:	EB783750FFD63175308E9C1E412926582E8749F8
SHA-256:	5855FBA11288186E6B4F30879FCB5AA533DCBDCB9ACC001FBB7769C2AB52AAA3
SHA-512:	74119971BD44A67205DAC034CF5A8A89447F7F07BBE14784ACC4D3B459B193B88B1874C24197B2E975DD75C7384B9B3E19D3A815A9530DDEEF64F99A13E65B38
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\f_000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with very long lines (56817), with no line terminators
Category:	dropped
Size (bytes):	56817
Entropy (8bit):	5.120819831242151
Encrypted:	false
SSDEEP:	192:tiCRp5zGF0nqkJddYnYBBe2mrETVaEBark4KxclmJNC2RQ72hk1nR2tG/uiftIQp:Hlqu3Bb/MlmJNBQ9noGL2Uv
MD5:	3E49ABD556BF0FAAA6D165FE66146E90
SHA1:	7E265A832FD1D29F8402A251D921879E516038E3
SHA-256:	D09069AC9ED675C69FF5C159CDA6F444A94085A1623F2AB91D6F4FB9F71E8879
SHA-512:	272F33F77273ED1D89406D1BFD8262B2C3637E271515506FDD30924C330BAB3FD4FB365D119E23BD981FC7ED2DAB1FE597B0E82512AB187A0AEE89C6E981FC05
Malicious:	false
Preview:	.adbMsgClientWrapper #adbmsgContainer *, .adbMsgClientWrapper #adbmsgContainer :after, .adbMsgClientWrapper #adbmsgContainer :before{box-sizing:border-box}.adbMsgClientWrapper #adbmsgContainer .outwardAnimate{transition:opacity .3s;animation-name:a;animation-duration:.3s;animation-timing-function:cubic-bezier(0,0,.4,1);-webkit-transition:opacity .3s;-webkit-animation-name:a;-webkit-animation-duration:.3s;-webkit-animation-timing-function:cubic-bezier(0,0,.4,1);-moz-transition:opacity .3s;-moz-animation-name:a;-moz-animation-duration:.3s;-moz-animation-timing-function:cubic-bezier(0,0,.4,1)}@keyframes a{0%{transform:scale(.83);opacity:0}to{transform:scale(1);opacity:1}}.adbMsgClientWrapper #adbmsgContainer .adbmsgCtaDarkest{background-color:#1d1d1d!important;border:2px solid #a2a2a2!important;background-image:url(assets/cta_darkest.svg)!important}.adbMsgClientWrapper #adbmsgContainer .adbmsgCtaDarkest:hover{border-color:#efefef!important}.adbMsgClientWrapper #adbmsgContainer .botauthorC

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\f_000002

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	150990
Entropy (8bit):	5.322102102297369
Encrypted:	false
SSDEEP:	3072:LpkDp5avWohkSohiHSA7kfGY/E1EujwWrbtdh7ck0q:LpPt6piHSA7k+Y/JWFp
MD5:	401A085DAF469075D7D14659F7D3CE0E
SHA1:	415A2E3D83BE2696CC7EC147AE109B651F1119A6
SHA-256:	E3FFA71CD501F9A1352A1CD7C5653ABB51538D47826FF18FD628361153DD73DB
SHA-512:	FC7C609AF12EDE7ED65010554FA2D973D0F372FF5F0D348DC3498DD7861C1884C044FB64D50CD611A80120FB982D14CA7A5234C865FC39CD4A28D8BD509711BB
Malicious:	false
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.AdobeMessagingClient=t():e.AdobeMessagingClient=t()}("undefined"!=typeof self?self:this,function(){return function(e){var t={};function n(a){if(t[a])return t[a].exports;var o=t[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,a){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:a})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=24)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a])}return e},o=function()

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	524656
Entropy (8bit):	5.027445846313988E-4
Encrypted:	false
SSDEEP:	3:LsulqR9Nt:LsNRp
MD5:	7AC7DFA1BB5D0C2118E10FA92F2A1EEC
SHA1:	DF53D6A8DB1E0C823765652B4C78AC0CBC159229
SHA-256:	20DFD7D3650C557CEF3012B8C341126BADE6527A48F4C33F1CE9011266A6F497
SHA-512:	3A61B6325AB7D143A2C8ECE14EF0B4F5643F77440DF64D4891EFCB42ADB4C0F56905A3F62832EF26C6CA0085562C5D29EA0882FF7EBD4056AA9DA51F32FDDD85
Malicious:	false
Preview:	...........................................Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\js\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\js\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.955557653394731
Encrypted:	false
SSDEEP:	3:nEsKcC0EUOPRbn:EIqfJn
MD5:	098CA6B0E9DFBF1A6F3EC3709D0055B3
SHA1:	EEF4103EC53491E127EC5631C8A40BB2B7F3F795
SHA-256:	3A178EE46D17A2AFF8F9DD724160A186FDD4CEEAF535B430D5687BE9D8C52AFC
SHA-512:	B574B314E8C291D8A882C7D985AC95B057857516C77D45F6FA7289AD97FD5C474CD3DA76C27FE4F7A1EE0592E8A5954AFE7D2319EAFADD5460DBF6EBECC62144
Malicious:	false
Preview:	(....._.oy retne.........................kj.Xu/.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\js\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.955557653394731
Encrypted:	false
SSDEEP:	3:nEsKcC0EUOPRbn:EIqfJn
MD5:	098CA6B0E9DFBF1A6F3EC3709D0055B3
SHA1:	EEF4103EC53491E127EC5631C8A40BB2B7F3F795
SHA-256:	3A178EE46D17A2AFF8F9DD724160A186FDD4CEEAF535B430D5687BE9D8C52AFC
SHA-512:	B574B314E8C291D8A882C7D985AC95B057857516C77D45F6FA7289AD97FD5C474CD3DA76C27FE4F7A1EE0592E8A5954AFE7D2319EAFADD5460DBF6EBECC62144
Malicious:	false
Preview:	(....._.oy retne.........................kj.Xu/.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\wasm\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\wasm\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.955557653394731
Encrypted:	false
SSDEEP:	3:RGrKcFjEQPl:g2Ul
MD5:	CB33B098EAAC0D756EE502C26CC747C0
SHA1:	64DAD029C81A86E4DD0F7906821C27682A1B1990
SHA-256:	98A2D68A24477C4955268691455302075D1EA8395CF721AD70CE8FC0C387AEAE
SHA-512:	271B334F567D836F70EBFC0FE876B430950EB6A64AD9CDDB0AFFE9081A0D621377B5F32EEF2834F8B8C54D2ED9EB0D62AF5F59882130903A2D0B765BC75BAB8D
Malicious:	false
Preview:	(....c..oy retne..........................i.Xu/.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.955557653394731
Encrypted:	false
SSDEEP:	3:RGrKcFjEQPl:g2Ul
MD5:	CB33B098EAAC0D756EE502C26CC747C0
SHA1:	64DAD029C81A86E4DD0F7906821C27682A1B1990
SHA-256:	98A2D68A24477C4955268691455302075D1EA8395CF721AD70CE8FC0C387AEAE
SHA-512:	271B334F567D836F70EBFC0FE876B430950EB6A64AD9CDDB0AFFE9081A0D621377B5F32EEF2834F8B8C54D2ED9EB0D62AF5F59882130903A2D0B765BC75BAB8D
Malicious:	false
Preview:	(....c..oy retne..........................i.Xu/.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\DawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\DawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\DawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\DawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNl2Ubflt:Ls32Uj
MD5:	78DAB606A411EB24898C1E85EEB25F3C
SHA1:	843E4AD6B26566EF9BDBED835B2840E493F20E06
SHA-256:	5016633703905FCCD71B72FFE2F7C3E826717B1FA174B7522709DC8EE88364D6
SHA-512:	240A60F130AE421653E8CE51E0582168A96DB4DA907E8823B7ED4AAABDFFFF13954FFA0A8538A410CD0A142B15B6FDF3875A93DEFCB6A9B0BE26769C97E4CC55
Malicious:	false
Preview:	........................................g.q.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension Rules\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension Rules\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension Rules\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension Scripts\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension Scripts\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension Scripts\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension State\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension State\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Extension State\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\GPUCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\GPUCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\GPUCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\GPUCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlE9Nt:Ls3Ebt
MD5:	97168DE92D9CFC77019F116241B0CE58
SHA1:	0B5B2FEB39B619318160ECA7AC056B7E63C5325F
SHA-256:	E43482A8A4090C4D4E7394548E0B7FC2AADE045CECE70C8CEDB98D9E936C9E79
SHA-512:	6B0AC897931CABCD7AE66D1E143E7D5982EAA7DB0A0D4D489052EAC89DEF4A35FA31FE92690B6B12751BE5BA68C451DD37AAA8643C902E58F03625EFD92D5551
Malicious:	false
Preview:	..........................................n.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Local Storage\leveldb\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Local Storage\leveldb\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\08ae7b95-56ac-4b3f-a79d-fea98a4e4d30.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\21666c3a-7303-47e9-8853-f4f515debf66.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\6a144b3f-e74d-4110-b767-4a1a260f052d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.718418993774295
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKtiVY:YHpoeS7PMVKJTnMRK3VY
MD5:	285252A2F6327D41EAB203DC2F402C67
SHA1:	ACEDB7BA5FBC3CE914A8BF386A6F72CA7BAA33C6
SHA-256:	5DFC321417FC31359F23320EA68014EBFD793C5BBED55F77DAB4180BBD4A2026
SHA-512:	11CE7CB484FEE66894E63C31DB0D6B7EF66AD0327D4E7E2EB85F3BCC2E836A3A522C68D681E84542E471E54F765E091EFE1EE4065641B0299B15613EB32DCC0D
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\70073e9e-00a1-4a73-9434-7db80f58d1bb.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\Network Persistent State~RF6f77a5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\SCT Auditing Pending Reports~RF6e5145.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Network\bc228063-030a-4b19-a07d-c70d2815d7bb.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5835
Entropy (8bit):	4.791951686216704
Encrypted:	false
SSDEEP:	96:stAE/lJs13zb9gG8zq85eh6Cb7/x+6Mhmuecm3eVm2MR7K:stAIvsoGkq88bV+Fi3rPhK
MD5:	F4D8749B5EDFB25BC7E176E5D7F65D62
SHA1:	56967C1CB29909AA30CAC53FE21F3EDC3964BD3C
SHA-256:	465E875ABFC7A1AC7A49E298A941648465054E0114227C30EA41B9F6FAED0FDB
SHA-512:	428B221FA127B55A90F44FD9650976A9A375FBAEC4E5678297648160FA1D0496B4E2CBA18FEDDAFB81E63705EB6A9A5F551A57C2350A02650E9519C1C7E3462E
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823542304","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823781520","domain_diversity":{"last_reporting_timestamp":"13358348823880857"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Preferences~RF6eec5c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5835
Entropy (8bit):	4.791951686216704
Encrypted:	false
SSDEEP:	96:stAE/lJs13zb9gG8zq85eh6Cb7/x+6Mhmuecm3eVm2MR7K:stAIvsoGkq88bV+Fi3rPhK
MD5:	F4D8749B5EDFB25BC7E176E5D7F65D62
SHA1:	56967C1CB29909AA30CAC53FE21F3EDC3964BD3C
SHA-256:	465E875ABFC7A1AC7A49E298A941648465054E0114227C30EA41B9F6FAED0FDB
SHA-512:	428B221FA127B55A90F44FD9650976A9A375FBAEC4E5678297648160FA1D0496B4E2CBA18FEDDAFB81E63705EB6A9A5F551A57C2350A02650E9519C1C7E3462E
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823542304","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823781520","domain_diversity":{"last_reporting_timestamp":"13358348823880857"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Preferences~RF6f616d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5835
Entropy (8bit):	4.791951686216704
Encrypted:	false
SSDEEP:	96:stAE/lJs13zb9gG8zq85eh6Cb7/x+6Mhmuecm3eVm2MR7K:stAIvsoGkq88bV+Fi3rPhK
MD5:	F4D8749B5EDFB25BC7E176E5D7F65D62
SHA1:	56967C1CB29909AA30CAC53FE21F3EDC3964BD3C
SHA-256:	465E875ABFC7A1AC7A49E298A941648465054E0114227C30EA41B9F6FAED0FDB
SHA-512:	428B221FA127B55A90F44FD9650976A9A375FBAEC4E5678297648160FA1D0496B4E2CBA18FEDDAFB81E63705EB6A9A5F551A57C2350A02650E9519C1C7E3462E
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823542304","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823781520","domain_diversity":{"last_reporting_timestamp":"13358348823880857"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\PreferredApps

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.051821770808046
Encrypted:	false
SSDEEP:	3:YVXADAEvTLSJ:Y9AcEvHSJ
MD5:	2B432FEF211C69C745ACA86DE4F8E4AB
SHA1:	4B92DA8D4C0188CF2409500ADCD2200444A82FCC
SHA-256:	42B55D126D1E640B1ED7A6BDCB9A46C81DF461FA7E131F4F8C7108C2C61C14DE
SHA-512:	948502DE4DC89A7E9D2E1660451FCD0F44FD3816072924A44F145D821D0363233CC92A377DBA3A0A9F849E3C17B1893070025C369C8120083A622D025FE1EACF
Malicious:	false
Preview:	{"preferred_apps":[],"version":1}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\README

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	182
Entropy (8bit):	4.2629097520179995
Encrypted:	false
SSDEEP:	3:RGXKRjg0QwVIWRKXECSAV6jDyhjgHGAW+LB2Z4MKLFE1SwhiFAfXQmWyKBPMwRgK:z3frsUpAQQgHGwB26MK8Sw06fXQmWtRT
MD5:	643E00B0186AA80523F8A6BED550A925
SHA1:	EC4056125D6F1A8890FFE01BFFC973C2F6ABD115
SHA-256:	A0C9ABAE18599F0A65FC654AD36251F6330794BEA66B718A09D8B297F3E38E87
SHA-512:	D91A934EAF7D9D669B8AD4452234DE6B23D15237CB4D251F2C78C8339CEE7B4F9BA6B8597E35FE8C81B3D6F64AE707C68FF492903C0EDC3E4BAF2C6B747E247D
Malicious:	false
Preview:	Microsoft Edge settings and storage represent user-selected preferences and information and MUST not be extracted, overwritten or modified except through Microsoft Edge defined APIs.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.580240668630421
Encrypted:	false
SSDEEP:	96:vQZiXSPlf/ROoBpkF5d1miv7VaTEv9V5h5pg5vezodIU8ySpsA5IOrMn3YPo0MGs:4wX+rep9l5ySpFIOAn3go0iuI
MD5:	8AD8F55857EF1E4F87C490B6D0D675F3
SHA1:	556E50AC59B268B949A2623B064AC06E6B5C698A
SHA-256:	3FEDECAF281B5A4ECC8A5271EE813D5EB64FD77DD9D7A154AB7ABB4440E20A22
SHA-512:	081CE7D03FFCACC0954A37CB70A602122FE577B9147C515E22ADD7DDFFA4D1350E9458CB87E683BC9690E2956A1A9C1B493BDE65EC6729C6ADAB3561CA9ECF86
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13358348823384170","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13358348823384170","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Site Characteristics Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Site Characteristics Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Site Characteristics Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Sync Data\LevelDB\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Sync Data\LevelDB\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\efa089c5-3bf2-46b8-8658-4b772ccec296.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5999
Entropy (8bit):	4.803410072160058
Encrypted:	false
SSDEEP:	96:stAE/lJs13zb9gG8zq85eh6Cb7/x+6Mhmuecm3eVj2MR7K:stAIvsoGkq88bV+Fi3qPhK
MD5:	958E1198F564A14244C8605A61A9DBDD
SHA1:	50E843FFD552E36792A2D7E34098AB6735BC5119
SHA-256:	8BC373715E6D6EEB9CD8DCF24D222393EFCF00A2A0CF2442A5AE2CE456308998
SHA-512:	1828AC73B79AE581659612AA964590B19FEE60481F7A0269DB5E3E7D451DACADA3A951EE6DE6D0517E6411869E2CB1B19766A9ABC5E62935E8F0B4956E1BFF4D
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823542304","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823781520","domain_diversity":{"last_reporting_timestamp":"13358348823880857"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\f575e05b-e90b-4bd5-9177-3488b68eef1d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.580240668630421
Encrypted:	false
SSDEEP:	96:vQZiXSPlf/ROoBpkF5d1miv7VaTEv9V5h5pg5vezodIU8ySpsA5IOrMn3YPo0MGs:4wX+rep9l5ySpFIOAn3go0iuI
MD5:	8AD8F55857EF1E4F87C490B6D0D675F3
SHA1:	556E50AC59B268B949A2623B064AC06E6B5C698A
SHA-256:	3FEDECAF281B5A4ECC8A5271EE813D5EB64FD77DD9D7A154AB7ABB4440E20A22
SHA-512:	081CE7D03FFCACC0954A37CB70A602122FE577B9147C515E22ADD7DDFFA4D1350E9458CB87E683BC9690E2956A1A9C1B493BDE65EC6729C6ADAB3561CA9ECF86
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13358348823384170","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13358348823384170","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\shared_proto_db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\shared_proto_db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\shared_proto_db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\shared_proto_db\metadata\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\shared_proto_db\metadata\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GrShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GrShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GrShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GrShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GrShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlhJt:Ls3J
MD5:	AB48ADE485EBACA33A0251BBA1934FAB
SHA1:	F2215F67A04263588F21E973F46E71867F1459B0
SHA-256:	4940C31730A7440DD6D5B99C49D86D25F6349A810A02D4D760B41805F74844F0
SHA-512:	044274B14F8EBEEE99E5DD56C0740655BCA74C5E7D881314E717B3FB7CD7EDA09C25659CA2F4F49CCEFF433DB6C44DBDF323C0854F761BB29778FC9132C129AF
Malicious:	false
Preview:	.........................................s.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GraphiteDawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GraphiteDawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GraphiteDawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GraphiteDawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\GraphiteDawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNl6RbQ+l/:Ls36rl/
MD5:	48061E9D3284363D7142E47D91CBB6A2
SHA1:	14E8B11944B79978449528F7FAEA6B3706B1E4C8
SHA-256:	3618BE3BD755374CB3DB4831614C51C250F99E214D9DEE659F01B78E8F9BC68B
SHA-512:	EE94B7D343CA9946E6F30FED1391C0C578A453515FDB9AA99DA38A95CE0942C8C9D6C7038867B018987FA32FDEB2C1E9745A118F033C1561A87252EE47FB5D1C
Malicious:	false
Preview:	..........................................t.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.717744296493529
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEMcE2HbQ2xBzaeC1mdWONLlBbvXR/QQRCYfYg:YqfaRE2HbQeBzZCm7lDvhYB0
MD5:	56231407C76E8A353F4F31D7E7F91E08
SHA1:	CA595F401EB8836BBABACB092D86A5E4B290200B
SHA-256:	DD9839DED1C681EC5FA6D095A2D29191AB1B6919EAE8069838B7062C6B35189E
SHA-512:	76E9A7176CA96ADF6C7718D526EABCCE85679414BD62C54A03782D47CB7BDEC05029087D2D5BDC82C9A6F58BCE4E87CD6FEF542E78EB101CD4359FE7C489E0A8
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1179,"pseudo_low_entropy_source":5431,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101874","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Local State~RF6e4e76.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.717744296493529
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEMcE2HbQ2xBzaeC1mdWONLlBbvXR/QQRCYfYg:YqfaRE2HbQeBzZCm7lDvhYB0
MD5:	56231407C76E8A353F4F31D7E7F91E08
SHA1:	CA595F401EB8836BBABACB092D86A5E4B290200B
SHA-256:	DD9839DED1C681EC5FA6D095A2D29191AB1B6919EAE8069838B7062C6B35189E
SHA-512:	76E9A7176CA96ADF6C7718D526EABCCE85679414BD62C54A03782D47CB7BDEC05029087D2D5BDC82C9A6F58BCE4E87CD6FEF542E78EB101CD4359FE7C489E0A8
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1179,"pseudo_low_entropy_source":5431,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101874","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Local State~RF6e4ee4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.717744296493529
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEMcE2HbQ2xBzaeC1mdWONLlBbvXR/QQRCYfYg:YqfaRE2HbQeBzZCm7lDvhYB0
MD5:	56231407C76E8A353F4F31D7E7F91E08
SHA1:	CA595F401EB8836BBABACB092D86A5E4B290200B
SHA-256:	DD9839DED1C681EC5FA6D095A2D29191AB1B6919EAE8069838B7062C6B35189E
SHA-512:	76E9A7176CA96ADF6C7718D526EABCCE85679414BD62C54A03782D47CB7BDEC05029087D2D5BDC82C9A6F58BCE4E87CD6FEF542E78EB101CD4359FE7C489E0A8
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1179,"pseudo_low_entropy_source":5431,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101874","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Local State~RF6e7603.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.717744296493529
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEMcE2HbQ2xBzaeC1mdWONLlBbvXR/QQRCYfYg:YqfaRE2HbQeBzZCm7lDvhYB0
MD5:	56231407C76E8A353F4F31D7E7F91E08
SHA1:	CA595F401EB8836BBABACB092D86A5E4B290200B
SHA-256:	DD9839DED1C681EC5FA6D095A2D29191AB1B6919EAE8069838B7062C6B35189E
SHA-512:	76E9A7176CA96ADF6C7718D526EABCCE85679414BD62C54A03782D47CB7BDEC05029087D2D5BDC82C9A6F58BCE4E87CD6FEF542E78EB101CD4359FE7C489E0A8
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1179,"pseudo_low_entropy_source":5431,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101874","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Local State~RF6f6063.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.717744296493529
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEMcE2HbQ2xBzaeC1mdWONLlBbvXR/QQRCYfYg:YqfaRE2HbQeBzZCm7lDvhYB0
MD5:	56231407C76E8A353F4F31D7E7F91E08
SHA1:	CA595F401EB8836BBABACB092D86A5E4B290200B
SHA-256:	DD9839DED1C681EC5FA6D095A2D29191AB1B6919EAE8069838B7062C6B35189E
SHA-512:	76E9A7176CA96ADF6C7718D526EABCCE85679414BD62C54A03782D47CB7BDEC05029087D2D5BDC82C9A6F58BCE4E87CD6FEF542E78EB101CD4359FE7C489E0A8
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1179,"pseudo_low_entropy_source":5431,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101874","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Local State~RF6fc930.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.717744296493529
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEMcE2HbQ2xBzaeC1mdWONLlBbvXR/QQRCYfYg:YqfaRE2HbQeBzZCm7lDvhYB0
MD5:	56231407C76E8A353F4F31D7E7F91E08
SHA1:	CA595F401EB8836BBABACB092D86A5E4B290200B
SHA-256:	DD9839DED1C681EC5FA6D095A2D29191AB1B6919EAE8069838B7062C6B35189E
SHA-512:	76E9A7176CA96ADF6C7718D526EABCCE85679414BD62C54A03782D47CB7BDEC05029087D2D5BDC82C9A6F58BCE4E87CD6FEF542E78EB101CD4359FE7C489E0A8
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1179,"pseudo_low_entropy_source":5431,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101874","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\ShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\ShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\ShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\ShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\ShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlOKX:Ls3lX
MD5:	39BD5ACD4D9D7CAA63F914A0A2E00721
SHA1:	6E7545D6F67B2BAF8CE06A8070B9309E9C0B4801
SHA-256:	4AC200476482940E8B530EBEA79ABF170D2ABB8B47B6BBD3437D835CC635CFD0
SHA-512:	C9D3CCD202C390146A40EB2DA144B26BB540E5585DD4E6F548D431C0540C41738CDA6C257EB8661F36379F99068102A8479ED1BB4DB69A7B80699687C1AC3FE4
Malicious:	false
Preview:	........................................$Se.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\SmartScreen\RemoteData\customSynchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	3.922828737239167
Encrypted:	false
SSDEEP:	3:2NGw+K+:fwZ+
MD5:	7BAAFE811F480ACFCCCEE0D744355C79
SHA1:	24B89AE82313084BB8BBEB9AD98A550F41DF7B27
SHA-256:	D5743766AF0312C7B7728219FC24A03A4FB1C2A54A506F337953FBC2C1B847C7
SHA-512:	70FE1C197AF507CC0D65E99807D245C896A40A4271BA1121F9B621980877B43019E584C48780951FC1AD2A5D7D146FC6EA4678139A5B38F9B6F7A5F1E2E86BA3
Malicious:	false
Preview:	customSynchronousLookupUris_0

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\SmartScreen\RemoteData\customSynchronousLookupUris_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	35302
Entropy (8bit):	7.99333285466604
Encrypted:	true
SSDEEP:	768:rRhaFePY38QBsj61g3g01LXoDGPpgb8KbMcnjrQCckBuJyqk3x8cBBT:rLP+TBK6ZQLXSsaMcnHQQcox80
MD5:	0E06E28C3536360DE3486B1A9E5195E8
SHA1:	EB768267F34EC16A6CCD1966DCA4C3C2870268AB
SHA-256:	F2658B1C913A96E75B45E6ADB464C8D796B34AC43BAF1635AA32E16D1752971C
SHA-512:	45F1E909599E2F63372867BC359CF72FD846619DFEB5359E52D5700E0B1BCFFE5FF07606511A3BFFDDD933A0507195439457E4E29A49EB6451F26186B7240041
Malicious:	false
Preview:	.......murmur3.....IN...9.......0..X..#l....C....]......pv..E..........,..?.N?....V..B-..F.1....g\|..._.>'.-(V... .=.7P.m....#}.r.....>.LE...G.A.h5........J..=..L^-.Zl++,..h..o.y..~j.]u...W...&s.........M..........h3b..[.5.]..V^w.........a....6g3..%.gy../{\|Z.B..X.}5.]..t.1.H&B.[.).$Y......2....L.t...{...[WE.yy.]..e.v0..\.J3..T.`1Lnh.../..-=w...W.&N7.nz.P...z......'i..R6....../....t.[..&-.....T&l..e....$.8.."....Iq....J.v..\|.6.M...zE...a9uw..'.$6.L..m$......NB).JL.G.7}8(`....J.)b.E.m...c.0I.V...\|$....;.k.......8v..l.:..@.F.........K..2...%(...kA......LJd~._A.N.....$3...5....Z"...X=.....%.........6.k.....F..1..l,ia..i.i....y.M..Cl........}.I..r..-+=b.6....%...#...W..K.....=.F....~.....[.......-...../;....~.09..d.....GR..H.lR...m.Huh9.:..A H./)..D.F..Y.n7.....7D.O.a;>Z.K....w...sq..qo3N...8@.zpD.Ku......+.Z=.zNFgP._@.z.ic.......3.....+..j...an%...X..7.q..A.l.7.S2..+....1.s.b..z...@v..!.y...N.C.XQ.p.\..x8(.<.....cq.(

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.5724312513221195
Encrypted:	false
SSDEEP:	3:kDnaV6bVon:kDYa2
MD5:	5692162977B015E31D5F35F50EFAB9CF
SHA1:	705DC80E8B32AC8B68F7E13CF8A75DCCB251ED7D
SHA-256:	42CCB5159B168DBE5D5DDF026E5F7ED3DBF50873CFE47C7C3EF0677BB07B90D4
SHA-512:	32905A4CC5BCE0FE8502DDD32096F40106625218BEDC4E218A344225D6DF2595A7B70EEB3695DCEFDD894ECB2B66BED479654E8E07F02526648E07ACFE47838C
Malicious:	false
Preview:	edgeSettings_2.0-0

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\SmartScreen\RemoteData\edgeSettings_2.0-0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3581
Entropy (8bit):	4.459693941095613
Encrypted:	false
SSDEEP:	96:JTMhnytNaSA4BOsNQNhnUZTFGKDIWHCgL5tfHaaJzRHF+P1sYmnfHUdT+GWBH7Y/:KyMot7vjFU
MD5:	BDE38FAE28EC415384B8CFE052306D6C
SHA1:	3019740AF622B58D573C00BF5C98DD77F3FBB5CD
SHA-256:	1F4542614473AE103A5EE3DEEEC61D033A40271CFF891AAA6797534E4DBB4D20
SHA-512:	9C369D69298EBF087412EDA782EE72AFE5448FD0D69EA5141C2744EA5F6C36CDF70A51845CDC174838BAC0ADABDFA70DF6AEDBF6E7867578AE7C4B7805A8B55E
Malicious:	false
Preview:	{"models":[],"geoidMaps":{"gw_my":"https://malaysia.smartscreen.microsoft.com/","gw_tw":"https://taiwan.smartscreen.microsoft.com/","gw_at":"https://austria.smartscreen.microsoft.com/","gw_es":"https://spain.smartscreen.microsoft.com/","gw_pl":"https://poland.smartscreen.microsoft.com/","gw_se":"https://sweden.smartscreen.microsoft.com/","gw_kr":"https://southkorea.smartscreen.microsoft.com/","gw_br":"https://brazil.smartscreen.microsoft.com/","au":"https://australia.smartscreen.microsoft.com/","dk":"https://denmark.smartscreen.microsoft.com/","gw_sg":"https://singapore.smartscreen.microsoft.com/","gw_fr":"https://france.smartscreen.microsoft.com/","gw_ca":"https://canada.smartscreen.microsoft.com/","test":"https://eu-9.smartscreen.microsoft.com/","gw_il":"https://israel.smartscreen.microsoft.com/","gw_au":"https://australia.smartscreen.microsoft.com/","gw_ffl4mod":"https://unitedstates4.ss.wd.microsoft.us/","gw_ffl4":"https://unitedstates1.ss.wd.microsoft.us/","gw_eu":"https://europe.

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.493433469104717
Encrypted:	false
SSDEEP:	3:kfKbQSQSuLA5:kyUc5
MD5:	3F90757B200B52DCF5FDAC696EFD3D60
SHA1:	569A2E1BED9ECCDF7CD03E270AEF2BD7FF9B0E77
SHA-256:	1EE63F0A3502CFB7DF195FABBA41A7805008AB2CCCDAEB9AF990409D163D60C8
SHA-512:	39252BBAA33130DF50F36178A8EAB1D09165666D8A229FBB3495DD01CBE964F87CD2E6FCD479DFCA36BE06309EF18FEDA7F14722C57545203BBA24972D4835C8
Malicious:	false
Preview:	synchronousLookupUris_636976985063396749.rel.v2

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\SmartScreen\RemoteData\synchronousLookupUris_636976985063396749.rel.v2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	35302
Entropy (8bit):	7.99333285466604
Encrypted:	true
SSDEEP:	768:rRhaFePY38QBsj61g3g01LXoDGPpgb8KbMcnjrQCckBuJyqk3x8cBBT:rLP+TBK6ZQLXSsaMcnHQQcox80
MD5:	0E06E28C3536360DE3486B1A9E5195E8
SHA1:	EB768267F34EC16A6CCD1966DCA4C3C2870268AB
SHA-256:	F2658B1C913A96E75B45E6ADB464C8D796B34AC43BAF1635AA32E16D1752971C
SHA-512:	45F1E909599E2F63372867BC359CF72FD846619DFEB5359E52D5700E0B1BCFFE5FF07606511A3BFFDDD933A0507195439457E4E29A49EB6451F26186B7240041
Malicious:	false
Preview:	.......murmur3.....IN...9.......0..X..#l....C....]......pv..E..........,..?.N?....V..B-..F.1....g\|..._.>'.-(V... .=.7P.m....#}.r.....>.LE...G.A.h5........J..=..L^-.Zl++,..h..o.y..~j.]u...W...&s.........M..........h3b..[.5.]..V^w.........a....6g3..%.gy../{\|Z.B..X.}5.]..t.1.H&B.[.).$Y......2....L.t...{...[WE.yy.]..e.v0..\.J3..T.`1Lnh.../..-=w...W.&N7.nz.P...z......'i..R6....../....t.[..&-.....T&l..e....$.8.."....Iq....J.v..\|.6.M...zE...a9uw..'.$6.L..m$......NB).JL.G.7}8(`....J.)b.E.m...c.0I.V...\|$....;.k.......8v..l.:..@.F.........K..2...%(...kA......LJd~._A.N.....$3...5....Z"...X=.....%.........6.k.....F..1..l,ia..i.i....y.M..Cl........}.I..r..-+=b.6....%...#...W..K.....=.F....~.....[.......-...../;....~.09..d.....GR..H.lR...m.Huh9.:..A H./)..D.F..Y.n7.....7D.O.a;>Z.K....w...sq..qo3N...8@.zpD.Ku......+.Z=.zNFgP._@.z.ic.......3.....+..j...an%...X..7.q..A.l.7.S2..+....1.s.b..z...@v..!.y...N.C.XQ.p.\..x8(.<.....cq.(

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQan:YQ3Kq9X0dMgAEwjM
MD5:	961E3604F228B0D10541EBF921500C86
SHA1:	6E00570D9F78D9CFEBE67D4DA5EFE546543949A7
SHA-256:	F7B24F2EB3D5EB0550527490395D2F61C3D2FE74BB9CB345197DAD81B58B5FED
SHA-512:	535F930AFD2EF50282715C7E48859CC2D7B354FF4E6C156B94D5A2815F589B33189FFEDFCAF4456525283E993087F9F560D84CFCF497D189AB8101510A09C472
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":0}

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\a5dddf3d-9954-4d0a-82d2-9fa9d6243a5c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17969
Entropy (8bit):	6.06654792124206
Encrypted:	false
SSDEEP:	384:nDF5g/rZP0/jpq4eVYCxmxf91UM2SNlWZc+rgtQHKhv:DF5kruq4eV5xmx3QtprgtEe
MD5:	28A78D18F89F68895CE28667F015C033
SHA1:	3BD5891A69DE8FDC978E0FC8E4A7762509470E25
SHA-256:	0E02AD43DF0F913A46F019FA6DF1B553E3FDDCE5C7CD499A107513780D0F1DA3
SHA-512:	9B84D5C0DCCD277386F204E4E1B10DCBDE611964461CF27BFE48DAFAE0394E29789D2F0F2546648F29D6B5DCBDEA8304B0F380BB60F10942FDA0AEAB762B2253
Malicious:	false
Preview:	{"domain_actions_config":"H4sIAAAAAAAAAL19a3PktrH2X1HpU5LyQNLe5M355HeziV3Jxi5nU656T6VUIIghIYIAF5eZ4bj83083ONJKOwRmmutzPngtUXxwY6Nv6G78evmdqa1z/N/f/biRzqlaXv7510s+DFoJHpQ1/vLP//2fby4HCw+UxN9+vTS8h9cu39eN/Pd3l99chnHA3wfuguL6ZzloLmQvTYC/bbiO+MfvoEn5i6z+rsLV65e37OWbiz/8/fuPH/7xzYVWnbz4mxSd/ePFu9bZXl7dXrNr9vL1y2/ZzfWLi3/xNXfqAYbdXt3AX25v37y8/O2bx/FM2KcjkvDqR9tJMz+mp+C/2H/a8LgGjy3Uzx4/eR9H8fbt/8rk376Fyb/69tUrdvvqeO7Tn29uXl+z16+Pp/9/Pqa5LwBE9U4r6O97ZYIvf4+jdw8D/PXSS7ES7SryFa/rRHiV4wZ+uvybtY2Wh7Fd/gb0+fldJ3u7Afx/X35Qwllv1yGRzCW8Fb10d7yBzu7sI7kDGWAL8LsHer/8881v31zyzc2dsLUUd2vJQ3TyTrSwHk9QR5vk8EDWd2mvjNDwj0P4MeKa17bnCpq+NDKstdoxYfu0budDfIi1sn5CZjbkI/iw3N9tbt7hJP46zeEdTuHwztGMRd1TZ2f0+H43WC9/0nz8WfJ6fDpur5VpChN9RP8CPW6UkU/BwUYWNkuQPd/Bz5IddisRzSuxeMgbhgi5FK/5LVNhCXK3VkaFcWnHWx5EC6MXtkSXxSZUAwOQ0IazDRDV0mYq2Pgiug225Fu+ZYIvaaaVuMU28BcbnDVLRyMczMkB/YuWGyP10nZM4KFFklz6fex2cNID0/KDjosXd9PuFm6pNuq4tFd4nX2KSnTwUYaljfxF+fY7M25b6WSZAc6ypAM3xEcuPXoisWY7PgAenxwzyyQaaOzye3jzw/p7uRGJJ9NYRwFsQGxKUOKKC3OMP8zx6c

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\ae8c7a3d-d75c-485e-8ef7-70deb4b41bd3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2898
Entropy (8bit):	5.296498880106917
Encrypted:	false
SSDEEP:	48:YDEFMsFiHGS0afaRE2HbQcw3p8QSh/cIgwLURMYXylVotoW05K1DNHB+QdrxWBzX:PNkGS1fa17U58rh/cI9URoDoto9iB9Md
MD5:	007D097509DD8B330C5E394E928334DD
SHA1:	B844A663361769B378742B0E218B4EE93F4B277D
SHA-256:	4FD043A344E45798CF4422985DD40F919B6979AF19544E0E5477E4EE4E8354F2
SHA-512:	68C26D9728E9CF4BAE9EA5D18E2AAE1911CDBC93D8A8CC655A68A971EE0C8C355CF30EEE2CC9D4ECABFD64ED1F3237552453435EA7A7E09FBBD169D58B0477CC
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fre":{"oem_bookmarks_set":true},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAACNraR6o52vnAw+hjgXw9XinvzIaGvrNe8TEfo1zO4/PQAAAAAOgAAAAAIAACAAAADx8/NztOeQSyjBVTJ/2JpBG5Y2udBxRNpzM1/xXXDwajAAAAC0VxRdOFjkawYBnD3BCtJ/cQRDiZGJ5gr5i1DGEuDYxrnD3HgnvKidUWkbIO2G4LJAAAAA3+5UiFwaRridH7Xiya/4ICLa/1kpPXoYKpTIc5xKT7iEy8uYGwws9aG6cRFRWdiVBH1QwBNQ8MTjhULtfgeoMA=="},"policy":{"last_statistics_update":"13358348823285802"},"profile":{"info_cache":{"Default":{"avatar_icon":"chrome://t

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\f11aab54-8ffe-43db-8adc-d1a8855264f7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16684
Entropy (8bit):	6.070886102346345
Encrypted:	false
SSDEEP:	384:nDF5g/rZP0/jpq4eVYCxmxf91UM27NBSWZytQHKhv:DF5kruq4eV5xmx3QNytEe
MD5:	EB7F4047294310B58B3D3BF4E16837F4
SHA1:	77B5DB6A1625DEF3B28C65068AB2E0476992B10B
SHA-256:	A05FEEAF9C6683465A623CAD9F319A40B2C1CB6E4F2786392A979D4449E57DE6
SHA-512:	760698DC6861B2FAE09A7B05366437B5BD593ED1CEFCDCE14572CA6C686459532550B10407DB44FBE3F66506A5435F5D0DDD257A9C580372BD700832EEE4D681
Malicious:	false
Preview:	{"domain_actions_config":"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

C:\Users\user\AppData\Local\D3DSCache\ab326b5a64fa2db7\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	65552
Entropy (8bit):	0.01267959957008888
Encrypted:	false
SSDEEP:	3:JklGlll/l/lXp9ZjrPBY0Ll4lt/Qf1DP:q0dPBY0y4dz
MD5:	F82406D91DAD32A842033CE56EA73522
SHA1:	4864C2D6780FF0F8211C4A561EE90F76AE2840E0
SHA-256:	CF1AE0AB6FEB70464C9305F3355383B901CCBF0810F335ED5EA2FEB822C46638
SHA-512:	F340D5B65B840BF7C9699AEF837F2107F8204E2ADE706175C415576B049C00FFD97328B59C7F4EC3A51B27724A0C4AB1C0E3075B53A3C78B51B224947B13FEC3
Malicious:	false
Preview:	".7a........................................f...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\D3DSCache\ab326b5a64fa2db7\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:R:R
MD5:	F49655F856ACB8884CC0ACE29216F511
SHA1:	CB0F1F87EC0455EC349AAA950C600475AC7B7B6B
SHA-256:	7852FCE59C67DDF1D6B8B997EAA1ADFAC004A9F3A91C37295DE9223674011FBA
SHA-512:	599E93D25B174524495ED29653052B3590133096404873318F05FD68F4C9A5C9A3B30574551141FBB73D7329D6BE342699A17F3AE84554BAB784776DFDA2D5F8
Malicious:	false
Preview:	EERF

C:\Users\user\AppData\Local\D3DSCache\ab326b5a64fa2db7\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Matlab v4 mat-file (little endian) (, numeric, rows 0, columns 16, imaginary
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.03435668575671323
Encrypted:	false
SSDEEP:	6:G9q0SbdlrYoWcV0Ndlg1IGiFTS2tGAYkAtD2Hrn:bpbdpYrNg1IlFoAzc2L
MD5:	16D388D094ECDC534C83C4403965A9F4
SHA1:	F18AC7E0A3D71E92B794DCE0A3832A119A45A4B7
SHA-256:	A982B3BE404EBC13123D18E30EF704FA7860379DFD77FE6C0427A43931D6FBC6
SHA-512:	D4502577A673595A8F3E63BA0F083090ECEF5AFF0EDC09FF5E84C8855ADE46955A1C62C216A7D3D790D7B1E21815365332ACCAB5CE8304A309A7D9534EB53333
Malicious:	false
Preview:	....................(....x:no.&A.e.u~+..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.W.e.b.V.i.e.w.\.A.p.p.l.i.c.a.t.i.o.n.\.1.1.7...0...2.0.4.5...4.7.\.m.s.e.d.g.e.w.e.b.v.i.e.w.2...e.x.e...........................(...p.DJ!.IL.....Zm.F............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8308789939822883
Encrypted:	false
SSDEEP:	48:uiTrlKxrgx8xl9Il8uknxgZeSLLnb3zgmYnoBy+I633yed1rc:mxYxQQLnrzg+AUns
MD5:	122EF0E360F28DBEF175C8E37182607F
SHA1:	D5671E881EB83487375EE3ADE34FCA481AC9879A
SHA-256:	8BBB558264BFD668D06792832298EC966BC2AC45C0E7530B139493634FB6E964
SHA-512:	241F50945DE43C20960D221274B2BE382CBBAC411DC039CBF88EDDC7D81E6A11B81DDF1B9B9FF96AEBE871793527CDAAE04787B606006B539A9A0F1346DBA06A
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.u./.8.Y.G.V.2.g.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.y.e.p.7.I.T.

C:\Users\user\AppData\Local\Temp\CreativeCloud\ACC\WAM.log

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (413), with CRLF, LF line terminators
Category:	modified
Size (bytes):	23726
Entropy (8bit):	3.655901774014062
Encrypted:	false
SSDEEP:	384:FxFxJ3RJQWPahfacdnvZS3VxS3xacra1rnIdS3nyX2UyXiUyXy+yXHhyXQhsKhs3:FxFxJ3RJQuahfacdnvZS3VxS3xacra1w
MD5:	CF95421C61E7E78499706AE1B7BC341F
SHA1:	75FB94A983F1EF3EF2DE1EA312172E79EF504951
SHA-256:	940FB850DF63443A022F1843CEC9B0EF8BAF93C846BC714364A5A0F4A4D4CE94
SHA-512:	0C5C69AA990253D9183A875A1DD96127E1931DAE9482455172EB3D914560E2196AB79973CFC874C467E05967396124500E2C05429F90879837732DC8BCE67781
Malicious:	false
Preview:	..0.4./.2.3./.2.4. .1.6.:.2.5.:.3.4.:.4.8.9. .\|. .[.I.N.F.O.]. .\|. . .\|. .A.d.m.i.n. .\|. .S.e.t.u.p. .\|. .A.p.p.l.i.c.a.t.i.o.n.C.o.n.t.e.x.t. .\|. . .\|. . .\|. .7.1.0.4. .\|. ........................ .W.o.r.k.f.l.o.w. .s.t.a.r.t... .V.e.r.s.i.o.n.:. .2...1.2...0...2.3. ..........................*.....0.4./.2.3./.2.4. .1.6.:.2.5.:.3.4.:.4.8.9. .\|. .[.I.N.F.O.]. .\|. . .\|. .A.d.m.i.n. .\|. .O.O.B.E.U.t.i.l.s. .\|. .C.o.m.m.a.n.d.L.i.n.e.P.a.r.s.e.r. .\|. . .\|. .O.O.B.E.U.t.i.l.s. .\|. .7.1.0.4. .\|. .P.a.r.s.i.n.g. .t.h.e. .c.o.m.m.a.n.d. .l.i.n.e. .p.r.o.v.i.d.e.d... .N.u.m.b.e.r. .o.f. .c.o.m.m.a.n.d. .l.i.n.e. .a.r.g.u.m.e.n.t.s. .i.s. .1.....0.4./.2.3./.2.4. .1.6.:.2.5.:.3.4.:.4.8.9. .\|. .[.I.N.F.O.]. .\|. . .\|. .A.d.m.i.n. .\|. .W.A.M.B. .\|. .C.o.n.f.i.g.X.m.l. .\|. . .\|. .W.A.M.B. .\|. .7.1.0.4. .\|. .I.n.s.i.d.e. .r.e.a.d.V.a.l.u.e.s.F.r.o.m.F.G.F.e.a.t.u.r.e.s.L.i.s.t... .A.d.d.i.n.g. .p.a.r.a.m.:.:. .e.n.a.b.l.e.W.e.b.v.i.e.w.2. .:. .t.r.u.e...

C:\Users\user\AppData\Local\Temp\NGL\NGLClient_CreativeCloudInstaller1.ngllogcontrolconfig

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	175
Entropy (8bit):	4.8547202010557555
Encrypted:	false
SSDEEP:	3:GnJl14YdgtAeoaVjo+cAeoujPBDJlf2mLlxIPNrRlCkY:GTGth6tjXleMl61rWkY
MD5:	06E127BB2A9B7DF80B64FB2599EAC750
SHA1:	FFAC03CAF707CCA61F5179737428FCE9CAB894EA
SHA-256:	B3208276FED72CBD60E58DC2472CA329F1E9683C13086A785FEE0654A272977B
SHA-512:	8AF06AE3B9DB2DBE087EA480AC22ECC404A7DE090BA0114C0236E2AEBA14307EB7F9FD58F91A8C56F2775DB76E66CFD6F1AC1C04071691D86BAF0E16BAF5A668
Malicious:	false
Preview:	{..."level" : "INFO",..."maxFileUploadSize" : 1000,..."minFileUploadSize" : 500,..."uploadInterval" : 604800000,..."uploadOnError" : false,..."uploadOnSessionStart" : false..}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\CCDInstaller.js

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62606)
Category:	dropped
Size (bytes):	1309620
Entropy (8bit):	5.66134790970973
Encrypted:	false
SSDEEP:	12288:AZb/5GFhTosauwinfCRjQ6kbS9bWHUp/1rN3iYOq1rXvalMW8XLCcw:AZb/6DCRjTkb0WHFYOq1rXiln87CJ
MD5:	FB970BC9889933229160723A60571DDE
SHA1:	B1B68348B77101B31BEA510311C6E85451F833FC
SHA-256:	39E34FC3DFD74D25631EA2FECACA70A5D767B5F3F40F24380237DC06A80252E2
SHA-512:	65C4B44E42C7D94A89BE9B18EF7589F16F247F47F459DA2E8B59B4FFBBBA25CBB07971F8484E9BC25BD8C6F953A291AB9384A154AAB9AD1572375B3B30C31886
Malicious:	false
Preview:	!function(e){var t={};function a(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,a),o.l=!0,o.exports}a.m=e,a.c=t,a.d=function(e,t,n){a.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)a.d(n,o,function(t){return e[t]}.bind(null,o));return n},a.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(t,"a",t),t},a.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},a.p="",a(a.s=642)}([function(e,t,a){"use strict";e.exports=a(370)},function(e,t,a){e.exports=a(388)()},fun

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\1d440dad-db9c-44ec-9199-95beb993311d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3423
Entropy (8bit):	5.283318837628074
Encrypted:	false
SSDEEP:	96:PNkGSCXfavUwt58rh/cIyURoDototCBwtRZCmV/T/nX4u:PNBSpf+VoDU1wNb5
MD5:	5948BCF8021ECB4018BEC31CFC0D9C4E
SHA1:	D084240D71B4EA2D84210ECEB192A52DFFACE274
SHA-256:	00876C2C0C5FC3B16142CC0F8DC83C7F58AC732F76CB380EC4974BEDD033B5CE
SHA-512:	4720CE027C15F04BC9F9724CCA1D201632D24130911E13274211E7839D8B8621BDB8E96538D2A52C4F6B176340E53D2086371A9D984250BE38B125EC2BB132DB
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fre":{"oem_bookmarks_set":true},"hardware_acceleration_mode_previous":true,"is_dsp_recommended":true,"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.713875224430043e+12,"network":1.713875224e+12,"ticks":7230247066.0,"uncertainty":1881936.0}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrs

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\2bd9f9d2-4af0-47e4-8a2f-9a9ebe0ae1d3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.718486540310113
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEvkuQ+eYGy7QhZNcBzaeC1mdWOLRRbvXvmQQRCYfYg:Yqfav17Gy7OoBzZCm7LR9v/nB0
MD5:	2C62660348A18412FBC32EB613958167
SHA1:	0315942675C3E071BCCC49ED417A92CFAE1D7AE1
SHA-256:	34EA3A11D02E2799DD80438942D36348B364039228945AC26A5046D279A614B5
SHA-512:	667274A37AD114C1AFCFED46149BA9751BD9BE0E16630B4FBD03D41E6757E6C18B19413684D1F61147AFF92F4C8DF4145365068DDDA913E20F6071CE3AABA34E
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1069,"pseudo_low_entropy_source":1602,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101983","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\5de269c2-2983-4e27-8351-1c67360f1714.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17870
Entropy (8bit):	6.068123434580966
Encrypted:	false
SSDEEP:	384:nDF5g/rZP0/jpq4eVYCxmxf91UM2nNBSHAv3cPoQHKhR:DF5kruq4eV5xmx3QP/SoEk
MD5:	14799658927E6648F813AC926B665621
SHA1:	C12A48ECE144FD796F24198EF9A218B452C72934
SHA-256:	262D72D57A50955F78C14CF8B21A2E1E0CA6C8B08AB8B6B71DB255EDF631B3C4
SHA-512:	D24B5FBF8DCCBF925B1D9830329E4AC428636A2747F3A734FB0341A501CF3791DCD8F254AE2A9992A0EB42D5970D55AAE442EEA3C2A3C2003AD17086ECB277AC
Malicious:	false
Preview:	{"domain_actions_config":"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

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	1045BFD216AE1AE480DD0EF626F5FF39
SHA1:	377E869BC123602E9B568816B76BE600ED03DBD0
SHA-256:	439292E489A0A35E4A3A0FE304EA1A680337243FA53B135AA9310881E1D7E078
SHA-512:	F9F8FCC23FC084AF69D7C9ABB0EF72C4684AC8DDF7FA6B2028E2F19FD67435F28534C0CF5B17453DFE352437C777D6F71CFE1D6AD3542AD9D636263400908FD2
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	1045BFD216AE1AE480DD0EF626F5FF39
SHA1:	377E869BC123602E9B568816B76BE600ED03DBD0
SHA-256:	439292E489A0A35E4A3A0FE304EA1A680337243FA53B135AA9310881E1D7E078
SHA-512:	F9F8FCC23FC084AF69D7C9ABB0EF72C4684AC8DDF7FA6B2028E2F19FD67435F28534C0CF5B17453DFE352437C777D6F71CFE1D6AD3542AD9D636263400908FD2
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	1.9016799979883232
Encrypted:	false
SSDEEP:	3:FiWWltlgnq+//3NEjYb1gmlx/ll:o1gnz3fCmlZl
MD5:	93A4025923D0CD939169CA17A850124E
SHA1:	51A5AE1C9F9FA8AF5F271DA7E3341E622BBE2CE8
SHA-256:	50819D50E4529D76F4369C7E0CBA6E51E13D15B9873EF00180D571E06D7377B6
SHA-512:	42E38FA22A9E6DA7B2FD62D580EC6DBD4E83BC488DEE6B927A71667BDC5D630ED8EBC482F08E8AC74C13A25C3C22BBD19070ACE6D365194CCF78F96EAB495A69
Malicious:	false
Preview:	sdPC....................*....K.L..<#.._i................................................................................................................................................................................................{F3017226-FE2A-4295-8BDF-00C3A9A7E4C.}C:........

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Crashpad\throttle_store.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.6219280948873624
Encrypted:	false
SSDEEP:	3:8g6Vvn:8g6Vv
MD5:	9E4E94633B73F4A7680240A0FFD6CD2C
SHA1:	E68E02453CE22736169A56FDB59043D33668368F
SHA-256:	41C91A9C93D76295746A149DCE7EBB3B9EE2CB551D84365FFF108E59A61CC304
SHA-512:	193011A756B2368956C71A9A3AE8BC9537D99F52218F124B2E64545EEB5227861D372639052B74D0DD956CB33CA72A9107E069F1EF332B9645044849D14AF337
Malicious:	false
Preview:	level=none expiry=0.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\613c26fd-30b6-42d8-92e0-68e36ba0bfee.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5804
Entropy (8bit):	4.813153572267364
Encrypted:	false
SSDEEP:	96:st1/3Ys13Wb9xG8zFd81h6Cb7/x+6MhmuecJ9RHS1eAe3UJy2MR7K:stpos0Gk/8vbV+FF9RyQAlJyPhK
MD5:	5EEC2A39C9614916C3D51EDFB3AF4901
SHA1:	04B0D7F6CB353E00D528E027EC506C0C9ABD1CE3
SHA-256:	A75FDD2D703FF3D3F8806CBEF303FEAF6A28A5209FF937F8E9EBE0ED4C90C092
SHA-512:	CA08967DA9BE0F7E89955AE24E824B0BDC824AA0F5ABDD406F75DCE4D5BD08F10C21C457118E8A3B4D382FD2FA9907E0B3DF242A728C7B04CA06445E19DE55CA
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823885634","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823782383","domain_diversity":{"last_reporting_timestamp":"13358348823885727"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\632a30c8-11af-4283-8431-1d7ad0447b80.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.5796417720896345
Encrypted:	false
SSDEEP:	96:vX9iY+Plf/ROoBpkF5d1nic7VaTEv9V5h5pg5vezodIU8ilyASpsA5IOrMn3YPoE:fkYir3w9l5iQASpFIOAn3go0iu/
MD5:	FA0903BAE4C3F663F1C3AD17C715A887
SHA1:	5CA6DCF0896AE46EC04B3F0D4CACE526A945AE51
SHA-256:	A72A2E629DEB5DFE7287438A23CB42BDF11F4265877D03C1BC9A53534CE8D468
SHA-512:	E198A80E6A7B47D4D4A3E5674CBF37106A0DDDC742864D2FE6B6ED43E6BEAE37FAC39545091773AF4D98C3240E7F33E81E58ECDC31C77807167F5A463D9470CC
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13358348823383930","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13358348823383930","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.18915207981221546
Encrypted:	false
SSDEEP:	24:dqE/6lFfppVcobtZT17q2LVCYSOoTV/5b10//6HwwQbaab:Erf1cobP17PQBb+//6BQ2e
MD5:	0BF3C6B2DEEC7645172E3FB986A42C7F
SHA1:	EC436ECFA8090D23CD205F5043B44D42EFEC1880
SHA-256:	F06638F83FE670E7C1AF4609DF2EFE5695CEBE3C8E30411F63E674ECCC612B25
SHA-512:	E882A7A8355A8BC4DBE7B530DADF7484902767A9DCC1A25D524AA852D376B292B821B100E4199E5DCA935F00C09D0AECF8557AD5ADCF1F3B50CE53C88699603B
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.34236857498953643
Encrypted:	false
SSDEEP:	192:MIHTBxCATal4tzPH9xCizM9/sJrDf+wY:MIHrCnetzPzCIM9WDfLY
MD5:	B640DDA0F8218D3E5672CB0FB6868CDB
SHA1:	2895CDD5BB398329BF2FAA505C03A6B215B04AC9
SHA-256:	213F5DA41C47CF350D797783203A22E95746CB8ECB2F30372DDE83FB9DD4FD53
SHA-512:	53E1B71A25EF62CE6FE36A5A814172C87E81C4EFCF5BC3844FA611856191AD824E8AD4D47F8EC5DEE5BAE5FADDC28073A8D42DB904F8C6D3BC0359B244D7C52D
Malicious:	false
Preview:	................".......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1056768
Entropy (8bit):	0.5513680134301702
Encrypted:	false
SSDEEP:	768:7vFAR+6QjsDJt/uw5aDJtMe+HJtuHKJtZOJt3JtE/JtcJtcq:hhTs8SD
MD5:	05F76A0E2B1B9B8DB381FE667E8F33F5
SHA1:	A7627AAE4E84055AC0294101036C5EE1F9BCF9D7
SHA-256:	411CAEE35171C49F51059D1F7AF9C9B665F228C764B0C95BE5D4A9CE67B4B9FE
SHA-512:	9F2C351B145560C487CBF11C6B5865DE9D0F657EE56B0895E0212526E0A1AF465075B200D85B956E11DD40A7D590E77E91EB49E284D1C450BADE0C1295309233
Malicious:	false
Preview:	....................................................................................?...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	4202496
Entropy (8bit):	0.25308634925765516
Encrypted:	false
SSDEEP:	768:pDJtODJtvDJt0DJtftDJt0DJteqDJthDJtoDJtLDJtSDJtODJtcDJtNDJtPDJtaT:J
MD5:	5E534762BC027A84507BEE5BFBE19BC3
SHA1:	5693424FB5363D9F28FFCB2CFCF518369F5EE059
SHA-256:	CE66D1F70801A86CBEE0E66857B8D48946E698D22EA62E195A267DB585F3670F
SHA-512:	CC0234E9971B103F79C60A8FB36B8F634BB4EB117150C58ABAFD40EED2C1641CEBBBECC3ED65BD15A40C8A4CCF4E57C562689BEA9AC9AB5FEFEC3652A65935F6
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22623)
Category:	dropped
Size (bytes):	49484
Entropy (8bit):	5.390117242684987
Encrypted:	false
SSDEEP:	768:RJFtyhYuRGHS0FGO5vWaz+PEh7YCABwsbV1lhsrWRqRN6v:RVyhYuMHS0ucj+CEqRNw
MD5:	937DF33E50EBD84A279C21F220DC3C23
SHA1:	A8BB82BEB95B0EEBD3640798F2CEC915FAE2166E
SHA-256:	A27FF913B6F47FC2B3E77A374C6DD463A0118E0599D5529F2BF27131057F4E19
SHA-512:	BAEB2E812911EFFF4B2042664659FF88C568D560CCFDD0B801C780293C5BFF6D2741D955D08FBB7CCCAE24B3AC3DBC755211464CC2BBB8338A5E77D606B9FB74
Malicious:	false
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' https://wwwimages2.stage.adobe.com https://auth-stg1.services.adobe.com https://kapture.corp.adobe.com https://stage-server.messaging.adobe.com https://wwwimages2.adobe.com https://c.evidon.com https://auth.services.adobe.com https://cdn.arkoselabs.com https://auth-ci-statics.dev.services.adobe.com https://assets.adobedtm.com https://www.adobe.com/marketingtech/ https://use.typekit.net https://www.google.com/recaptcha/ https://www.recaptcha.net https://recaptcha.net https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://api.demandbase.com https://adobe-api.arkoselabs.com https://accounts.google.com/gsi/ 'nonce-7cdIl++Or+G9PFeNm9xiNA==' 'sha256-qz5t9UkuvqqEypV44P1Kv4IsgQkkIhq3u1QLznghVSA=' 'sha256-l5Y/tp7bqvYu0DvohidHeCojuhNlf1uNygJUYCRVZ0o=' 'sha256-yuDEasptA5ysRmmdaG7

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000002

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	537358
Entropy (8bit):	5.540458880179435
Encrypted:	false
SSDEEP:	6144:5oxJln94OeevNKfHXFy6aOT7Rc5jVZnFlKhVF:IvNKyE
MD5:	EAEDADB701C7F040EBE18B8521489F2F
SHA1:	D3180B3E360C876E87007E0D88E4D4407E7A0239
SHA-256:	B0E308DCB32D7570952A5D00292F76E3E024C94950C9FDA08ECD824D00C6B49D
SHA-512:	FE7B84979C1345F8BE6D51B9B20D0D9A00C310F70AD5471DD82F22023CE2096B71E5763D220B4C1805B8DACCA8D45097438C1F7A57308910394FE7D466976A84
Malicious:	false
Preview:	.ActionList-Item__container{padding:24px 16px 24px 10px}.ActionList-Item__container,.ActionList-Item__container-no-padding{display:-webkit-box;display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex;-webkit-box-pack:justify;-webkit-justify-content:space-between;-moz-box-pack:justify;-ms-flex-pack:justify;justify-content:space-between;-webkit-box-align:center;-webkit-align-items:center;-moz-box-align:center;-ms-flex-align:center;align-items:center}@media screen and (min-width:768px){.CardLayout__content--full-width{margin:0 -56px}.ActionList-Item:not(:last-child):after{left:56px;right:56px}.ActionList-Item__container{padding:24px 40px 24px 50px}}.spectrum-Icon,.spectrum-UIIcon{display:inline-block;color:inherit;fill:currentColor;pointer-events:none}.spectrum-Icon:not(:root),.spectrum-UIIcon:not(:root){overflow:hidden}.spectrum-Icon--sizeS,.spectrum-Icon--sizeS img,.spectrum-Icon--sizeS svg{height:18px;width:18px}.spectrum-Icon--sizeM,.spectrum-Icon--sizeM img,.spectrum-Ic

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000003

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65301)
Category:	dropped
Size (bytes):	3849973
Entropy (8bit):	5.415504794385204
Encrypted:	false
SSDEEP:	24576:DPRSDMQLGbEgxNK2WFDUYLYHo0U4sP3+mYiDkb:zRGHL1gxNK2WFDnLYHo0UlP3+KDkb
MD5:	56ED333845AE6D10AA6A393F2AA84721
SHA1:	A740B1E73EDE0759D75C3016CF32206423CFB491
SHA-256:	45FC41175A47DEE0B00B8B1F2B25A6BBE24F60E5BD76CF714CA5F1D5B111E380
SHA-512:	20C342BAC6CEBE70B00F61D2F3213AC524CF8ADE4B01D6B65CB991BBBFF562B424F309431C7A4A6ABE3515F950DD4D3902CDEBAE5A0D18EA34736380E4AC983B
Malicious:	false
Preview:	/! For license information please see scripts.js.LICENSE.txt /.!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="/",r(r.s=543)}([function(e,t,r){"use

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000004

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60663
Entropy (8bit):	4.846631376861458
Encrypted:	false
SSDEEP:	1536:lZCdHEnfBPP9ZvS4bEzj3lqsz2560AJvw0j0rEkUDdiTBRXr:lgdHElNbEzj1qsz2560AFw0j0rEkUDdO
MD5:	E4A2F3815922242298A8D201199D36F3
SHA1:	E6D48EB453AD97A6588E54230D99F3CDEFA777D4
SHA-256:	9EFECC872C888AEA1A02C67E4DA508A115D47F17E7CFAEB0FA7CBB715B82183A
SHA-512:	70F7721054E7096A556643F4DFAB9D7DEBBBD565D2EC8136FB842F89FFB4845CADB98C2CBF8F07F92DE64DBA3BC587A7906AC68694F9AFE20BD0C060DEF46571
Malicious:	false
Preview:	{"attributions":{"behance":"Behance","stock":"Stock","creativeCloud":"Creative Cloud"},"common":{"backBtn":"Back","goBackBtn":"Go back","resend":"Resend","learnMoreAccountTypes":"Learn more about account types","resendCode":"Resend Code","receiveCodeAnotherWay":"Receive code another way","back":"Sign in with a different email address","selectAccount":"Select an account","changeAccount":"Sign in to a different account","continue":"Continue","continueWithEmail":"Continue with email","signInWithPasskey":"Sign in with passkey","returnToSignIn":"Return to sign in","returnToSignUp":"Return to sign up","accept":"Accept","cancel":"Cancel","confirm":"Confirm","change":"Change","close":"Close","done":"Done","ok":"OK","signin":"Sign in","signout":"Sign out","learnMore":"Learn more","viewMore":"View more","viewLess":"View less","skip":"Skip","notNow":"Not now","steps":"Step {0} of {1}","retrieve":"Retrieve","accountTypes":{"individual":"Personal Account","enterprise":"Company or School Account","f

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000005

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1021, components 3
Category:	dropped
Size (bytes):	173831
Entropy (8bit):	7.957287936371227
Encrypted:	false
SSDEEP:	3072:qEHxKATWgFYUdlfbpbErDSrqUyK5ZpkicmMimlhEz0lKCb1Cjr3wdT:qEHUAkUfTpovbl4pk/lhr+6
MD5:	2479D57A4407D8F53E1A2291BC6778AD
SHA1:	D0601DF8ABC524F95E21DED3C7455188B6A5F492
SHA-256:	0FEEBF86E63A5FBE8C83DFECC68BB40579C7CC992AD0884A0C66B8493304C143
SHA-512:	5BBF45B4F348D3855B9BCA2AD646BB078823CAF52E3CCFB4A18D40F9622E837EE6C494EC2FE30C44CCE18B61FB14C92173B64E207E47F57F7D7F87E6E5104538
Malicious:	false
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."..........5.........................................................................................................................#......q....#.............v.FR{..w{....Kr..e.t.......)...[.i.:.gc........k....e.........sL.[..........}.].g.....H....gp....';e....i....;U?....3.....................................................!...~.k.1.v......;......4..$Y......3.k}[M...g.....}.........AQ.DY..[,x6bb.......2..l../...C...v.r7U...U:...5....q.=yG..=:....fyVOK...s.../@.......w.\|.,.35}..x.J.Og.5.?..b.........^^.\......C.......<?.5..N_h..#.^.................................................2:..[.NGC6Q.b{..........Z.':.u.E.v.=_.)...>..R+...2.=47..n...<...T.6p......}...y.;.x..8(]....B..wU.:.*.....K.X.......u<.]}!m....7...~yS)gv...q...u...(.c....yG..U...~k..m.D..i%.>.em..\|.M..;....<.....\|

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000006

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2258)
Category:	dropped
Size (bytes):	17008
Entropy (8bit):	5.5502271222360395
Encrypted:	false
SSDEEP:	384:cx2hpIgIVsUGiRm4lIeU4iDFeFs2NdFJsQF+i:cR7GiRm4X0JqsG7Ui
MD5:	A10396392AF7006E81573A789F8F0367
SHA1:	187F5E45A312D581FE4248DFF447F6DC4DDB208D
SHA-256:	92C86130DAF66FC1BCEF9A45A15608ABE448740ABDC3BCA1EEE9301767DDAF8B
SHA-512:	092900888FD08AE5B5458E91F92880EF10D909BA9F4656FB8DD80B9A4E24760213D5CB02E5BD6849360797FDD1D0D85E71BF4A6C868A40C9110EF3F7765300EA
Malicious:	false
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . adobe-clean:. * - http://typekit.com/eulas/000000000000000000017701. * - http://typekit.com/eulas/000000000000000000017703. * - http://typekit.com/eulas/0000000000000000000176ff. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typekit)window.Typekit={};window.Typekit.config={"a":"1164490","c":[".tk-adobe-clean","\"adobe-clean\",sans-serif"],"fi":[7180,7182,7184],"fc":[{"id":7180,"family":"adobe-clean","src":"https://use.typekit.net/af/cb695f/000000000000000000017701/27/{format}{?primer,subset_id,fvd,v}","descriptors":{"weight":"400","style":"normal","stretch":"normal","display":"auto","variable":false,"subset_id":2}},{"id":7182,"family":"adobe-clean","src":"https://use.typekit.net/af/eaf09c/0000000

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000007

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Web Open Font Format (Version 2), CFF, length 29924, version 1.0
Category:	dropped
Size (bytes):	29924
Entropy (8bit):	7.990737514218301
Encrypted:	true
SSDEEP:	768:Pcuh9wILHXO18MCDoDHbMfEgfLiEJt29V66Gryo3gjXep:Lh9wILHXO1JCDuofLbWyrnr
MD5:	FCFE600FE9BF0239A8C3CD48738EC2DA
SHA1:	C735EDEB5AC056F41E063A46B2F508057C9DBDAB
SHA-256:	62517736E6872FB13CE951C67D689DEF5F6AC4AC222299BFE1E37AC5F05C37AD
SHA-512:	2829D0BE5E38771D56D92371DD9A4131ECDEC577C50481043914A525DE1F0EB9197C731E549F67625EB954EE611377C771126A2A764F0E68B5928476DE05543A
Malicious:	false
Preview:	wOF2OTTO..t........(..t..........................F...s?DYNA.i?GDYN.y..r.`..N...6.$..H...... .)...H........Q..aDA.........U...~..?../.....?B...w..{....:`v...9?/y'I..9@I...@..3V@....%WX{'...T@...`./Q...V.Tz....g( .... .....sFO...2..j.n..R....HBI.!.r[n.VR ...JhM.Aj.HI.~....o.&...q..\Gr..8T7..I!(1.0.t..B...Mq....)c....7..Mk)!..]....1k;.d....6..y..N4z...L.B).....'..T...Q..?......N>.\|...+...V....K..e...I.#..b.j.................BN....B.#.T.._\|.....V.:...E.\v./y...$.h....H.Y...;.L..h..Y.}I.C..U!tR%.pS...i......STU\|..).y...P.Y..4`...c.].w..E.>.[.u.R.._..2 )....}.R......... ..Cc!S......).$....4#hC...5O....``....0......O....&W..`....d..."...a(....4CP..d..(\|.wY.n.I......a..x....0..xO...~..}.._E.i.3....0k..i@....p.F. ...a....0..a._....w...Z.s...c..&.3.h.wY.W../_~.6.J...H...+......k...D.NKi_..}....K(q^;o}.v..&.>.+...b...m......x..R....B.....\|I)Mn1..'.R/..t..Yb4..~.M.C.L.+.....[.......W.A..jc.n...........T3.qyow*..1....+7..K.p.v.^.LU'Z.\|....

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000008

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Web Open Font Format (Version 2), CFF, length 29980, version 1.0
Category:	dropped
Size (bytes):	29980
Entropy (8bit):	7.991242817341188
Encrypted:	true
SSDEEP:	384:Qe9rpy2HXqWLQHZGKdRNVaFFHvYk9ur4QMvkQ5OAe0kM/1uwOnz6AuPtUZfLLcBt:QCrB/MHpIZCgsQ5Xkbwo6A+UZncXp0E
MD5:	864FC6D95444FD085441968A712F6C9F
SHA1:	7E54F060DF28A16E146AB1EB15AB3A59D3D9BE06
SHA-256:	371F06319FA71DE555AEBEFCFFBE3C1F755E5761D90AACD9BBA0C64C6CF40090
SHA-512:	7CADDDDCD35910BC04D80EB10F0776BBF7C770AFCF960FBBDFCC8E8DB1BACD694883A3E9A1540552B544AE639FA42C9B79690ADB81F7D5210467B6494BA25880
Malicious:	false
Preview:	wOF2OTTO..u........0..t..........................F...D?DYNA.i?GDYN.y..H.`..N...6.$..H...... .5...H..V.CDE....}........W.?@..................o.9.%r.xtl%V.H9I....{..;.3..._..Km...LL..5...$..d.-0.b(...;I $..Vc3.d..\|....9..=f..,....4../......-..J..z...r...C.%....U.V,....T.l......q%...A..]I....E..$.......s...N...p.(4Is.K.r.C.v.L.a...(.e..{............m!...\&p.T2S.O..e...?....#...ylj..!....d....W..E...Q....y..z...!X..^QY..W_9..x...?...M...!.......,+`YV.e]........?V.{.jd..+krf.3K?.9...,.8....CREr...YLf..?.3.dqv..\...pU...H`!..+...l}..)....J.....M.P.;.......;w.....Zw...(.....lM..zj....`X.:.CqL.L..?.....d./...l.y9..xy;. ...P.X .I.l....Y......5'.0S'..L../...p.....+.B.. ....eb..:3.ns..B..a........~L.....R.w..!E.9{.}..dB%.zxq.5.F. ..q0.f.\|X..\|.o.m..+w.....<&...k9{..&......+...s..."..d2.u.UC..q.K..8....VC'qr.....j[.qb2NZ!.N.O.:._...e..*.C.u..5.8....t.h+...:..!Lv>8......<J......R......A:B.Gg...:.6K.J.N... ......uIl.V.C....{....X..uS.2.)..=..s

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\f_000009

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Web Open Font Format (Version 2), CFF, length 29752, version 1.0
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	7.991259791890674
Encrypted:	true
SSDEEP:	384:2eV5XX2zIpJY49uOFnjbPdch4XsBocL8S5n9nLZVzBL21uT0mMiQd7TJeAJWAa4:jvfY4uOJJsicL8SrL3zBL70mNA
MD5:	B45F7B0B58EA5CD543323A5E4BA4724B
SHA1:	03E815A2FA7461F31FC8ECC18A7063930FC87475
SHA-256:	9ABA873D54C84D8D56CFE572AB802BB34322DE6FD945C286D278FABE29A9F3F0
SHA-512:	0726643B1B961B3A2E67380A6CED69030E5E97E99C938EBA29830638CC0CA7CF0C42E22DFC6AC77553B21B4E71FF8E3C6BDB8004168449C182A88C9A380D3422
Malicious:	false
Preview:	wOF2OTTO..t8..........s..........................F...]?DYNA.i?GDYN.y..r.`..N...6.$..H....7. ............y..h.0....UUU.&.w... .._..w..._..........s..;.L.xJ.%..4w....{I>le-.pU....[Y.B......_v.....a\|.%8Jj"4...I..O.O..d}.A.8P......a.f..S.Oh[...{w....M"...[.,`.B2...`.K=Ql.S...&;....M.C...Z*)..P..S..[;........7.K....h...%..jIC....-.N...n....P....%9.Le.....pT..Z..vk..........:..hvP.Q..h;.....i^__.N.@9.O...G...d...i.D_.6...3..<c..Hw.=...m.. .i...:..m0.H....\......<........4... ..'"<qQ....C.S..A.J.,2.... .2_.....s......[......\|.@.6);.O....w6.&[x..7.z.\|....if..XDE..].Mp.).I.i.'..H....PW..[c..oUOe...5....^.sJB.(^b.... fL.[..>.J.4.y.....0{QN...4.....E..Qdf....5b....d,.3.^.Z.UD.!..y.....i77.$.S........F.2.8.:.h....az.........:....`x........S_. ..$.q{J..Z2..iWqG`[f.M...p&...3..w....{......:h.....i.qg.%...x...a(...0...2...>...^.w..\.w..e.....]..S;..b..d....+...ld..w....r.k.1QJ...y.a_..\+.g^Vp....v.3[r..+...B>$w....}....u...+8...x..U..6..1Ln!zS..w..h

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Cache\Cache_Data\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	524656
Entropy (8bit):	4.989325630401085E-4
Encrypted:	false
SSDEEP:	3:Lsuls8p:Ls1M
MD5:	67D33AFA0066E21C5A1A2EB54D7EE1F7
SHA1:	C4C8C83D4DF93FDD15A9D05FD0A637E1A5640546
SHA-256:	5ECBEE9AD27D5A9F0472B1830066F8F3701E1D2F8E473A885355DCB7E819550A
SHA-512:	9293D280FC651AA50E11133DEC70D91BE5BA070F089FA6E46BD7B3CBB5F1C20DFDE3E7F2D7BE97CB2FF38F5D8131F29556C16CA437D91E80A41F5E87B242FE77
Malicious:	false
Preview:	........................................u4..Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\js\0d86d14abb8a9b82_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	198
Entropy (8bit):	5.161327213703578
Encrypted:	false
SSDEEP:	3:m+liyElyv8RzYctLACPaLo4gt9kom5ktrN/pPt/lRtqEhU/OgyOkRmn:moElyEYObIXH6trVplTjem8
MD5:	B1AA9997367C162BFAC943667A9CB167
SHA1:	19CDCC1B04C5996E1F3D61ABCEA59334A48CB86E
SHA-256:	6B09796CA6EBF1311D7094CE021006355EAA207DC76ECA41501DAB3A3B617E40
SHA-512:	9728C79BF237C7896CE117E5D0FEBA4277942EEEAD53D9A62ADD3FB1E8DC5B357257AD4669C1225D10E0CDDD10BD8389C1EABE820DC8051BFF0BF2D7E839E23F
Malicious:	false
Preview:	0\r..m......:.....#^...._keyhttps://use.typekit.net/ecr2zvs.js .https://adobe.com/.A..Eo..................oV..Xu/.........Z.............o.........bI....U.o...b..........A..Eo.......:g.$.......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\js\eeffd0915a06aa03_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.295256684793642
Encrypted:	false
SSDEEP:	3:m+lepw/l08RzYaAwtEvHQKOP4gt9kom5ktq3QSpPt/lbhTpdREr7XYzF46B44mvx:mAtVYvw2fQKOAH6tq3QSplzREPSYvh/
MD5:	1BE2FCAE6AACE1BDFF70BF0C8D233622
SHA1:	82B688EB22BE3E6035486748E30697CBAC4D35E3
SHA-256:	C7A865FA26012D0A30651F93D945F47AD011EC6D001EFD897C4FA6238AD2A47D
SHA-512:	D225A1A019DBFC7AE4824BD537684A67F56EFC1C41156EB449D1172DDDED1FFB6FEB0F3B8E410068722A5E374083EBDEC16DAD7BA0D04E58C4454955EA82EDFC
Malicious:	false
Preview:	0\r..m......L.....`/...._keyhttps://auth.services.adobe.com/a9bc07eb5/scripts.js .https://adobe.com/.A..Eo......................Xu/.........Z...........'.n......bx.1......^2....km.;...]...A..Eo..........$.......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\js\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\js\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	96
Entropy (8bit):	4.018432304889684
Encrypted:	false
SSDEEP:	3:oEE0q/bll/lb9dloD0eTy+lll9Vb:o/FloD0+llv
MD5:	01F4BD14111EC96A3539E6B4CC99A1E0
SHA1:	8ECE3741E130D5EAAF6BB3D3666DA7B96E8123DF
SHA-256:	8542FEDC1163C9E1780C2E9C60C45D4919E214F1A4F31A5721C9C53D4AA60521
SHA-512:	88E95E07DB692BFD4B723F51E867D53177D273D842272B5BFAF9043E43306B14E29794EB545B5DD175B4D4FEB54BE27658FA694522AE0BACEFB89708116248DC
Malicious:	false
Preview:	X.....T.oy retne............................J....k.Xu/............Z....@I..Xu/...........s.Xu/.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\js\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	96
Entropy (8bit):	4.018432304889684
Encrypted:	false
SSDEEP:	3:oEE0q/bll/lb9dloD0eTy+lll9Vb:o/FloD0+llv
MD5:	01F4BD14111EC96A3539E6B4CC99A1E0
SHA1:	8ECE3741E130D5EAAF6BB3D3666DA7B96E8123DF
SHA-256:	8542FEDC1163C9E1780C2E9C60C45D4919E214F1A4F31A5721C9C53D4AA60521
SHA-512:	88E95E07DB692BFD4B723F51E867D53177D273D842272B5BFAF9043E43306B14E29794EB545B5DD175B4D4FEB54BE27658FA694522AE0BACEFB89708116248DC
Malicious:	false
Preview:	X.....T.oy retne............................J....k.Xu/............Z....@I..Xu/...........s.Xu/.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF6f646b.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	96
Entropy (8bit):	4.018432304889684
Encrypted:	false
SSDEEP:	3:oEE0q/bll/lb9dloD0eTy+lll9Vb:o/FloD0+llv
MD5:	01F4BD14111EC96A3539E6B4CC99A1E0
SHA1:	8ECE3741E130D5EAAF6BB3D3666DA7B96E8123DF
SHA-256:	8542FEDC1163C9E1780C2E9C60C45D4919E214F1A4F31A5721C9C53D4AA60521
SHA-512:	88E95E07DB692BFD4B723F51E867D53177D273D842272B5BFAF9043E43306B14E29794EB545B5DD175B4D4FEB54BE27658FA694522AE0BACEFB89708116248DC
Malicious:	false
Preview:	X.....T.oy retne............................J....k.Xu/............Z....@I..Xu/...........s.Xu/.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\wasm\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\wasm\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.9972243200613975
Encrypted:	false
SSDEEP:	3:lgjlX00E7gNJn:6Bw7gNJn
MD5:	3BEB0337E49E1070B8FDE1DD9638883A
SHA1:	066DF03D908AC2DAE8F0C83DD4D4B7B159481484
SHA-256:	BD81C224369F89742CDEA464E1AA56183571E1426296132E2ECD6D24D610EEF1
SHA-512:	9114887E58AF40973D849C799462DD667C024B08CFC8F3BE7AF48751E19FFB7F2A46E86729462A960C8B610E2A73B2E49BBADC7DE67A9ADF1A6F3F3182A7E8A7
Malicious:	false
Preview:	(...8.Usoy retne..........................h.Xu/.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.9972243200613975
Encrypted:	false
SSDEEP:	3:lgjlX00E7gNJn:6Bw7gNJn
MD5:	3BEB0337E49E1070B8FDE1DD9638883A
SHA1:	066DF03D908AC2DAE8F0C83DD4D4B7B159481484
SHA-256:	BD81C224369F89742CDEA464E1AA56183571E1426296132E2ECD6D24D610EEF1
SHA-512:	9114887E58AF40973D849C799462DD667C024B08CFC8F3BE7AF48751E19FFB7F2A46E86729462A960C8B610E2A73B2E49BBADC7DE67A9ADF1A6F3F3182A7E8A7
Malicious:	false
Preview:	(...8.Usoy retne..........................h.Xu/.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\DawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\DawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\DawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\DawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNl7Jt:Ls37j
MD5:	C00E73EEB3CA387DC4D4FDAB8D90F5FD
SHA1:	D26BA1A39793DD3C05E0B2DC5167C22EDED0B72B
SHA-256:	FBAB12685E7F03DAEB8AE81060F6191F593220876910B824B3E54A7AB02408DB
SHA-512:	199A5BD659A9DAEA34A7AD63A5EE442E4EF2143331CDC35887D7C375CBE6382B9FC4125EB1E2562F43BB937487531C794E50D981C2C75718C939E6BF4B056748
Malicious:	false
Preview:	..........................................q.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension Rules\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension Rules\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension Rules\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension Scripts\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension Scripts\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension Scripts\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension State\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension State\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Extension State\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\GPUCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\GPUCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\GPUCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\GPUCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNl9:Ls39
MD5:	2B0E6A37D43FF96DA717748456EE8203
SHA1:	B450266BF2529AF8C3086CCE78BAACB7D873C1D3
SHA-256:	016CF1BFFB1C5115483B0AFB30ED0B876EAD8B962CFA5B9E826B5C0D3AB3955A
SHA-512:	5FF47A8F125259C9025EF58FF751414EDFD7144B89DFEB149BBC3D6844969EEA6827F17E923BE55FA1CFB5BF6F50B27860CD82B3B87EF2E3F0CCEEDA56B64505
Malicious:	false
Preview:	.........................................,n.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Local Storage\leveldb\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Local Storage\leveldb\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\44db66db-47cb-46c9-897b-62dfc52b3cd8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\9a2160c7-3786-4deb-ba78-369fc1b1941f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	171
Entropy (8bit):	4.897506439223241
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDHERW6JfYoR6oJbUSBYMKWKWMS7PMVKJq0nMb1KKtiVY:YHpo03h6ubU74MS7PMVKJTnMRK3VY
MD5:	B60C1142F58366C7B349277B7DB4AF59
SHA1:	F11C29A11EE28F45CC36F1558C73F3121BD0F24E
SHA-256:	748DF18A115CEC20C289C87D02F0D6654528D133AD91EEC3B2F13AC1595C431F
SHA-512:	120A2E79E7A77CF601B697BC29D1AE3A5735A65064BC13EAC6C87CCF520FA13D0E8314664B7918B882A115D2FC0B44ECE3C69C12C0DE7B2568262AAF51C04F4B
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\9c839502-86f8-432a-abb7-744bc065e4bf.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\Network Persistent State~RF6f78ae.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\SCT Auditing Pending Reports~RF6e5164.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\b77bb2fe-88fd-4e9c-b876-1d47b41e1ccc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Network\f6865424-f669-4be1-ad05-654c5208a9ba.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKtiVY:YHkVKJTnMRK3VY
MD5:	2800881C775077E1C4B6E06BF4676DE4
SHA1:	2873631068C8B3B9495638C865915BE822442C8B
SHA-256:	226EEC4486509917AA336AFEBD6FF65777B75B65F1FB06891D2A857A9421A974
SHA-512:	E342407AB65CC68F1B3FD706CD0A37680A0864FFD30A6539730180EDE2CDCD732CC97AE0B9EF7DB12DA5C0F83E429DF0840DBF7596ACA859A0301665E517377B
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5804
Entropy (8bit):	4.813153572267364
Encrypted:	false
SSDEEP:	96:st1/3Ys13Wb9xG8zFd81h6Cb7/x+6MhmuecJ9RHS1eAe3UJy2MR7K:stpos0Gk/8vbV+FF9RyQAlJyPhK
MD5:	5EEC2A39C9614916C3D51EDFB3AF4901
SHA1:	04B0D7F6CB353E00D528E027EC506C0C9ABD1CE3
SHA-256:	A75FDD2D703FF3D3F8806CBEF303FEAF6A28A5209FF937F8E9EBE0ED4C90C092
SHA-512:	CA08967DA9BE0F7E89955AE24E824B0BDC824AA0F5ABDD406F75DCE4D5BD08F10C21C457118E8A3B4D382FD2FA9907E0B3DF242A728C7B04CA06445E19DE55CA
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823885634","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823782383","domain_diversity":{"last_reporting_timestamp":"13358348823885727"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Preferences~RF6eec6c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5804
Entropy (8bit):	4.813153572267364
Encrypted:	false
SSDEEP:	96:st1/3Ys13Wb9xG8zFd81h6Cb7/x+6MhmuecJ9RHS1eAe3UJy2MR7K:stpos0Gk/8vbV+FF9RyQAlJyPhK
MD5:	5EEC2A39C9614916C3D51EDFB3AF4901
SHA1:	04B0D7F6CB353E00D528E027EC506C0C9ABD1CE3
SHA-256:	A75FDD2D703FF3D3F8806CBEF303FEAF6A28A5209FF937F8E9EBE0ED4C90C092
SHA-512:	CA08967DA9BE0F7E89955AE24E824B0BDC824AA0F5ABDD406F75DCE4D5BD08F10C21C457118E8A3B4D382FD2FA9907E0B3DF242A728C7B04CA06445E19DE55CA
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823885634","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823782383","domain_diversity":{"last_reporting_timestamp":"13358348823885727"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Preferences~RF6f4f2d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5804
Entropy (8bit):	4.813153572267364
Encrypted:	false
SSDEEP:	96:st1/3Ys13Wb9xG8zFd81h6Cb7/x+6MhmuecJ9RHS1eAe3UJy2MR7K:stpos0Gk/8vbV+FF9RyQAlJyPhK
MD5:	5EEC2A39C9614916C3D51EDFB3AF4901
SHA1:	04B0D7F6CB353E00D528E027EC506C0C9ABD1CE3
SHA-256:	A75FDD2D703FF3D3F8806CBEF303FEAF6A28A5209FF937F8E9EBE0ED4C90C092
SHA-512:	CA08967DA9BE0F7E89955AE24E824B0BDC824AA0F5ABDD406F75DCE4D5BD08F10C21C457118E8A3B4D382FD2FA9907E0B3DF242A728C7B04CA06445E19DE55CA
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823885634","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823782383","domain_diversity":{"last_reporting_timestamp":"13358348823885727"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\PreferredApps

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.051821770808046
Encrypted:	false
SSDEEP:	3:YVXADAEvTLSJ:Y9AcEvHSJ
MD5:	2B432FEF211C69C745ACA86DE4F8E4AB
SHA1:	4B92DA8D4C0188CF2409500ADCD2200444A82FCC
SHA-256:	42B55D126D1E640B1ED7A6BDCB9A46C81DF461FA7E131F4F8C7108C2C61C14DE
SHA-512:	948502DE4DC89A7E9D2E1660451FCD0F44FD3816072924A44F145D821D0363233CC92A377DBA3A0A9F849E3C17B1893070025C369C8120083A622D025FE1EACF
Malicious:	false
Preview:	{"preferred_apps":[],"version":1}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\README

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	182
Entropy (8bit):	4.2629097520179995
Encrypted:	false
SSDEEP:	3:RGXKRjg0QwVIWRKXECSAV6jDyhjgHGAW+LB2Z4MKLFE1SwhiFAfXQmWyKBPMwRgK:z3frsUpAQQgHGwB26MK8Sw06fXQmWtRT
MD5:	643E00B0186AA80523F8A6BED550A925
SHA1:	EC4056125D6F1A8890FFE01BFFC973C2F6ABD115
SHA-256:	A0C9ABAE18599F0A65FC654AD36251F6330794BEA66B718A09D8B297F3E38E87
SHA-512:	D91A934EAF7D9D669B8AD4452234DE6B23D15237CB4D251F2C78C8339CEE7B4F9BA6B8597E35FE8C81B3D6F64AE707C68FF492903C0EDC3E4BAF2C6B747E247D
Malicious:	false
Preview:	Microsoft Edge settings and storage represent user-selected preferences and information and MUST not be extracted, overwritten or modified except through Microsoft Edge defined APIs.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.5796417720896345
Encrypted:	false
SSDEEP:	96:vX9iY+Plf/ROoBpkF5d1nic7VaTEv9V5h5pg5vezodIU8ilyASpsA5IOrMn3YPoE:fkYir3w9l5iQASpFIOAn3go0iu/
MD5:	FA0903BAE4C3F663F1C3AD17C715A887
SHA1:	5CA6DCF0896AE46EC04B3F0D4CACE526A945AE51
SHA-256:	A72A2E629DEB5DFE7287438A23CB42BDF11F4265877D03C1BC9A53534CE8D468
SHA-512:	E198A80E6A7B47D4D4A3E5674CBF37106A0DDDC742864D2FE6B6ED43E6BEAE37FAC39545091773AF4D98C3240E7F33E81E58ECDC31C77807167F5A463D9470CC
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13358348823383930","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13358348823383930","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Session Storage\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Session Storage\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Session Storage\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Site Characteristics Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Site Characteristics Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Site Characteristics Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Sync Data\LevelDB\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Sync Data\LevelDB\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\a6aa2915-9348-4cc1-96fb-cf4c367d615b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5866
Entropy (8bit):	4.818081770920891
Encrypted:	false
SSDEEP:	96:st1/3Ys13Wb9xG8zFd81h6Cb7/x+6MhmuecJ9RHS1eAe3Uy2MR7K:stpos0Gk/8vbV+FF9RyQAlyPhK
MD5:	60B6FE9B74598068EE13783C9632E26C
SHA1:	1A01003AB82032F718B67F657EFD46C002B6A64C
SHA-256:	895411E69EB8DE0AF3B8BEBCA41429C6FB6F9A4BB4E3126F8F3D0535B70A9B93
SHA-512:	994DBD38972CE89DE6E7CF0E21E2E2A5216CAB3DD10018B3CAB29488C9D7694F5A10C5094F0F67493A8F227081588A95EF073061A1196D191ABED1EA0D7C9318
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823885634","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823782383","domain_diversity":{"last_reporting_timestamp":"13358348823885727"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\bb9d5b0d-4ead-4991-b1aa-fd79a6765ef9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6140
Entropy (8bit):	4.817840771545116
Encrypted:	false
SSDEEP:	96:st1/3Ys13Wb9xG8zZ85eh6Cb7/x+6MhmuecJ9RHS1eAe3Ux2MR7K:stpos0GkZ88bV+FF9RyQAlxPhK
MD5:	F616FBA0FF9B315F8E79F822FA79806F
SHA1:	4B6B1D7A21EABFA15D995266646ACDD117EC0F17
SHA-256:	BDCC48DC73CA563AB00F5E137F3E5DD393492C3BF990962CC15DDAD8823A6E25
SHA-512:	3A4BBE1A4FA38753F79AF84F66F28D4F9CC39068558BAFD10543AFE8DDFC77ED619C518493C8CBA026BC3B4B73CAF1E0F2C1D7811A78EA30C7F74C9B0DE86939
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13358348823885634","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":800,"browser_content_container_width":1272,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13358348823782383","domain_diversity":{"last_reporting_timestamp":"13358348823885727"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data"

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\shared_proto_db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\shared_proto_db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\shared_proto_db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\shared_proto_db\metadata\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\shared_proto_db\metadata\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GrShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GrShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GrShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GrShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GrShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlfy+t:Ls36q
MD5:	F00210D4F525C53CFC526A595BD27732
SHA1:	6272E65B5D3CD6CFB05C67C218B2E77326613885
SHA-256:	14D125AEC43CF8858E623B9DC3632CFD8F1E08EB771718A9572B9B1991C68175
SHA-512:	7A179A3E0A9D7E929FD6DD7AABB15CDDF649E53DA772E5D42526E6DED2D909104084A5417F29C9D5684A0258F25ACEA9F7C9E71275D5D83142F5C896CFB30E62
Malicious:	false
Preview:	.........................................ps.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GraphiteDawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GraphiteDawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GraphiteDawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GraphiteDawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\GraphiteDawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlgzll/:Ls3gzll/
MD5:	0C8A12D80273CAF1E7E9165E5AADC581
SHA1:	300D5F62F4B327F02EEAA15360345004F9C811E6
SHA-256:	968BBA33B9E670E53DDEE71FA7C7DF2472E89B05AA2E99A3C7C975720435A8EA
SHA-512:	DD32C53CD556198D993B7A213162A7EEE9C204CDAC004DAE44E9848ED3C7DCB04AF4097C1D6A13E5EF55BAE20CE7B0500D03D0AD7A6C028590BEEC1575AA2F1D
Malicious:	false
Preview:	..........................................t.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.718486540310113
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEvkuQ+eYGy7QhZNcBzaeC1mdWOLRRbvXvmQQRCYfYg:Yqfav17Gy7OoBzZCm7LR9v/nB0
MD5:	2C62660348A18412FBC32EB613958167
SHA1:	0315942675C3E071BCCC49ED417A92CFAE1D7AE1
SHA-256:	34EA3A11D02E2799DD80438942D36348B364039228945AC26A5046D279A614B5
SHA-512:	667274A37AD114C1AFCFED46149BA9751BD9BE0E16630B4FBD03D41E6757E6C18B19413684D1F61147AFF92F4C8DF4145365068DDDA913E20F6071CE3AABA34E
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1069,"pseudo_low_entropy_source":1602,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101983","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Local State~RF6e4e86.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.718486540310113
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEvkuQ+eYGy7QhZNcBzaeC1mdWOLRRbvXvmQQRCYfYg:Yqfav17Gy7OoBzZCm7LR9v/nB0
MD5:	2C62660348A18412FBC32EB613958167
SHA1:	0315942675C3E071BCCC49ED417A92CFAE1D7AE1
SHA-256:	34EA3A11D02E2799DD80438942D36348B364039228945AC26A5046D279A614B5
SHA-512:	667274A37AD114C1AFCFED46149BA9751BD9BE0E16630B4FBD03D41E6757E6C18B19413684D1F61147AFF92F4C8DF4145365068DDDA913E20F6071CE3AABA34E
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1069,"pseudo_low_entropy_source":1602,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101983","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Local State~RF6e4ec5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.718486540310113
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEvkuQ+eYGy7QhZNcBzaeC1mdWOLRRbvXvmQQRCYfYg:Yqfav17Gy7OoBzZCm7LR9v/nB0
MD5:	2C62660348A18412FBC32EB613958167
SHA1:	0315942675C3E071BCCC49ED417A92CFAE1D7AE1
SHA-256:	34EA3A11D02E2799DD80438942D36348B364039228945AC26A5046D279A614B5
SHA-512:	667274A37AD114C1AFCFED46149BA9751BD9BE0E16630B4FBD03D41E6757E6C18B19413684D1F61147AFF92F4C8DF4145365068DDDA913E20F6071CE3AABA34E
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1069,"pseudo_low_entropy_source":1602,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101983","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Local State~RF6e75d5.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.718486540310113
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEvkuQ+eYGy7QhZNcBzaeC1mdWOLRRbvXvmQQRCYfYg:Yqfav17Gy7OoBzZCm7LR9v/nB0
MD5:	2C62660348A18412FBC32EB613958167
SHA1:	0315942675C3E071BCCC49ED417A92CFAE1D7AE1
SHA-256:	34EA3A11D02E2799DD80438942D36348B364039228945AC26A5046D279A614B5
SHA-512:	667274A37AD114C1AFCFED46149BA9751BD9BE0E16630B4FBD03D41E6757E6C18B19413684D1F61147AFF92F4C8DF4145365068DDDA913E20F6071CE3AABA34E
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1069,"pseudo_low_entropy_source":1602,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101983","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Local State~RF6f5fd7.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	949
Entropy (8bit):	5.718486540310113
Encrypted:	false
SSDEEP:	24:YKWJu5rrtEvkuQ+eYGy7QhZNcBzaeC1mdWOLRRbvXvmQQRCYfYg:Yqfav17Gy7OoBzZCm7LR9v/nB0
MD5:	2C62660348A18412FBC32EB613958167
SHA1:	0315942675C3E071BCCC49ED417A92CFAE1D7AE1
SHA-256:	34EA3A11D02E2799DD80438942D36348B364039228945AC26A5046D279A614B5
SHA-512:	667274A37AD114C1AFCFED46149BA9751BD9BE0E16630B4FBD03D41E6757E6C18B19413684D1F61147AFF92F4C8DF4145365068DDDA913E20F6071CE3AABA34E
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"uninstall_metrics":{"installation_date2":"1713875223"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":1069,"pseudo_low_entropy_source":1602,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13358348823101983","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\ShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\ShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\ShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\ShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\ShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNl4:Ls34
MD5:	8CBBED884F8AA4BE1FF04E55C1ED6C6D
SHA1:	10804947EFB7743BD4B56CEDBB16FE1D0F449275
SHA-256:	FB59F8DC63B30CB57ABF882E9BADAB432456FE5CB8059A0EFB544B61B9E925B5
SHA-512:	B240E4C41F1F39DCB63A7CC79508D8377200BB330863DE7C0A7173263176E444C1742389C48A62A0AA2C72AC20AE49F6F6AF1ABF02830C84255947C95FB8A1DC
Malicious:	false
Preview:	........................................ZNe.Xu/.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\customSynchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	3.922828737239167
Encrypted:	false
SSDEEP:	3:2NGw+K+:fwZ+
MD5:	7BAAFE811F480ACFCCCEE0D744355C79
SHA1:	24B89AE82313084BB8BBEB9AD98A550F41DF7B27
SHA-256:	D5743766AF0312C7B7728219FC24A03A4FB1C2A54A506F337953FBC2C1B847C7
SHA-512:	70FE1C197AF507CC0D65E99807D245C896A40A4271BA1121F9B621980877B43019E584C48780951FC1AD2A5D7D146FC6EA4678139A5B38F9B6F7A5F1E2E86BA3
Malicious:	false
Preview:	customSynchronousLookupUris_0

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\customSynchronousLookupUris_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	35302
Entropy (8bit):	7.99333285466604
Encrypted:	true
SSDEEP:	768:rRhaFePY38QBsj61g3g01LXoDGPpgb8KbMcnjrQCckBuJyqk3x8cBBT:rLP+TBK6ZQLXSsaMcnHQQcox80
MD5:	0E06E28C3536360DE3486B1A9E5195E8
SHA1:	EB768267F34EC16A6CCD1966DCA4C3C2870268AB
SHA-256:	F2658B1C913A96E75B45E6ADB464C8D796B34AC43BAF1635AA32E16D1752971C
SHA-512:	45F1E909599E2F63372867BC359CF72FD846619DFEB5359E52D5700E0B1BCFFE5FF07606511A3BFFDDD933A0507195439457E4E29A49EB6451F26186B7240041
Malicious:	false
Preview:	.......murmur3.....IN...9.......0..X..#l....C....]......pv..E..........,..?.N?....V..B-..F.1....g\|..._.>'.-(V... .=.7P.m....#}.r.....>.LE...G.A.h5........J..=..L^-.Zl++,..h..o.y..~j.]u...W...&s.........M..........h3b..[.5.]..V^w.........a....6g3..%.gy../{\|Z.B..X.}5.]..t.1.H&B.[.).$Y......2....L.t...{...[WE.yy.]..e.v0..\.J3..T.`1Lnh.../..-=w...W.&N7.nz.P...z......'i..R6....../....t.[..&-.....T&l..e....$.8.."....Iq....J.v..\|.6.M...zE...a9uw..'.$6.L..m$......NB).JL.G.7}8(`....J.)b.E.m...c.0I.V...\|$....;.k.......8v..l.:..@.F.........K..2...%(...kA......LJd~._A.N.....$3...5....Z"...X=.....%.........6.k.....F..1..l,ia..i.i....y.M..Cl........}.I..r..-+=b.6....%...#...W..K.....=.F....~.....[.......-...../;....~.09..d.....GR..H.lR...m.Huh9.:..A H./)..D.F..Y.n7.....7D.O.a;>Z.K....w...sq..qo3N...8@.zpD.Ku......+.Z=.zNFgP._@.z.ic.......3.....+..j...an%...X..7.q..A.l.7.S2..+....1.s.b..z...@v..!.y...N.C.XQ.p.\..x8(.<.....cq.(

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\edgeSettings_2.0-0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3581
Entropy (8bit):	4.459693941095613
Encrypted:	false
SSDEEP:	96:JTMhnytNaSA4BOsNQNhnUZTFGKDIWHCgL5tfHaaJzRHF+P1sYmnfHUdT+GWBH7Y/:KyMot7vjFU
MD5:	BDE38FAE28EC415384B8CFE052306D6C
SHA1:	3019740AF622B58D573C00BF5C98DD77F3FBB5CD
SHA-256:	1F4542614473AE103A5EE3DEEEC61D033A40271CFF891AAA6797534E4DBB4D20
SHA-512:	9C369D69298EBF087412EDA782EE72AFE5448FD0D69EA5141C2744EA5F6C36CDF70A51845CDC174838BAC0ADABDFA70DF6AEDBF6E7867578AE7C4B7805A8B55E
Malicious:	false
Preview:	{"models":[],"geoidMaps":{"gw_my":"https://malaysia.smartscreen.microsoft.com/","gw_tw":"https://taiwan.smartscreen.microsoft.com/","gw_at":"https://austria.smartscreen.microsoft.com/","gw_es":"https://spain.smartscreen.microsoft.com/","gw_pl":"https://poland.smartscreen.microsoft.com/","gw_se":"https://sweden.smartscreen.microsoft.com/","gw_kr":"https://southkorea.smartscreen.microsoft.com/","gw_br":"https://brazil.smartscreen.microsoft.com/","au":"https://australia.smartscreen.microsoft.com/","dk":"https://denmark.smartscreen.microsoft.com/","gw_sg":"https://singapore.smartscreen.microsoft.com/","gw_fr":"https://france.smartscreen.microsoft.com/","gw_ca":"https://canada.smartscreen.microsoft.com/","test":"https://eu-9.smartscreen.microsoft.com/","gw_il":"https://israel.smartscreen.microsoft.com/","gw_au":"https://australia.smartscreen.microsoft.com/","gw_ffl4mod":"https://unitedstates4.ss.wd.microsoft.us/","gw_ffl4":"https://unitedstates1.ss.wd.microsoft.us/","gw_eu":"https://europe.

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\synchronousLookupUris_636976985063396749.rel.v2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	35302
Entropy (8bit):	7.99333285466604
Encrypted:	true
SSDEEP:	768:rRhaFePY38QBsj61g3g01LXoDGPpgb8KbMcnjrQCckBuJyqk3x8cBBT:rLP+TBK6ZQLXSsaMcnHQQcox80
MD5:	0E06E28C3536360DE3486B1A9E5195E8
SHA1:	EB768267F34EC16A6CCD1966DCA4C3C2870268AB
SHA-256:	F2658B1C913A96E75B45E6ADB464C8D796B34AC43BAF1635AA32E16D1752971C
SHA-512:	45F1E909599E2F63372867BC359CF72FD846619DFEB5359E52D5700E0B1BCFFE5FF07606511A3BFFDDD933A0507195439457E4E29A49EB6451F26186B7240041
Malicious:	false
Preview:	.......murmur3.....IN...9.......0..X..#l....C....]......pv..E..........,..?.N?....V..B-..F.1....g\|..._.>'.-(V... .=.7P.m....#}.r.....>.LE...G.A.h5........J..=..L^-.Zl++,..h..o.y..~j.]u...W...&s.........M..........h3b..[.5.]..V^w.........a....6g3..%.gy../{\|Z.B..X.}5.]..t.1.H&B.[.).$Y......2....L.t...{...[WE.yy.]..e.v0..\.J3..T.`1Lnh.../..-=w...W.&N7.nz.P...z......'i..R6....../....t.[..&-.....T&l..e....$.8.."....Iq....J.v..\|.6.M...zE...a9uw..'.$6.L..m$......NB).JL.G.7}8(`....J.)b.E.m...c.0I.V...\|$....;.k.......8v..l.:..@.F.........K..2...%(...kA......LJd~._A.N.....$3...5....Z"...X=.....%.........6.k.....F..1..l,ia..i.i....y.M..Cl........}.I..r..-+=b.6....%...#...W..K.....=.F....~.....[.......-...../;....~.09..d.....GR..H.lR...m.Huh9.:..A H./)..D.F..Y.n7.....7D.O.a;>Z.K....w...sq..qo3N...8@.zpD.Ku......+.Z=.zNFgP._@.z.ic.......3.....+..j...an%...X..7.q..A.l.7.S2..+....1.s.b..z...@v..!.y...N.C.XQ.p.\..x8(.<.....cq.(

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	180
Entropy (8bit):	4.961774100206837
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTfkWfUdW1ozROWtm5EQnqdbRWE/QNAo2AvHfjg9PIAcnWsWU1UEXVV:YWLSGTffo9w5/nmbRL/ov/EMnWsWKVV
MD5:	2D70BB0859820CC77791A0CA2EC9A16E
SHA1:	239531F89FE31367C8CB8727C943CCEBBEBE0A9B
SHA-256:	E385719259182C2928AEFAD34CDD8E275460B73D395F8CE840929951CBADA539
SHA-512:	0D516FADCB430863EA4B71C514BA3E784B184A17B9EFA9A56EFC5C19A423EC915F82A21BCADCB58E3ABDA8D0329FDA272E4203E902AC8E56F4792AF030E281F8
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"758732d9f2a1834f","server_context":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;phsh:005;7e-05","result":0,"expiration_time":1713983146118207}]}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQan:YQ3Kq9X0dMgAEwjM
MD5:	961E3604F228B0D10541EBF921500C86
SHA1:	6E00570D9F78D9CFEBE67D4DA5EFE546543949A7
SHA-256:	F7B24F2EB3D5EB0550527490395D2F61C3D2FE74BB9CB345197DAD81B58B5FED
SHA-512:	535F930AFD2EF50282715C7E48859CC2D7B354FF4E6C156B94D5A2815F589B33189FFEDFCAF4456525283E993087F9F560D84CFCF497D189AB8101510A09C472
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":0}

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\d2240f88-2b8e-4217-91ac-426b3fc2b989.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2899
Entropy (8bit):	5.3047722860550355
Encrypted:	false
SSDEEP:	48:YDEFMsFiHGS0afav17Gy7OE3p8QSh/cIgwLURMYXylVotoWB5K1DuHB+EdrxhBzE:PNkGS1favUwt58rh/cI9URoDoto8TB9C
MD5:	A696746EDCC2960FDAA0AE6625388F42
SHA1:	E43EF8D519DC3F8AFDBCA2C11ECA100DB7CB07E3
SHA-256:	DE6FF892F46DBD47DCF2CE3A4971CAC125E0B28C7EEA208E00730E5558862180
SHA-512:	BA59A6AB7AB8546F9BE9171F08458D3A2B22F99E07824509465493A30205D72B03B5D065C216C2F39F95EC13269FF3BD80407DBEF611FA46D4B3C5E09C9B3288
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fre":{"oem_bookmarks_set":true},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"policy":{"last_statistics_update":"13358348823275293"},"profile":{"info_cache":{"Default":{"avatar_icon":"chrome://t

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\dffb055b-3ff5-4249-8503-2dc23b22c5b9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2052
Entropy (8bit):	5.471684402842735
Encrypted:	false
SSDEEP:	48:YDEFMsFiHC0afav17Gy7OEh5nnHB+EdrxhBzZCm7XRR9T/nBG/d2a:PNkC1favUwtHHB9zRZCmV/T/nI4a
MD5:	B3D00A56EFEB5602E1A6EF33674B667F
SHA1:	8BA0692A8FBFA76656E606A56101E08B14700BEB
SHA-256:	EE768A801742ECD2D9880476617D94A2180C607070D2D8A4C01DA421ADB5F1AC
SHA-512:	8DDAAB8B52C020F9AC3E7B726480F02EDC8E7F8AB8356C90F2271CDF1691B60376D138D8B45EABAB9E553D9E4829968AD9A5EA8F222855E128B34A0A7CD23B70
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAADJ6nshPHp9TrQm6N6Y2njaEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAAC6XZmrg01UmjgIzIlbeSWFajbfG7t/eYGUIVOao6dYAQAAAAAOgAAAAAIAACAAAAA2kMiiXCmSrk5aGP8vUrZiz/wVif1YhqEpYUCV5mOQ1zAAAABn2KrSKLxk83ivY9QxbY9k2F7Nm//OLfJJAVVWxL6+mzEgA53QLWOU534vl3ulEk1AAAAAdUbjc4L59QuXQKZFkrt3/BUKCrtriMz2vULxSrsaAIzv7RDC0XXAepcLveH+5BwdAV6bANTG0w2yxwZX2RgMww=="},"policy":{"last_statistics_update":"13358348823275293"},"profile":{"info_cache":{},"profile_counts_reported":"13358348823298663","profiles_order":[]},

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\index.css

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	939820
Entropy (8bit):	6.068200229364156
Encrypted:	false
SSDEEP:	12288:p2x5xiaHbr3Gq5XRi5i6jE/5acgsu0wxT63kaSROcdOLeK+CnjG1VWzWhHuaqOGh:p2BP3/5XSo/5F5K65SROcwLeKVYgzWIx
MD5:	12DB9598ECDD44D5F2FCF9C2EED93619
SHA1:	8AFE7F33F182C191657A52FAB99805524F3C53B4
SHA-256:	22DB89651EA56CD8FD6D2920C0BF7B02459989B60272522D4464CB43EDD2F34F
SHA-512:	AE14E691C55A85E0897F8D16005F55D3EAA2E29649F6CECEF54D1B78F577CFF68A558A60141CB2F8E951C6CCA90072232EA12E6F1776AB4C67C70F0F4A778AB4
Malicious:	false
Preview:	/! normalize.css v7.0.0 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:rgba(0,0,0,0);-webkit-text-decoration-skip:objects}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit;font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}audio,video{display:inline-block}audio:not([controls]){display:none;height:0}img{border-style:none}svg:not(:root){overflow:hidden}button,inp

C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\index.html

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	426
Entropy (8bit):	5.032152269928686
Encrypted:	false
SSDEEP:	12:lPgkOQfGVNYNfLAgBLMHXZKGZhw8k4GqJmWUwXAVXGu:lPiQeVCxo3ZKMfkcpAVXB
MD5:	A28AB17B18FF254173DFEEF03245EFD0
SHA1:	C6CE20924565644601D4E0DD0FBA9DDE8DEA5C77
SHA-256:	886C0AB69E6E9D9D5B5909451640EA587ACCFCDF11B8369CAD8542D1626AC375
SHA-512:	9371A699921B028BD93C35F9F2896D9997B906C8ABA90DD4279ABBA0AE1909A8808A43BF829584E552CCFE534B2C991A5A7E3E3DE7618343F50B1C47CFF269D6
Malicious:	false
Preview:	....<!DOCTYPE html>..<html>..<head>.. .. <meta charset='utf-8'>.. <meta http-equiv='X-UA-Compatible' content='chrome=1'>.. <meta name='viewport' content='width=1024, initial-scale=0.3, maximum-scale=1'>.... <title>CCD Installer</title>.... ....<link href="index.css" rel="stylesheet"></head>..<body>..<div id='root'>..</div>..<script type="text/javascript" src="CCDInstaller.js"></script></body>....</html>..

C:\Users\user\AppData\Roaming\com.adobe.dunamis\f65a88c9-12b3-4201-a633-87cf11b91fa8\v1\0\anon_events\bfef1bb4-848c-4a71-a4b9-7714cba64b84

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	data
Category:	dropped
Size (bytes):	10485904
Entropy (8bit):	0.06876298515412156
Encrypted:	false
SSDEEP:	768:zkVNGTi6IppVIs+XG8HPWNSnFTDBET1zTAz/YlaIBQ5184cfMooojcMoupemGhDn:oj6mpVPT8+cn59/515Zuchm6b5
MD5:	6070467F5D93A84B0C989D800B81152D
SHA1:	DF75518FA5BF993AF846E4C7312007F16D50B4D7
SHA-256:	E6616484C328003765835DCBB1C69AFDB48DA1C2B36839709A2E1C75C136D171
SHA-512:	925AC6058358EACF4C98F8E255C3475316B8FA43D27BA689827F753FD6C36A265E3EA917BF9247B25785921259D6B665E18C43DE200E89B586658273AF263EAB
Malicious:	false
Preview:	]....+y$........................................\...................................................................................................[g...)[].h1..\|@.........%S.}..Eqc......6....S..Vyi..1'=.n[.@Pi...Y.Xj...... ...I.j.1Z..$.$.q..p~}.Y.....`....1>....5.....h....ck.:..].Z[R...~..\|...fq...............2.N..hH.,"S.....]Ri.....:...z._.e...h.D..B<.h$F.4.....u...".wt.@.".+...?....n.....:.(o..._ER......V....b..{.iR]..@..xy.x]..L.w.3.^~..BU.[..:8....Ac......d.3.P...sWy.1.)..y`>..;..k..k.m....\.'.....2...;........L.3.K....L.r..RgHo......a.....F.\|.q...J....>....C......w`..R..4.j3......H.:.D..\3..?.....z.S.KX.[-..<..`..S'...........>.E..-.,..U4\|.m.#........p.W..Nf.53>..RC..\|.....p..v........n.n/.G......V...%.<.Q(.6...6.....>.zY.).U..Lk..j..T.....I.....7.&.n%....K....S.z7#'.QlaL..GTkx...=.}K..y!.J...._...<...a c...A.x...:....'....`....(L.......<....x.6..6...r%{.....9.!..p..a...........v.<D.....s.JAl..`..%....A).H.7....X"f.$qs_..X.(.......6.

C:\Users\user\AppData\Roaming\com.adobe.dunamis\f65a88c9-12b3-4201-a633-87cf11b91fa8\v1\0\anon_events\manifest

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	data
Category:	dropped
Size (bytes):	224
Entropy (8bit):	1.7308978669205468
Encrypted:	false
SSDEEP:	3:+kizplOlslVllHltltlosRIdsTIHLlt:+XLKEI9aT
MD5:	343BAE3FF81D064B50860A8177A444C8
SHA1:	0390CFB389CAF2F1A8173172E15E25629B73EE19
SHA-256:	93D56EFAE9325FEB4888FADD0001F37CA34B183B0588CCCF22FDF52106EE0D96
SHA-512:	16038F938ED681478AD5A9BAA41502494426B9FAE1379D240C91EF592556A7F23CF211871FA5C166526F2D68CF7221B36FF5EA2093AEED029DEB0F654719B214
Malicious:	false
Preview:	]....+y$........................................(.......P.......P.......P.......................................................................$...bfef1bb4-848c-4a71-a4b9-7714cba64b84........................................

C:\Users\user\AppData\Roaming\com.adobe.dunamis\f65a88c9-12b3-4201-a633-87cf11b91fa8\v1\0\meta_events\431363b7-b821-462a-bbff-c05044a06917

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	data
Category:	dropped
Size (bytes):	10485904
Entropy (8bit):	0.002619255548807718
Encrypted:	false
SSDEEP:	24:Y5XyE1QDKrpuqZGLFDdyHTZ5sknjH3BBgOQs6uIBoIEu6y2OEUHn:AdRVnZ2BdyHTPBxxFIBoHzy2
MD5:	96FB6B9EAF155DD7C62B2BB3CEBCC71F
SHA1:	2B887E830EF753B8CED092F56F78B29A99138885
SHA-256:	1EA7255EB24BC4547A8D6355A8561D0B8B9308521A6D323E49B8CB8B9704B939
SHA-512:	B83941F37D27950C325EE8582152CD10595EDF93D651B755F0EA9566FB42B53EB541739AD2FD6938A120D50AD37FE9DA0A57FB1C20C4B16629F5222538236FA6
Malicious:	false
Preview:	]....+y$............................................................................................................................................[g...)[].h1..\|@.........%S.}..Eqc......6....S..Vyi..1'=.n[.@Pi...Y.Xj...... ...I.j.1Z..$.$.q......te..v..S'L...6M.\|.v....@D..E!..t.V.sq..........%.K.fs.[.^..t3c......g].d..7.}.X.........+..\...,..;@..Xn.'C.u..s^r.`...O..h.Qg&..4..m....2...K...}S.....rYT>j...T..'.<.=]Q.xJ....e6I...q.h.G..]..-..lt\|...r6.)!F..B8.o.n..l.y..cc......z..... ......+.....a....H.]..3..,vf._.8...L.8>@.OT..t$....!......?..j.g...G..-..$bT."...9.%..H....A.&k....M..;..2...Uns...hY.2.(......L.wXa+..c>..CY{.......cjc;u.p......c..s.}f.o.\|...k1S...i..O....\|....h[..v...........:...lq....R...Q.1..:.....^.J".....,..9...9.\|....d...N...V...m>.y..g.T.S4.s(<..7........]..jjW]}...Ej.P.h.......{.r./.%.q+O..XT......W`(=.y..CN.C....M....h..r.~o%.K8...[4r..ZgD..[...."..4..C_..X..&..V.="z..4........lA.../(...F..:+'...M2.n......X.@.4....iw.

C:\Users\user\AppData\Roaming\com.adobe.dunamis\f65a88c9-12b3-4201-a633-87cf11b91fa8\v1\0\meta_events\manifest

Download File

Process:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
File Type:	data
Category:	dropped
Size (bytes):	224
Entropy (8bit):	1.798582060932735
Encrypted:	false
SSDEEP:	3:+kizplOlslVllHltltlyArhHjUvRCYlll/:+XLKEXrhHjGF/
MD5:	8B767CF972DFA1D0EDDCAFA5E6A242DE
SHA1:	E8BF9747E7A96D26E1A78B6C3B8B353DDE73BCEA
SHA-256:	A96227D58BB76781D88CD56F099D1BDFA136CCC2C916FCE6EB85E7CBF6109F58
SHA-512:	FC828555B0C208D2199DA5D4C4D5E477133517737B452D545F8852241A6B7B29A2AB23869BAF3693BD8E91C2ADFAD29AA816A6663EEB0F631E459254076F1305
Malicious:	false
Preview:	]....+y$........................................(.......P.......P.......P.......................................................................$...431363b7-b821-462a-bbff-c05044a06917........................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Entropy (8bit):	7.901682896202491
TrID:	Win32 Executable (generic) a (10002005/4) 99.39% UPX compressed Win32 Executable (30571/9) 0.30% Win32 EXE Yoda's Crypter (26571/9) 0.26% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02%
File name:	Acrobat_Set-Up.exe
File size:	3'160'568 bytes
MD5:	c02da0a54b7990494d373b1bba38e53e
SHA1:	3b7e069798f38384fd29f51e3394f277b0aeec60
SHA256:	8eed5aa114f46123d245eb2b7531d85cd1a12dcbec03de92d751b24e7dbec675
SHA512:	c10f4ddf2083c1c91c935312f54223d32b7571b2fb138eb32c602e69654ee72721ada6b35e25c73036a457b882b034537e1a34075ed66fb494812913d4693908
SSDEEP:	49152:3ZnCRw3438x0TVDKNxOafuUYUc9no2IWkAyf1CQ+v5XxCv6PxL:3ARw3UJKHOa/Xffs0S5L
TLSH:	87E5233A0074DF00E16F2636D69362F66923DD58DE6A53CFF2887E9AB07AA40F470157
File Content Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........J................<...e.......e.......k.......k.......e.......................................................k.......k.(....

File Icon


Icon Hash:	55ce539272690d72

Static PE Info

General

Entrypoint:	0xdb92f0
Entrypoint Section:	UPX1
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x65AE1874 [Mon Jan 22 07:25:40 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	28a18f58924d2f4dd2bffbbc85a12952

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	03/11/2023 01:00:00 05/11/2025 00:59:59
Subject Chain	CN=Adobe Inc., OU=AAM 256, O=Adobe Inc., L=San Jose, S=ca, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US
Version:	3
Thumbprint MD5:	27F5C05722CD5478ADEB03BADB1B4103
Thumbprint SHA-1:	02E4107713CE4E95A736D4ACE47926EDED13555C
Thumbprint SHA-256:	1079E99A5160154F92A969871111FECC98F0CD6D4E7BE96ACAE9FBBB5511DB9D
Serial:	098A2F313AB2C29CD42B062A0E467B0C

Entrypoint Preview

Instruction
pushad
mov esi, 00AC4000h
lea edi, dword ptr [esi-006C3000h]
push edi
jmp 00007FBFC8B8125Dh
nop
mov al, byte ptr [esi]
inc esi
mov byte ptr [edi], al
inc edi
add ebx, ebx
jne 00007FBFC8B81259h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jc 00007FBFC8B8123Fh
mov eax, 00000001h
add ebx, ebx
jne 00007FBFC8B81259h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc eax, eax
add ebx, ebx
jnc 00007FBFC8B8125Dh
jne 00007FBFC8B8127Ah
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jc 00007FBFC8B81271h
dec eax
add ebx, ebx
jne 00007FBFC8B81259h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc eax, eax
jmp 00007FBFC8B81226h
add ebx, ebx
jne 00007FBFC8B81259h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc ecx, ecx
jmp 00007FBFC8B812A4h
xor ecx, ecx
sub eax, 03h
jc 00007FBFC8B81263h
shl eax, 08h
mov al, byte ptr [esi]
inc esi
xor eax, FFFFFFFFh
je 00007FBFC8B812C7h
sar eax, 1
mov ebp, eax
jmp 00007FBFC8B8125Dh
add ebx, ebx
jne 00007FBFC8B81259h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jc 00007FBFC8B8121Eh
inc ecx
add ebx, ebx
jne 00007FBFC8B81259h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jc 00007FBFC8B81210h
add ebx, ebx
jne 00007FBFC8B81259h
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
adc ecx, ecx
add ebx, ebx
jnc 00007FBFC8B81241h
jne 00007FBFC8B8125Bh
mov ebx, dword ptr [esi]
sub esi, FFFFFFFCh
adc ebx, ebx
jnc 00007FBFC8B81236h
add ecx, 02h
cmp ebp, FFFFFB00h
adc ecx, 02h
lea edx, dword ptr [edi+ebp]
cmp ebp, FFFFFFFCh
jbe 00007FBFC8B81260h
mov al, byte ptr [edx]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9c491c	0xd4	.rsrc
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x9ba000	0xa91c	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x300600	0x33f8	UPX0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9c49f0	0x1c	.rsrc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x9b94c4	0x18	UPX1
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x9b94ec	0xc0	UPX1
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x5e896c	0x2a0	UPX0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
UPX0	0x1000	0x6c3000	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
UPX1	0x6c4000	0x2f6000	0x2f5600	b42ab35b40044483c5febca80c638c19	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x9ba000	0xb000	0xac00	1e7443f4d0c361d859640c3be79287d9	False	0.16755995639534885	data	3.8153067123035282	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
CSS	0x62f774	0xe572c	empty	English	United States	0
DICTIONARY	0x714ea0	0x9210	data	English	United States	0.993581514762516
DICTIONARY	0x71e0b0	0xaa58	data	English	United States	0.9945422858191157
DICTIONARY	0x728b08	0xb022	data	English	United States	0.990441339543136
DICTIONARY	0x733b2c	0xc273	data	English	United States	0.9912211976938067
DICTIONARY	0x73fda0	0xa5d9	data	English	United States	0.9912146406952917
DICTIONARY	0x74a37c	0x9dde	data	English	United States	0.9924283664076805
DICTIONARY	0x75415c	0xab1c	data	English	United States	0.9921696648707881
DICTIONARY	0x75ec78	0xa26e	data	English	United States	0.9915107498436824
DICTIONARY	0x768ee8	0x8b1f	data	English	United States	0.993289344377369
DICTIONARY	0x771a08	0x8d8e	data	English	United States	0.995557149953088
DICTIONARY	0x77a798	0x9ff7	data	English	United States	0.9950428560963103
DICTIONARY	0x784790	0x9bb4	data	English	United States	0.9962870045158053
DICTIONARY	0x78e344	0xa699	OpenPGP Public Key	English	United States	0.9952636638608173
DICTIONARY	0x7989e0	0xa4b2	DOS executable (COM, 0x8C-variant)	English	United States	0.9949243394525876
DICTIONARY	0x7a2e94	0xe588	data	English	United States	0.9925289312457454
DICTIONARY	0x7b141c	0xa3ff	data	English	United States	0.9928780696948765
DICTIONARY	0x7bb81c	0x9c47	data	English	United States	0.9939010673132201
DICTIONARY	0x7c5464	0x9f5e	data	English	United States	0.9931614294818374
DICTIONARY	0x7cf3c4	0x9d4b	data	English	United States	0.9971192291454541
DICTIONARY	0x7d9110	0xa5db	data	English	United States	0.9970795355519442
DICTIONARY	0x7e36ec	0xb048	data	English	United States	0.9968755539797908
JS	0x7ee734	0x13fbb4	data	English	United States	0.9556398391723633
XML	0x92e2e8	0x2c8	data	English	United States	1.0154494382022472
RT_ICON	0x9ba778	0x1045	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9080432172869147
RT_ICON	0x9bb7c4	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 11811 x 11811 px/m	English	United States	0.03719886632026453
RT_ICON	0x9bf9f0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 11811 x 11811 px/m	English	United States	0.04948132780082987
RT_ICON	0x9c1f9c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 11811 x 11811 px/m	English	United States	0.0799718574108818
RT_ICON	0x9c3048	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 11811 x 11811 px/m	English	United States	0.1069672131147541
RT_ICON	0x9c39d4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 11811 x 11811 px/m	English	United States	0.15602836879432624
RT_GROUP_ICON	0x9c3e40	0x5a	data	English	United States	0.7666666666666667
RT_VERSION	0x9c3ea0	0x304	data	English	United States	0.43523316062176165
RT_HTML	0x937fc0	0x1aa	data	English	United States	1.0258215962441315
RT_MANIFEST	0x9c41a8	0x773	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (1847), with CRLF line terminators	English	United States	0.29365495542737285

Imports

DLL	Import
KERNEL32.DLL	LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
WS2_32.dll	WSACleanup

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 14:27:08.740628958 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:08.740672112 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:08.740745068 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:08.741322994 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:08.741338015 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:08.966413021 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:08.966512918 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:08.969475985 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:08.969486952 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:08.969820976 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:08.980474949 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.028129101 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.183712959 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.198549986 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.198576927 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.198637962 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.198668957 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.198705912 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.198733091 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.216025114 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.216053963 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.216115952 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.216133118 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.216156960 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.258738995 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.293729067 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.293773890 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.293816090 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.293827057 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.293872118 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.311223030 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.311285019 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.311315060 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.311322927 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.311342001 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.322796106 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.322859049 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.322870970 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.322882891 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.322917938 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.322937012 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.323090076 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.323132038 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.323158979 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.323173046 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.323180914 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.323189020 CEST	49709	443	192.168.2.16	108.139.15.110
Apr 23, 2024 14:27:09.323194027 CEST	443	49709	108.139.15.110	192.168.2.16
Apr 23, 2024 14:27:09.349581003 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.349618912 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.349698067 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.349956036 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.349961996 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.350311041 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.350379944 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.350442886 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.350826025 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.350856066 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.455627918 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.455667019 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.455883026 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.456351995 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.456367970 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.494803905 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.494838953 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.494895935 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.495887041 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.495903969 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.570926905 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.579273939 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.606286049 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.606317997 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.606461048 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.606487036 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.607465029 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.607543945 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.608057022 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.608114004 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.608894110 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.608971119 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.609112024 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.609127045 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.609209061 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.609330893 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.609395027 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.609405994 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.620769024 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.620805979 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.620954990 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.626395941 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.626420975 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.656717062 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.657622099 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.682154894 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.682265997 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.684035063 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.684050083 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.684442997 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.710113049 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.710580111 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.710589886 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.711618900 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.711713076 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.727642059 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.727798939 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.727979898 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.727998972 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.735783100 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.769078016 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.818017006 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.818092108 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.818252087 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.818759918 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.818905115 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.819017887 CEST	49715	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.819031000 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.819050074 CEST	443	49715	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.819391966 CEST	49714	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.819411993 CEST	443	49714	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.839246035 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.839663029 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.839677095 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.840570927 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.840631008 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.842080116 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.842139006 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.842457056 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.842468023 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:09.850280046 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.891701937 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:09.892133951 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.955693960 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.955715895 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.955774069 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.955791950 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.955810070 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.955868006 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.956049919 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.956064939 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.956087112 CEST	49716	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.956094027 CEST	443	49716	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.960753918 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.960808992 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.960881948 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.961236000 CEST	49717	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:09.961251974 CEST	443	49717	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:09.962172985 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.962208033 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:09.962291002 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.962591887 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:09.962599039 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.089831114 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:10.089909077 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:10.090086937 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:10.090322018 CEST	49718	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:10.090338945 CEST	443	49718	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:10.176347017 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.176428080 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.177742958 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.177750111 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.177973032 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.179722071 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.220134020 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.384488106 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.384515047 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.384567022 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.384591103 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.384629965 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.385226011 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.385237932 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.385266066 CEST	49720	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.385272026 CEST	443	49720	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.405550003 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.405600071 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.405738115 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.406033039 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.406047106 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.619791031 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.619895935 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.621226072 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.621237993 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.621474028 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.623055935 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.664155960 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.829282999 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.829308987 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.829369068 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.829374075 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.829495907 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.829688072 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.829710960 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.829725981 CEST	49722	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.829730988 CEST	443	49722	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.840158939 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.840240002 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:10.840352058 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.841022015 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:10.841054916 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.056051016 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.056147099 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:11.061891079 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:11.061938047 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.062166929 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.063771963 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:11.108130932 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.264138937 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.264166117 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.264235973 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.264252901 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:11.264287949 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:11.264528990 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:11.264554024 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.264569998 CEST	49723	443	192.168.2.16	18.244.194.168
Apr 23, 2024 14:27:11.264578104 CEST	443	49723	18.244.194.168	192.168.2.16
Apr 23, 2024 14:27:11.283061028 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.283091068 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.283179045 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.283694029 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.283747911 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.283799887 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.284207106 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.284219027 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.284634113 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.284655094 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.290483952 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.290523052 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.290591002 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.290958881 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.290978909 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.498313904 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.498564005 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.498713970 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.498737097 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.498934984 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.498949051 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.499983072 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.500058889 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.500809908 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.500914097 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.503844976 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.503941059 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.504342079 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.504757881 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.504910946 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.505076885 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.505094051 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.506125927 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.506186008 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.506725073 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.506768942 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.506833076 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.507132053 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.507196903 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.507397890 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.507421017 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.508161068 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.508188963 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.508446932 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.508801937 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.508815050 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.546297073 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.546325922 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.550553083 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.550582886 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.550647974 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.550662041 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.596723080 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.596740961 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.596820116 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.730192900 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.730552912 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.730580091 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.731548071 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.731601000 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.731658936 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.731842995 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.731878042 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.733151913 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.733225107 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.733460903 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.733478069 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.733606100 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.733670950 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.734721899 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.734813929 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.777070999 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.777103901 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:11.784739971 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:11.832753897 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:12.020570040 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:12.020714998 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:12.020853996 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:12.033175945 CEST	49728	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:12.033205986 CEST	443	49728	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:12.145318985 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.145417929 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.145523071 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.145876884 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.145910978 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.374636889 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.380215883 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.380273104 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.381248951 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.381329060 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.383475065 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.383538961 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.384058952 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.384078979 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.436772108 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.506906033 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.506978989 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.507096052 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.507323027 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.507365942 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.507421970 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.507601976 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.507630110 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.507842064 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.507854939 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.711496115 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.711621046 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.711682081 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.711714029 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.711740017 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.711867094 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.711901903 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.713901043 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.715914011 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.715931892 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.716312885 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.716373920 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.716387033 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.718803883 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.718863964 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.718875885 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.721146107 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.721216917 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.721227884 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.721390963 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.721765995 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.723767042 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.723908901 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.723921061 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.726119041 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.726212025 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.726223946 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.731066942 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.731095076 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.731129885 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.731157064 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.731216908 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.733234882 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.735672951 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.735699892 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.735742092 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.735757113 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.735806942 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.738126993 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.740498066 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.743256092 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.743269920 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.751343012 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.751378059 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.751557112 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.751585960 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.752449989 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.752528906 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.753067017 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.753134012 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.754018068 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:12.754112005 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:12.754213095 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:12.754558086 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.754626036 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.764084101 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.764182091 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.764302015 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:12.764344931 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:12.788748980 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.804723978 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.804737091 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.804764986 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.804819107 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.815535069 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.816621065 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.816714048 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.816737890 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.819092035 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.819169044 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.819183111 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.821672916 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.821744919 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.821759939 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.823991060 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.825273991 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.825287104 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.826415062 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.826469898 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.826481104 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.826503992 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.826596022 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.826675892 CEST	49731	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:12.826708078 CEST	443	49731	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:12.851768970 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.866786957 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:13.048105001 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.048465967 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.048497915 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.049240112 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.049304962 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.050271988 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.050319910 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.069252968 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.069295883 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.069397926 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.069732904 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.069751978 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.087049961 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.087310076 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.105215073 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.105243921 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.105269909 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.105284929 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.106750965 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.106786966 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.107933998 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.108231068 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.108242989 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.152724981 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.227775097 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.227845907 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.228015900 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.228315115 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.228343010 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.293211937 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.293648005 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.293678045 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.297302008 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.297404051 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.298233986 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.298233986 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.298288107 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.298428059 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.304977894 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.305000067 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.305073023 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.305083990 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.305149078 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.305794954 CEST	49735	443	192.168.2.16	20.88.206.205
Apr 23, 2024 14:27:13.305831909 CEST	443	49735	20.88.206.205	192.168.2.16
Apr 23, 2024 14:27:13.325982094 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.326334953 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.326360941 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.327347040 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.327409983 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.327997923 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.328058004 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.328161955 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.328181028 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.343724966 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.343755007 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.375745058 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.375768900 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.394726038 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.423754930 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.448087931 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.448832035 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.448868990 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.449877977 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.449942112 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.450404882 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.450469971 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.450813055 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.450826883 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.464037895 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.464077950 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.464258909 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.464289904 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.464303017 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.464342117 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.464533091 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.464611053 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.464751959 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.464889050 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.464900970 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.465167046 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.465178013 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.465425968 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.465470076 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.503715992 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.519176960 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.519224882 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.519256115 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.519283056 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.519284964 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.519309998 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.519329071 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.519345045 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.519402981 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.519411087 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.521490097 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.521658897 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.521665096 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.524084091 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.524156094 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.524161100 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.526565075 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.526623964 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.526629925 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.531513929 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.531538010 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.531611919 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.531619072 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.531667948 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.534027100 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.536510944 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.536545038 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.536611080 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.536617994 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.536787033 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.539042950 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.541560888 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.541585922 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.541615009 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.541620970 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.541661978 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.544090986 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.546595097 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.546649933 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.546657085 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.549164057 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.549216986 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.549223900 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.566673994 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.566812992 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.566921949 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.566943884 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.567095995 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.567157984 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.568627119 CEST	49738	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.568649054 CEST	443	49738	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.599721909 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.599730968 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.623670101 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.623773098 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.623786926 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.624799967 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.624852896 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.624860048 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.627316952 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.627374887 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.627381086 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.632292986 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.632317066 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.632388115 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.632395983 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.632437944 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.634846926 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.637356997 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.637465000 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.637471914 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.639842033 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.639899969 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.639905930 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.639952898 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.644900084 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.644959927 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.644964933 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.645045996 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.649921894 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.649986029 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.654937029 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.654998064 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.657675982 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.657735109 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.663711071 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.663774014 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.666191101 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.666260004 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.671328068 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.671391010 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.676265955 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.676327944 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.676928043 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.676981926 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.677011013 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.677040100 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.677062988 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.677073002 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.677098036 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.677114010 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.677138090 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.678787947 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.678864002 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.679341078 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.681634903 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.681664944 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.681725979 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.681751966 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.681801081 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.684135914 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.686644077 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.686676025 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.686714888 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.686732054 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.686783075 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.689027071 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.691519976 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.691621065 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.691632986 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.693964005 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.694025993 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.694035053 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.696435928 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.696484089 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.696492910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.698928118 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.698987007 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.698995113 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.701406956 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.701462030 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.701471090 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.703860998 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.703913927 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.703922987 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.709206104 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.709260941 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.709270954 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.717442989 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.717758894 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.717792034 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.718034029 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.718116045 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.718175888 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.718388081 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.718406916 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.718708038 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.718720913 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.718771935 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.718775034 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.719316959 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.719374895 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.722466946 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.722815990 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.722831964 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.723292112 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.723356962 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.724349976 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.724431992 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.728255033 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.728346109 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.729413033 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.729468107 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.734216928 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.734280109 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.739279032 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.739334106 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.742628098 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.742701054 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.744833946 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.744900942 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.749196053 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.749305010 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.749330044 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.749357939 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.749757051 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.750021935 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.750051022 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.750075102 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.750082016 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.750313044 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.750492096 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.750503063 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.750509977 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.750528097 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.750732899 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.750742912 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.750763893 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.751554966 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.751621962 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.756025076 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.756087065 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.758757114 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.760520935 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.760584116 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.763840914 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.763926983 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.766088963 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.766163111 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.770555019 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.770617962 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.774990082 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.775052071 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.777272940 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.777338982 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.780941963 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.781529903 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.781594038 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.782109976 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.782136917 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.782160997 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.782191038 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.782247066 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.783516884 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.783576965 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.784564972 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.787019968 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.787041903 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.787075996 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.787086964 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.787327051 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.787426949 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.787492037 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.789494038 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.790277004 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.790368080 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.791980982 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.792042971 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.792051077 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.792121887 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.792171001 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.792201996 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.794059992 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.794117928 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.794456005 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.794507027 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.794514894 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.795943022 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.796010971 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.799393892 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.799452066 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.799459934 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.799499989 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.799698114 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.799750090 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.801831961 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.801902056 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.803512096 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.803575039 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.805387020 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.805445910 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.805736065 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.805768967 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.805778027 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.806761026 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.806818962 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.809191942 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.809252024 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.811078072 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.811130047 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.811727047 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.811779976 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.814198971 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.814250946 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.815841913 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.815901995 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.817711115 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.817765951 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.820339918 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.820406914 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.820436001 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.820449114 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.820462942 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.821449995 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.821513891 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.825412989 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.825464964 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.825473070 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.825520992 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.829051018 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.829057932 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.829098940 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.829109907 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.829140902 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.829154015 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.829188108 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.830254078 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.830311060 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.832751036 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.832817078 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.837632895 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.837702990 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.840378046 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.840401888 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.840445995 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.840472937 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.840497017 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.840512037 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.850848913 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.850914955 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.850936890 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.850965977 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.851001024 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.851017952 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.851025105 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.859416962 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.859472036 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.859493971 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.859524965 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.859548092 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.869313002 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.869355917 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.869402885 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.869436026 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.869457960 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.878153086 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.878204107 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.878228903 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.878262043 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.878279924 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.885073900 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.885174990 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.886253119 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.886293888 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.886341095 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.886375904 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.886398077 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.888685942 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.888751984 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.894200087 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.894248962 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.894273043 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.894303083 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.894328117 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.896116018 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.896173000 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.898569107 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.898621082 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.901077986 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.901138067 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.903237104 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.903276920 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.903306961 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.903337955 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.903361082 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.904658079 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.904717922 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.909334898 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.909396887 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.911012888 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.911067009 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.911082983 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.911113977 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.911139011 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.911695957 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.911750078 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.916404009 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.916472912 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.917470932 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.917511940 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.917546034 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.917578936 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.917598009 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.921045065 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.921102047 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.924242973 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.924292088 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.924316883 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.924348116 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.924371004 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.924542904 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.924597025 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.926901102 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.926961899 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.929194927 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.929990053 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.930042982 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.930063963 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.930090904 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.930111885 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.931446075 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.931510925 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.931530952 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.931611061 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.935431957 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.935468912 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.935507059 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.935524940 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.935549021 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.935787916 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.935853958 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.939907074 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.939977884 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.941348076 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.941375017 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.941442966 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.941461086 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.941473961 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.941837072 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.941900015 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.945646048 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.945724964 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.946726084 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.946754932 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.946794987 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.946810961 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.946827888 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.948400021 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.948477030 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.950916052 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.950934887 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.950983047 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.950992107 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.951008081 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.952053070 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.952119112 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.953879118 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.953937054 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.955677032 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.955701113 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.955741882 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.955749989 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.955773115 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.957535982 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.957597017 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.958158016 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.958262920 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.959008932 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.959166050 CEST	49741	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:13.959184885 CEST	443	49741	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:13.959409952 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.959469080 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.960047007 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.960064888 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.960113049 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.960124016 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.960153103 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.963085890 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.963155031 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.963407993 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.963476896 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.963485003 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.963551044 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.963735104 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.963735104 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.964246988 CEST	49736	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.964267015 CEST	443	49736	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.966753960 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.966830969 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.968585014 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.968641996 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.973227978 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.973284006 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.975050926 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.975102901 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.976924896 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.976980925 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.989824057 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.989830971 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.989881992 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.989892960 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.989918947 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.989937067 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.989937067 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.989965916 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:13.999922037 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.999943972 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:13.999985933 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.000006914 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.000025034 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.008482933 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.008505106 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.008538961 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.008557081 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.008572102 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.018182993 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.018198013 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.018273115 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.018301964 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.026494980 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.026521921 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.026570082 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.026581049 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.026604891 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.035295010 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.035314083 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.035413027 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.035424948 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.043392897 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.043421030 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.043478966 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.043487072 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.043548107 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.052670002 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.052691936 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.052772045 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.052782059 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.052830935 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.060291052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.060317993 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.060389996 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.060396910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.060446978 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.068216085 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.068247080 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.068351030 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.068351030 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.068361044 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.076189995 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.076219082 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.076255083 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.076261997 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.076289892 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.081923008 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.081944942 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.082000971 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.082011938 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.088177919 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.088200092 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.088255882 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.088265896 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.089472055 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089495897 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089504957 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089541912 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089564085 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089574099 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089586020 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.089598894 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089617968 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089626074 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.089648962 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089696884 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.089701891 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.089754105 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.089780092 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.090734005 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090755939 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090763092 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090790033 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090806007 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090816021 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090831041 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.090867043 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090898991 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.090898991 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.090923071 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.090953112 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.090970039 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.091033936 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.091042995 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.091068983 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.093027115 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.093041897 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.093096018 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.093105078 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.099132061 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.099153996 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.099198103 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.099205971 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.099255085 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.103498936 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.103513956 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.103564024 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.103571892 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.108374119 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.108393908 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.108443022 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.108454943 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.108500004 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.112457991 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.112473965 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.112515926 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.112529039 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.112584114 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.116767883 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.116786957 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.116835117 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.116843939 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.116889954 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.120724916 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.120738029 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.120820045 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.120846033 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.124588013 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.124608994 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.124658108 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.124675035 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.131619930 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.131634951 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.131709099 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.131719112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.132500887 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.132560015 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.132567883 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.132618904 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.133249044 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.133301020 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.133307934 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.138885975 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.138907909 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.138971090 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.138978004 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.139024019 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.139745951 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.140711069 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.140813112 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.140820026 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.141047955 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.144227028 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.144249916 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.144304991 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.144313097 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.144352913 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.144366980 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.147649050 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.147664070 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.147753000 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.147761106 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.147798061 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.151174068 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.151194096 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.151262999 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.151271105 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.151305914 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.154557943 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.154582024 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.154633999 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.154642105 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.154674053 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.156907082 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.156933069 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.157017946 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.157026052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.157061100 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.160203934 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.160224915 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.160310030 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.160319090 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.160547018 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.164181948 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.164201975 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.164257050 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.164263964 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.164297104 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.164319038 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.167419910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.167433977 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.167625904 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.167634010 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.167826891 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.170540094 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.170568943 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.170627117 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.170635939 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.170650959 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.171338081 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.173669100 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.173690081 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.173737049 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.173746109 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.174020052 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.177506924 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.177521944 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.177593946 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.177593946 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.177601099 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.177715063 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.179826975 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.180098057 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.180511951 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.180529118 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.180593967 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.180600882 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.180646896 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.183567047 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.183583975 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.183631897 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.183640003 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.183900118 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.186753035 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.186769962 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.186826944 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.186835051 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.186872005 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.192666054 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.192683935 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.192729950 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.192738056 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.192745924 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.192781925 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.192783117 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.192796946 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.192840099 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.196280003 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.196297884 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.196330070 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.196337938 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.196372986 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.196388960 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.198987007 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.199040890 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.199055910 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.199062109 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.199091911 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.199105978 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.199111938 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.201632977 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.201657057 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.201675892 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.201687098 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.201721907 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.204008102 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.204022884 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.204078913 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.204086065 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.207343102 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.207361937 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.207391977 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.207400084 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.207428932 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.209832907 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.209846973 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.209888935 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.209896088 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.209918022 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.210288048 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210311890 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210349083 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210354090 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210378885 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210395098 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210510015 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210530043 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210553885 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210558891 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210585117 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210601091 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210648060 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210668087 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210700989 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210704088 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.210731030 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.210748911 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211018085 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211039066 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211057901 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211061954 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211086988 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211106062 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211600065 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211611032 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211642027 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211745024 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211776972 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211776972 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211795092 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211807966 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211837053 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211869955 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211869955 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.211946964 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.211962938 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.212008953 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.212019920 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.212035894 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.212223053 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.212239981 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.212294102 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.212305069 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.212316990 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.212321043 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.212337017 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.212366104 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.212373972 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.212394953 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.214540958 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.214555979 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.214601040 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.214610100 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.214627028 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.216860056 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.216882944 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.216914892 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.216923952 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.216949940 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.219707012 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.219721079 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.219763994 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.219774008 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.222470045 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.222487926 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.222517967 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.222526073 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.222549915 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.224399090 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.224411964 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.224458933 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.224468946 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.226509094 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.226527929 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.226573944 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.226583004 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.229132891 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.229145050 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.229192972 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.229202986 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.231000900 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.231019020 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.231060982 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.231070042 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.231112003 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.233479023 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.233494997 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.233541012 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.233550072 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.235979080 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.235999107 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.236032009 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.236042023 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.236071110 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.237860918 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.237874031 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.237926960 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.237941027 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.240283012 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.240308046 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.240334988 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.240353107 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.240370989 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.242230892 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.242252111 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.242288113 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.242297888 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.242319107 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.244119883 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.244138002 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.244177103 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.244185925 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.244209051 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.246067047 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.246081114 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.246112108 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.246119976 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.246145964 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.247831106 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.247849941 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.247881889 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.247890949 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.247915030 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.249761105 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.249774933 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.249803066 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.249809980 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.249833107 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.252386093 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.252407074 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.252435923 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.252444029 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.252482891 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.253309965 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.253376961 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.253381014 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.253396034 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.253418922 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.253434896 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.255070925 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.255088091 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.255131006 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.255139112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.255232096 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.257256985 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.257276058 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.257333040 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.257339954 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.257388115 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.259113073 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.259143114 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.259183884 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.259190083 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.259216070 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.259234905 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.260680914 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.260703087 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.260746956 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.260752916 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.260776043 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.260790110 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.262481928 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.262512922 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.262536049 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.262542009 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.262566090 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.262578964 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.264357090 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.264381886 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.264410019 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.264415026 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.264446974 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.264457941 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.265002966 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.266076088 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.266094923 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.266122103 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.266128063 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.266153097 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.266168118 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.267901897 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.267923117 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.267956972 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.267963886 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.267986059 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.268068075 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.269793034 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.269813061 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.269851923 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.269856930 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.269923925 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.269939899 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.270652056 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.270673037 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.270740986 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.270746946 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.270777941 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.271049976 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.272444963 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.272463083 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.272511005 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.272519112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.272547960 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.272573948 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.274384975 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.274403095 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.274463892 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.274471045 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.274512053 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.274539948 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.276158094 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.276177883 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.276283026 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.276289940 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.276329994 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.276972055 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.276990891 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.277061939 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.277067900 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.277107000 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.277122021 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.278968096 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.278987885 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.279078007 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.279084921 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.279129028 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.279144049 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.280774117 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.280793905 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.280857086 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.280864000 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.280921936 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.280936956 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.282352924 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.282373905 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.282432079 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.282437086 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.282483101 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.282497883 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.283292055 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.283313990 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.283389091 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.283394098 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.283436060 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.283448935 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.285021067 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.285039902 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.285134077 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.285140038 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.285176039 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.286070108 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.286089897 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.286170006 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.286178112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.286237001 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.287765026 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.287784100 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.287815094 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.287820101 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.287866116 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.287879944 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.289110899 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.289129972 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.289205074 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.289211035 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.289242983 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.289258957 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.290843964 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.290863991 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.290955067 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.290961027 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.291034937 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.291810036 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.291831017 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.291883945 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.291891098 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.291924000 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.293425083 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.293476105 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.293481112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.293536901 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.294580936 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.294606924 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.294646025 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.294651031 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.294702053 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.295712948 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.295731068 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.295778036 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.295783043 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.297610044 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.297637939 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.297694921 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.297699928 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.297746897 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.298561096 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.298578978 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.298633099 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.298645020 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.298695087 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.299556017 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.299581051 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.299623966 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.299628973 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.299673080 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.301362038 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.301383018 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.301415920 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.301420927 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.301448107 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.302860022 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.302882910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.302941084 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.302947044 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.302966118 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.303930998 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.303949118 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.304027081 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.304033995 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.305763960 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.305787086 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.305860043 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.305865049 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.305907965 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.306639910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.306658030 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.306719065 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.306725025 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.308168888 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.308192968 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.308223963 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.308229923 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.308264017 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.309046030 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.309063911 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.309199095 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.309204102 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.310760975 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.310786009 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.310815096 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.310820103 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.310867071 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.311741114 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.311759949 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.311811924 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.311816931 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.311886072 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.313191891 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.313213110 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.313291073 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.313297033 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.313338995 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.314246893 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.314266920 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.314322948 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.314330101 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.315347910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.315378904 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.315432072 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.315438032 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.315470934 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.316160917 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.316179037 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.316210985 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.316216946 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.316246986 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.318099022 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.318121910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.318208933 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.318216085 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.318243980 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.319031954 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.319050074 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.319081068 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.319087029 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.319118977 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.319957018 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.319982052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.320035934 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.320043087 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.320061922 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.321630955 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.321647882 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.321703911 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.321712017 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.321790934 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.322674990 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.322694063 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.322765112 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.322771072 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.322798014 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.323714972 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.323739052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.323767900 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.323772907 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.323811054 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.323816061 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.323893070 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.324644089 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.324664116 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.324727058 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.324732065 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.324795008 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.326282024 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.326302052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.326360941 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.326366901 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.326406956 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.327367067 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.327388048 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.327414989 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.327419996 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.327445984 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.327471972 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.328397989 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.328417063 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.328455925 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.328460932 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.328484058 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.328497887 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.328501940 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.329607964 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.329632998 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.329667091 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.329673052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.329720020 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.330895901 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.330919027 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.330976963 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.330981970 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.331326008 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.331348896 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.331393003 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.331398964 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.331423044 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.331442118 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.331576109 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.331620932 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.331640959 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.331649065 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.331676960 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.331705093 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.331752062 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.331897974 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.332586050 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.332614899 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.332640886 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.332648039 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.332693100 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.332779884 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.332812071 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.332859993 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.332866907 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.332880974 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.332890987 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.332911015 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.332942963 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.332954884 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.332966089 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.332995892 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333136082 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333153009 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333184004 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333190918 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333209991 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333304882 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333319902 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333348036 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333355904 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333374023 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333415985 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.333435059 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.333472967 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.333477974 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.333493948 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.333522081 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.333544970 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333569050 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.333571911 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333579063 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.333595991 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333601952 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333617926 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333710909 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333724022 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333770037 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333775997 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333789110 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333873987 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333890915 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333931923 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.333937883 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.333970070 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.334029913 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.334053040 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.334074020 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.334078074 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.334104061 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.335506916 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.335526943 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.335553885 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.335558891 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.335582018 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.336373091 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.336395025 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.336429119 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.336435080 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.336452961 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.337318897 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.337337017 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.337371111 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.337376118 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.337423086 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.338300943 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.338327885 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.338380098 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.338387966 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.338429928 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.339739084 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.339759111 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.339867115 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.339867115 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.339881897 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.340639114 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.340663910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.340730906 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.340744019 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.340789080 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.341510057 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.341528893 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.341567993 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.341576099 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.341615915 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.342541933 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.342566013 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.342593908 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.342601061 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.342618942 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.344070911 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.344090939 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.344120979 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.344125986 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.344151020 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.345706940 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.345732927 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.345756054 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.345761061 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.345784903 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.346323013 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.346340895 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.346441031 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.346441031 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.346450090 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.347495079 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.347517014 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.347543955 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.347548962 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.347574949 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.348583937 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.348603964 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.348644972 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.348649979 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.348673105 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.349931955 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.349956036 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.349993944 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.349996090 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.350011110 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.350018978 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.350053072 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.350059986 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.351572990 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.351594925 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.351629019 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.351634026 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.351660013 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.352088928 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.352119923 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.352144003 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.352153063 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.352174997 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.352536917 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.352555037 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.352606058 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.352612019 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.353463888 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.353482962 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.353566885 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.353573084 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.353595972 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.355242014 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.355263948 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.355310917 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.355317116 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.355340004 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.355947018 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.355964899 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.356009007 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.356014967 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.356046915 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.356404066 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.356420994 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.356451988 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.356457949 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.356483936 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.357419014 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.357436895 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.357496023 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.357502937 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.358321905 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.358340979 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.358382940 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.358388901 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.358416080 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.359282017 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.359299898 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.359345913 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.359352112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.361485004 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.361505032 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.361557007 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.361563921 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.361588001 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.362355947 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.362379074 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.362416029 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.362421036 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.362456083 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.363816023 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.363833904 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.363883972 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.363890886 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.363907099 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.364192009 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.364212036 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.364248991 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.364253998 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.364279032 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.366012096 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.366031885 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.366071939 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.366077900 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.366101980 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.367048979 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.367068052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.367152929 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.367152929 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.367160082 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.367717981 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.367738962 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.367769003 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.367774010 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.367795944 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.368601084 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.368618965 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.368669987 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.368681908 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.368700981 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.369040012 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.369059086 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.369093895 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.369100094 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.369127989 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.369796038 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.369813919 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.369844913 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.369851112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.369874001 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.370326996 CEST	49740	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.370347023 CEST	443	49740	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.371011019 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.371825933 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.372499943 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374140978 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374166965 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374207020 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374217033 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374222040 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374238014 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374263048 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374269009 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374285936 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374352932 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374391079 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374397039 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374409914 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374429941 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374437094 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374463081 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374469042 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374492884 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374494076 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.374545097 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.374551058 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.375835896 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.375859976 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.375894070 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.375900030 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.375921965 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.375953913 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.375969887 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.375996113 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.376002073 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.376029015 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.376835108 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.376857996 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.376885891 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.376893044 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.376921892 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.377669096 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.377687931 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.377716064 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.377722025 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.377748966 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.378948927 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.378973961 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.378998995 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.379004002 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.379034996 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.379220009 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.379236937 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.379261971 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.379267931 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.379281998 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.380191088 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.380260944 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.380266905 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.380322933 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.381123066 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.381144047 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.381186962 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.381191969 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.381211042 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.382023096 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.382049084 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.382085085 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.382091045 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.382112980 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.382874966 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.382891893 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.382920980 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.382925987 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.382952929 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.383431911 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.383454084 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.383486032 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.383491039 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.383506060 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.384422064 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.384440899 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.384496927 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.384502888 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.384543896 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.385262012 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.385279894 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.385327101 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.385333061 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.385348082 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.386048079 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.386096954 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.386101007 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.386113882 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.386154890 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.386554003 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.386573076 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.386620998 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.386627913 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.387484074 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.387507915 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.387540102 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.387545109 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.387573957 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.388242006 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.388262033 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.388307095 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.388313055 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.388325930 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.389220953 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.389245033 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.389273882 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.389280081 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.389308929 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.390170097 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.390187979 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.390234947 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.390242100 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.390254974 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.390278101 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.390306950 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.390333891 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.390338898 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.390352964 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.391377926 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.391397953 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.391442060 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.391452074 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.391464949 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.392327070 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.392353058 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.392383099 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.392388105 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.392411947 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.393126011 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.393146038 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.393196106 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.393203020 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.393254042 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.393275023 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.393297911 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.393304110 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.393384933 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.394201994 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.394222021 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.394279957 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.394285917 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.394328117 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.395184994 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.395206928 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.395255089 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.395261049 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.395970106 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.395994902 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.396034002 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.396039963 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.396080017 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.396085024 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.396123886 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.396136999 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.396193027 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.396195889 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.396209002 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.396244049 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.397109985 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.397181988 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.397186995 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.397237062 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.397990942 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.398010969 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.398039103 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.398044109 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.398057938 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.398075104 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.398843050 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.398884058 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.398902893 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.398909092 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.398932934 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.398958921 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.399640083 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.399661064 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.399708033 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.399713039 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.399756908 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.399950027 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.399969101 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.400007963 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.400012970 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.400037050 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.400049925 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.400782108 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.400804043 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.400862932 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.400866985 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.400947094 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.401590109 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.401611090 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.401654959 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.401659012 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.401711941 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.401711941 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.402502060 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.402533054 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.402558088 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.402563095 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.402590036 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.402602911 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.402724028 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.402760029 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.402774096 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.402780056 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.402805090 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.402817965 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.403525114 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.403548002 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.403579950 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.403584957 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.403624058 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.403639078 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.404400110 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.404419899 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.404479027 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.404484034 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.404510021 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.404521942 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.405244112 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.405267954 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.405292034 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.405297041 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.405325890 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.405340910 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.405508995 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.405528069 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.405565977 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.405570984 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.405596972 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.405608892 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.406359911 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.406380892 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.406410933 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.406415939 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.406438112 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.406454086 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.407329082 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.407349110 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.407398939 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.407403946 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.407423973 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.407438040 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.407443047 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.407903910 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.407927990 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.407952070 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.407957077 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.407984018 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.408166885 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.408188105 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.408226967 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.408236980 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.408250093 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.409034014 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.409055948 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.409080982 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.409086943 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.409115076 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.409809113 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.409842014 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.409892082 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.409908056 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.409930944 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.410542965 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.410566092 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.410598040 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.410603046 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.410619974 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.410799026 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.410818100 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.410845041 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.410852909 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.410872936 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.411626101 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.411648989 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.411673069 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.411679029 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.411706924 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.412674904 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.412694931 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.412744045 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.412749052 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.412771940 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.412775040 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.412825108 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.412830114 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.413374901 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.413398027 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.413419008 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.413424015 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.413450003 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.414170980 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.414190054 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.414235115 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.414239883 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.414355993 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.414376974 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.414407969 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.414412975 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.414434910 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.415218115 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.415236950 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.415273905 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.415278912 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.415311098 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.415841103 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.415858984 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.415904999 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.415910959 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.415934086 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.416613102 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.416630983 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.416672945 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.416677952 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.416722059 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.416897058 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.416918993 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.416945934 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.416950941 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.416974068 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.417073965 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:14.417110920 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:14.453624964 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.453648090 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.453715086 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.453733921 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.453762054 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.453805923 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.453881025 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.453898907 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.453938961 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.453944921 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.453964949 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.453980923 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454281092 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454297066 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454339027 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454345942 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454400063 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454474926 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454489946 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454534054 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454539061 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454561949 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454576969 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454605103 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454649925 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454658031 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454663992 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454722881 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454842091 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454854965 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.454905033 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.454910994 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455068111 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455084085 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455116034 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455120087 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455141068 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455163956 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455166101 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455176115 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455209017 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455215931 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455231905 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455239058 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455265045 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455288887 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455398083 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455415010 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455456972 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455465078 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455558062 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455602884 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455607891 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455655098 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455698013 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455714941 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455770016 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455776930 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455810070 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455859900 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455873966 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455918074 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.455924988 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.455971956 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.456006050 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456051111 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456053019 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.456063032 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456096888 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.456115007 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456127882 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456167936 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456170082 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.456178904 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456218958 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.456223011 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456280947 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:14.456336975 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.456403017 CEST	49742	443	192.168.2.16	20.25.227.174
Apr 23, 2024 14:27:14.456418037 CEST	443	49742	20.25.227.174	192.168.2.16
Apr 23, 2024 14:27:15.299631119 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:15.299849987 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:15.698672056 CEST	49739	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:15.698740959 CEST	443	49739	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:26.495692968 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:26.495770931 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:26.495949984 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:26.496011019 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:26.496040106 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:26.496133089 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:26.502176046 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:26.502229929 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:26.502291918 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:26.717686892 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:26.717772961 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:26.717828035 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:27.721421957 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:27.721448898 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:27.721504927 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:27.721544981 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:27.721575975 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:27.721596956 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:39.836913109 CEST	49724	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:39.836946011 CEST	443	49724	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:39.837074041 CEST	49725	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:39.837125063 CEST	443	49725	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:39.837189913 CEST	49726	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:39.837253094 CEST	443	49726	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:39.846483946 CEST	49727	443	192.168.2.16	162.159.140.165
Apr 23, 2024 14:27:39.846551895 CEST	443	49727	162.159.140.165	192.168.2.16
Apr 23, 2024 14:27:39.847337961 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:39.847373009 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:39.847428083 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:39.847923040 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:39.847940922 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.062614918 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.062920094 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.062952042 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.065460920 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.065534115 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.065989971 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.066131115 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.066190958 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.066250086 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.114443064 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.114459038 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.159779072 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.295974970 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.296128988 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.296207905 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.296240091 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.296319008 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.296363115 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.296374083 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.296456099 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.296497107 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.296504974 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.298512936 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.298563004 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.298572063 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.300915956 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.300961971 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.300971031 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.303378105 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.303422928 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.303431034 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.308176994 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.308229923 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.308238983 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.310615063 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.310662985 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.310672045 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.312935114 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.313002110 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.313009024 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.313621998 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.313673019 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.313680887 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.316608906 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.316668034 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.316679001 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.317195892 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.317239046 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.317248106 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.319659948 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.319710970 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.319720030 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.322232008 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.322278023 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.322284937 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.367790937 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.367818117 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.403502941 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.403567076 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.403593063 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.404515982 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.404572964 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.404583931 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.406691074 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.406753063 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.406761885 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.411293983 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.411317110 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.411344051 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.411355019 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.411389112 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.412209988 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.415869951 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.415910959 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.415920973 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.419049978 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.419121981 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.419131041 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.419168949 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.421487093 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.421535969 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.421542883 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.421564102 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:40.421601057 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.421698093 CEST	49743	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:40.421713114 CEST	443	49743	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.175901890 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.175956011 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.176031113 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.176367044 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.176404953 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.176455975 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.176608086 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.176630020 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.176824093 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.176840067 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.178652048 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.178730965 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.178814888 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.179383993 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.179461002 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.179522038 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.179589987 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.179627895 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.179845095 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.179883957 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.181407928 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.181431055 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.181490898 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.182075977 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.182086945 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.182616949 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.182640076 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.182693958 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.182924986 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.182939053 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.392265081 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.392581940 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.392599106 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.393501997 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.393563032 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.393942118 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.393999100 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.394179106 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.394186974 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.394205093 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.400387049 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.400568008 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.400772095 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.400782108 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.400798082 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.400834084 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.401865959 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.401979923 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.402278900 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.402345896 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.402445078 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.402452946 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.402498960 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.403158903 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.403458118 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.403479099 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.404392004 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.404551983 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.404597998 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.404612064 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.404633999 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.404938936 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.405034065 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.405067921 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.405107975 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.405500889 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.405556917 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.405560970 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.405617952 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.405831099 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.405895948 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.406090021 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.406172037 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.406255007 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.406263113 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.406362057 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.406371117 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.406857967 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.407053947 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.407110929 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.410969019 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.411046028 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.411278963 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.411381006 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.411454916 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.440109015 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.444144011 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.446759939 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.446789980 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.446805954 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.446943045 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.447001934 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.462800980 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.462816954 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.494908094 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.510777950 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.633589983 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.633872986 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.633943081 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.634957075 CEST	49744	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.634979010 CEST	443	49744	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.635313034 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.635442019 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.635534048 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.635588884 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.635678053 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.635735989 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.644349098 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.644493103 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.644541025 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.651896954 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.652030945 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.652147055 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.652158022 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.652437925 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.652481079 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.653574944 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.653732061 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.653789997 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.653852940 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.654022932 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.654077053 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.665756941 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.665806055 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.665852070 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.713258028 CEST	49745	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.713282108 CEST	443	49745	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.713597059 CEST	49748	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.713615894 CEST	443	49748	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.725352049 CEST	49747	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.725411892 CEST	443	49747	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.725655079 CEST	49749	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.725667000 CEST	443	49749	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:42.734410048 CEST	49746	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:42.734471083 CEST	443	49746	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.358020067 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.358069897 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.358163118 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.358472109 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.358486891 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.359477997 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.359527111 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.359601021 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.359818935 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.359836102 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.578326941 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.579376936 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.585712910 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.585743904 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.585899115 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.585927963 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.586838961 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.586909056 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.587455988 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.587527037 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.602142096 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.602202892 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.602588892 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.602962971 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.636645079 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.636696100 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.636780977 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.650789022 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.650796890 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.650811911 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.650835991 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.698822021 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.702790022 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.717031956 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:44.717123985 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:44.717212915 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:44.717909098 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.717952013 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.717999935 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.718214989 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:44.718278885 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:44.718334913 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:44.718404055 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.718434095 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.718698025 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.718709946 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:44.718748093 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:44.718791008 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.718878031 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.718951941 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.718971968 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.719125986 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:44.719161987 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:44.760126114 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.837166071 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.837228060 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.837296963 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.837332964 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.837352991 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.837415934 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.838645935 CEST	49750	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.838664055 CEST	443	49750	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.864447117 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.864494085 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.864523888 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.864552975 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.864554882 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.864583969 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.864605904 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.866686106 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.866718054 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.866770029 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.866780043 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.866826057 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.869066954 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.871577978 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.871608019 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.871644974 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.871655941 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.871701956 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.873975992 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.876405001 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.876483917 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.876492977 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.878890038 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.878968000 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.878976107 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.881311893 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.881386995 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.881395102 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.883686066 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.883791924 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.883797884 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.886096954 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.886173010 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.886178970 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.888580084 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.888649940 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.888655901 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.891006947 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.891082048 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.891087055 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.895838022 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.895910025 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.895915985 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.936815023 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.965797901 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.966233969 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.966249943 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.966520071 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.966878891 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.966896057 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.967236042 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.967298985 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.968332052 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:44.968400002 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:44.968590975 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.969769001 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.969796896 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.969835043 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.969844103 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.969892025 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.972166061 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.974560022 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.974587917 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.974616051 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.974622011 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.974664927 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.977046967 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.979437113 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.979512930 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.979518890 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.981914043 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.981987000 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.981993914 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.986749887 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.986814022 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.986823082 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.986886024 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.989209890 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.989279032 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.991621971 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.991669893 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.996473074 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.996534109 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:44.998929977 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:44.998997927 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.003731012 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.003801107 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.007410049 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.007462025 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.012286901 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.012348890 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.014702082 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.014780045 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.019607067 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.019668102 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.021207094 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:45.021291971 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:45.021981955 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.022037983 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.026844978 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.026909113 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.062896013 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:45.062911034 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:45.069487095 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:45.069672108 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:45.070082903 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:45.070116997 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:45.074023962 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.074117899 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.078104019 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.078188896 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.080281019 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.082851887 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.084595919 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.084670067 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.085860968 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.086231947 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.086277962 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.087162018 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.087245941 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.088929892 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.088998079 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.089534998 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.091139078 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.091203928 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.095443010 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.095504045 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.097620010 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.097680092 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.102010012 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.102098942 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.105237961 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.105299950 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.109574080 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.109637976 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.110829115 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:45.110845089 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:45.111793041 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.111857891 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.116133928 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.116209984 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.120444059 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.120524883 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.122623920 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.122690916 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.126833916 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.126903057 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.128870964 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.128946066 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.132740974 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.132817030 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.132821083 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.132873058 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.142822027 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.158840895 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:45.195837021 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:45.195938110 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:45.195997953 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:45.207741976 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.207865000 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.208108902 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.208129883 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.208801031 CEST	49751	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:45.208837032 CEST	443	49751	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:45.209568977 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.209602118 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.209722042 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.209747076 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.209811926 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.211052895 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.211160898 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.252863884 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.253561974 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.253578901 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.297811985 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.340956926 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.340985060 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.340991974 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.341005087 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.341041088 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.341061115 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.341094971 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.341109037 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.341123104 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:45.341145992 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.341166019 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.446681023 CEST	49755	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:45.446741104 CEST	443	49755	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:46.937805891 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.937894106 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:46.937985897 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.938344955 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.938376904 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:46.939011097 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.939091921 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:46.939191103 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.939363003 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.939395905 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:46.942573071 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.942594051 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:46.942658901 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.942864895 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:46.942876101 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.045631886 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.045676947 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.045782089 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.046024084 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.046051025 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.155814886 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.156167030 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.156200886 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.156953096 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.157161951 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.157192945 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.157735109 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.157876015 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.158201933 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.158272982 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.158447981 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.158545971 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.158951044 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.159050941 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.159312963 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.159337997 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.159370899 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.159501076 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.159503937 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.159524918 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.159812927 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.159828901 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.161252022 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.161317110 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.161722898 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.161797047 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.162113905 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.162126064 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.200120926 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.208827972 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.208830118 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.208960056 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.223031044 CEST	49754	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:47.223071098 CEST	443	49754	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:47.223750114 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:47.223875999 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:47.345268011 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:47.345295906 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:47.345381975 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:47.345393896 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:47.345432997 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:47.346575975 CEST	49752	443	192.168.2.16	54.225.234.85
Apr 23, 2024 14:27:47.346592903 CEST	443	49752	54.225.234.85	192.168.2.16
Apr 23, 2024 14:27:47.382755041 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.382802963 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.382848024 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.382863045 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.382915020 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.384304047 CEST	49757	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.384315968 CEST	443	49757	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.386991978 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.387156010 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.387226105 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.388274908 CEST	49758	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.388288021 CEST	443	49758	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.409018993 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.409346104 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.409411907 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.410065889 CEST	49756	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:47.410089970 CEST	443	49756	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:47.412698030 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.413050890 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.413070917 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.416611910 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.416707993 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.439181089 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.439374924 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.439414978 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.439547062 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.479801893 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.479830980 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.527863026 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.560730934 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.560908079 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.560977936 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.561485052 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.561520100 CEST	443	49759	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.561547995 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.561589003 CEST	49759	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.730470896 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.730519056 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.730595112 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.730885029 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.730899096 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.971110106 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.971412897 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.971443892 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.975019932 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.975101948 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.975687981 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.975862026 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:47.975945950 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:47.975955963 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:48.022838116 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:48.206398964 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:48.206731081 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:48.206795931 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:48.207781076 CEST	49760	443	192.168.2.16	52.202.135.73
Apr 23, 2024 14:27:48.207808971 CEST	443	49760	52.202.135.73	192.168.2.16
Apr 23, 2024 14:27:49.605391026 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:49.605432034 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:49.605504036 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:49.605745077 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:49.605758905 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:49.819736004 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:49.870810032 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.302442074 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.302470922 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.303258896 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.303297997 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.303376913 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.303596973 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.303617954 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.303766012 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.303834915 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.304199934 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.304271936 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.304409027 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.304423094 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.304444075 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.345807076 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.345824957 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.404638052 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.404719114 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.404812098 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.405272961 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.405292034 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.405344963 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.405565977 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.405601978 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.405797958 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.405811071 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.547991037 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.548063040 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.548130035 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.548492908 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.548794031 CEST	49762	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.548814058 CEST	443	49762	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.549241066 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.549252987 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.550120115 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.550184011 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.551362038 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.551455021 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.551759958 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.551769972 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.595802069 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.621068954 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.621398926 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.621433973 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.622912884 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.623006105 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.623368979 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.623497009 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.623538971 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.623578072 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.627038002 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.627243996 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.627259016 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.630785942 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.630861998 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.631158113 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.631284952 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.631323099 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.673818111 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.673826933 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.673832893 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.673844099 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.720812082 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.720880032 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.793150902 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.793215036 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.793266058 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.794352055 CEST	49763	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:50.794373035 CEST	443	49763	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:50.846427917 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.846491098 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.846539021 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.846561909 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.846596003 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.846635103 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.847678900 CEST	49764	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.847691059 CEST	443	49764	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.858400106 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.858654022 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:50.858707905 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.859530926 CEST	49765	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:50.859538078 CEST	443	49765	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.728991032 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.729063034 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.729142904 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.729558945 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.729581118 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.730089903 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.730154991 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.730225086 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.730463982 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.730490923 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.732522011 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.732553005 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.732614040 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.732803106 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.732815981 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.942917109 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.949235916 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.949795961 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:54.993834019 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.993839025 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:54.996054888 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.084743023 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.084774017 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.084897041 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.084918022 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.085040092 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.085056067 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.085877895 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.086059093 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.086308956 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.086366892 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.086498022 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.086512089 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.086533070 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.086642027 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.086702108 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.086988926 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.087059975 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.087106943 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.087135077 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.088679075 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.088756084 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.089112997 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.089281082 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.089287043 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.089463949 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.128127098 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.137821913 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.137844086 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.137854099 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.137857914 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.137878895 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.185827017 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.185841084 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.209383011 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.209508896 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.209573030 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.210606098 CEST	49768	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.210623980 CEST	443	49768	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.212512016 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.212656975 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.212717056 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.213486910 CEST	49767	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.213509083 CEST	443	49767	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.223052979 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.223107100 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.223365068 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.223664045 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.223711014 CEST	443	49766	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:55.223741055 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:55.223787069 CEST	49766	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:56.327759027 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.327795982 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.327855110 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.328125954 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.328141928 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.482652903 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.482716084 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.482819080 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.483099937 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.483117104 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.488271952 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.488303900 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.488365889 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.488755941 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.488766909 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.489264965 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.489296913 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.489348888 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.489543915 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.489556074 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.571079016 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.571412086 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.571438074 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.572326899 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.572398901 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.572835922 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.572894096 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.573136091 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.573144913 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.573227882 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.573242903 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.819576025 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.819669008 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.819727898 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.820672989 CEST	49769	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.820689917 CEST	443	49769	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.848840952 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.849159956 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.849188089 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.850605965 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.850677967 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.851022959 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.851087093 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.851227045 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.851233959 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.854357958 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.854562998 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.854574919 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.855326891 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.855459929 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.855525970 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.855555058 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.855575085 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.855865955 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.855933905 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.855992079 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.855999947 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.857011080 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.857088089 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.857553959 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.857619047 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.857743025 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.857748985 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:56.906847000 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.906852007 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.908324003 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:56.988413095 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.988455057 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:56.988534927 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.988776922 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:56.988790035 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.100143909 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.100210905 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.100233078 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.100253105 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.100285053 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.100298882 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.100320101 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.100333929 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.100353003 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.100373030 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.100395918 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.100420952 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.105465889 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105488062 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105494022 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105504990 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105509996 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105511904 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105561018 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.105586052 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105601072 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.105634928 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.105855942 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105874062 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105881929 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105890989 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105918884 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.105966091 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.105993032 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.106008053 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.106045961 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.109169006 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.109226942 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.109262943 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.109281063 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.109304905 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.109407902 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.109462976 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.114562988 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.114605904 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.114631891 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.114645958 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.114681005 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.114908934 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.114949942 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.114967108 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.114984989 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.115010023 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.154542923 CEST	49770	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.154575109 CEST	443	49770	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.154877901 CEST	49772	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.154905081 CEST	443	49772	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.155113935 CEST	49771	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:27:57.155136108 CEST	443	49771	23.221.212.212	192.168.2.16
Apr 23, 2024 14:27:57.235193014 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.235516071 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.235544920 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.239093065 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.239182949 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.239527941 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.239712954 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.239715099 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.239757061 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.239876032 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.289834976 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.289844990 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.337821007 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.481758118 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.481861115 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.481904984 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.483114958 CEST	49773	443	192.168.2.16	63.140.39.82
Apr 23, 2024 14:27:57.483130932 CEST	443	49773	63.140.39.82	192.168.2.16
Apr 23, 2024 14:27:57.488589048 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.488677025 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.488770962 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.489027023 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.489063978 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.638108969 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:57.638158083 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:57.638248920 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:57.638468981 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:57.638480902 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:57.709949017 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.710345030 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.710370064 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.713042974 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.713121891 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.713447094 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.713526011 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.713742971 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.713753939 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.767899990 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.967689991 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.967853069 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:57.968028069 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.968949080 CEST	49774	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:57.968965054 CEST	443	49774	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:58.008750916 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:58.009167910 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:58.009229898 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:58.012527943 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:58.012619019 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:58.021171093 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:58.021275997 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:58.021426916 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:58.021452904 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:58.070933104 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:58.246607065 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:58.246705055 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:58.246896029 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:58.248298883 CEST	49775	443	192.168.2.16	23.221.212.210
Apr 23, 2024 14:27:58.248342037 CEST	443	49775	23.221.212.210	192.168.2.16
Apr 23, 2024 14:27:59.412522078 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.412561893 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.412645102 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.412964106 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.412980080 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.637286901 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.652000904 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.652019024 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.653687000 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.653784037 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.654120922 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.654310942 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.654357910 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.699804068 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.699820042 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.747817039 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.877791882 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.877981901 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.878031969 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.878045082 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.878164053 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.878211975 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.878217936 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.878415108 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:27:59.878464937 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.879183054 CEST	49776	443	192.168.2.16	172.64.155.179
Apr 23, 2024 14:27:59.879199982 CEST	443	49776	172.64.155.179	192.168.2.16
Apr 23, 2024 14:28:03.825896978 CEST	49732	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:03.825948000 CEST	49733	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:03.825979948 CEST	443	49732	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:03.825980902 CEST	443	49733	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:03.922259092 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.922301054 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:03.922377110 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.922523022 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.922549009 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:03.922601938 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.922708988 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.922724009 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:03.922868013 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.922878027 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.137727976 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.141741991 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.144526958 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.144637108 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.144718885 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.144990921 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.145015001 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.175949097 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.175993919 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.176096916 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.176143885 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.177692890 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.177776098 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.178239107 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.178497076 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.179903984 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.179981947 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.180309057 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.180738926 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.197086096 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.197158098 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.197237015 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.197439909 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.197464943 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.201420069 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:28:04.201595068 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:28:04.201669931 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:28:04.219816923 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.219834089 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.235811949 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.235842943 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.267863035 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.283845901 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.487761974 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.488209009 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.488231897 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.489305019 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.489371061 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.490866899 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.490945101 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.491182089 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.491188049 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.491246939 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.491262913 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.520560026 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.520956039 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.521014929 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.524642944 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.524728060 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.526053905 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.526245117 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.526257992 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.526321888 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.526398897 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.538846016 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.570830107 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.570853949 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.618833065 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.712404013 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.712435961 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.712507010 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.712558031 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.712574005 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.712585926 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.712604046 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.712625027 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.712629080 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.712694883 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.712729931 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.713474989 CEST	49779	443	192.168.2.16	13.107.21.239
Apr 23, 2024 14:28:04.713489056 CEST	443	49779	13.107.21.239	192.168.2.16
Apr 23, 2024 14:28:04.748667955 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.748830080 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.748907089 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.748934031 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.748956919 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.748979092 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.748986006 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.749006033 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.749131918 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.749176025 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.749181032 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.749361992 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:04.749413967 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.749685049 CEST	49780	443	192.168.2.16	204.79.197.239
Apr 23, 2024 14:28:04.749697924 CEST	443	49780	204.79.197.239	192.168.2.16
Apr 23, 2024 14:28:19.134000063 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:19.134170055 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:19.134387016 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:19.135525942 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:19.135693073 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:19.135766029 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:49.206964016 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:28:49.207017899 CEST	443	49753	23.221.212.212	192.168.2.16
Apr 23, 2024 14:29:04.142050982 CEST	49777	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:29:04.142076969 CEST	443	49777	162.159.61.3	192.168.2.16
Apr 23, 2024 14:29:04.142471075 CEST	49778	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:29:04.142507076 CEST	443	49778	162.159.61.3	192.168.2.16
Apr 23, 2024 14:29:34.217000961 CEST	49753	443	192.168.2.16	23.221.212.212
Apr 23, 2024 14:29:34.217070103 CEST	443	49753	23.221.212.212	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 14:27:08.803169012 CEST	53	49510	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.243751049 CEST	51710	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.244065046 CEST	65482	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.244481087 CEST	52398	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.244796038 CEST	54114	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.348684072 CEST	53	65482	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.348841906 CEST	53	51710	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.349188089 CEST	53	52398	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.349726915 CEST	53	54114	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.388740063 CEST	60776	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.389183998 CEST	59829	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.493746042 CEST	53	60776	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.494124889 CEST	53	59829	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.514508009 CEST	59317	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.514872074 CEST	62367	53	192.168.2.16	1.1.1.1
Apr 23, 2024 14:27:09.619743109 CEST	53	59317	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:09.619770050 CEST	53	62367	1.1.1.1	192.168.2.16
Apr 23, 2024 14:27:11.282349110 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.388410091 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.388442993 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.388461113 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.390539885 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.395581961 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.395797014 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.396373987 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.396516085 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.397166014 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.500772953 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.500797987 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.500812054 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.500825882 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.503611088 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.504287958 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.504405975 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.504477978 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.504641056 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.505363941 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.505419016 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.532912970 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:11.608881950 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:11.647357941 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:12.032658100 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:12.034235001 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:12.034353971 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:12.138298035 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:12.139739037 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:12.141639948 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:12.144165039 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:12.144181013 CEST	443	59814	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:12.144435883 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:12.181032896 CEST	59814	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:12.506536961 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.613948107 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.613970041 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.613981009 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.615355968 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.616303921 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.616389990 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.616671085 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.616739988 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.721095085 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.721112013 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.721122026 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.721132994 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.722450972 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.723567009 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.723623037 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.751034021 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.751822948 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.752120018 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:12.856623888 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:12.897854090 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:13.325534105 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:13.326165915 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:13.432996035 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:13.434525967 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:13.462775946 CEST	443	63312	172.64.41.3	192.168.2.16
Apr 23, 2024 14:27:13.463176012 CEST	63312	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:27:44.357477903 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.464307070 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.465269089 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.465286970 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.466305971 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.466382027 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.466737032 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.466881990 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.467052937 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.467178106 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.570806026 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.570830107 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.570844889 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.570858955 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.572482109 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.573262930 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.573857069 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.573892117 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.573909044 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.585475922 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.601087093 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.601438046 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.601634979 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:44.705502033 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:44.746068954 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:46.937022924 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:46.937130928 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:47.042813063 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:47.044565916 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:47.044581890 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:47.044922113 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:49.661362886 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:49.661550999 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:49.766871929 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:49.767479897 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:49.767621994 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:49.983689070 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:50.302184105 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:50.329960108 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:57.528119087 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:57.528212070 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:27:57.634044886 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:57.635601997 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:57.637026072 CEST	443	57204	162.159.61.3	192.168.2.16
Apr 23, 2024 14:27:57.637607098 CEST	57204	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.827241898 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:03.921928883 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:03.933800936 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:03.934087038 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:03.934128046 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:03.943253994 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:03.943337917 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:03.943604946 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:03.943715096 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:04.028646946 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.028723001 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.028734922 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.047849894 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:04.047883987 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:04.048278093 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:04.049267054 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:04.049299955 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:04.050292969 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:04.050699949 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:04.087405920 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:04.087667942 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:04.087798119 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.088969946 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.089180946 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.089759111 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.089906931 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.191843987 CEST	443	62629	172.64.41.3	192.168.2.16
Apr 23, 2024 14:28:04.193582058 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.193608999 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.193629980 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.193651915 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.194097042 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.194300890 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.195184946 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.195950985 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.196299076 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.196568966 CEST	62955	443	192.168.2.16	162.159.61.3
Apr 23, 2024 14:28:04.287576914 CEST	62629	443	192.168.2.16	172.64.41.3
Apr 23, 2024 14:28:04.298721075 CEST	443	62955	162.159.61.3	192.168.2.16
Apr 23, 2024 14:28:04.331986904 CEST	62955	443	192.168.2.16	162.159.61.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 14:27:09.243751049 CEST	192.168.2.16	1.1.1.1	0xb67	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.244065046 CEST	192.168.2.16	1.1.1.1	0x812d	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Apr 23, 2024 14:27:09.244481087 CEST	192.168.2.16	1.1.1.1	0xb3ab	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.244796038 CEST	192.168.2.16	1.1.1.1	0x6901	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Apr 23, 2024 14:27:09.388740063 CEST	192.168.2.16	1.1.1.1	0x62e0	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.389183998 CEST	192.168.2.16	1.1.1.1	0x2197	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Apr 23, 2024 14:27:09.514508009 CEST	192.168.2.16	1.1.1.1	0xce3b	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.514872074 CEST	192.168.2.16	1.1.1.1	0x707e	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 14:27:04.448364973 CEST	1.1.1.1	192.168.2.16	0xb49a	No error (0)	svc.ha-teams.office.com	svc.ms-acdc-teams.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 14:27:08.739283085 CEST	1.1.1.1	192.168.2.16	0x9744	No error (0)	d1n897799gitxr.cloudfront.net		108.139.15.110	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:08.739283085 CEST	1.1.1.1	192.168.2.16	0x9744	No error (0)	d1n897799gitxr.cloudfront.net		108.139.15.77	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:08.739283085 CEST	1.1.1.1	192.168.2.16	0x9744	No error (0)	d1n897799gitxr.cloudfront.net		108.139.15.2	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:08.739283085 CEST	1.1.1.1	192.168.2.16	0x9744	No error (0)	d1n897799gitxr.cloudfront.net		108.139.15.92	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.348684072 CEST	1.1.1.1	192.168.2.16	0x812d	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Apr 23, 2024 14:27:09.348841906 CEST	1.1.1.1	192.168.2.16	0xb67	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.348841906 CEST	1.1.1.1	192.168.2.16	0xb67	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.349188089 CEST	1.1.1.1	192.168.2.16	0xb3ab	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.349188089 CEST	1.1.1.1	192.168.2.16	0xb3ab	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.349726915 CEST	1.1.1.1	192.168.2.16	0x6901	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Apr 23, 2024 14:27:09.454689980 CEST	1.1.1.1	192.168.2.16	0x6a1f	No error (0)	resources-prod.licensingstack.com		18.244.194.168	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.493746042 CEST	1.1.1.1	192.168.2.16	0x62e0	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.493746042 CEST	1.1.1.1	192.168.2.16	0x62e0	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.494124889 CEST	1.1.1.1	192.168.2.16	0x2197	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Apr 23, 2024 14:27:09.619743109 CEST	1.1.1.1	192.168.2.16	0xce3b	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.619743109 CEST	1.1.1.1	192.168.2.16	0xce3b	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Apr 23, 2024 14:27:09.619770050 CEST	1.1.1.1	192.168.2.16	0x707e	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

cdn-ffc.oobesaas.adobe.com

chrome.cloudflare-dns.com

resources.licenses.adobe.com

ims-na1.adobelogin.com

auth.services.adobe.com

nav-edge.smartscreen.microsoft.com

https:

dpm.demdex.net

use.typekit.net

server.messaging.adobe.com

sstats.adobe.com

p.typekit.net

data-edge.smartscreen.microsoft.com

edge.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49709	108.139.15.110	443	7100	C:\Users\user\Desktop\Acrobat_Set-Up.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:08 UTC	366	OUT	GET /core/v5/products/all?channel=ccm&channel=sti&channel=services&channel=mobileApps&platform=win64,win32&_type=xml&productType=Desktop&payload=true&sapCode=APRO HTTP/1.1 Connection: close Content-Type: text/xml; charset=utf-8 Accept: application/xml User-Agent: Creative Cloud x-adobe-app-id: CreativeCloudInstaller_win64 Host: cdn-ffc.oobesaas.adobe.com
2024-04-23 12:27:09 UTC	468	IN	HTTP/1.1 200 OK Content-Type: application/xml Transfer-Encoding: chunked Connection: close Server: openresty Date: Tue, 23 Apr 2024 12:25:32 GMT X-Request-Id: 9Wk4ufC5eF811XCRtqGGIj1mezF1u2dH X-FFC-Env: prod X-FFC-Version: 1.48.51 Accept-Ranges: none X-Cache: Hit from cloudfront Via: 1.1 7d38f3897cdb444e56484e816dfbc442.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: ZTCyEk2ymjEM_sLGX9ktryR6Vwuz-5ZRaa03p11oEv-bu3ATirmkKg== Age: 97
2024-04-23 12:27:09 UTC	16384	IN	Data Raw: 61 65 61 62 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 63 68 61 6e 6e 65 6c 73 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 74 69 6d 65 73 74 61 6d 70 3d 22 31 37 31 33 38 37 35 31 33 32 31 35 31 22 3e 3c 63 68 61 6e 6e 65 6c 20 6e 61 6d 65 3d 22 63 63 6d 22 3e 3c 63 64 6e 3e 3c 73 65 63 75 72 65 3e 68 74 74 70 73 3a 2f 2f 63 63 6d 64 6c 73 2e 61 64 6f 62 65 2e 63 6f 6d 3c 2f 73 65 63 75 72 65 3e 3c 6e 6f 6e 53 65 63 75 72 65 3e 68 74 74 70 3a 2f 2f 63 63 6d 64 6c 2e 61 64 6f 62 65 2e 63 6f 6d 3c 2f 6e 6f 6e 53 65 63 75 72 65 3e 3c 2f 63 64 6e 3e 3c 70 72 6f 64 75 63 74 73 3e 3c 70 72 6f 64 75 63 74 20 76 65 72 73 69 6f 6e 3d 22 32 34 2e 31 22 20 69 64 3d 22 41 50 52 4f 22 20 Data Ascii: aeab<?xml version='1.0' encoding='UTF-8'?><channels version="1.0" timestamp="1713875132151"><channel name="ccm"><cdn><secure>https://ccmdls.adobe.com</secure><nonSecure>http://ccmdl.adobe.com</nonSecure></cdn><products><product version="24.1" id="APRO"
2024-04-23 12:27:09 UTC	16384	IN	Data Raw: 61 74 61 3e 3c 2f 6c 6f 63 61 6c 65 3e 3c 6c 6f 63 61 6c 65 20 6e 61 6d 65 3d 22 66 72 5f 46 52 22 20 6c 65 69 64 3d 22 56 37 7b 7d 41 63 72 6f 62 61 74 43 6f 6e 74 2d 31 32 2d 57 69 6e 2d 47 4d 22 20 65 6e 74 69 74 6c 65 64 3d 22 66 61 6c 73 65 22 3e 3c 63 75 73 74 6f 6d 2d 64 61 74 61 3e 3c 63 75 73 74 6f 6d 2d 65 6e 74 72 79 20 6b 65 79 3d 22 74 75 74 6f 72 69 61 6c 73 50 61 67 65 22 3e 3c 76 61 6c 75 65 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 67 6f 2f 61 63 72 6f 62 61 74 2d 74 75 74 6f 72 69 61 6c 73 5f 66 72 3c 2f 76 61 6c 75 65 3e 3c 2f 63 75 73 74 6f 6d 2d 65 6e 74 72 79 3e 3c 2f 63 75 73 74 6f 6d 2d 64 61 74 61 3e 3c 2f 6c 6f 63 61 6c 65 3e 3c 6c 6f 63 61 6c 65 20 6e 61 6d 65 3d 22 64 65 5f 44 45 22 20 6c 65 69 64 3d 22 Data Ascii: ata></locale><locale name="fr_FR" leid="V7{}AcrobatCont-12-Win-GM" entitled="false"><custom-data><custom-entry key="tutorialsPage"><value>http://www.adobe.com/go/acrobat-tutorials_fr</value></custom-entry></custom-data></locale><locale name="de_DE" leid="
2024-04-23 12:27:09 UTC	11955	IN	Data Raw: 61 6c 65 3d 22 66 72 5f 46 52 22 3e 20 09 09 26 6c 74 3b 64 69 61 6c 6f 67 2d 6d 65 73 73 61 67 65 3e 4c e2 80 99 69 6e 73 74 61 6c 6c 61 74 69 6f 6e 20 64 e2 80 99 41 63 72 6f 62 61 74 20 44 43 20 64 c3 a9 73 69 6e 73 74 61 6c 6c 65 72 61 20 6c 61 20 76 65 72 73 69 6f 6e 20 64 e2 80 99 41 63 72 6f 62 61 74 20 65 78 69 73 74 61 6e 74 65 20 73 75 72 20 76 6f 74 72 65 20 6f 72 64 69 6e 61 74 65 75 72 2e 20 43 6c 69 71 75 65 7a 20 73 75 72 20 45 6e 20 73 61 76 6f 69 72 20 70 6c 75 73 20 70 6f 75 72 20 61 70 70 72 65 6e 64 72 65 20 63 6f 6d 6d 65 6e 74 20 72 c3 a9 69 6e 73 74 61 6c 6c 65 72 20 41 63 72 6f 62 61 74 20 58 49 2e 26 6c 74 3b 2f 64 69 61 6c 6f 67 2d 6d 65 73 73 61 67 65 3e 20 09 09 26 6c 74 3b 6c 65 61 72 6e 6d 6f 72 65 2d 6c 69 6e 6b 3e 68 74 74 Data Ascii: ale="fr_FR"> <dialog-message>Linstallation dAcrobat DC dsinstallera la version dAcrobat existante sur votre ordinateur. Cliquez sur En savoir plus pour apprendre comment rinstaller Acrobat XI.</dialog-message> <learnmore-link>htt
2024-04-23 12:27:09 UTC	16384	IN	Data Raw: 36 35 62 39 0d 0a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 67 6f 2f 61 63 72 6f 62 61 74 2d 74 75 74 6f 72 69 61 6c 73 3c 2f 76 61 6c 75 65 3e 3c 2f 63 75 73 74 6f 6d 2d 65 6e 74 72 79 3e 3c 63 75 73 74 6f 6d 2d 65 6e 74 72 79 20 6b 65 79 3d 22 74 75 74 6f 72 69 61 6c 73 50 61 67 65 5f 72 6f 5f 52 4f 22 3e 3c 76 61 6c 75 65 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 67 6f 2f 61 63 72 6f 62 61 74 2d 74 75 74 6f 72 69 61 6c 73 3c 2f 76 61 6c 75 65 3e 3c 2f 63 75 73 74 6f 6d 2d 65 6e 74 72 79 3e 3c 63 75 73 74 6f 6d 2d 65 6e 74 72 79 20 6b 65 79 3d 22 74 75 74 6f 72 69 61 6c 73 50 61 67 65 5f 6b 6f 5f 4b 52 22 3e 3c 76 61 6c 75 65 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 67 6f 2f 61 63 72 6f 62 61 74 2d Data Ascii: 65b9//www.adobe.com/go/acrobat-tutorials</value></custom-entry><custom-entry key="tutorialsPage_ro_RO"><value>http://www.adobe.com/go/acrobat-tutorials</value></custom-entry><custom-entry key="tutorialsPage_ko_KR"><value>http://www.adobe.com/go/acrobat-
2024-04-23 12:27:09 UTC	9665	IN	Data Raw: 4b 55 43 49 2b 34 34 4b 6b 34 34 4f 70 34 34 4b 35 34 34 4f 49 34 34 4f 73 34 34 4f 38 34 34 4b 33 34 34 4f 6e 34 34 4f 7a 50 43 39 73 62 32 4e 68 62 47 6c 36 5a 57 52 4f 59 57 31 6c 50 67 30 4b 43 51 6b 38 62 47 39 6a 59 57 78 70 65 6d 56 6b 54 6d 46 74 5a 53 42 73 62 32 4e 68 62 47 55 39 49 6d 74 76 58 30 74 53 49 6a 37 73 6e 62 7a 72 6e 36 7a 73 69 71 54 74 69 72 6a 72 6f 49 6a 73 6e 62 54 73 68 5a 67 38 4c 32 78 76 59 32 46 73 61 58 70 6c 5a 45 35 68 62 57 55 2b 44 51 6f 4a 43 54 78 73 62 32 4e 68 62 47 6c 36 5a 57 52 4f 59 57 31 6c 49 47 78 76 59 32 46 73 5a 54 30 69 62 6d 4a 66 54 6b 38 69 50 6b 6c 73 62 48 56 7a 64 48 4a 68 63 32 70 76 62 6a 77 76 62 47 39 6a 59 57 78 70 65 6d 56 6b 54 6d 46 74 5a 54 34 4e 43 67 6b 4a 50 47 78 76 59 32 46 73 61 58 Data Ascii: KUCI+44Kk44Op44K544OI44Os44O844K344On44OzPC9sb2NhbGl6ZWROYW1lPg0KCQk8bG9jYWxpemVkTmFtZSBsb2NhbGU9ImtvX0tSIj7snbzrn6zsiqTtirjroIjsnbTshZg8L2xvY2FsaXplZE5hbWU+DQoJCTxsb2NhbGl6ZWROYW1lIGxvY2FsZT0ibmJfTk8iPklsbHVzdHJhc2pvbjwvbG9jYWxpemVkTmFtZT4NCgkJPGxvY2FsaX
2024-04-23 12:27:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49715	162.159.61.3	443	6532	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:09 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-04-23 12:27:09 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-04-23 12:27:09 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 23 Apr 2024 12:27:09 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 878dd89a0b4012e9-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 12:27:09 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 ab 00 04 40 e9 b1 5e 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom@^)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49714	162.159.61.3	443	6532	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:09 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-04-23 12:27:09 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-04-23 12:27:09 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 23 Apr 2024 12:27:09 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 878dd89a0e428bbb-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 12:27:09 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 a9 00 04 40 e9 b1 5e 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom@^)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49717	172.64.41.3	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:09 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-04-23 12:27:09 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-04-23 12:27:09 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 23 Apr 2024 12:27:09 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 878dd89ae92344dc-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 12:27:09 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 42 00 04 40 e9 b0 5e 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomB@^)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49718	162.159.61.3	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:09 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-04-23 12:27:09 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-04-23 12:27:10 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 23 Apr 2024 12:27:10 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 878dd89bba534507-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 12:27:10 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 42 00 04 40 e9 b0 5e 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomB@^)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49716	18.244.194.168	443	7100	C:\Users\user\Desktop\Acrobat_Set-Up.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:09 UTC	493	OUT	GET /certs/v2/CMjAxODA3MjAwMQ/N0ExN0U4RTNBMzBBMDM4N0VFMTQ5QjlEQjU3QjU3Q0I.der HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Accept: application/x-x509-ca-cert User-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200] X-Api-Key: CreativeCloudInstaller_v1_0 X-Request-Id: Req-Id-0580641b-cf09-472c-89fe-83cc5e1153c2 X-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216 Content-Length: 0 Host: resources.licenses.adobe.com
2024-04-23 12:27:09 UTC	565	IN	HTTP/1.1 200 OK Content-Type: application/x-x509-ca-cert Content-Length: 1475 Connection: close Date: Mon, 22 Apr 2024 13:09:32 GMT Last-Modified: Mon, 07 Aug 2023 15:11:28 GMT ETag: "7a17e8e3a30a0387ee149b9db57b57cb" x-amz-server-side-encryption: AES256 x-amz-version-id: zkuegiQaiJJ8wni6dB0GftZ5fiGCgOsI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2a6186326917e8fef08a656848f9c4fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: _WLrS_KxtT3oik3U3BfTZytIfF77ycnms0PTmDNSPopaLhTRnDdJQA== Age: 83858
2024-04-23 12:27:09 UTC	1475	IN	Data Raw: 30 82 05 bf 30 82 03 a7 a0 03 02 01 02 02 04 01 cf bd 1c 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0d 05 00 30 81 8e 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 04 07 0c 08 53 61 6e 20 4a 6f 73 65 31 16 30 14 06 03 55 04 0a 0c 0d 41 64 6f 62 65 20 53 79 73 74 65 6d 73 31 19 30 17 06 03 55 04 0b 0c 10 43 6c 6f 75 64 20 54 65 63 68 6e 6f 6c 6f 67 79 31 24 30 22 06 03 55 04 03 0c 1b 41 64 6f 62 65 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 20 31 30 2d 31 39 30 1e 17 0d 32 33 30 38 30 37 31 35 31 31 32 37 5a 17 0d 33 30 30 38 30 35 31 35 31 31 32 35 5a 30 81 91 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 Data Ascii: 000*H010UUS10Uuserfornia10USan Jose10UAdobe Systems10UCloud Technology1$0"UAdobe Intermediate CA 10-190230807151127Z300805151125Z010UUS10Uuserfornia10U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49720	18.244.194.168	443	7100	C:\Users\user\Desktop\Acrobat_Set-Up.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:10 UTC	493	OUT	GET /certs/v2/IMjAxODA3MjAwMQ/M0M1QUIyMEU4RjY3Rjk5RThBQjI3MjY0NUVDREJGMzA.der HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Accept: application/x-x509-ca-cert User-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200] X-Api-Key: CreativeCloudInstaller_v1_0 X-Request-Id: Req-Id-06b83430-aaf9-429f-b544-d7a5c20a588e X-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216 Content-Length: 0 Host: resources.licenses.adobe.com
2024-04-23 12:27:10 UTC	527	IN	HTTP/1.1 200 OK Content-Type: application/x-x509-ca-cert Content-Length: 1468 Connection: close Date: Mon, 22 Apr 2024 13:09:32 GMT Last-Modified: Fri, 17 Aug 2018 17:38:20 GMT ETag: "3c5ab20e8f67f99e8ab272645ecdbf30" x-amz-version-id: WkTaIqe.M_Rpse_IOYRWLpGK6KRdejN_ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 80c6244e3fa0796143081757365e6ea4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: B1eJbhb5D1XsTY4w92kxIae6PPKRw7TOSPxQpj8dL5efc_GSxI-VZQ== Age: 83859
2024-04-23 12:27:10 UTC	1468	IN	Data Raw: 30 82 05 b8 30 82 03 a0 a0 03 02 01 02 02 04 26 c6 6c d0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0d 05 00 30 81 85 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 04 07 0c 08 53 61 6e 20 4a 6f 73 65 31 16 30 14 06 03 55 04 0a 0c 0d 41 64 6f 62 65 20 53 79 73 74 65 6d 73 31 19 30 17 06 03 55 04 0b 0c 10 43 6c 6f 75 64 20 54 65 63 68 6e 6f 6c 6f 67 79 31 1b 30 19 06 03 55 04 03 0c 12 41 64 6f 62 65 20 52 6f 6f 74 20 43 41 20 31 30 2d 33 30 20 17 0d 31 38 30 38 31 37 31 37 33 38 31 39 5a 18 0f 32 30 36 38 30 38 30 34 31 37 33 38 31 39 5a 30 81 8e 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 04 07 0c 08 53 61 6e Data Ascii: 00&l0*H010UUS10Uuserfornia10USan Jose10UAdobe Systems10UCloud Technology10UAdobe Root CA 10-30 180817173819Z20680804173819Z010UUS10Uuserfornia10USan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49722	18.244.194.168	443	7100	C:\Users\user\Desktop\Acrobat_Set-Up.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:10 UTC	493	OUT	GET /certs/v2/CMjAxODA3MjAwMQ/N0UxODEzQzhCNkYyMDAxRUQ4MUNDRThBRTc0RDg4NDQ.der HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Accept: application/x-x509-ca-cert User-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200] X-Api-Key: CreativeCloudInstaller_v1_0 X-Request-Id: Req-Id-9409b262-333b-4689-85d2-f0c2a121c5f2 X-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216 Content-Length: 0 Host: resources.licenses.adobe.com
2024-04-23 12:27:10 UTC	565	IN	HTTP/1.1 200 OK Content-Type: application/x-x509-ca-cert Content-Length: 1475 Connection: close Date: Mon, 22 Apr 2024 13:09:32 GMT Last-Modified: Mon, 07 Aug 2023 13:48:44 GMT ETag: "7e1813c8b6f2001ed81cce8ae74d8844" x-amz-server-side-encryption: AES256 x-amz-version-id: TgK63eJakJ1QOHU3N1Odj35jsBgWnDGh Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 013a3e024d5f63ca782ac0e589b4fd7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: wvMFU-o4GDi6C2_1Yb1caku56AT-6D8P_5GNa4TKEHwdY-J0_KxHcA== Age: 83859
2024-04-23 12:27:10 UTC	1475	IN	Data Raw: 30 82 05 bf 30 82 03 a7 a0 03 02 01 02 02 04 6e 27 17 80 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0d 05 00 30 81 8e 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 04 07 0c 08 53 61 6e 20 4a 6f 73 65 31 16 30 14 06 03 55 04 0a 0c 0d 41 64 6f 62 65 20 53 79 73 74 65 6d 73 31 19 30 17 06 03 55 04 0b 0c 10 43 6c 6f 75 64 20 54 65 63 68 6e 6f 6c 6f 67 79 31 24 30 22 06 03 55 04 03 0c 1b 41 64 6f 62 65 20 49 6e 74 65 72 6d 65 64 69 61 74 65 20 43 41 20 31 30 2d 31 35 30 1e 17 0d 32 33 30 38 30 37 31 33 34 38 34 33 5a 17 0d 33 30 30 38 30 35 31 33 34 38 34 31 5a 30 81 91 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 Data Ascii: 00n'0*H010UUS10Uuserfornia10USan Jose10UAdobe Systems10UCloud Technology1$0"UAdobe Intermediate CA 10-150230807134843Z300805134841Z010UUS10Uuserfornia10U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49723	18.244.194.168	443	7100	C:\Users\user\Desktop\Acrobat_Set-Up.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:11 UTC	493	OUT	GET /certs/v2/IMjAxODA3MjAwMQ/QjA0RjUwNUQ3ODFDNTgwRTU4MEY2NjQ4RjY5NDVCQTY.der HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Accept: application/x-x509-ca-cert User-Agent: NGL Client/1.35.0.19 (WINDOWS_64/10.0.19045.1) [2024-04-23T16:25:41.331+0200] X-Api-Key: CreativeCloudInstaller_v1_0 X-Request-Id: Req-Id-1a656ca9-954d-4b03-8ad5-93a063de73d4 X-Session-Id: 056b2975-4c2c-4ed0-84ae-fca31d897b71.1713882341216 Content-Length: 0 Host: resources.licenses.adobe.com
2024-04-23 12:27:11 UTC	527	IN	HTTP/1.1 200 OK Content-Type: application/x-x509-ca-cert Content-Length: 1468 Connection: close Date: Mon, 22 Apr 2024 13:09:32 GMT Last-Modified: Fri, 17 Aug 2018 17:38:16 GMT ETag: "b04f505d781c580e580f6648f6945ba6" x-amz-version-id: ylHgZcHm_fGZOnJqSMWGrHG8Z_te1WYo Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d701b1702570f45768b69b2353e7a0e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: kc4IUsAflg90WchpX2LZqZx5xXPQX9TGe6Axp2zQVTsFXD0n2--QGA== Age: 83860
2024-04-23 12:27:11 UTC	1468	IN	Data Raw: 30 82 05 b8 30 82 03 a0 a0 03 02 01 02 02 04 7c e3 bf 47 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0d 05 00 30 81 85 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 04 07 0c 08 53 61 6e 20 4a 6f 73 65 31 16 30 14 06 03 55 04 0a 0c 0d 41 64 6f 62 65 20 53 79 73 74 65 6d 73 31 19 30 17 06 03 55 04 0b 0c 10 43 6c 6f 75 64 20 54 65 63 68 6e 6f 6c 6f 67 79 31 1b 30 19 06 03 55 04 03 0c 12 41 64 6f 62 65 20 52 6f 6f 74 20 43 41 20 31 30 2d 33 30 20 17 0d 31 38 30 38 31 37 31 37 33 38 31 35 5a 18 0f 32 30 36 38 30 38 30 34 31 37 33 38 31 35 5a 30 81 8e 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 0c 0a 43 61 6c 69 66 6f 72 6e 69 61 31 11 30 0f 06 03 55 04 07 0c 08 53 61 6e Data Ascii: 00\|G0*H010UUS10Uuserfornia10USan Jose10UAdobe Systems10UCloud Technology10UAdobe Root CA 10-30 180817173815Z20680804173815Z010UUS10Uuserfornia10USan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49728	162.159.140.165	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:11 UTC	1213	OUT	GET /ims/authorize/v3?client_id=CreativeCloudInstaller_v1_0&response_type=device&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&device_name=992547&redirect_uri=https://oobe.adobe.com/&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&locale=en_US&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&force_marketing_permission=true&dctx_id=v:2,s,bg:kaizen,0f006db0-9d68-11ee-ac84-4fb64a02ffee HTTP/1.1 Host: ims-na1.adobelogin.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:12 UTC	1368	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 12:27:11 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false CF-Ray: 878dd8a78c927b9c-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-store
2024-04-23 12:27:12 UTC	704	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 2d 55 53 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 72 65 6c 61 79 3d 65 34 33 36 33 32 36 39 2d 61 61 33 63 2d 34 61 37 36 2d 61 63 38 32 2d 64 32 38 66 66 38 32 31 63 33 37 38 3b 20 50 61 74 68 3d 2f 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 70 33 70 3a 20 43 50 3d 22 49 44 43 20 44 53 50 20 43 4f 52 20 43 55 52 61 20 41 44 4d 61 20 4f 55 52 20 49 4e 44 20 50 48 59 20 4f 4e 4c 20 Data Ascii: Content-Language: en-USSet-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=NoneStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: Accept-Encodingp3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL
2024-04-23 12:27:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49731	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:12 UTC	1821	OUT	GET /en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:12 UTC	1007	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close last-modified: Fri, 19 Apr 2024 09:28:07 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ucmWKebk50aVkTkS_CZY73BJeeRbvgWj Cache-Control: no-cache vary: Accept-Encoding x-cache: RefreshHit from cloudfront via: 1.1 86150a7b1da76d1a806dc0cdda8debc4.cloudfront.net (CloudFront) x-amz-cf-pop: ATL58-P9 x-amz-cf-id: u1JbCOw-myOxJl3h9UB7I2JwR8A7eZR7sltqGjy4l19mIIhARNVIAg== x-xss-protection: 1; mode=block x-frame-options: DENY referrer-policy: no-referrer-when-downgrade content-security-policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 878dd8ab6f0e450f-ATL
2024-04-23 12:27:12 UTC	362	IN	Data Raw: 37 62 39 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 68 74 74 70 73 3a 2f 2f 77 77 77 69 6d 61 67 65 73 32 2e 73 74 61 67 65 2e 61 64 6f 62 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 75 74 68 2d 73 74 Data Ascii: 7b91<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' https://wwwimages2.stage.adobe.com https://auth-st
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 61 67 65 73 32 2e 61 64 6f 62 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 2e 65 76 69 64 6f 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 75 74 68 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 72 6b 6f 73 65 6c 61 62 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 75 74 68 2d 63 69 2d 73 74 61 74 69 63 73 2e 64 65 76 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 61 64 6f 62 65 64 74 6d 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 74 65 63 68 2f 20 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f Data Ascii: ages2.adobe.com https://c.evidon.com https://auth.services.adobe.com https://cdn.arkoselabs.com https://auth-ci-statics.dev.services.adobe.com https://assets.adobedtm.com https://www.adobe.com/marketingtech/ https://use.typekit.net https://www.google.com/
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 74 63 68 61 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 20 68 74 74 70 73 3a 2f 2f 61 64 6f 62 65 2d 61 70 69 2e 61 72 6b 6f 73 65 6c 61 62 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 6c 69 65 6e 74 2d 61 70 69 2e 61 72 6b 6f 73 65 6c 61 62 73 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3b 20 20 69 6d 67 2d 73 72 63 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 20 68 74 74 70 3a 2f 2f 73 74 61 74 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 20 68 74 74 70 73 3a 2f 2f 70 70 73 2d 73 74 61 67 65 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 61 75 74 68 2d 63 69 2d 73 74 61 74 69 Data Ascii: tcha.net https://www.recaptcha.net https://adobe-api.arkoselabs.com https://client-api.arkoselabs.com https://accounts.google.com/; img-src 'self' https://stats.adobe.com/ http://stats.adobe.com/ https://pps-stage.services.adobe.com https://auth-ci-stati
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 61 64 6f 62 65 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 73 73 6f 2e 73 32 73 74 61 67 65 68 61 6e 63 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 64 65 6c 65 67 61 74 65 64 2e 69 64 65 6e 74 69 74 79 2d 73 74 61 67 65 2e 61 64 6f 62 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 66 65 64 65 72 61 74 65 64 69 64 2d 6e 61 31 2d 73 74 67 31 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 66 65 64 65 72 61 74 65 64 2f 20 68 74 74 70 73 3a 2f 2f 61 75 74 68 2d 61 70 69 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 64 65 6c 65 67 61 74 65 64 2e 61 64 6f 62 65 6c 6f 67 69 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 63 2d 61 70 69 2d 64 61 74 61 2e 61 64 6f 62 65 2e 69 6f 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 65 72 2e 6d 65 Data Ascii: adobe.io https://sso.s2stagehance.com https://delegated.identity-stage.adobe.com https://federatedid-na1-stg1.services.adobe.com/federated/ https://auth-api.services.adobe.com https://delegated.adobelogin.com https://cc-api-data.adobe.io https://server.me
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 73 2d 46 6f 6f 74 65 72 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 2e 43 61 6e 76 61 73 2d 4c 61 79 6f 75 74 20 2e 43 61 6e 76 61 73 2d 47 72 69 64 2e 43 61 6e 76 61 73 2d 47 72 69 64 2d 2d 72 65 76 65 72 73 65 2d 64 63 70 20 2e 43 61 6e 76 61 73 2d 43 6f 6e 74 65 78 74 20 7b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 20 31 35 3b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 73 70 61 6e 3a 20 37 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 20 38 20 2f 20 31 32 3b 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 Data Ascii: s-Footer {display: none;} @media screen and (min-width: 1024px) { .Canvas-Layout .Canvas-Grid.Canvas-Grid--reverse-dcp .Canvas-Context {-ms-grid-column: 15;-ms-grid-column-span: 7;grid-column: 8 / 12;} } @media screen and
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 6e 73 2d 43 6f 6e 74 61 69 6e 65 72 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 64 69 74 69 6f 6e 3d 27 69 73 2d 72 6f 75 6e 64 27 5d 20 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 3d 27 72 65 67 75 6c 61 72 27 5d 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 23 53 6f 63 69 61 6c 42 75 74 74 6f 6e 73 2d 43 6f 6e 74 61 69 6e 65 72 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 64 69 74 69 6f 6e 3d 27 69 73 2d 72 6f 75 6e 64 27 5d 20 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 3d 27 72 6f 75 6e 64 27 5d 20 7b 20 64 69 Data Ascii: ns-Container[data-social-buttons-container-condition='is-round'] [data-social-buttons-container='regular'] { display: none; } #SocialButtons-Container[data-social-buttons-container-condition='is-round'] [data-social-buttons-container='round'] { di
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 6e 2d 2d 63 74 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 34 37 33 65 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 34 37 33 65 36 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 65 73 74 20 2e 43 61 6e 76 61 73 20 2e 43 61 6e 76 61 73 2d 42 61 63 6b 67 72 6f 75 6e 64 2c 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 65 73 74 20 2e 43 61 6e 76 61 73 20 2e 43 61 6e 76 61 73 2d 47 72 69 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 38 30 38 30 38 3b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 31 30 70 78 29 7b 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 65 73 74 20 2e 43 61 6e 76 61 73 20 2e 43 61 6e 76 61 73 2d 42 61 63 6b 67 72 6f 75 6e 64 7b 62 Data Ascii: n--cta{background-color:#1473e6;border-color:#1473e6;color:#fff;}.spectrum--darkest .Canvas .Canvas-Background,.spectrum--darkest .Canvas .Canvas-Grid{background:#080808;}@media screen and (min-width: 510px){.spectrum--darkest .Canvas .Canvas-Background{b
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 6d 6f 7a 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 6f 7a 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 77 65 Data Ascii: webkit-align-items:center;-moz-box-align:center;align-items:center;-ms-flex-pack:center;-webkit-box-pack:center;-webkit-justify-content:center;-moz-box-pack:center;justify-content:center;overflow:visible;margin:0;border-style:solid;text-transform:none;-we
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 7d 2e 43 61 6e 76 61 73 2d 4c 61 79 6f 75 74 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 67 72 69 64 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 73 3a 36 30 70 78 20 6d 69 6e 2d 63 6f 6e 74 65 6e 74 20 6d 69 6e 6d 61 78 28 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2c 31 66 72 29 20 6d 69 6e 6d 61 78 28 33 35 70 78 2c 6d 69 6e 2d 63 6f 6e 74 65 6e 74 29 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 72 6f 77 73 3a 36 30 70 78 20 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 63 6f 6e 74 65 6e 74 20 6d 69 6e 6d 61 78 28 2d 77 65 62 6b 69 74 2d 6d 69 6e Data Ascii: scrolling:touch;overflow-x:hidden;overflow-y:auto}.Canvas-Layout{display:-ms-grid;display:grid;position:relative;-ms-grid-rows:60px min-content minmax(min-content,1fr) minmax(35px,min-content);grid-template-rows:60px -webkit-min-content minmax(-webkit-min
2024-04-23 12:27:12 UTC	1369	IN	Data Raw: 69 64 2d 63 6f 6c 75 6d 6e 2d 73 70 61 6e 3a 33 3b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 31 2f 34 7d 2e 43 61 6e 76 61 73 2d 4c 61 79 6f 75 74 20 2e 43 61 6e 76 61 73 2d 48 65 61 64 65 72 7b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 31 3b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 2d 73 70 61 6e 3a 31 3b 67 72 69 64 2d 72 6f 77 3a 31 2f 32 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 70 78 7d 2e 43 61 6e 76 61 73 2d 4c 61 79 6f 75 74 20 2e 43 61 6e 76 61 73 2d 46 6f 6f 74 65 72 7b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 34 3b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 2d 73 70 61 6e 3a 31 3b 67 72 69 64 2d 72 6f 77 3a 34 2f 35 7d 2e 43 61 6e 76 61 73 2d 47 72 69 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 Data Ascii: id-column-span:3;grid-column:1/4}.Canvas-Layout .Canvas-Header{-ms-grid-row:1;-ms-grid-row-span:1;grid-row:1/2;min-height:60px}.Canvas-Layout .Canvas-Footer{-ms-grid-row:4;-ms-grid-row-span:1;grid-row:4/5}.Canvas-Grid{display:block;-webkit-box-pack:center

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49735	20.88.206.205	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:13 UTC	607	OUT	POST /api/browser/edge/navigate/3 HTTP/1.1 Host: nav-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 2026 Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoieWxDcmZGMW9EWHMyNXl5alhPdktDQT09IiwgImhhc2giOiJxZzBSclkyQzJVYz0ifQ== Content-Type: application/json; charset=utf-8 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-04-23 12:27:13 UTC	2026	OUT	Data Raw: 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 20 45 64 67 2f 31 31 37 2e 30 2e 32 30 34 35 2e 34 37 22 2c 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a Data Ascii: {"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47","identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4Mij
2024-04-23 12:27:13 UTC	264	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:13 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2082 Connection: close Server: Kestrel Cache-Control: max-age=0, private Request-Context: appId=cid-v1:68ed2408-46f3-4e32-b9aa-2544a61aa301
2024-04-23 12:27:13 UTC	2082	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 63 61 63 68 65 22 2c 22 6b 65 79 22 3a 7b 22 75 72 69 22 3a 22 69 6d 73 2d 6e 61 31 2e 61 64 6f 62 65 6c 6f 67 69 6e 2e 63 6f 6d 22 2c 22 69 6e 68 65 72 69 74 61 6e 63 65 22 3a 22 61 6c 6c 22 7d 2c 22 6d 61 78 41 67 65 22 3a 31 30 30 38 30 30 30 30 30 30 30 30 2c 22 73 65 72 76 65 72 43 6f 6e 74 65 78 74 22 3a 22 31 3b 63 35 66 61 61 64 35 39 2d 61 32 65 33 2d 33 31 66 32 2d 62 38 36 65 2d 61 61 66 39 35 38 65 31 32 38 32 34 3b 50 48 53 48 3a 30 30 35 3b 37 45 2d 30 35 22 2c 22 72 65 73 70 6f 6e 73 65 43 61 74 65 67 6f 72 79 22 3a 22 41 6c 6c 6f 77 65 64 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 24 74 79 70 65 22 3a 22 61 6c 6c 6f 77 22 7d 7d 2c 7b 22 24 74 79 70 65 22 3a 22 64 61 74 61 22 2c Data Ascii: {"actions":[{"$type":"cache","key":{"uri":"ims-na1.adobelogin.com","inheritance":"all"},"maxAge":100800000000,"serverContext":"1;c5faad59-a2e3-31f2-b86e-aaf958e12824;PHSH:005;7E-05","responseCategory":"Allowed","result":{"$type":"allow"}},{"$type":"data",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49736	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:13 UTC	1740	OUT	GET /a9bc07eb5/styles.c7b051d2.css HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:13 UTC	1107	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:13 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Fri, 12 Apr 2024 09:21:48 GMT etag: W/"eaedadb701c7f040ebe18b8521489f2f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: 2B58V6QOVgaNMzg3f7JOMLAAX4Ul3yun vary: Accept-Encoding x-cache: Miss from cloudfront via: 1.1 b10bc83e806604a91e7e9956de2a9242.cloudfront.net (CloudFront) x-amz-cf-pop: ATL58-P9 x-amz-cf-id: ItdM57L_q9hmpeffS4HRfWi-geWiwAR1Xf8pP4EWcIg__PhM03oM5w== x-xss-protection: 1; mode=block x-frame-options: DENY referrer-policy: no-referrer-when-downgrade content-security-policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 356399 Expires: Tue, 30 Apr 2024 12:27:13 GMT Server: cloudflare CF-RAY: 878dd8b1189b53b9-ATL
2024-04-23 12:27:13 UTC	262	IN	Data Raw: 37 62 32 63 0d 0a 2e 41 63 74 69 6f 6e 4c 69 73 74 2d 49 74 65 6d 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 31 36 70 78 20 32 34 70 78 20 31 30 70 78 7d 2e 41 63 74 69 6f 6e 4c 69 73 74 2d 49 74 65 6d 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 41 63 74 69 6f 6e 4c 69 73 74 2d 49 74 65 6d 5f 5f 63 6f 6e 74 61 69 6e 65 72 2d 6e 6f 2d 70 61 64 64 69 6e 67 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 2d 77 65 62 6b 69 74 2d 6a 75 Data Ascii: 7b2c.ActionList-Item__container{padding:24px 16px 24px 10px}.ActionList-Item__container,.ActionList-Item__container-no-padding{display:-webkit-box;display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex;-webkit-box-pack:justify;-webkit-ju
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 2d 6d 6f 7a 2d 62 6f 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 6d 6f 7a 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 43 61 72 64 4c 61 79 6f Data Ascii: ontent:space-between;-moz-box-pack:justify;-ms-flex-pack:justify;justify-content:space-between;-webkit-box-align:center;-webkit-align-items:center;-moz-box-align:center;-ms-flex-align:center;align-items:center}@media screen and (min-width:768px){.CardLayo
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 69 67 68 74 3a 31 30 70 78 7d 2e 73 70 65 63 74 72 75 6d 2d 55 49 49 63 6f 6e 2d 43 68 65 76 72 6f 6e 44 6f 77 6e 4d 65 64 69 75 6d 7b 77 69 64 74 68 3a 31 30 70 78 3b 68 65 69 67 68 74 3a 36 70 78 7d 2e 73 70 65 63 74 72 75 6d 2d 55 49 49 63 6f 6e 2d 43 68 65 76 72 6f 6e 52 69 67 68 74 4d 65 64 69 75 6d 7b 77 69 64 74 68 3a 36 70 78 3b 68 65 69 67 68 74 3a 31 30 70 78 7d 2e 73 70 65 63 74 72 75 6d 2d 55 49 49 63 6f 6e 2d 43 68 65 76 72 6f 6e 52 69 67 68 74 53 6d 61 6c 6c 7b 77 69 64 74 68 3a 36 70 78 3b 68 65 69 67 68 74 3a 38 70 78 7d 2e 73 70 65 63 74 72 75 6d 2d 55 49 49 63 6f 6e 2d 43 6f 72 6e 65 72 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 35 70 78 3b 68 65 69 67 68 74 3a 35 70 78 7d 2e 73 70 65 63 74 72 75 6d 2d 55 49 49 63 6f 6e 2d 43 72 6f 73 Data Ascii: ight:10px}.spectrum-UIIcon-ChevronDownMedium{width:10px;height:6px}.spectrum-UIIcon-ChevronRightMedium{width:6px;height:10px}.spectrum-UIIcon-ChevronRightSmall{width:6px;height:8px}.spectrum-UIIcon-CornerTriangle{width:5px;height:5px}.spectrum-UIIcon-Cros
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 78 20 23 31 34 37 61 66 33 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 23 31 34 37 61 66 33 7d 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 3d 74 72 75 65 5d 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 74 72 75 65 5d 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 64 69 73 74 61 6e 63 65 64 2d 69 63 6f 6e 3d 74 72 75 65 5d 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 73 70 65 63 74 72 75 6d Data Ascii: x #147af3;box-shadow:0 0 0 2px #147af3}.spectrum-ActionButton[data-social-button=true][data-social-white-background=true][data-social-distanced-icon=true]{display:-webkit-box;display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex}.spectrum
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 23 31 38 37 37 66 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 36 36 66 65 35 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 3d 74 72 75 65 5d 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 70 72 6f 76 69 64 65 72 3d 66 61 63 65 62 6f 6f 6b 5d 3a 6e 6f 74 28 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 74 72 75 65 5d 29 3a 68 6f 76 65 72 20 73 76 67 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 3d 74 72 75 65 5d 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 70 Data Ascii: #1877f2;border-color:#166fe5;color:#fff}.spectrum-ActionButton[data-social-button=true][data-social-button-provider=facebook]:not([data-social-white-background=true]):hover svg{fill:#fff}.spectrum-ActionButton[data-social-button=true][data-social-button-p
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 74 6f 6e 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 74 79 70 65 3d 72 6f 75 6e 64 2d 62 75 74 74 6f 6e 5d 2e 69 73 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 74 79 70 65 3d 72 6f 75 6e 64 2d 62 75 74 74 6f 6e 5d 20 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 74 79 70 65 3d 72 6f 75 6e 64 2d 62 75 74 74 6f 6e 5d 5b 64 61 74 61 2d 73 6f 63 69 61 6c 2d 62 75 74 74 6f 6e 2d 66 75 6e 63 74 69 6f 6e 3d 67 6f 6f 67 6c 65 2d 69 6d 67 5d 7b 62 6f 72 64 Data Ascii: ton[data-social-button-type=round-button].is-selected:hover{background-color:#fff;border-color:#fff;color:#fff}.spectrum-ActionButton[data-social-button-type=round-button] [data-social-button-type=round-button][data-social-button-function=google-img]{bord
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 75 6d 2d 54 6f 6f 6c 74 69 70 2d 6c 61 62 65 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 38 30 70 78 7d 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2c 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2c 2e 73 70 65 63 74 72 75 6d 2d 43 6c 65 61 72 42 75 74 74 6f 6e 2c 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2c 2e 73 70 65 63 74 72 75 6d 2d 4c 6f 67 69 63 42 75 74 74 6f 6e 2c 2e 73 70 65 63 74 72 75 6d 2d 54 6f 6f 6c 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d Data Ascii: um-Tooltip-label{max-width:180px}.spectrum-Button--block{display:block}.spectrum-ActionButton,.spectrum-Button,.spectrum-ClearButton,.spectrum-FieldButton,.spectrum-LogicButton,.spectrum-Tool{display:-ms-inline-flexbox;display:-webkit-inline-box;display:-
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 65 61 73 65 2d 6f 75 74 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 33 73 20 65 61 73 65 2d 6f 75 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 64 6f 62 65 2d 63 6c 65 61 6e 2d 75 78 2c 61 64 6f 62 65 2d 63 6c 65 61 6e 2c 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 3a Data Ascii: ease-out,-webkit-box-shadow .13s ease-out;text-decoration:none;font-family:adobe-clean-ux,adobe-clean,Source Sans Pro,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,sans-serif;line-height:1.3;cursor:pointer}.spectrum-ActionButton:focus,.spectrum-Button:
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2c 2e 73 70 65 63 74 72 75 6d 2d 54 6f 6f 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 Data Ascii: .spectrum-Button{-webkit-appearance:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.spectrum-ActionButton,.spectrum-Tool{position:relative;height:32px;min-width:32px;padding:0 6px;border-width:1px;border-radius:4
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 3a 34 30 30 7d 2e 73 70 65 63 74 72 75 6d 2d 4c 6f 67 69 63 42 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 33 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 Data Ascii: :400}.spectrum-LogicButton{height:24px;padding:8px;border-width:2px;border-radius:4px;font-size:14px;font-weight:700;line-height:0}.spectrum-FieldButton{height:32px;font-family:inherit;font-weight:400;font-size:14px;line-height:normal;-webkit-font-smoothi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49738	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:13 UTC	1778	OUT	GET /img/generic/adobe_logo_black.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:13 UTC	1112	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 06 Mar 2024 13:09:46 GMT ETag: W/"e36799e0084267aa804e9b470de17094" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: MjeMd7oHaGbwZs7BwQ92QqCa370QSmIF Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5cabc8d73bac46f75ce624c7173d34f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: j1qUFksQg_qELGwjrtakNQu5Li900qCekKpgHy-L4mgQOV2Yr78u9w== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 490971 Expires: Tue, 30 Apr 2024 12:27:13 GMT Server: cloudflare CF-RAY: 878dd8b149c044d0-ATL
2024-04-23 12:27:13 UTC	257	IN	Data Raw: 39 35 31 0d 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 27 37 30 27 20 68 65 69 67 68 74 3d 27 31 38 27 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 35 33 2e 37 35 20 31 31 38 2e 31 31 22 20 66 6f 63 75 73 61 62 6c 65 3d 27 66 61 6c 73 65 27 3e 0a 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 32 30 32 2c 38 35 2e 32 36 6c 2d 34 2e 38 39 2c 31 35 2e 30 38 61 31 2e 31 2c 31 2e 31 2c 30 2c 30 2c 31 2d 31 2e 31 32 2e 38 32 48 31 38 34 2e 31 32 63 2d 2e 37 31 2c 30 2d 2e 39 32 2d 2e 34 31 2d 2e 38 31 2d 31 4c 32 30 33 2e 37 2c 34 31 2e Data Ascii: 951<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width='70' height='18' viewBox="0 0 453.75 118.11" focusable='false'> <path d="M202,85.26l-4.89,15.08a1.1,1.1,0,0,1-1.12.82H184.12c-.71,0-.92-.41-.81-1L203.7,41.
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 61 31 38 2e 38 39 2c 31 38 2e 38 39 2c 30 2c 30 2c 30 2c 31 2d 36 2e 32 32 2e 36 38 2e 36 38 2c 30 2c 30 2c 31 2c 2e 36 31 2d 2e 37 31 68 31 36 2e 33 31 63 2e 35 31 2c 30 2c 2e 37 31 2e 31 2e 38 32 2e 36 31 6c 32 33 2e 31 34 2c 36 35 2e 32 35 63 2e 32 2e 35 31 2e 31 2e 39 32 2d 2e 35 31 2e 39 32 48 32 33 31 2e 38 34 61 31 2c 31 2c 30 2c 30 2c 31 2d 31 2e 31 33 2d 2e 37 31 6c 2d 35 2e 32 2d 31 35 2e 31 39 5a 6d 31 39 2e 37 38 2d 31 32 2e 37 35 63 2d 32 2d 36 2e 37 33 2d 36 2e 31 32 2d 31 39 2e 30 36 2d 38 2e 30 35 2d 32 36 2e 33 68 2d 2e 31 63 2d 31 2e 36 34 2c 36 2e 38 33 2d 35 2e 33 31 2c 31 38 2d 38 2c 32 36 2e 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 2e 30 37 20 2d 36 2e 35 31 Data Ascii: a18.89,18.89,0,0,0,1-6.22.68.68,0,0,1,.61-.71h16.31c.51,0,.71.1.82.61l23.14,65.25c.2.51.1.92-.51.92H231.84a1,1,0,0,1-1.13-.71l-5.2-15.19Zm19.78-12.75c-2-6.73-6.12-19.06-8.05-26.3h-.1c-1.64,6.83-5.31,18-8,26.3Z" transform="translate(-6.07 -6.51
2024-04-23 12:27:13 UTC	766	IN	Data Raw: 33 2c 36 31 2e 35 2c 33 38 31 2e 31 36 2c 36 31 2e 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 2e 30 37 20 2d 36 2e 35 31 29 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 34 32 38 2e 31 31 2c 37 39 2e 35 35 63 2e 35 31 2c 35 2e 38 31 2c 34 2e 35 39 2c 31 30 2e 36 2c 31 34 2e 35 38 2c 31 30 2e 36 61 33 31 2e 34 31 2c 33 31 2e 34 31 2c 30 2c 30 2c 30 2c 31 32 2e 35 34 2d 32 2e 33 35 63 2e 33 31 2d 2e 32 2e 36 31 2d 2e 31 2e 36 31 2e 35 31 56 39 38 63 30 2c 2e 37 31 2d 2e 32 2c 31 2d 2e 37 31 2c 31 2e 32 32 2d 34 2e 30 38 2c 31 2e 39 34 2d 38 2e 35 36 2c 33 2d 31 35 2e 36 2c 33 2d 31 39 2e 31 37 2c 30 2d 32 35 2e 38 39 2d 31 33 2e 31 35 2d 32 Data Ascii: 3,61.5,381.16,61.5Z" transform="translate(-6.07 -6.51)"/> <path d="M428.11,79.55c.51,5.81,4.59,10.6,14.58,10.6a31.41,31.41,0,0,0,12.54-2.35c.31-.2.61-.1.61.51V98c0,.71-.2,1-.71,1.22-4.08,1.94-8.56,3-15.6,3-19.17,0-25.89-13.15-2
2024-04-23 12:27:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49739	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:13 UTC	1717	OUT	GET /a9bc07eb5/scripts.js HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:13 UTC	1121	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 12 Apr 2024 09:21:47 GMT etag: W/"56ed333845ae6d10aa6a393f2aa84721" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: fHrrTkdmdYdOmf8qHMGoJOHJ9B7qAJGZ vary: Accept-Encoding x-cache: Miss from cloudfront via: 1.1 8cc62371ef931970b0880452dcb94e50.cloudfront.net (CloudFront) x-amz-cf-pop: ATL58-P9 x-amz-cf-id: k7LvkmW1Z1NkJxCG7hRfMr-W5YymVMdQAkV5BLbu0mRnKHyEgR7eRA== x-xss-protection: 1; mode=block x-frame-options: DENY referrer-policy: no-referrer-when-downgrade content-security-policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 356399 Expires: Tue, 30 Apr 2024 12:27:13 GMT Server: cloudflare CF-RAY: 878dd8b209d8b074-ATL
2024-04-23 12:27:13 UTC	248	IN	Data Raw: 37 62 31 66 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 63 72 69 70 74 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 6e 63 74 Data Ascii: 7b1f/! For license information please see scripts.js.LICENSE.txt /!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=funct
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 72 2e 74 3d 66 75 6e 63 74 Data Ascii: ion(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=funct
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 74 75 72 6e 20 78 72 7d 29 29 2c 72 2e 64 28 74 2c 22 69 73 4f 62 73 65 72 76 61 62 6c 65 53 65 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 72 7d 29 29 2c 72 2e 64 28 74 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 51 74 7d 29 29 2c 72 2e 64 28 74 2c 22 6f 62 73 65 72 76 61 62 6c 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 7d 29 29 2c 72 2e 64 28 74 2c 22 63 6f 6d 70 75 74 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 7d 29 29 2c 72 2e 64 28 74 2c 22 69 73 4f 62 73 65 72 76 61 62 6c 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 74 7d 29 29 2c 72 2e 64 28 74 2c 22 69 73 4f 62 73 65 72 76 61 62 6c Data Ascii: turn xr})),r.d(t,"isObservableSet",(function(){return Tr})),r.d(t,"transaction",(function(){return Qt})),r.d(t,"observable",(function(){return re})),r.d(t,"computed",(function(){return ae})),r.d(t,"isObservable",(function(){return Lt})),r.d(t,"isObservabl
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 58 74 7d 29 29 2c 72 2e 64 28 74 2c 22 67 65 74 44 65 70 65 6e 64 65 6e 63 79 54 72 65 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 74 7d 29 29 2c 72 2e 64 28 74 2c 22 67 65 74 4f 62 73 65 72 76 65 72 54 72 65 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 74 7d 29 29 2c 72 2e 64 28 74 2c 22 5f 72 65 73 65 74 47 6c 6f 62 61 6c 53 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 7d 29 29 2c 72 2e 64 28 74 2c 22 5f 67 65 74 47 6c 6f 62 61 6c 53 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 65 7d 29 29 2c 72 2e 64 28 74 2c 22 67 65 74 44 65 62 75 67 4e 61 6d 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: ction(){return Xt})),r.d(t,"getDependencyTree",(function(){return Ot})),r.d(t,"getObserverTree",(function(){return Ct})),r.d(t,"_resetGlobalState",(function(){return $e})),r.d(t,"_getGlobalState",(function(){return Le})),r.d(t,"getDebugName",(function(){r
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 6f 2e 65 72 72 6f 72 7d 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 3d 65 2e 63 6f 6e 63 61 74 28 73 28 61 72 67 75 6d 65 6e 74 73 5b 74 5d 29 29 3b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 75 3d 5b 5d 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 75 29 3b 76 61 72 20 6c 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 2b 2b 4d 65 2e 6d 6f 62 78 47 75 69 64 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ally{if(o)throw o.error}}return a}function c(){for(var e=[],t=0;t<arguments.length;t++)e=e.concat(s(arguments[t]));return e}var u=[];Object.freeze(u);var l={};function p(){return"undefined"!=typeof window?window:e}function d(){return++Me.mobxGuid}function
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 20 65 3f 22 22 2b 65 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 53 28 65 2c 41 28 29 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 41 28 29 5d 3d 44 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c 22 40 40 74 6f 53 74 72 69 6e 67 54 61 67 22 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 76 61 72 Data Ascii: e?""+e:e}function A(){return"function"==typeof Symbol&&Symbol.iterator\|\|"@@iterator"}function x(e,t){S(e,A(),t)}function T(e){return e[A()]=D,e}function I(){return"function"==typeof Symbol&&Symbol.toStringTag\|\|"@@toStringTag"}function D(){return this}var
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 3a 46 3b 72 65 74 75 72 6e 20 72 5b 65 5d 7c 7c 28 72 5b 65 5d 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 28 74 68 69 73 29 2c 74 68 69 73 5b 65 5d 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 42 28 74 68 69 73 29 2c 74 68 69 73 5b 65 5d 3d 74 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 69 66 28 21 30 21 3d 3d 65 2e 5f 5f 6d 6f 62 78 44 69 64 52 75 6e 4c 61 7a 79 49 6e 69 74 69 61 6c 69 7a 65 72 73 29 7b 76 61 72 20 74 3d 65 2e 5f 5f 6d 6f 62 78 44 65 63 6f 72 61 74 6f 72 73 3b 69 66 28 74 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 62 28 65 2c 22 5f 5f 6d 6f 62 78 44 69 64 52 75 6e 4c 61 7a 79 49 6e 69 74 69 61 6c 69 7a Data Ascii: :F;return r[e]\|\|(r[e]={configurable:!0,enumerable:t,get:function(){return B(this),this[e]},set:function(t){B(this),this[e]=t}})}function B(e){if(!0!==e.__mobxDidRunLazyInitializers){var t=e.__mobxDecorators;if(t)for(var r in b(e,"__mobxDidRunLazyInitializ
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 44 65 63 6f 72 61 74 6f 72 3a 76 6f 69 64 20 30 7d 2c 4b 3d 7b 64 65 65 70 3a 21 31 2c 6e 61 6d 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 44 65 63 6f 72 61 74 6f 72 3a 76 6f 69 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 47 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 7b 6e 61 6d 65 3a 65 2c 64 65 65 70 3a 21 30 7d 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 44 65 63 6f 72 61 74 6f 72 3f 65 2e 64 65 66 61 75 6c 74 44 65 63 6f 72 61 74 6f 72 2e 65 6e 68 61 6e 63 65 72 3a 21 31 3d 3d 3d 65 2e 64 65 65 70 3f 48 3a 7a 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 47 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 Data Ascii: efaultDecorator:void 0},K={deep:!1,name:void 0,defaultDecorator:void 0};function Y(e){return null==e?G:"string"==typeof e?{name:e,deep:!0}:e}function J(e){return e.defaultDecorator?e.defaultDecorator.enhancer:!1===e.deep?H:z}Object.freeze(G),Object.freeze
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 6e 65 28 22 73 68 61 6c 6c 6f 77 4f 62 6a 65 63 74 22 29 2c 72 65 2e 6f 62 6a 65 63 74 28 65 2c 7b 7d 2c 7b 6e 61 6d 65 3a 74 2c 64 65 65 70 3a 21 31 7d 29 7d 2c 72 65 66 3a 51 2c 73 68 61 6c 6c 6f 77 3a 5a 2c 64 65 65 70 3a 58 2c 73 74 72 75 63 74 3a 65 65 7d 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 72 65 74 75 72 6e 20 58 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 4c 74 28 65 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 76 28 65 29 3f 72 65 2e 6f 62 6a 65 63 74 28 65 2c 74 2c 72 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 72 Data Ascii: ypeof arguments[1]&&ne("shallowObject"),re.object(e,{},{name:t,deep:!1})},ref:Q,shallow:Z,deep:X,struct:ee},re=function(e,t,r){if("string"==typeof arguments[1])return X.apply(null,arguments);if(Lt(e))return e;var n=v(e)?re.object(e,t,r):Array.isArray(e)?r
2024-04-23 12:27:13 UTC	1369	IN	Data Raw: 26 26 6e 2e 6c 65 6e 67 74 68 7c 7c 30 2c 73 3d 6e 65 77 20 41 72 72 61 79 28 61 29 3b 69 66 28 61 3e 30 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 3b 63 2b 2b 29 73 5b 63 5d 3d 6e 5b 63 5d 3b 72 74 28 7b 74 79 70 65 3a 22 61 63 74 69 6f 6e 22 2c 6e 61 6d 65 3a 65 2c 6f 62 6a 65 63 74 3a 72 2c 61 72 67 75 6d 65 6e 74 73 3a 73 7d 29 7d 76 61 72 20 75 3d 78 65 28 29 3b 56 65 28 29 3b 76 61 72 20 6c 3d 70 65 28 21 30 29 3b 72 65 74 75 72 6e 7b 70 72 65 76 44 65 72 69 76 61 74 69 6f 6e 3a 75 2c 70 72 65 76 41 6c 6c 6f 77 53 74 61 74 65 43 68 61 6e 67 65 73 3a 6c 2c 6e 6f 74 69 66 79 53 70 79 3a 6f 2c 73 74 61 72 74 54 69 6d 65 3a 69 7d 7d 28 65 2c 30 2c 72 2c 6e 29 2c 69 3d 21 30 3b 74 72 79 7b 76 61 72 20 61 3d 74 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 72 Data Ascii: &&n.length\|\|0,s=new Array(a);if(a>0)for(var c=0;c<a;c++)s[c]=n[c];rt({type:"action",name:e,object:r,arguments:s})}var u=xe();Ve();var l=pe(!0);return{prevDerivation:u,prevAllowStateChanges:l,notifySpy:o,startTime:i}}(e,0,r,n),i=!0;try{var a=t.apply(r,n);r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49742	20.25.227.174	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:13 UTC	735	OUT	POST /api/browser/edge/data/toptraffic/3 HTTP/1.1 Host: data-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 1129 Accept: application/octet-stream;application/x-patch-bsdiff; Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoiOXE2ZzFTRjlBU0ZRYWUzZktKWGhSUT09IiwgImhhc2giOiJKb0FIZ3BsYnBuMD0ifQ== Content-Type: application/json; charset=utf-8 If-None-Match: "170540185939602997400506234197983529371" Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-04-23 12:27:13 UTC	1129	OUT	Data Raw: 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a 4b 57 34 47 69 43 43 4c 67 67 55 2f 39 75 72 76 78 4b 77 39 44 4a 67 4f 5a 67 41 41 45 4f 54 77 75 61 7a 71 50 79 43 4c 34 33 45 4a 78 44 45 67 39 34 4c 67 41 45 2b 32 79 4e 70 6a 38 51 74 6a 4a 65 73 51 33 75 58 6a 76 47 52 2b 38 66 4e 4e 31 4f 68 57 31 65 45 5a 32 32 38 5a 74 33 76 30 77 47 2b 42 68 54 43 56 35 47 41 68 62 59 33 68 68 48 77 30 46 66 47 2f 53 34 36 74 64 7a 6e 62 75 33 63 53 30 4e 30 6a 77 75 44 74 37 37 46 58 Data Ascii: {"identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4MijKW4GiCCLggU/9urvxKw9DJgOZgAAEOTwuazqPyCL43EJxDEg94LgAE+2yNpj8QtjJesQ3uXjvGR+8fNN1OhW1eEZ228Zt3v0wG+BhTCV5GAhbY3hhHw0FfG/S46tdznbu3cS0N0jwuDt77FX
2024-04-23 12:27:14 UTC	252	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:13 GMT Content-Type: application/octet-stream Content-Length: 460992 Connection: close Server: Kestrel ETag: "638004170464094982" Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-04-23 12:27:14 UTC	16132	IN	Data Raw: 00 01 b7 32 6c 49 bd 35 18 3c 43 00 3b d3 7b 9a 00 08 16 f5 5f 2b 6a 45 e7 a6 60 9a c2 7d 9c 16 00 0c 2d 9e cc 04 23 e9 41 f4 82 16 a9 4b 52 db 00 0c 6c e3 4d 30 2c 73 87 bc fb 29 94 39 d4 c2 00 0c b4 d9 e2 eb e5 8f d8 b5 78 ca fa c6 82 9e 00 0c da 46 f1 62 1d cd 1e ab c5 cd 6a 55 ed dc 00 0e 79 d2 8a 68 27 a0 d5 e5 e5 89 bf 4c 3c 1f 00 12 2a 1f c4 5a 99 f8 2a 25 e9 2a 92 1a f6 5f 00 14 b2 67 12 34 79 75 12 bc d6 99 a8 99 1c cc 00 14 c8 bf 10 27 63 3d b9 cd 49 30 99 bf d3 a1 00 17 f8 9d 81 a3 94 71 57 f8 bf 3c 3a 4e ba d2 00 1a 3c bc a6 55 f9 2c 4d 69 94 e9 c9 5f b9 8c 00 1f 17 b3 27 28 0e f5 55 df 39 10 21 05 ce 96 00 1f bc ff bf d8 75 92 d1 13 89 37 0b 86 dc 34 00 20 98 bc 45 61 f8 b8 0d 34 2e 2b fb 37 39 6b 00 21 54 ca 2d 35 57 fb 9f 21 b8 d7 9a 40 2b Data Ascii: 2lI5<C;{_+jE`}-#AKRlM0,s)9xFbjUyh'L<Z%*_g4yu'c=I0qW<:N<U,Mi_'(U9!u74 Ea4.+79k!T-5W!@+
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: b8 6c 65 b5 81 d7 e8 96 a2 f6 fb f5 08 e9 4a 27 41 5a ef 9e 20 88 b1 dd 92 43 f1 c7 08 f6 31 2a b4 6b b0 d0 7b af f2 6e c0 3b 30 49 08 f7 14 46 2e c2 8e a1 9b 56 f6 89 ff 89 a1 a1 08 f8 86 49 94 74 f7 df c7 92 d3 f1 d5 09 db a4 08 f9 bb 85 2c 48 b7 6a b2 fe 9c 06 4c 91 ba af 08 fb 12 e5 67 95 f2 51 95 31 42 c4 14 92 6c 77 08 fb aa 20 c5 0c 96 4a 9a 6f 2e 40 d4 2b fd 90 08 fe aa 92 f9 b3 b3 8f b8 65 27 9b b9 df 14 f7 09 00 34 db 44 0d dd 66 70 53 8f 0b 31 18 8b ba 09 05 38 28 fa 80 5f eb 56 83 46 d1 dd 83 34 b7 09 06 35 0d 42 c1 3f 91 ee 97 ed f4 31 68 37 32 09 08 35 c9 14 24 10 2f b5 80 ac f7 9a 16 e6 e2 09 08 7a 82 38 a3 08 0b 00 2c 62 9c d0 2e d2 c4 09 09 d1 da a7 a8 16 cd 89 e5 ac fe b9 cc 8e 69 09 0e 20 d3 38 58 e2 6b 84 a1 e7 75 97 ad 75 61 09 0e 4d Data Ascii: leJ'AZ C1*k{n;0IF.VIt,HjLgQ1Blw Jo.@+e'4DfpS18(_VF45B?1h725$/z8,b.i 8XkuuaM
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 88 ca 0d 74 ff b7 03 d5 0b 17 29 2e 12 86 39 8d 65 51 d1 6b 43 f6 37 a6 5e 4e 7e d5 12 8c a6 4c a1 b4 9a f4 6b 69 49 eb 0d 33 90 eb 12 8f 60 36 ec 98 cd 7f 6a 59 fe c5 d1 d5 4b 38 12 92 da 96 3e 8a fd ee fb c5 ac d0 29 b4 8e 13 12 95 25 87 d8 33 f2 c0 16 e8 0f 63 67 d6 78 d1 12 96 03 01 99 d8 95 ea 2c 0a f8 85 62 05 db 93 12 96 52 aa 59 60 de e6 e9 8c 23 d4 b7 c1 34 3d 12 96 bf ae d0 b9 c2 92 db f1 41 07 61 b1 82 5d 12 97 53 89 b5 7c fd 88 82 19 c7 b1 b0 0f af ed 12 98 30 32 6a a5 03 4e 26 db 95 be 1b a9 a3 e2 12 9a ea fe 35 92 c8 f4 3b 7a 18 36 80 cb 78 bf 12 9b 33 a3 9e d9 7b 54 c8 7b da 3b ed a8 dd 25 12 9b 98 d3 83 cc 49 8e 52 58 13 7e 3f 04 d9 af 12 9c 0d 11 dc 93 65 32 c4 f0 f6 a9 12 25 13 25 12 9c 28 31 10 8a f9 38 40 df 1f 08 9f 08 d4 71 12 9f 71 Data Ascii: t).9eQkC7^N~LkiI3`6jYK8>)%3cgx,bRY`#4=Aa]S\|02jN&5;z6x3{T{;%IRX~?e2%%(18@qq
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 8c e6 1b 88 d1 53 7d a1 f2 bc f6 d3 1b bd 38 be aa 88 bb f2 1c 05 de ac 2c b3 63 c3 1b bf d8 bc e5 a8 4c 42 a1 5e 7d 76 56 07 18 dd 1b c1 05 6e 7a a0 f3 27 8e eb 4f 29 e6 e0 a0 2a 1b c2 a1 45 60 4f 19 d0 fa 94 66 c2 31 56 e0 ac 1b c3 58 61 04 7c 91 76 1b 27 0c 2e 05 4d 26 17 1b c4 0f 81 e0 48 ff 13 e9 e7 fd ae 77 76 47 85 1b c5 d5 9a 68 ef 46 53 52 de 8b 1c 3a 7b 4f 53 1b cc c2 c4 df 4d dc 18 9f 1a a6 aa 47 f5 9f 2e 1b cd 8c 32 11 55 08 6c 9c 2f 0b 09 34 58 ca d2 1b cf 2c 48 15 0b dd b9 a9 cc 90 e8 14 76 e1 c7 1b d1 50 e1 1f 03 b2 ff 0f ab b3 c3 a2 cf c2 1a 1b d6 7a 97 41 b9 a0 2a 37 7b ba 9a 0a 00 47 56 1b da a2 08 31 23 96 3c 24 0a b0 10 2f 5e b6 c3 1b dc 15 6b ce f9 b8 64 db f8 fb 84 2a d6 02 9b 1b dc 58 1e e3 44 3f fb c2 e7 7f 97 d4 41 5f 1c 1b dc 83 Data Ascii: S}8,cLB^}vVnz'O)E`Of1VXa\|v'.M&HwvGhFSR:{OSMG.2Ul/4X,HvPzA7{GV1#<$/^kd*XD?A_
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 9c f0 8f 05 68 32 cf 23 af 0f e9 31 25 17 e2 83 8c a0 e0 45 41 22 69 ae 51 16 97 9e 25 19 94 88 65 65 22 da 5c e4 68 67 07 cf 5f 7a 25 1e 6a 2e 6e bf 40 39 a7 91 dd 9f 82 5c b4 be 25 21 01 14 90 ab fe fa c5 d4 0a 62 0b cd 30 e1 25 21 03 7a 48 db 3d 1f b8 bc 66 91 12 c8 41 7f 25 24 00 6f 09 69 7b 22 bc d0 5a 82 9d c8 cb 00 25 24 76 95 60 1f 20 bf 51 8e ef 43 af 74 27 17 25 24 d0 90 ec 4d 35 f3 3b 75 d1 b6 56 62 63 3e 25 25 bd 14 86 f0 f0 dc 12 c9 55 32 f1 85 66 4f 25 25 de ea a2 0c 7b b9 31 02 c3 fc 10 0f 92 23 25 27 0a 2e 12 37 63 79 36 e7 03 6f 4c 1e 67 7e 25 29 ef 20 dd 60 cb e0 1f 91 82 96 c4 38 ef d3 25 2c 0d 19 1e 65 a3 27 9b 58 e2 44 e3 80 93 37 25 2c e2 18 e3 78 51 0e b2 f9 62 26 e5 78 8f 9f 25 36 84 bd bb 8f cc a6 bc 42 a8 bf 22 b0 f1 a9 25 3a 54 Data Ascii: h2#1%EA"iQ%ee"\hg_z%j.n@9\%!b0%!zH=fA%$oi{"Z%$v` QCt'%$M5;uVbc>%%U2fO%%{1#%'.7cy6oLg~%) `8%,e'XD7%,xQb&x%6B"%:T
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: b6 07 8f 44 9d 29 36 4f 29 8a 7d 80 2e 1d 98 b7 c7 17 54 cd a1 2b c2 e9 29 21 98 f9 2e 1f 4a 0d ee 13 3f 5a 00 ff e7 0d f0 d4 1c 86 2e 21 27 d4 ff 4a 83 22 1e 86 3f 93 6b 62 a1 0e 2e 25 e1 37 a1 70 d4 f6 b3 17 bd e9 dd 8d 2a 44 2e 26 32 0d f4 82 4c f6 14 9e 97 92 23 fa 52 37 2e 2a 40 96 f4 4d 34 89 21 f2 49 39 e8 d3 d3 19 2e 2b ef 39 f1 8a 4a 7e 28 b9 d0 be 00 6f 35 68 2e 2e 95 d3 bd e3 e7 a0 d6 d0 25 5e 0d b7 b5 a5 2e 31 ce 53 a9 54 e0 3b 3c 2f fc 4d eb 0f a5 e1 2e 33 1e 46 e8 3a 01 30 91 17 49 f3 33 11 46 79 2e 36 b7 bb 07 e4 6d 92 d5 42 49 d7 e5 49 f4 85 2e 36 e8 96 57 36 97 bb 40 7a 3b ca 8a e0 7e 53 2e 3a 1e f2 97 75 d6 ae 4f f5 85 eb 36 38 65 e5 2e 3a 59 df c9 6e 75 92 ac 40 ac 59 a6 fd e4 1c 2e 3b 8e 5c 94 1d 75 39 54 06 13 6b 6e 7f ef 30 2e 43 e8 Data Ascii: D)6O)}.T+)!.J?Z.!'J"?kb.%7pD.&2L#R7.@M4!I9.+9J~(o5h..%^.1ST;</M.3F:0I3Fy.6mBII.6W6@z;~S.:uO68e.:Ynu@Y.;\u9Tkn0.C
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 02 f3 ca e4 05 cb a0 be 15 69 62 32 37 3c 37 3b db 81 8a b2 df cf ef b1 79 3f f8 ae 37 3d a3 01 e8 95 76 a1 63 78 77 2e 93 42 3d 4f 37 3e c4 08 a5 37 4f 84 43 dc 19 00 a9 8f 2e 0d 37 3f 82 55 cb cd 06 b9 0c 0d 94 f9 4f d6 82 e8 37 44 09 28 b8 33 ef b7 ee 6b 4c 90 ee e0 d1 3a 37 44 83 9a 56 2d 6a 58 ea 6b e5 8f 6a 1d 17 23 37 47 0f 55 f8 2b 1c 30 89 3a 1d e2 21 89 b7 42 37 4b 86 38 d0 cd 9f 96 62 d8 da bf d5 15 ed cb 37 4e 81 34 2b 0e ea ab 6f ae 29 15 59 32 ae 46 37 50 d2 0c 2a e2 ca 59 ec 21 86 70 f9 7a 6c d1 37 55 32 b2 91 f0 e7 b8 47 d0 f7 0f 64 90 d9 51 37 56 ce 44 24 61 58 d7 f8 d4 0d 8b fe 3d b0 27 37 58 1f 24 d2 a5 24 9c d7 5c 5a 71 f9 e9 f2 a3 37 58 9d d0 f0 06 3a 05 be 08 d9 90 bc 18 0d 71 37 5d 04 71 81 05 8e b6 9b 24 f2 54 35 1b 18 46 37 62 eb Data Ascii: ib27<7;y?7=vcxw.B=O7>7OC.7?UO7D(3kL:7DV-jXkj#7GU+0:!B7K8b7N4+o)Y2F7P*Y!pzl7U2GdQ7VD$aX='7X$$\Zq7X:q7]q$T5F7b
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 30 9b b9 2f 98 88 40 3b cc 98 d2 59 40 6d c4 d7 67 2a f1 8a f6 d5 d3 92 a9 c6 13 1d 40 71 5f 29 26 14 e2 86 f2 b1 3c d6 fc 07 07 4a 40 77 d4 86 06 be 80 6f b2 fd e4 19 fe 6b 6a 94 40 78 4d f5 b9 67 58 78 83 29 63 04 29 22 98 8d 40 7a 85 3f 10 18 78 19 d3 be 45 8d 0e 49 7b bb 40 7b 5d c5 55 97 e5 9d 35 9d 27 93 51 1d be 21 40 7d 42 88 f1 ca 9d ba 2a 28 3a f8 72 71 ba c7 40 7e 4d cf f4 13 b8 8f f1 9c e6 e4 a8 50 74 d0 40 80 bb 51 db 04 52 b7 b2 f3 5f dc db 6d 4b de 40 88 e2 91 a0 6c 67 8c d2 0b 9f d2 91 ca 6d 22 40 8a b9 d3 6a f9 07 64 05 ea 52 dc 44 82 0b 38 40 8b 54 ce 67 df 8c a3 48 2d 96 f6 ed e4 cf 78 40 8e 78 fd f9 d7 db ac 12 a0 80 27 db 9f 14 42 40 90 00 78 66 ff 66 2b 58 9f 18 13 aa 3d 6e b3 40 90 fa a1 0b 8e ee 2b 73 4b 59 c6 c9 b1 84 9b 40 93 53 Data Ascii: 0/@;Y@mg@q_)&<J@wokj@xMgXx)c)"@z?xEI{@{]U5'Q!@}B(:rq@~MPt@QR_mK@lgm"@jdRD8@TgH-x@x'B@xff+X=n@+sKY@S
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 66 82 7d 26 60 5e 84 ec 72 2a af 39 49 bb 12 c2 0a 6a 68 a1 f1 aa 3c 93 f9 79 13 0e 49 bb 81 dd 8c 7e 5d 19 6b 54 60 33 c1 1e 70 56 49 bc df 84 ed 14 a3 5d 07 06 25 84 6a 95 02 e0 49 bd eb 48 24 83 1e f1 e0 29 fe 9e e6 22 da 07 49 c1 2d 65 e8 79 f6 32 c8 9b 5b 3f 1a a8 9d b9 49 c4 33 af 97 7a e9 a1 ba ed 12 d0 a3 40 1e 42 49 c5 09 f1 9f 2c bb 61 75 14 cf 80 9c 0e 85 9e 49 c8 81 16 cb ae 60 54 25 eb 75 fe e4 b5 16 8c 49 cc 62 7c 10 80 46 f7 71 86 18 7b bd ea 45 5f 49 cd ad e9 e7 ee e9 a2 7e 24 2e 10 93 70 b0 ad 49 d1 bc ac 01 05 b1 9b be b4 f8 4e e6 0c 0d ac 49 d2 4b be 25 0a bd 70 d0 f7 10 c2 d7 38 8b f2 49 d4 c5 71 4c 7f 7a 2a 83 c3 c3 50 d2 c2 4c 3e 49 d5 40 eb ee b7 40 f4 16 fe b4 e7 35 d0 25 e3 49 d6 e7 89 68 04 ba a1 f5 37 3f 51 0a 5e cc 25 49 da b4 Data Ascii: f}&`^r9Ijh<yI~]kT`3pVI]%jIH$)"I-ey2[?I3z@BI,auI`T%uIb\|Fq{E_I~$.pINIK%p8IqLzPL>I@@5%Ih7?Q^%I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49741	20.25.227.174	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:13 UTC	724	OUT	POST /api/browser/edge/data/bloomfilter/x/3 HTTP/1.1 Host: data-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 1129 Accept: application/octet-stream;application/x-patch-bsdiff; Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoiOXE2ZzFTRjlBU0ZRYWUzZktKWGhSUT09IiwgImhhc2giOiJKb0FIZ3BsYnBuMD0ifQ== Content-Type: application/json; charset=utf-8 If-None-Match: "636976985063396749.rel.v2" Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-04-23 12:27:13 UTC	1129	OUT	Data Raw: 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a 4b 57 34 47 69 43 43 4c 67 67 55 2f 39 75 72 76 78 4b 77 39 44 4a 67 4f 5a 67 41 41 45 4f 54 77 75 61 7a 71 50 79 43 4c 34 33 45 4a 78 44 45 67 39 34 4c 67 41 45 2b 32 79 4e 70 6a 38 51 74 6a 4a 65 73 51 33 75 58 6a 76 47 52 2b 38 66 4e 4e 31 4f 68 57 31 65 45 5a 32 32 38 5a 74 33 76 30 77 47 2b 42 68 54 43 56 35 47 41 68 62 59 33 68 68 48 77 30 46 66 47 2f 53 34 36 74 64 7a 6e 62 75 33 63 53 30 4e 30 6a 77 75 44 74 37 37 46 58 Data Ascii: {"identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4MijKW4GiCCLggU/9urvxKw9DJgOZgAAEOTwuazqPyCL43EJxDEg94LgAE+2yNpj8QtjJesQ3uXjvGR+8fNN1OhW1eEZ228Zt3v0wG+BhTCV5GAhbY3hhHw0FfG/S46tdznbu3cS0N0jwuDt77FX
2024-04-23 12:27:13 UTC	248	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:13 GMT Content-Type: application/octet-stream Content-Length: 57 Connection: close Server: Kestrel ETag: "638343870221005468" Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-04-23 12:27:13 UTC	57	IN	Data Raw: 39 00 00 00 0a 00 00 00 6d 75 72 6d 75 72 33 00 0d 00 00 00 e7 00 00 00 0c 00 00 00 2c 4d f0 68 e4 05 e3 5a 14 87 bb 38 10 5c e2 c4 94 3c 26 4c 69 f1 48 99 f4 5b b2 3f 6d Data Ascii: 9murmur3,MhZ8\<&LiH[?m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49740	20.25.227.174	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:13 UTC	699	OUT	POST /api/browser/edge/data/settings/3 HTTP/1.1 Host: data-edge.smartscreen.microsoft.com Connection: keep-alive Content-Length: 1129 Accept: application/octet-stream;application/x-patch-bsdiff; Authorization: SmartScreenHash eyJhdXRoSWQiOiJjMmU0ZjljYS1lZjYwLTQyY2EtOTAyZi1mNzgwZTFmMTk2YTciLCAia2V5IjoiOXE2ZzFTRjlBU0ZRYWUzZktKWGhSUT09IiwgImhhc2giOiJKb0FIZ3BsYnBuMD0ifQ== Content-Type: application/json; charset=utf-8 If-None-Match: "2.0-0" Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-04-23 12:27:13 UTC	1129	OUT	Data Raw: 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 75 73 65 72 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 47 42 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 73 74 6f 6d 49 64 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 49 64 54 69 63 6b 65 74 22 3a 22 74 3d 47 77 41 57 41 64 39 74 42 41 41 55 34 4d 69 6a 4b 57 34 47 69 43 43 4c 67 67 55 2f 39 75 72 76 78 4b 77 39 44 4a 67 4f 5a 67 41 41 45 4f 54 77 75 61 7a 71 50 79 43 4c 34 33 45 4a 78 44 45 67 39 34 4c 67 41 45 2b 32 79 4e 70 6a 38 51 74 6a 4a 65 73 51 33 75 58 6a 76 47 52 2b 38 66 4e 4e 31 4f 68 57 31 65 45 5a 32 32 38 5a 74 33 76 30 77 47 2b 42 68 54 43 56 35 47 41 68 62 59 33 68 68 48 77 30 46 66 47 2f 53 34 36 74 64 7a 6e 62 75 33 63 53 30 4e 30 6a 77 75 44 74 37 37 46 58 Data Ascii: {"identity":{"user":{"locale":"en-GB"},"device":{"id":null,"customId":null,"onlineIdTicket":"t=GwAWAd9tBAAU4MijKW4GiCCLggU/9urvxKw9DJgOZgAAEOTwuazqPyCL43EJxDEg94LgAE+2yNpj8QtjJesQ3uXjvGR+8fNN1OhW1eEZ228Zt3v0wG+BhTCV5GAhbY3hhHw0FfG/S46tdznbu3cS0N0jwuDt77FX
2024-04-23 12:27:14 UTC	302	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:13 GMT Content-Type: application/octet-stream Content-Length: 130439 Connection: close Server: Kestrel ETag: "2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1" Request-Context: appId=cid-v1:46ea1a4d-29cb-4e7e-a1ff-735721467fe3
2024-04-23 12:27:14 UTC	16082	IN	Data Raw: 7b 0d 0a 20 20 22 67 65 6f 69 64 4d 61 70 73 22 3a 20 7b 0d 0a 20 20 20 20 22 61 75 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 75 73 74 72 61 6c 69 61 2e 73 6d 61 72 74 73 63 72 65 65 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 22 2c 0d 0a 20 20 20 20 22 63 68 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 77 69 74 7a 65 72 6c 61 6e 64 2e 73 6d 61 72 74 73 63 72 65 65 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 22 2c 0d 0a 20 20 20 20 22 65 75 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 75 72 6f 70 65 2e 73 6d 61 72 74 73 63 72 65 65 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 22 2c 0d 0a 20 20 20 20 22 66 66 6c 34 22 3a 20 22 68 74 74 70 73 3a 2f 2f 75 6e 69 74 65 64 73 74 61 74 65 73 31 2e 73 73 2e 77 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 2f 22 2c 0d 0a Data Ascii: { "geoidMaps": { "au": "https://australia.smartscreen.microsoft.com/", "ch": "https://switzerland.smartscreen.microsoft.com/", "eu": "https://europe.smartscreen.microsoft.com/", "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 30 39 63 34 37 36 32 37 62 63 35 33 33 62 35 39 32 34 61 30 35 35 61 30 34 62 63 34 63 33 33 65 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 39 2e 35 38 33 34 34 30 31 37 37 34 34 37 38 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 65 36 33 34 65 62 32 30 64 62 35 30 38 65 33 61 33 31 62 36 31 34 38 31 61 32 35 31 62 66 39 33 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 30 2e 33 33 37 30 36 38 35 39 32 37 38 32 37 33 35 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: { "key": "09c47627bc533b5924a055a04bc4c33e", "value": 9.58344017744784 }, { "key": "e634eb20db508e3a31b61481a251bf93", "value": -0.337068592782735
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 30 37 37 37 34 37 33 33 30 39 35 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 31 32 62 62 65 66 63 30 35 64 35 31 34 32 65 37 65 62 36 38 36 66 61 64 38 64 65 61 39 32 31 31 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 30 35 37 31 37 37 35 33 31 31 38 30 39 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 63 65 35 66 62 38 64 66 31 32 35 61 34 37 32 31 64 31 64 66 33 32 38 62 63 36 66 32 64 64 65 61 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a Data Ascii: 07774733095 }, { "key": "12bbefc05d5142e7eb686fad8dea9211", "value": -1.05717753118094 }, { "key": "ce5fb8df125a4721d1df328bc6f2ddea", "value":
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 20 2d 31 2e 39 30 31 33 34 36 37 39 37 33 36 34 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 66 32 33 35 64 63 66 36 62 34 32 39 62 61 34 31 36 64 63 65 37 34 64 34 62 36 66 62 63 34 37 62 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 31 2e 32 36 30 31 38 31 31 38 35 36 30 38 38 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 63 38 66 31 37 64 37 34 30 33 61 63 35 66 66 32 38 39 36 61 37 31 33 61 37 31 37 35 65 64 31 39 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 Data Ascii: -1.9013467973642 }, { "key": "f235dcf6b429ba416dce74d4b6fbc47b", "value": 1.26018118560884 }, { "key": "c8f17d7403ac5ff2896a713a7175ed19", "va
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 36 62 64 32 65 65 33 36 63 30 33 66 36 66 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 35 2e 38 35 39 38 36 34 33 39 33 34 36 35 37 36 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 65 66 64 32 61 66 36 30 63 38 35 30 31 39 33 31 63 62 39 63 37 33 36 62 35 61 64 37 34 66 36 35 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 33 2e 39 35 36 39 39 35 33 35 33 36 34 30 30 33 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 32 63 38 34 38 35 34 38 64 34 36 30 63 Data Ascii: 6bd2ee36c03f6f", "value": 5.85986439346576 }, { "key": "efd2af60c8501931cb9c736b5ad74f65", "value": 3.95699535364003 }, { "key": "2c848548d460c
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 20 22 6b 65 79 22 3a 20 22 65 31 36 38 36 30 37 38 64 31 62 36 30 64 33 35 31 64 61 35 61 38 37 35 34 33 61 32 61 36 36 33 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 37 2e 35 30 36 36 35 35 32 34 32 36 32 35 35 31 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 33 61 33 34 31 37 66 35 66 32 30 61 30 33 61 39 38 39 37 33 36 38 39 38 38 37 66 62 37 32 61 32 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 37 34 39 32 32 35 31 37 36 34 32 37 39 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: "key": "e1686078d1b60d351da5a87543a2a663", "value": 7.50665524262551 }, { "key": "3a3417f5f20a03a98973689887fb72a2", "value": -1.74922517642794 }, {
2024-04-23 12:27:14 UTC	16384	IN	Data Raw: 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 62 30 64 61 32 37 35 35 32 30 39 31 38 65 32 33 64 64 36 31 35 65 32 61 37 34 37 35 32 38 66 31 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 30 2e 39 37 36 31 34 30 37 39 32 39 31 35 33 37 33 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 63 66 61 62 31 62 61 38 63 36 37 63 37 63 38 33 38 64 62 39 38 64 36 36 36 66 30 32 61 31 33 32 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 31 31 37 38 37 35 38 36 30 34 35 30 39 34 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a Data Ascii: { "key": "b0da275520918e23dd615e2a747528f1", "value": -0.976140792915373 }, { "key": "cfab1ba8c67c7c838db98d666f02a132", "value": -1.11787586045094 },
2024-04-23 12:27:14 UTC	16053	IN	Data Raw: 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 64 65 39 35 62 34 33 62 63 65 65 62 34 62 39 39 38 61 65 64 34 61 65 64 35 63 65 66 31 61 65 37 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 2d 31 2e 30 33 33 31 39 35 35 36 37 30 31 31 37 37 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6b 65 79 22 3a 20 22 61 64 64 65 63 34 32 36 39 33 32 65 37 31 33 32 33 37 30 30 61 66 61 31 39 31 31 66 38 66 31 63 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 76 61 6c 75 65 22 3a 20 30 2e 31 36 30 39 38 34 33 32 38 39 38 35 39 32 34 0d Data Ascii: }, { "key": "de95b43bceeb4b998aed4aed5cef1ae7", "value": -1.03319556701177 }, { "key": "addec426932e71323700afa1911f8f1c", "value": 0.160984328985924

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49743	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:40 UTC	1752	OUT	GET /a9bc07eb5/en_US/messages.json HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:40 UTC	1115	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close last-modified: Fri, 12 Apr 2024 09:21:47 GMT etag: W/"e4a2f3815922242298a8d201199d36f3" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: zTbujRaTHR3WCCN4TqU9vP7R9TsaHSyd vary: Accept-Encoding x-cache: Miss from cloudfront via: 1.1 03c76f41c7551fa29cffd38a109c9dc2.cloudfront.net (CloudFront) x-amz-cf-pop: ATL58-P9 x-amz-cf-id: bVyqYkur9WhqN98-_M0V_RKHm_Vbr6vThYJVICHtLRNNmLxrLZ6C0Q== x-xss-protection: 1; mode=block x-frame-options: DENY referrer-policy: no-referrer-when-downgrade content-security-policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 356726 Expires: Tue, 30 Apr 2024 12:27:40 GMT Server: cloudflare CF-RAY: 878dd9586957676b-ATL
2024-04-23 12:27:40 UTC	254	IN	Data Raw: 37 62 32 35 0d 0a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 73 22 3a 7b 22 62 65 68 61 6e 63 65 22 3a 22 42 65 68 61 6e 63 65 22 2c 22 73 74 6f 63 6b 22 3a 22 53 74 6f 63 6b 22 2c 22 63 72 65 61 74 69 76 65 43 6c 6f 75 64 22 3a 22 43 72 65 61 74 69 76 65 20 43 6c 6f 75 64 22 7d 2c 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 62 61 63 6b 42 74 6e 22 3a 22 42 61 63 6b 22 2c 22 67 6f 42 61 63 6b 42 74 6e 22 3a 22 47 6f 20 62 61 63 6b 22 2c 22 72 65 73 65 6e 64 22 3a 22 52 65 73 65 6e 64 22 2c 22 6c 65 61 72 6e 4d 6f 72 65 41 63 63 6f 75 6e 74 54 79 70 65 73 22 3a 22 4c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 61 63 63 6f 75 6e 74 20 74 79 70 65 73 22 2c 22 72 65 73 65 6e 64 43 6f 64 65 22 3a 22 52 65 73 65 6e 64 20 43 6f 64 65 22 2c 22 72 65 63 65 69 76 65 43 6f Data Ascii: 7b25{"attributions":{"behance":"Behance","stock":"Stock","creativeCloud":"Creative Cloud"},"common":{"backBtn":"Back","goBackBtn":"Go back","resend":"Resend","learnMoreAccountTypes":"Learn more about account types","resendCode":"Resend Code","receiveCo
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 64 65 41 6e 6f 74 68 65 72 57 61 79 22 3a 22 52 65 63 65 69 76 65 20 63 6f 64 65 20 61 6e 6f 74 68 65 72 20 77 61 79 22 2c 22 62 61 63 6b 22 3a 22 53 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 64 69 66 66 65 72 65 6e 74 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 22 73 65 6c 65 63 74 41 63 63 6f 75 6e 74 22 3a 22 53 65 6c 65 63 74 20 61 6e 20 61 63 63 6f 75 6e 74 22 2c 22 63 68 61 6e 67 65 41 63 63 6f 75 6e 74 22 3a 22 53 69 67 6e 20 69 6e 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 22 2c 22 63 6f 6e 74 69 6e 75 65 22 3a 22 43 6f 6e 74 69 6e 75 65 22 2c 22 63 6f 6e 74 69 6e 75 65 57 69 74 68 45 6d 61 69 6c 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 65 6d 61 69 6c 22 2c 22 73 69 67 6e 49 6e 57 69 74 68 50 61 73 73 6b 65 Data Ascii: deAnotherWay":"Receive code another way","back":"Sign in with a different email address","selectAccount":"Select an account","changeAccount":"Sign in to a different account","continue":"Continue","continueWithEmail":"Continue with email","signInWithPasske
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 61 6e 79 46 61 69 6c 65 64 41 74 74 65 6d 70 74 73 22 3a 22 57 65 20 68 61 76 65 20 72 65 63 65 69 76 65 64 20 74 6f 6f 20 6d 61 6e 79 20 69 6e 76 61 6c 69 64 20 63 6f 64 65 73 2e 20 50 6c 65 61 73 65 20 77 61 69 74 20 31 35 20 6d 69 6e 75 74 65 73 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 7d 2c 22 63 6f 64 65 22 3a 7b 22 6e 6f 74 52 65 63 65 69 76 65 64 22 3a 22 44 69 64 6e 27 74 20 72 65 63 65 69 76 65 20 79 6f 75 72 20 63 6f 64 65 3f 22 2c 22 72 65 73 65 6e 64 22 3a 22 52 65 73 65 6e 64 20 63 6f 64 65 22 7d 7d 2c 22 63 6f 75 6e 74 72 69 65 73 22 3a 7b 22 41 46 22 3a 22 41 66 67 68 61 6e 69 73 74 61 6e 22 2c 22 41 4c 22 3a 22 41 6c 62 61 6e 69 61 22 2c 22 44 5a 22 3a 22 41 6c 67 65 72 69 61 22 2c 22 41 53 22 3a 22 41 6d 65 72 69 63 61 6e 20 53 61 Data Ascii: anyFailedAttempts":"We have received too many invalid codes. Please wait 15 minutes and try again."},"code":{"notReceived":"Didn't receive your code?","resend":"Resend code"}},"countries":{"AF":"Afghanistan","AL":"Albania","DZ":"Algeria","AS":"American Sa
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 69 61 22 2c 22 46 4b 22 3a 22 46 61 6c 6b 6c 61 6e 64 20 49 73 6c 61 6e 64 73 20 28 4d 61 6c 76 69 6e 61 73 29 22 2c 22 46 4f 22 3a 22 46 61 72 6f 65 20 49 73 6c 61 6e 64 73 22 2c 22 46 4a 22 3a 22 46 69 6a 69 22 2c 22 46 49 22 3a 22 46 69 6e 6c 61 6e 64 22 2c 22 46 52 22 3a 22 46 72 61 6e 63 65 22 2c 22 47 46 22 3a 22 46 72 65 6e 63 68 20 47 75 69 61 6e 61 22 2c 22 50 46 22 3a 22 46 72 65 6e 63 68 20 50 6f 6c 79 6e 65 73 69 61 22 2c 22 47 41 22 3a 22 47 61 62 6f 6e 22 2c 22 47 4d 22 3a 22 47 61 6d 62 69 61 22 2c 22 47 45 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 44 45 22 3a 22 47 65 72 6d 61 6e 79 22 2c 22 47 48 22 3a 22 47 68 61 6e 61 22 2c 22 47 49 22 3a 22 47 69 62 72 61 6c 74 61 72 22 2c 22 47 52 22 3a 22 47 72 65 65 63 65 22 2c 22 47 4c 22 3a 22 47 72 Data Ascii: ia","FK":"Falkland Islands (Malvinas)","FO":"Faroe Islands","FJ":"Fiji","FI":"Finland","FR":"France","GF":"French Guiana","PF":"French Polynesia","GA":"Gabon","GM":"Gambia","GE":"Georgia","DE":"Germany","GH":"Ghana","GI":"Gibraltar","GR":"Greece","GL":"Gr
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 6e 69 61 22 2c 22 4e 5a 22 3a 22 4e 65 77 20 5a 65 61 6c 61 6e 64 22 2c 22 4e 49 22 3a 22 4e 69 63 61 72 61 67 75 61 22 2c 22 4e 45 22 3a 22 4e 69 67 65 72 22 2c 22 4e 47 22 3a 22 4e 69 67 65 72 69 61 22 2c 22 4e 55 22 3a 22 4e 69 75 65 22 2c 22 4e 46 22 3a 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 2c 22 4e 4f 22 3a 22 4e 6f 72 77 61 79 22 2c 22 4f 4d 22 3a 22 4f 6d 61 6e 22 2c 22 50 4b 22 3a 22 50 61 6b 69 73 74 61 6e 22 2c 22 50 53 22 3a 22 50 61 6c 65 73 74 69 6e 69 61 6e 20 54 65 72 72 69 74 6f 72 79 22 2c 22 50 41 22 3a 22 50 61 6e 61 6d 61 22 2c 22 50 47 22 3a 22 50 61 70 75 61 20 4e 65 77 20 47 75 69 6e 65 61 22 2c 22 50 59 22 3a 22 50 61 72 61 67 75 61 79 22 2c 22 50 45 22 3a 22 50 65 72 75 22 2c 22 50 48 22 3a 22 50 68 69 6c 69 70 70 69 6e Data Ascii: nia","NZ":"New Zealand","NI":"Nicaragua","NE":"Niger","NG":"Nigeria","NU":"Niue","NF":"Norfolk Island","NO":"Norway","OM":"Oman","PK":"Pakistan","PS":"Palestinian Territory","PA":"Panama","PG":"Papua New Guinea","PY":"Paraguay","PE":"Peru","PH":"Philippin
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 59 22 3a 22 55 72 75 67 75 61 79 22 2c 22 55 5a 22 3a 22 55 7a 62 65 6b 69 73 74 61 6e 22 2c 22 56 55 22 3a 22 56 61 6e 75 61 74 75 22 2c 22 56 41 22 3a 22 56 61 74 69 63 61 6e 20 43 69 74 79 22 2c 22 56 45 22 3a 22 56 65 6e 65 7a 75 65 6c 61 22 2c 22 56 4e 22 3a 22 56 69 65 74 6e 61 6d 22 2c 22 56 47 22 3a 22 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 2c 20 42 72 69 74 69 73 68 22 2c 22 57 46 22 3a 22 57 61 6c 6c 69 73 20 61 6e 64 20 46 75 74 75 6e 61 22 2c 22 45 48 22 3a 22 57 65 73 74 65 72 6e 20 53 61 68 61 72 61 22 2c 22 59 45 22 3a 22 59 65 6d 65 6e 22 2c 22 5a 4d 22 3a 22 5a 61 6d 62 69 61 22 2c 22 5a 57 22 3a 22 5a 69 6d 62 61 62 77 65 22 7d 2c 22 64 61 74 65 22 3a 7b 22 79 65 61 72 22 3a 22 59 65 61 72 22 2c 22 6d 6f 6e 74 68 22 3a 22 4d 6f 6e 74 Data Ascii: Y":"Uruguay","UZ":"Uzbekistan","VU":"Vanuatu","VA":"Vatican City","VE":"Venezuela","VN":"Vietnam","VG":"Virgin Islands, British","WF":"Wallis and Futuna","EH":"Western Sahara","YE":"Yemen","ZM":"Zambia","ZW":"Zimbabwe"},"date":{"year":"Year","month":"Mont
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 65 22 3a 22 54 49 4d 45 22 2c 22 74 69 74 6c 65 22 3a 22 57 61 69 74 2c 20 74 68 65 72 65 20 6d 69 67 68 74 20 62 65 20 73 6f 6d 65 74 68 69 6e 67 20 73 75 73 70 69 63 69 6f 75 73 22 2c 22 72 65 70 6f 72 74 65 64 22 3a 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 59 6f 75 e2 80 99 76 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 73 75 62 6d 69 74 74 65 64 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 69 6e 63 69 64 65 6e 74 20 74 6f 20 41 64 6f 62 65 2e 20 54 68 69 73 20 77 69 6c 6c 20 68 65 6c 70 20 70 72 65 76 65 6e 74 20 66 75 74 75 72 65 20 68 61 72 6d 66 75 6c 20 69 6e 63 69 64 65 6e 74 73 2e 22 2c 22 74 69 74 6c 65 22 3a 22 54 68 61 6e 6b 73 20 66 6f 72 20 72 65 70 6f 72 74 69 6e 67 22 7d 2c 22 73 75 63 63 65 73 73 22 3a 7b 22 64 Data Ascii: e":"TIME","title":"Wait, there might be something suspicious","reported":{"description":"Youve successfully submitted the details of this incident to Adobe. This will help prevent future harmful incidents.","title":"Thanks for reporting"},"success":{"d
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 20 7b 31 7d 20 69 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2e 22 2c 22 63 6f 6d 70 61 6e 79 4f 72 53 63 68 6f 6f 6c 41 63 63 6f 75 6e 74 43 6c 6f 73 65 64 22 3a 22 59 6f 75 72 20 43 6f 6d 70 61 6e 79 20 6f 72 20 53 63 68 6f 6f 6c 20 41 63 63 6f 75 6e 74 20 68 61 73 20 62 65 65 6e 20 63 6c 6f 73 65 64 2e 20 50 6c 65 61 73 65 20 72 65 76 69 65 77 20 6f 75 72 20 7b 30 7d 20 61 6e 64 20 63 6f 6e 74 61 63 74 20 7b 31 7d 20 69 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2e 22 2c 22 63 6f 6d 70 61 6e 79 4f 72 53 63 68 6f 6f 6c 41 63 63 6f 75 6e 74 44 65 61 63 74 69 76 61 74 65 64 22 3a 22 59 6f 75 72 20 43 6f 6d 70 61 6e 79 20 6f 72 20 53 63 68 6f 6f 6c 20 41 63 63 6f Data Ascii: {1} if you believe this is an error.","companyOrSchoolAccountClosed":"Your Company or School Account has been closed. Please review our {0} and contact {1} if you believe this is an error.","companyOrSchoolAccountDeactivated":"Your Company or School Acco
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 65 74 48 65 6c 70 22 3a 22 47 65 74 20 68 65 6c 70 20 73 69 67 6e 69 6e 67 20 69 6e 22 2c 22 76 69 65 77 4d 6f 72 65 53 6f 63 69 61 6c 50 72 6f 76 69 64 65 72 73 22 3a 22 56 69 65 77 20 6d 6f 72 65 22 7d 2c 22 67 65 74 48 65 6c 70 22 3a 7b 22 67 65 74 48 65 6c 70 50 61 67 65 22 3a 7b 22 74 69 74 6c 65 22 3a 22 47 65 74 20 68 65 6c 70 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 66 20 79 6f 75 27 72 65 20 68 61 76 69 6e 67 20 69 73 73 75 65 73 20 73 69 67 6e 69 6e 67 20 69 6e 2c 20 74 72 79 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 6f 70 74 69 6f 6e 73 2e 20 46 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 68 65 6c 70 2c 20 7b 30 7d 72 65 61 64 20 6d 6f 72 65 20 61 62 6f 75 74 20 63 6f 6d 6d 6f 6e 20 73 69 67 6e 20 69 6e 20 69 73 73 75 65 73 7b 31 Data Ascii: etHelp":"Get help signing in","viewMoreSocialProviders":"View more"},"getHelp":{"getHelpPage":{"title":"Get help","description":"If you're having issues signing in, try the following options. For additional help, {0}read more about common sign in issues{1
2024-04-23 12:27:40 UTC	1369	IN	Data Raw: 6e 74 20 68 61 73 20 62 65 65 6e 20 6c 6f 63 6b 65 64 20 64 75 65 20 74 6f 20 6d 75 6c 74 69 70 6c 65 20 66 61 69 6c 65 64 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 73 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 20 5c 6e 41 66 74 65 72 20 77 61 69 74 69 6e 67 2c 20 69 66 20 79 6f 75 20 73 74 69 6c 6c 20 64 6f 20 6e 6f 74 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2c 20 73 65 6c 65 63 74 20 5c 22 46 6f 72 67 6f 74 20 70 61 73 73 77 6f 72 64 5c 22 20 61 6e 64 20 66 6f 6c 6c 6f 77 20 74 68 65 20 70 72 6f 6d 70 74 73 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 20 52 65 70 65 61 74 65 64 20 66 61 69 6c 65 64 20 6c 6f 67 69 6e 20 61 74 74 65 6d 70 74 73 20 77 69 6c 6c 20 74 72 Data Ascii: nt has been locked due to multiple failed login attempts. Please try again later. \nAfter waiting, if you still do not remember your password, select \"Forgot password\" and follow the prompts to reset your password. Repeated failed login attempts will tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49745	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:42 UTC	1980	OUT	POST /signin/v1/audit HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive Content-Length: 146 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/json Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 sec-ch-ua-platform: "Windows" Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:42 UTC	146	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 46 46 2d 54 65 73 74 22 2c 22 65 6e 76 4e 61 6d 65 22 3a 22 70 72 6f 64 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 43 72 65 61 74 69 76 65 43 6c 6f 75 64 49 6e 73 74 61 6c 6c 65 72 5f 76 31 5f 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 55 53 49 32 5f 52 45 44 49 52 45 43 54 5f 54 4f 5f 49 4d 53 5f 45 4e 41 42 4c 45 44 20 69 73 20 73 65 65 6e 20 61 73 20 46 41 4c 53 45 20 69 6e 20 54 65 6d 70 65 73 74 22 7d Data Ascii: {"name":"FF-Test","envName":"prod","clientId":"CreativeCloudInstaller_v1_0","message":"SUSI2_REDIRECT_TO_IMS_ENABLED is seen as FALSE in Tempest"}
2024-04-23 12:27:42 UTC	712	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:42 GMT Content-Length: 0 Connection: close CF-Ray: 878dd966eac64529-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://auth.services.adobe.com Set-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: X-Debug-ID, X-IMS-Nonce, X-IMS-Authentication-State, X-IMS-Authentication-State-Encrypted x-debug-id: e4363269-aa3c-4a76-ac82-d28ff821c378 x-via: e-va6 Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49748	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:42 UTC	2049	OUT	POST /signin/v2/tokens?credential=sso&checkReauth=false&puser=&t2Only=false&euid=&pbaPolicy= HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/json Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 sec-ch-ua-platform: "Windows" Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:42 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-04-23 12:27:42 UTC	960	IN	HTTP/1.1 401 Unauthorized Date: Tue, 23 Apr 2024 12:27:42 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 878dd966f838ad58-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://auth.services.adobe.com Set-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: X-Debug-ID, X-IMS-Nonce, X-IMS-Authentication-State, X-IMS-Authentication-State-Encrypted x-debug-id: e4363269-aa3c-4a76-ac82-d28ff821c378 x-newrelic-app-data: PxQFUlRUCQsTVVFUAQQEU1EDBBFORDQHUjZKA1ZLVVFHDFYPbU5gEhZfWQYlDFZHQgsNDlJDa0kSA2ocFgkIB14RGEpod2dmGkcVUR9RH1JKBgdTXlQMAgJWTVAbEw8HXFRQUlAHAgMCUw9RWQ0WHlUEVRJUPA== x-via: e-va6 Server: cloudflare
2024-04-23 12:27:42 UTC	92	IN	Data Raw: 35 36 0d 0a 7b 22 65 72 72 6f 72 43 6f 64 65 22 3a 22 69 6e 76 61 6c 69 64 5f 73 73 6f 5f 69 6e 66 6f 22 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 55 73 65 72 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 20 69 73 20 6e 75 6c 6c 20 6f 72 20 65 6d 70 74 79 22 7d 0d 0a Data Ascii: 56{"errorCode":"invalid_sso_info","errorMessage":"User session cookie is null or empty"}
2024-04-23 12:27:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49746	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:42 UTC	1956	OUT	GET /signin/v1/context/v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee/en_US HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 sec-ch-ua-mobile: ?0 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:42 UTC	758	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:42 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 878dd9670a256754-ATL CF-Cache-Status: DYNAMIC Set-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers x-debug-id: e4363269-aa3c-4a76-ac82-d28ff821c378 x-newrelic-app-data: PxQFUlRUCQsTVVFUAQQEU1EDBBFORDQHUjZKA1ZLVVFHDFYPbU5gEhZfWQYlDFZHQgsNDlJDa0kSAGocAQkNFlUaTD4XQ1ddXRFcGUU+WgYZahgaCgxbUlwBHEIfdnIyTRMaA0xWT1IeUghUCg4HAQJWFVEdQ1UHUA4HV1JXWwVVBwVVVlMVSgJQWkAHOw== x-via: e-va6 Server: cloudflare
2024-04-23 12:27:42 UTC	611	IN	Data Raw: 35 62 35 0d 0a 7b 22 63 6f 6e 74 65 78 74 49 64 22 3a 22 76 3a 32 2c 73 2c 62 67 3a 6b 61 69 7a 65 6e 2c 30 66 30 30 36 64 62 30 2d 39 64 36 38 2d 31 31 65 65 2d 61 63 38 34 2d 34 66 62 36 34 61 30 32 66 66 65 65 22 2c 22 63 6f 6e 74 65 78 74 73 22 3a 5b 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 5f 55 53 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 22 3a 22 6b 61 69 7a 65 6e 22 2c 22 64 63 70 43 6f 6e 74 61 69 6e 65 72 22 3a 7b 22 66 6c 6f 61 74 22 3a 22 6c 65 66 74 22 2c 22 68 65 61 64 65 72 22 3a 7b 22 69 63 6f 6e 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 77 41 41 41 41 71 43 41 59 41 41 41 44 49 33 62 6b Data Ascii: 5b5{"contextId":"v:2,s,bg:kaizen,0f006db0-9d68-11ee-ac84-4fb64a02ffee","contexts":[{"locale":"en_US","context":{"backgroundImage":"kaizen","dcpContainer":{"float":"left","header":{"icon":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACwAAAAqCAYAAADI3bk
2024-04-23 12:27:42 UTC	857	IN	Data Raw: 78 71 4e 54 77 6a 73 52 79 6d 46 47 6c 4a 72 74 4f 6f 2f 6c 63 4c 39 6f 65 50 56 48 67 45 30 64 6b 6f 79 79 65 77 30 79 44 31 54 66 62 62 39 50 61 42 6e 6c 72 46 77 4e 65 6e 30 71 72 64 56 31 54 45 78 72 61 4c 61 6c 68 2f 35 49 59 38 4d 5a 63 52 71 31 62 49 74 48 71 41 46 37 52 61 63 44 38 35 55 4a 74 66 4d 35 4b 44 65 2b 6f 56 6d 6f 67 52 6e 68 72 65 51 6e 31 78 30 4d 71 4c 61 6a 4e 70 5a 7a 55 38 49 35 45 69 32 36 6c 71 4e 6a 57 50 36 59 6b 68 31 63 53 42 56 35 4c 4a 6e 62 74 66 79 2f 61 6c 35 41 6f 4d 41 76 4f 4c 64 2b 6e 42 46 2f 4e 62 72 55 4f 44 6b 6b 4f 72 79 51 47 54 47 64 67 77 62 6e 56 4f 76 68 41 33 4f 4c 45 67 4e 33 52 70 5a 30 74 76 6e 69 71 74 74 6c 6a 53 44 5a 42 49 73 41 45 4f 6e 72 39 70 72 4f 2f 2b 48 77 55 43 77 2b 48 46 48 6a 44 71 51 Data Ascii: xqNTwjsRymFGlJrtOo/lcL9oePVHgE0dkoyyew0yD1Tfbb9PaBnlrFwNen0qrdV1TExraLalh/5IY8MZcRq1bItHqAF7RacD85UJtfM5KDe+oVmogRnhreQn1x0MqLajNpZzU8I5Ei26lqNjWP6Ykh1cSBV5LJnbtfy/al5AoMAvOLd+nBF/NbrUODkkOryQGTGdgwbnVOvhA3OLEgN3RpZ0tvniqttljSDZBIsAEOnr9prO/+HwUCw+HFHjDqQ
2024-04-23 12:27:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49749	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:42 UTC	1922	OUT	GET /signin/v2/configurations/CreativeCloudInstaller_v1_0 HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 sec-ch-ua-mobile: ?0 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:42 UTC	750	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:42 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 878dd967084953f7-ATL CF-Cache-Status: DYNAMIC Set-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers x-debug-id: e4363269-aa3c-4a76-ac82-d28ff821c378 x-newrelic-app-data: PxQFUlRUCQsTVVFUAQQEU1EDBBFORDQHUjZKA1ZLVVFHDFYPbU5gEhZfWQYlDFZHQgsNDlJDa0kSA2ocAQkNBFkFTRBZTF1dXRZlTkoCXwsBWEMoAh4YG3chNUsVHQdIVB0GHVJWUVcDWg9WABQEHhEGXVZVWAdbUQYGBFFUWQoJRk0EVl1EAzk= x-via: e-va6 Server: cloudflare
2024-04-23 12:27:42 UTC	619	IN	Data Raw: 38 62 66 0d 0a 7b 22 61 6c 6c 6f 77 65 64 41 63 63 6f 75 6e 74 54 79 70 65 73 22 3a 5b 22 66 65 64 65 72 61 74 65 64 22 2c 22 65 6e 74 69 74 6c 65 6d 65 6e 74 22 2c 22 65 6e 74 65 72 70 72 69 73 65 22 2c 22 69 6e 64 69 76 69 64 75 61 6c 22 5d 2c 22 61 63 63 6f 75 6e 74 43 72 65 61 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 76 69 63 65 4f 70 74 49 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 65 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 61 6e 63 65 6c 42 75 74 74 6f 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6a 61 72 76 69 73 56 32 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 66 72 61 75 64 41 69 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 70 61 73 73 77 6f 72 64 6c 65 73 73 4f Data Ascii: 8bf{"allowedAccountTypes":["federated","entitlement","enterprise","individual"],"accountCreationEnabled":true,"deviceOptInEnabled":false,"externalLinksEnabled":true,"cancelButtonEnabled":false,"jarvisV2Enabled":true,"fraudAiEnabled":false,"passwordlessO
2024-04-23 12:27:42 UTC	1369	IN	Data Raw: 2c 22 74 69 6d 65 66 72 61 6d 65 49 6e 76 69 74 65 73 4f 75 74 76 69 74 65 73 22 3a 36 30 34 38 30 30 30 30 30 2c 22 61 73 73 65 74 4d 69 67 72 61 74 69 6f 6e 54 69 6d 65 6f 75 74 22 3a 31 38 30 30 30 30 2c 22 74 79 70 65 31 4d 61 72 6b 65 74 69 6e 67 43 6f 6e 73 65 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 32 65 44 65 66 61 75 6c 74 46 69 6c 74 65 72 22 3a 22 68 61 73 44 4d 45 6e 74 69 74 6c 65 6d 65 6e 74 28 29 20 6f 72 20 68 61 73 44 65 73 6b 74 6f 70 45 6e 74 69 74 6c 65 6d 65 6e 74 28 29 20 6f 72 20 68 61 73 44 43 45 6e 74 69 74 6c 65 6d 65 6e 74 28 29 20 6f 72 20 68 61 73 53 74 6f 63 6b 45 6e 74 69 74 6c 65 6d 65 6e 74 28 29 20 6f 72 20 68 61 73 4c 69 67 68 74 72 6f 6f 6d 45 6e 74 69 74 6c 65 6d 65 6e 74 73 28 29 22 2c 22 74 32 65 41 Data Ascii: ,"timeframeInvitesOutvites":604800000,"assetMigrationTimeout":180000,"type1MarketingConsentEnabled":false,"t2eDefaultFilter":"hasDMEntitlement() or hasDesktopEntitlement() or hasDCEntitlement() or hasStockEntitlement() or hasLightroomEntitlements()","t2eA
2024-04-23 12:27:42 UTC	258	IN	Data Raw: 6c 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 75 73 69 32 46 61 63 65 62 6f 6f 6b 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 75 73 69 32 41 70 70 6c 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 75 73 69 32 4d 69 63 72 6f 73 6f 66 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 75 73 69 32 4c 69 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 73 75 73 69 32 4b 61 6b 61 6f 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 65 78 70 65 72 69 65 6e 63 65 22 3a 22 64 65 6c 65 67 61 74 65 64 22 7d 2c 22 6f 6d 6e 69 74 75 72 65 22 3a 7b 22 72 65 70 6f 72 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 63 63 6f 75 6e 74 73 22 3a 5b 22 61 64 62 69 6d 73 22 2c 22 61 64 62 61 64 6f 62 65 6e 6f 6e 61 63 64 63 70 72 6f 64 22 5d 7d Data Ascii: leEnabled":true,"susi2FacebookEnabled":true,"susi2AppleEnabled":true,"susi2MicrosoftEnabled":true,"susi2LineEnabled":false,"susi2KakaoEnabled":false,"experience":"delegated"},"omniture":{"reportingEnabled":true,"accounts":["adbims","adbadobenonacdcprod"]}
2024-04-23 12:27:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49747	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:42 UTC	1831	OUT	GET /img/social/f_logo_RGB-Blue_58.png HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:42 UTC	1098	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:42 GMT Content-Type: image/png Content-Length: 2465 Connection: close Last-Modified: Wed, 21 Feb 2024 12:00:07 GMT ETag: "4edebe50e0322d9c9a18ae9545ca6eaf" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: lB2nWRXng6NGKQmUqHOUQTge4lXJVaTJ X-Cache: Hit from cloudfront Via: 1.1 216cc93d387142758c190b0491dc538c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: DQPMUpXxVpSjqUwwAoxtAs8Ni36j6_LUW5_CRG-G11Mf3ygLr-wh8g== Age: 491000 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Expires: Tue, 30 Apr 2024 12:27:42 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd9670c0b0711-ATL
2024-04-23 12:27:42 UTC	271	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 82 08 06 00 00 00 8a 03 10 fd 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 09 53 49 44 41 54 78 9c ed 9d 5d 68 5c 45 14 c7 67 77 93 b4 db 74 bb 49 5b 5a 6f b1 74 2b 3e a8 2d 24 05 8b 28 c5 6c c1 97 82 e2 16 df fc c0 14 44 1f fc da 2a c2 82 42 53 45 d8 17 21 05 fb e6 47 f2 a0 f8 52 48 14 f4 49 4d 5e fa 52 85 04 2a 95 0a 6d d6 5a d7 96 a4 cd 66 a9 db e6 63 57 66 7b 16 b7 99 3b 77 ef c7 dc b9 33 f7 9e 1f 2c 1b 76 76 93 9b 3b ff 3d 73 e6 cc cc 39 b1 46 a3 41 10 24 1e f9 3b 80 34 41 21 20 4d 50 08 48 13 14 02 d2 a4 2b ac b7 c1 28 54 b3 84 90 0c 3c 06 09 21 7d f0 f3 1e e6 cd 7c a6 a1 65 86 10 b2 48 08 99 22 84 cc 95 8b a9 39 ee 27 34 25 14 b3 06 a3 50 a5 9d 9c 6d 7b 0c Data Ascii: PNGIHDRpHYs&?SIDATx]h\EgwtI[Zot+>-$(lDBSE!GRHIM^RmZfcWf{;w3,vv;=s9FA$;4A! MPH+(T<!}\|eH"9'4%Pm{
2024-04-23 12:27:42 UTC	1369	IN	Data Raw: b4 15 82 51 a8 d2 6f f9 30 91 d3 f1 9d 68 09 63 82 3e ca c5 d4 62 87 f7 2b 87 56 42 30 0a 55 6a da f3 84 90 9c 43 13 2f 9b 49 10 c4 98 c2 d7 78 0f 5a 08 c1 28 54 87 e1 db 3f c4 34 aa 0d b5 14 54 0c a3 aa fb 15 ca 0a 01 c6 fd 61 b0 00 2a 7f fb ed 32 4e 45 51 2e a6 a6 54 bc 38 e5 84 00 02 c8 c3 23 cd bc 41 7f e8 4c 64 44 35 41 28 25 04 18 02 46 42 62 01 3a 31 0e 82 50 62 c8 50 42 08 30 03 18 d5 d0 07 f0 4a 05 fc 87 91 a0 2f 24 50 21 c0 30 40 6f c2 db 4c 63 b4 28 51 7f 28 c8 e1 22 30 21 40 e4 6f 2c 22 c3 80 5d 4e c1 70 21 3d 0e 11 c8 5a 83 51 a8 52 2b f0 33 8a 80 81 5a c6 29 18 2a a5 22 d5 22 c0 50 30 11 41 5f c0 29 d4 77 c8 cb 0c 48 49 13 02 a8 7c 2a a4 53 42 bf 18 2f 17 53 c3 32 fe 90 14 21 c0 b4 70 14 45 e0 0a 1a 77 c8 f9 ed 37 f8 2e 04 10 c1 97 4c 03 e2 Data Ascii: Qo0hc>b+VB0UjC/IxZ(T?4Ta2NEQ.T8#ALdD5A(%FBb:1PbPB0J/$P!0@oLc(Q("0!@o,"]Np!=ZQR+3Z)""P0A_)wHI\|*SB/S2!pEw7.L
2024-04-23 12:27:42 UTC	825	IN	Data Raw: 45 21 48 e0 ea 62 7d 59 91 4b e1 f6 a9 65 71 2f a3 50 9d 0b 3a b5 1e af bc 5e e7 cf 25 c8 87 4f 6f 60 5e f7 02 fd 66 bf fe 4d cd f1 66 17 9f 2a bb b9 e1 58 b9 98 32 ad b5 d1 69 11 64 22 e8 e2 5d 2a e5 23 a0 a7 a1 cf 5e 5a 63 5e d7 08 6e 0d 2e ab a1 81 58 99 12 44 3b 66 ad 6a 49 5b 0a 01 8a 4a e2 34 32 1c 70 53 eb 11 9b cb d0 5c 73 82 68 85 65 3f da 11 82 a9 73 81 68 c5 a4 d5 b0 60 4b 08 30 ef 34 8d 4f 23 da 60 39 2c d8 12 02 80 56 41 5f 4a 76 b6 1f da 12 02 cc 3d d1 69 d4 13 5b b5 36 9c ec 59 ec 68 5e 10 e5 a8 f0 02 48 5e 84 30 86 7b 19 b5 c3 f6 97 d7 b6 10 c0 eb 44 ab a0 0f 15 5f 84 40 ee 8a 61 04 7d 05 6d c8 77 9a 32 b6 e3 e6 5c 83 b6 85 be 22 44 c9 ae 6f d0 c2 b1 10 e0 0f 60 5c 41 6d fc af 16 0f 68 5b 28 3c 02 4c ba 39 b6 e8 4a 08 10 6d 3c c9 34 20 41 Data Ascii: E!Hb}YKeq/P:^%Oo`^fMfX2id"]#^Zc^n.XD;fjI[J42pS\she?sh`K04O#`9,VA_Jv=i[6Yh^H^0{D_@a}mw2\"Do`\Amh[(<L9Jm<4 A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49744	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:42 UTC	1818	OUT	GET /img/social/apple.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:42 UTC	1102	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:42 GMT Content-Type: image/svg+xml Content-Length: 751 Connection: close last-modified: Wed, 13 Mar 2024 12:28:39 GMT etag: "a23d338c5ab2e6a2eceab9436b376308" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: MCIvOaKSFa97QuCC8173ebK6ELQ4PY2D x-cache: Miss from cloudfront via: 1.1 97b305844cde7654074bc07393573ad0.cloudfront.net (CloudFront) x-amz-cf-pop: ATL58-P9 x-amz-cf-id: lWUKbnt-gGHV9axcF1AVhzlgtVLL9wwnXjmEdnaPkz3ESsVJgvFOQw== x-xss-protection: 1; mode=block x-frame-options: DENY referrer-policy: no-referrer-when-downgrade content-security-policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 590346 Expires: Tue, 30 Apr 2024 12:27:42 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd9670d70add2-ATL
2024-04-23 12:27:42 UTC	267	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 36 2e 30 33 34 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 2e 30 33 34 20 33 32 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 33 35 34 2c 32 32 2e 36 30 38 61 37 2e 32 37 32 2c 37 2e 32 37 32 2c 30 2c 30 2c 31 2c 33 2e 34 36 33 2d 36 2e 31 2c 37 2e 34 34 34 2c 37 2e 34 34 34 2c 30 2c 30 2c 30 2d 35 2e 38 36 35 2d 33 2e 31 37 31 63 2d 32 2e 34 36 38 2d 2e 32 35 39 2d 34 2e 38 36 2c 31 2e 34 37 37 2d 36 2e 31 31 37 2c 31 2e 34 37 37 2d 31 2e 32 38 32 2c 30 2d 33 2e 32 31 38 2d 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="26.034" height="32" viewBox="0 0 26.034 32"><g transform="translate(0 0)"><path d="M31.354,22.608a7.272,7.272,0,0,1,3.463-6.1,7.444,7.444,0,0,0-5.865-3.171c-2.468-.259-4.86,1.477-6.117,1.477-1.282,0-3.218-1.4
2024-04-23 12:27:42 UTC	484	IN	Data Raw: 61 37 2e 38 31 31 2c 37 2e 38 31 31 2c 30 2c 30 2c 30 2d 36 2e 35 37 33 2c 34 2e 30 30 39 63 2d 32 2e 38 34 32 2c 34 2e 39 32 31 2d 2e 37 32 32 2c 31 32 2e 31 35 32 2c 32 2c 31 36 2e 31 32 39 2c 31 2e 33 36 32 2c 31 2e 39 34 38 2c 32 2e 39 35 34 2c 34 2e 31 32 33 2c 35 2e 30 33 37 2c 34 2e 30 34 36 2c 32 2e 30 33 38 2d 2e 30 38 35 2c 32 2e 38 2d 31 2e 33 2c 35 2e 32 36 2d 31 2e 33 2c 32 2e 34 33 38 2c 30 2c 33 2e 31 35 32 2c 31 2e 33 2c 35 2e 32 37 37 2c 31 2e 32 35 31 2c 32 2e 31 38 37 2d 2e 30 33 35 2c 33 2e 35 36 35 2d 31 2e 39 35 36 2c 34 2e 38 38 2d 33 2e 39 32 32 61 31 36 2e 31 30 39 2c 31 36 2e 31 30 39 2c 30 2c 30 2c 30 2c 32 2e 32 33 31 2d 34 2e 35 34 34 2c 37 2e 30 32 37 2c 37 2e 30 32 37 2c 30 2c 30 2c 31 2d 34 2e 32 39 2d 36 2e 34 36 35 5a 22 Data Ascii: a7.811,7.811,0,0,0-6.573,4.009c-2.842,4.921-.722,12.152,2,16.129,1.362,1.948,2.954,4.123,5.037,4.046,2.038-.085,2.8-1.3,5.26-1.3,2.438,0,3.152,1.3,5.277,1.251,2.187-.035,3.565-1.956,4.88-3.922a16.109,16.109,0,0,0,2.231-4.544,7.027,7.027,0,0,1-4.29-6.465Z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49751	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:44 UTC	748	OUT	GET /img/canvas/Kaizen.jpg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/a9bc07eb5/styles.c7b051d2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:44 UTC	1120	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:44 GMT Content-Type: image/jpeg Content-Length: 173831 Connection: close Cache-Control: public, max-age=31557600 Cf-Bgj: h2pri Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report ETag: "2479d57a4407d8f53e1a2291bc6778ad" Last-Modified: Wed, 06 Mar 2024 13:09:46 GMT Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 b10bc83e806604a91e7e9956de2a9242.cloudfront.net (CloudFront) X-Amz-Cf-Id: BMcrsWmK4Pi0rVnJfceiQDnMpZdTzdpOeHp8FOAfx68rdjGRVnbVqg== X-Amz-Cf-Pop: ATL58-P9 X-Cache: Miss from cloudfront X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block x-amz-server-side-encryption: AES256 x-amz-version-id: AYHP9_lreQ0pDTg0ab.TE6wYKFEuZ4my x-robots-tag: noindex CF-Cache-Status: HIT Age: 4123805 Expires: Wed, 23 Apr 2025 18:27:44 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd974df41b081-ATL
2024-04-23 12:27:44 UTC	249	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 03 fd 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 08 01 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 fc 00 00 00 00 00 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqw"5
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 23 f3 ad 09 f1 cd 0d 99 71 a5 b7 03 13 23 10 00 00 00 00 00 00 00 00 00 00 00 19 76 bc 46 52 7b d5 97 9c 77 7b 1d 06 ea db 4b 72 ca d7 ae 65 f9 74 f5 1c fb 2e be ba bf 29 90 ed 1c 5b e8 69 e5 3a 8e 67 63 1b c1 be 8e df 9a cf 87 f0 fa 6b c1 aa bf 9c 65 8a b0 00 00 0b 1e cf 82 f4 1f 73 4c ec 5b be 83 e3 f9 9e 93 95 e8 2e fa 7d be 5d f4 67 ce ff 00 11 a7 48 c9 98 01 90 ec 67 70 bd ef bb f4 1c 27 3b 65 9e cb 97 1b d3 69 af a4 cb 9d e9 3b 55 3f 82 fb f7 9a 33 f8 d0 c1 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 Data Ascii: #q#vFR{w{Kret.)[i:gckesL[.}]gHgp';ei;U?3
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: 93 a4 52 db 46 2c 76 63 c9 34 c8 d7 d8 d3 dd 54 da 76 8c 79 5e 81 9f 6d 0f 37 d8 43 b6 ea 9f 3e e8 ec b5 e2 f9 e2 27 d3 9e 71 86 5e 59 df 70 9d 26 ca 2f 69 ee 2a 7e f7 27 79 d1 50 f4 5e 4f dc 7a 9d 46 db 5f 91 f2 fc ef 89 f4 2b 08 df cb 4f ab e4 be 73 be 9d 4f d1 e1 3b e8 1d af 0d e9 79 fe 1d ed fd dc 2c 3d f2 6e 6b d5 bc e7 d0 ef 49 eb 9e 63 e8 da f1 fc 62 32 c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 4a 91 38 e3 d4 41 e9 37 51 6d 1e 45 e7 a3 8e a6 c3 75 4f a1 8e 74 74 3b f3 4c 8f af 59 96 50 77 59 56 5a 67 6b ed 11 76 32 eb 66 ea fc 90 91 b9 1e 1d b4 8b af 74 79 a5 61 8b b5 f2 32 82 e4 e8 fa 50 ee cd 91 f1 8f 72 b6 c7 be f2 fd 2b 08 fd 44 df 03 d6 a4 d9 d1 45 a6 Data Ascii: RF,vc4Tvy^m7C>'q^Yp&/i*~'yP^OzF_+OsO;y,=nkIcb2J8A7QmEuOtt;LYPwYVZgkv2ftya2Pr+DE
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: 6b af d9 64 a4 69 d3 8f 93 2c 60 ca af f6 79 32 2e 9d df ac 79 9b 11 f7 59 db a8 a8 f0 8e 51 f7 47 b3 b2 2c 29 6d bb 4e e4 7c a5 9b 63 4a 44 aa bd cb 6e 24 54 d8 66 9e 3c ef 4d b3 ca f5 f8 df 29 fa 1b c4 fc af 7b 9b f6 5f 28 f6 ae fd 07 7d 3b 97 95 ea fb dd 14 3a d8 b8 b1 58 43 87 a6 3c dd a6 3e bb f5 ec e1 3b 79 0a be 77 d3 f4 17 2d e5 f8 9e 57 87 d4 9e 3d e3 39 0f 7a f3 1f 50 cf 3b 8b 6f 13 f5 ef a3 c3 7d 61 53 69 66 6c b6 6b dd ce f3 76 1a f4 db 93 5e e8 b3 2a d3 c5 da 52 cc f1 7e 9a af 4d c4 1f a9 f9 de da e3 93 cb 24 fb 48 b1 64 57 4f 37 e0 bf 4c 71 3a b9 e7 37 1e 6f dd 7b de df 7b db 50 61 f0 b6 df 5d c2 9f 76 2d 71 6c 2b ef 8d 05 d5 07 5b 8e fe 4b 9d f4 de 4a 11 89 71 f9 af 44 f4 f0 be 84 e4 7e 39 1d f3 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: kdi,`y2.yYQG,)mN\|cJDn$Tf<M){_(};:XC<>;yw-W=9zP;o}aSiflkv^*R~M$HdWO7Lq:7o{{Pa]v-ql+[KJqD~9
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: 57 3c c9 99 23 f3 3c a9 15 bb a9 d7 33 95 eb b5 f9 3f 57 43 d7 3c 8b e5 7e db d0 fc df b6 ec ae c1 c2 fb 37 cb fe e1 2d 3c ae df 47 a5 d3 75 74 6e 93 95 af d1 dc 48 f4 36 c3 e8 b5 d2 f6 84 ed 90 fb 47 41 17 66 cf 2f 3d 85 e7 17 d8 6c f0 65 71 bd 97 1b a7 cc 98 8f b2 3a 39 18 fb 21 fc 47 de 4e c7 5e 3f 69 f3 92 35 a3 fa 9e 0e ca 59 95 b0 b6 55 95 0e ea bd 0e fb a8 f3 1e a2 ac 1c cd 4f a0 70 7a 23 06 cb 2e 9b cc f5 f2 fd 9b e5 f0 df ed b3 78 9e ab 55 76 5b ab e4 53 46 5a f7 47 ed 5a e3 c5 b4 8c be 29 19 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 d0 72 3b 2a bb ea 7b 39 17 29 ca fb 07 1b 2d c5 1e cb 2b 08 aa 5d 07 35 b7 9c f6 3b 3a 6c b3 e5 f6 fa cd d5 da bc 63 ad f5 49 da 75 f0 f6 57 14 fa e5 61 b3 Data Ascii: W<#<3?WC<~7-<GutnH6GAf/=leq:9!GN^?i5YUOpz#.xUv[SFZGZ)pr;*{9)-+]5;:lcIuWa
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: d2 72 3d 37 ad 08 7b ad b9 3a fc bb 46 54 3b 3c 2b 0e 4f ac e6 7e 43 ec 75 b2 8b 1b 26 35 be 8f c5 ed b9 7a f9 9a f0 47 dd 8e 9d 7e 6e 55 b7 d0 71 7a 31 6d a8 5e 66 ae eb d0 3c 37 b8 96 7b 0c aa 79 1c f7 f7 d2 b2 e5 fc fb b9 ff 00 5b f3 4b 63 a4 9d 5f 96 af 42 97 a8 af 8e e7 cb 63 67 cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 c7 21 eb f1 7d e7 4e fd 36 99 41 d1 a6 0b 5d f5 b6 e5 e7 dd df 17 2b 7a 6f 39 f5 6e 47 9c a3 95 47 4f 77 8f d2 53 ec 8b bb cc 83 0f 64 1b b2 e3 0f 63 b5 d7 e9 9d af 92 83 94 8d 79 ef 6e 8f 2b 3d b7 d0 f4 d8 65 db 47 ba ca af 15 f0 e2 d8 6b a7 b1 74 d9 6c ca ad c6 66 cb d5 3b ad a4 7b d8 b4 d7 cc ca ca 23 eb d9 32 de e2 cb 14 91 ec a9 f3 ce d2 1e 99 9d e6 55 f3 b4 c2 89 cd Data Ascii: r=7{:FT;<+O~Cu&5zG~nUqz1m^f<7{y[Kc_Bcg2!}N6A]+zo9nGGOwSdcyn+=eGktlf;{#2U
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 9d 97 65 f4 04 cc 67 fa 3e d7 35 47 e8 da 6c df e4 bd 27 5d 57 5c 6c 2d 38 3a 7a a8 f4 6e 3f 2b e9 5b cc f4 56 94 73 8f 5b 45 c6 de 1d 04 8b 6c 72 f9 b0 79 f9 95 f7 5f cf f2 3e 85 ca fa 58 f8 37 6d 69 66 7f 3b af ef 31 d7 2e 16 cb b2 b0 c5 a2 8e 1d a6 3f 01 ec 48 ad c9 4f 39 b8 7d 17 3f f4 58 72 d7 71 17 24 ab ee 35 e3 ed e5 e8 b9 fb ca 3f 5f 2e e6 b9 55 cf 1a db 66 7b 71 a5 b8 a3 db 0d 3b 37 69 cf dd 3a 67 65 5a 1e cb 08 f5 ce be d2 da 9e 1c ab dc b0 ed 1a 62 c8 43 86 9d 7d ab 76 9a d8 f5 2c ab eb f7 51 cb 6a bd 3a 78 c9 8a 9e 00 99 0f 2e ac bb 6e 5b d2 6d ef 4d 8f 23 5b 54 bd 62 9f cd d3 ed b7 2f d1 43 d3 3a 9c 59 5b dc b2 27 dd 79 65 ae 35 cc d9 5f 97 73 Data Ascii: eg>5Gl']W\l-8:zn?+[Vs[Elry_>X7mif;1.?HO9}?Xrq$5?_.Uf{q;7i:geZbC}v,Qj:x.n[mM#[Tb/C:Y['ye5_s
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: cd db 32 f2 27 16 ea ae f3 45 7e 79 c8 7a 57 99 fa fe 1e 58 91 80 00 00 00 00 00 00 00 01 27 b9 f3 f9 92 b3 d2 34 e7 d5 a5 c6 dc 74 55 b0 ae 77 94 63 cc 4b 98 8e 71 96 22 6f 43 c9 ce ba 7d 46 51 64 7a 0d 99 69 cb b2 ba a9 95 65 9e 5c cc ad 78 d9 5e c9 5a 56 f5 96 c8 f6 55 bb 2d 2b 31 cc 6b d9 2a 21 e5 96 b9 c2 45 85 2c c9 f2 ca 3e e8 76 e5 b4 ca 0c e9 f9 58 ca 87 2a 59 db b5 e5 c8 ee b0 af d9 1b b6 21 c8 cd eb 69 be 87 23 bc 87 e5 7e ad e6 7e 7f ab c9 c5 dd a7 c8 f4 4c b1 00 00 00 00 c9 88 9b dd 79 d1 77 d0 17 1f 35 5f 43 6f bc eb f2 ee a2 bd 1d 2e bd 2a a7 b1 1f 4f 53 95 b5 fc 87 45 4b 1f 4e 3a fc 64 7b 1e 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 39 dd fd 9f d0 7d 77 9d ca c5 ee 7a 46 be 5e d3 Data Ascii: 2'E~yzWX'4tUwcKq"oC}FQdzie\x^ZVU-+1k!E,>vXY!i#~~Lyw5_Co.*OSEKN:d{@9}wzF^
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: 00 00 00 3d ef c2 fe c1 f1 36 fc b9 ce 7d 91 c9 53 3f 98 9e c9 cd 7a 74 f0 0b ca 6d b4 60 cb 1e c0 00 00 00 00 32 cb 1d c6 eb 08 32 af 85 94 ca b9 9b b3 d8 6e d7 23 d1 c7 23 74 39 52 aa 1c 5b 48 b0 be 3e 5a 72 8e 99 58 eb d7 cb a4 63 a7 5a 32 b1 8a ec 26 69 d7 8a 18 eb c7 5c a3 32 65 7c ed 1e 7d 94 88 f2 2e f3 25 62 d3 4d ac a3 e9 be 89 d6 15 77 09 ee a5 cb 97 f1 fd ae 8b ac c6 c3 3e ff 00 31 8b eb 9d 15 16 71 3e 77 37 cc f3 58 d4 57 d0 00 7b 1f 8e 77 51 9f d5 10 f9 5c bc ef 4a da a7 4f 8d e6 bb d4 b9 9f 11 c7 d1 c3 e8 3c b5 3a fc db 70 2c 86 5d 0c ae 86 3e de 5e 99 c1 f4 11 f4 ed b8 fe 8b 4c e7 f3 d8 ef c6 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 7a 4f 9a 65 4c be 82 b8 f9 a7 a2 f2 37 7b f3 97 99 Data Ascii: =6}S?ztm`22n##t9R[H>ZrXcZ2&i\2e\|}.%bMw>1q>w7XW{wQ\JO<:p,]>^LzOeL7{
2024-04-23 12:27:44 UTC	1369	IN	Data Raw: d9 17 2f 42 72 bc 8b aa e0 b6 f8 b8 8e f9 a0 00 00 00 00 00 00 00 03 2c 72 eb e9 6b c8 b3 be 07 e9 6a 64 63 2b 0f a7 23 5e 59 4a 8a 3a 9b 4a b8 6f b4 99 1e 55 75 54 fc db f5 27 cc 3f 5b f3 d1 c7 d1 f8 a0 00 00 00 36 6b c8 b4 e9 b8 cb dd f9 fb 0c 74 d8 7b fe 4d 5e 9b c8 f7 d5 57 ba 46 50 96 33 a1 c5 ab 96 d1 6b e2 c6 56 51 72 d9 1e c1 8f 61 1e ad 10 f6 63 ba 3d dd 93 64 a3 16 d3 64 8e a0 d9 2c 21 ec c8 b0 ab a9 c3 a7 b2 ad a3 a3 cd a6 0f 1f be 26 6f 3b 11 18 80 00 00 00 03 2c 72 eb b4 bc f3 2b 3f 4f 77 69 8f 25 ab 57 3b 69 5e 6d ba ca 7d 1f 5f 0b 36 2e 97 5c 69 b0 b6 2a 64 7a ad d3 ae 07 3f 4d 7e bb ef de 0b ed 9e 44 7e 21 16 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 5e ce 0f 51 f4 bf 53 cf da Data Ascii: /Br,rkjdc+#^YJ:JoUuT'?[6kt{M^WFP3kVQrac=dd,!&o;,r+?Owi%W;i^m}_6.\i*dz?M~D~!^QS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49750	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:44 UTC	1828	OUT	GET /img/social/sml-google-logo.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:44 UTC	1118	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 21 Feb 2024 12:00:07 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: tJrDWkdTEPnSS3oRZz5JKdw6P5FwIlKx Cache-Control: public, max-age=604800 ETag: W/"02ac94a5a07350adb0d698c5064d4e1b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0d9fa547d973207140747f5567b6a0fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: jf7OFrXMtn35oeAqLleyGOKYdINatczJAU2JkntoXSX87maI74HTXA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 495081 Expires: Tue, 30 Apr 2024 12:27:44 GMT Server: cloudflare CF-RAY: 878dd974dd3d6761-ATL
2024-04-23 12:27:44 UTC	251	IN	Data Raw: 35 37 33 0d 0a 3c 73 76 67 20 69 64 3d 22 42 75 74 74 6f 6e 5f 2d 5f 47 6f 6f 67 6c 65 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 42 75 74 74 6f 6e 20 2d 20 47 6f 6f 67 6c 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0a 20 20 3c 72 65 63 74 20 69 64 3d 22 42 61 63 6b 67 72 6f 75 6e 64 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 72 78 3d 22 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 36 39 38 39 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 36 39 38 39 30 Data Ascii: 573<svg id="Button_-_Google" data-name="Button - Google" xmlns="http://www.w3.org/2000/svg" width="50" height="50" viewBox="0 0 50 50"> <rect id="Background" width="50" height="50" rx="25" fill="#fff"/> <g id="Group_69890" data-name="Group 69890
2024-04-23 12:27:44 UTC	1151	IN	Data Raw: 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 20 31 30 2e 37 37 31 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 6c 6f 67 6f 5f 67 6f 6f 67 6c 65 67 5f 34 38 64 70 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 32 2e 32 32 38 29 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 53 68 61 70 65 22 20 64 3d 22 4d 32 30 2e 35 32 2c 39 2e 38 31 38 41 31 33 2e 37 38 38 2c 31 33 2e 37 38 38 2c 30 2c 30 2c 30 2c 32 30 2e 33 2c 37 2e 33 36 34 48 39 76 34 2e 36 34 32 68 36 2e 34 35 38 61 35 2e 35 32 2c 35 2e 35 32 2c 30 2c 30 2c 31 2d 32 2e 33 39 35 2c 33 2e 36 32 32 76 33 2e 30 31 31 68 33 2e 38 37 38 61 31 31 2e 37 2c 31 31 2e 37 2c 30 2c 30 2c 30 2c 33 2e 35 37 38 2d 38 2e 38 32 5a 22 20 74 72 61 6e Data Ascii: " transform="translate(13 10.771)"> <g id="logo_googleg_48dp" transform="translate(0 2.228)"> <path id="Shape" d="M20.52,9.818A13.788,13.788,0,0,0,20.3,7.364H9v4.642h6.458a5.52,5.52,0,0,1-2.395,3.622v3.011h3.878a11.7,11.7,0,0,0,3.578-8.82Z" tran
2024-04-23 12:27:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49754	54.225.234.85	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:45 UTC	1910	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:45 UTC	956	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 12:27:45 GMT Content-Length: 0 Connection: close X-TID: GWcOF70WSGI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171 DCS: dcs-prod-va6-2-v059-0fcd4173c.edge-va6.demdex.com 0 ms set-cookie: demdex=85139728435958444882252136657756763596; Max-Age=15552000; Expires=Sun, 20 Oct 2024 12:27:45 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49755	23.221.212.212	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:45 UTC	1698	OUT	GET /ecr2zvs.js HTTP/1.1 Host: use.typekit.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:45 UTC	390	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: public, max-age=600, stale-while-revalidate=604800 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 23 Apr 2024 12:27:45 GMT Content-Length: 17008 Connection: close
2024-04-23 12:27:45 UTC	15994	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 65 20 54 79 70 65 6b 69 74 20 73 65 72 76 69 63 65 20 75 73 65 64 20 74 6f 20 64 65 6c 69 76 65 72 20 74 68 69 73 20 66 6f 6e 74 20 6f 72 20 66 6f 6e 74 73 20 66 6f 72 20 75 73 65 20 6f 6e 20 77 65 62 73 69 74 65 73 0a 20 2a 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 41 64 6f 62 65 20 61 6e 64 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 73 65 20 54 65 72 6d 73 20 6f 66 20 55 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 65 75 6c 61 73 2f 74 6f 75 5f 74 79 70 65 6b 69 74 2e 20 46 6f 72 20 66 6f 6e 74 20 6c 69 63 65 6e 73 65 0a 20 2a 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 74 68 65 20 6c 69 73 74 20 62 65 6c 6f 77 2e 0a 20 2a 0a 20 2a 20 61 64 Data Ascii: /* * The Typekit service used to deliver this font or fonts for use on websites * is provided by Adobe and is subject to these Terms of Use * http://www.adobe.com/products/eulas/tou_typekit. For font license * information, see the list below. * * ad
2024-04-23 12:27:45 UTC	1014	IN	Data Raw: 67 3d 64 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 6f 3d 65 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 66 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 61 70 70 3d 67 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 2c 63 3d 21 31 3b 62 2e 73 72 63 3d 61 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 21 30 3b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 7c 7c 28 62 2e 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 29 7d 2c 33 45 33 29 7d 3b 76 61 72 20 49 61 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b Data Ascii: g=d\|\|null;this.o=e\|\|null;this.version=f\|\|null;this.app=g\|\|null}function Da(a){var b=new Image(1,1),c=!1;b.src=a;b.onload=function(){c=!0;b.onload=null};setTimeout(function(){c\|\|(b.src="about:blank",b.onload=null)},3E3)};var Ia=new function(){var a=window;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49756	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:47 UTC	1980	OUT	POST /signin/v1/passkey HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/json Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 sec-ch-ua-platform: "Windows" Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:47 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-04-23 12:27:47 UTC	950	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:47 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 878dd984b9b653f9-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://auth.services.adobe.com Set-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: X-Debug-ID, X-IMS-Nonce, X-IMS-Authentication-State, X-IMS-Authentication-State-Encrypted x-debug-id: e4363269-aa3c-4a76-ac82-d28ff821c378 x-newrelic-app-data: PxQFUlRUCQsTVVFUAQQEU1EDBBFORDQHUjZKA1ZLVVFHDFYPbU5gEhZfWQYlDFZHQgsNDlJDa0kSAGocEgcQEVsHQUIQaHthZ0wbTQFPA05UGAdRVFcBBwdSUE4FHRUFVAIABVJXV1sCUwpTXAkAEB8DWA1CBG4= x-via: e-va6 Server: cloudflare
2024-04-23 12:27:47 UTC	419	IN	Data Raw: 31 66 63 0d 0a 7b 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 22 3a 22 57 4f 30 2d 4d 55 4c 41 48 47 70 4a 30 57 46 75 42 56 77 61 6c 75 34 42 51 33 42 66 55 6a 73 57 63 6d 43 4b 4f 4d 59 5a 6e 50 4d 22 2c 22 74 69 6d 65 6f 75 74 22 3a 36 30 30 30 30 2c 22 72 70 49 64 22 3a 22 61 64 6f 62 65 2e 63 6f 6d 22 2c 22 75 73 65 72 56 65 72 69 66 69 63 61 74 69 6f 6e 22 3a 22 70 72 65 66 65 72 72 65 64 22 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 7b 7d 7d 2c 22 74 69 63 6b 65 74 22 3a 22 41 5a 53 4f 34 47 78 77 44 4b 67 64 72 50 70 57 36 5f 67 78 76 44 73 6e 4b 46 4f 68 64 34 6b 77 51 54 6b 6d 53 46 44 50 58 72 48 62 35 6f 6d 71 70 76 41 6c 41 73 61 56 50 32 4a 35 71 4a 43 6c 42 6f 55 38 73 6f 32 6c 6f 71 69 48 6c 4c 72 78 70 56 51 4a 68 6b 62 Data Ascii: 1fc{"options":{"challenge":"WO0-MULAHGpJ0WFuBVwalu4BQ3BfUjsWcmCKOMYZnPM","timeout":60000,"rpId":"adobe.com","userVerification":"preferred","extensions":{}},"ticket":"AZSO4GxwDKgdrPpW6_gxvDsnKFOhd4kwQTkmSFDPXrHb5omqpvAlAsaVP2J5qJClBoU8so2loqiHlLrxpVQJhkb
2024-04-23 12:27:47 UTC	96	IN	Data Raw: 75 65 42 47 37 70 35 75 76 70 31 58 36 7a 69 74 57 6a 35 4e 53 37 58 69 6b 42 30 73 6d 32 48 50 41 48 63 59 64 6c 44 66 6b 4b 39 45 31 67 7a 6f 6c 30 6d 47 58 49 4c 4c 6b 54 4a 47 55 4b 62 36 2d 50 39 39 6f 70 64 67 5f 31 41 6f 59 41 4c 6e 38 6e 58 41 6a 62 64 31 6d 32 2d 77 22 7d 0d 0a Data Ascii: ueBG7p5uvp1X6zitWj5NS7XikB0sm2HPAHcYdlDfkK9E1gzol0mGXILLkTJGUKb6-P99opdg_1AoYALn8nXAjbd1m2-w"}
2024-04-23 12:27:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49757	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:47 UTC	1827	OUT	GET /img/social/sml-apple-logo.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:47 UTC	1111	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:47 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 21 Feb 2024 12:00:07 GMT ETag: W/"f3d8620b91a594708b45b74945d91c5c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: g9F7AcY_niCxCzRXUQ7_1TKYsXzpBknm Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 03c76f41c7551fa29cffd38a109c9dc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: hNe0EnpqUZqME4w-Dc5PEI5eIdCTGOEB8JtGyRufXRbhPjbS-us7UQ== Age: 482177 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Expires: Tue, 30 Apr 2024 12:27:47 GMT Server: cloudflare CF-RAY: 878dd984baedb09f-ATL
2024-04-23 12:27:47 UTC	258	IN	Data Raw: 34 64 39 0d 0a 3c 73 76 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 35 35 35 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 35 35 35 30 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0a 20 20 3c 72 65 63 74 20 69 64 3d 22 42 61 63 6b 67 72 6f 75 6e 64 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 72 78 3d 22 32 35 22 2f 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 37 34 35 38 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 37 34 35 38 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 Data Ascii: 4d9<svg id="Group_155509" data-name="Group 155509" xmlns="http://www.w3.org/2000/svg" width="50" height="50" viewBox="0 0 50 50"> <rect id="Background" width="50" height="50" rx="25"/> <g id="Group_74582" data-name="Group 74582" transform="translate
2024-04-23 12:27:47 UTC	990	IN	Data Raw: 2e 35 20 31 30 2e 35 30 32 29 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 41 70 70 6c 65 5f 6c 6f 67 6f 5f 62 6c 61 63 6b 22 20 64 3d 22 4d 33 37 2e 33 33 2c 32 33 2e 34 32 38 61 31 33 2e 35 35 35 2c 31 33 2e 35 35 35 2c 30 2c 30 2c 31 2d 31 2e 33 34 2c 32 2e 34 31 2c 31 32 2e 32 34 34 2c 31 32 2e 32 34 34 2c 30 2c 30 2c 31 2d 31 2e 37 32 37 2c 32 2e 30 38 37 2c 33 2e 33 34 39 2c 33 2e 33 34 39 2c 30 2c 30 2c 31 2d 32 2e 32 31 39 2e 39 37 37 2c 35 2e 35 36 32 2c 35 2e 35 36 32 2c 30 2c 30 2c 31 2d 32 2e 30 35 2d 2e 34 38 39 2c 35 2e 38 38 32 2c 35 2e 38 38 32 2c 30 2c 30 2c 30 2d 32 2e 32 30 37 2d 2e 34 38 38 2c 36 2e 30 38 31 2c 36 2e 30 38 31 2c 30 2c 30 2c 30 2d 32 2e 32 36 39 2e 34 38 38 2c 36 2e 31 30 36 2c 36 2e 31 30 36 2c 30 2c 30 2c 31 2d Data Ascii: .5 10.502)"> <path id="Apple_logo_black" d="M37.33,23.428a13.555,13.555,0,0,1-1.34,2.41,12.244,12.244,0,0,1-1.727,2.087,3.349,3.349,0,0,1-2.219.977,5.562,5.562,0,0,1-2.05-.489,5.882,5.882,0,0,0-2.207-.488,6.081,6.081,0,0,0-2.269.488,6.106,6.106,0,0,1-
2024-04-23 12:27:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49758	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:47 UTC	1837	OUT	GET /img/social/sml-round-microsoft-logo.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378
2024-04-23 12:27:47 UTC	1102	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:47 GMT Content-Type: image/svg+xml Content-Length: 707 Connection: close Last-Modified: Wed, 06 Mar 2024 13:09:47 GMT ETag: "5802d46c081eb2b1b9fdf3e78cdd02ea" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: 6b_qKErgzKKeNSMGiP0DaJVzpmzWLbre X-Cache: Miss from cloudfront Via: 1.1 414783beeaeb2ca5f172ef001c407572.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: YgrEEuWXTmwm3G3Bipz47ZFo55s7Y4HKFuiWicMiyls40acBa60VuQ== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 481329 Expires: Tue, 30 Apr 2024 12:27:47 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd984bee06773-ATL
2024-04-23 12:27:47 UTC	267	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 30 22 20 63 79 3d 22 32 30 22 20 72 3d 22 31 39 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 73 74 72 6f 6b 65 3d 22 23 45 36 45 36 45 36 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 2f 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 36 5f 32 36 33 37 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 31 32 48 32 38 56 32 38 48 31 32 56 31 32 5a 22 20 66 69 6c 6c 3d 22 23 46 33 46 33 46 33 22 Data Ascii: <svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="20" cy="20" r="19" fill="white" stroke="#E6E6E6" stroke-width="2"/><g clip-path="url(#clip0_6_2637)"><path d="M12 12H28V28H12V12Z" fill="#F3F3F3"
2024-04-23 12:27:47 UTC	440	IN	Data Raw: 4d 31 32 2e 36 39 35 36 20 31 32 2e 36 39 35 36 48 31 39 2e 36 35 32 32 56 31 39 2e 36 35 32 32 48 31 32 2e 36 39 35 36 56 31 32 2e 36 39 35 36 5a 22 20 66 69 6c 6c 3d 22 23 46 33 35 33 32 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 33 34 37 38 20 31 32 2e 36 39 35 36 48 32 37 2e 33 30 34 34 56 31 39 2e 36 35 32 32 48 32 30 2e 33 34 37 38 56 31 32 2e 36 39 35 36 5a 22 20 66 69 6c 6c 3d 22 23 38 31 42 43 30 36 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 36 39 35 36 20 32 30 2e 33 34 37 38 48 31 39 2e 36 35 32 32 56 32 37 2e 33 30 34 33 48 31 32 2e 36 39 35 36 56 32 30 2e 33 34 37 38 5a 22 20 66 69 6c 6c 3d 22 23 30 35 41 36 46 30 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 33 34 37 38 20 32 30 2e 33 34 37 38 48 32 37 2e 33 30 34 34 Data Ascii: M12.6956 12.6956H19.6522V19.6522H12.6956V12.6956Z" fill="#F35325"/><path d="M20.3478 12.6956H27.3044V19.6522H20.3478V12.6956Z" fill="#81BC06"/><path d="M12.6956 20.3478H19.6522V27.3043H12.6956V20.3478Z" fill="#05A6F0"/><path d="M20.3478 20.3478H27.3044

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49752	54.225.234.85	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:47 UTC	1968	OUT	GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1713875254171 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: demdex=85139728435958444882252136657756763596
2024-04-23 12:27:47 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:47 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4280 Connection: close X-TID: +vfffBHtQNI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v059-007a11edb.edge-va6.demdex.com 2 ms set-cookie: demdex=85139728435958444882252136657756763596; Max-Age=15552000; Expires=Sun, 20 Oct 2024 12:27:47 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-23 12:27:47 UTC	4280	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 38 35 33 34 31 34 31 31 36 33 33 38 33 31 37 36 39 36 36 32 32 33 36 35 35 39 37 38 36 38 32 34 38 34 33 35 38 36 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 69 64 73 79 6e 63 2e 72 Data Ascii: {"d_mid":"85341411633831769662236559786824843586","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"60","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//idsync.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49759	52.202.135.73	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:47 UTC	1706	OUT	OPTIONS /core/v1/messaging/ui-version HTTP/1.1 Host: server.messaging.adobe.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-api-key,x-debug-id,x-ims-clientid Origin: https://auth.services.adobe.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:47 UTC	459	IN	HTTP/1.1 200 Date: Tue, 23 Apr 2024 12:27:47 GMT Content-Length: 0 Connection: close X-Request-Id: 171e5fe0-4237-44b2-89b7-a9066a5cac9a Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://auth.services.adobe.com Access-Control-Allow-Methods: GET,POST,OPTIONS,DELETE Access-Control-Allow-Headers: x-api-key, x-debug-id, x-ims-clientid Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49760	52.202.135.73	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:47 UTC	1918	OUT	GET /core/v1/messaging/ui-version HTTP/1.1 Host: server.messaging.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 x-api-key: susi_auth_service sec-ch-ua-platform: "Windows" Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:48 UTC	378	IN	HTTP/1.1 200 Date: Tue, 23 Apr 2024 12:27:48 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Request-Id: 60f57fb6-9cbf-4d9b-b063-d1a67b4bd03c Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding Access-Control-Allow-Origin: https://auth.services.adobe.com Access-Control-Allow-Credentials: true
2024-04-23 12:27:48 UTC	28	IN	Data Raw: 31 36 0d 0a 7b 22 75 69 56 65 72 73 69 6f 6e 22 3a 22 32 2e 36 39 2e 34 22 7d 0d 0a Data Ascii: 16{"uiVersion":"2.69.4"}
2024-04-23 12:27:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49762	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:50 UTC	2015	OUT	POST /signin/v1/audit HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive Content-Length: 538 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/json Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 sec-ch-ua-platform: "Windows" Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad
2024-04-23 12:27:50 UTC	538	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 61 6e 61 6c 79 74 69 63 73 22 2c 22 65 6e 76 4e 61 6d 65 22 3a 22 70 72 6f 64 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 43 72 65 61 74 69 76 65 43 6c 6f 75 64 49 6e 73 74 61 6c 6c 65 72 5f 76 31 5f 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 7b 22 64 69 67 69 74 61 6c 44 61 74 61 2e 69 6d 73 2e 63 6c 69 65 6e 74 2e 61 70 70 43 6f 64 65 56 61 6c 75 65 2e 61 63 22 3a 22 43 43 49 6e 73 74 61 6c 6c 65 72 22 2c 22 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 5f 55 53 22 2c 22 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 73 69 74 65 53 65 63 74 69 6f 6e 22 3a 22 49 4d 53 22 2c 22 64 69 67 69 74 61 6c 44 61 74 61 2e 69 6d 73 2e 63 6c 69 Data Ascii: {"name":"analytics","envName":"prod","clientId":"CreativeCloudInstaller_v1_0","message":{"digitalData.ims.client.appCodeValue.ac":"CCInstaller","digitalData.page.pageInfo.language":"en_US","digitalData.page.pageInfo.siteSection":"IMS","digitalData.ims.cli
2024-04-23 12:27:50 UTC	712	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:50 GMT Content-Length: 0 Connection: close CF-Ray: 878dd997bfb98bb8-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://auth.services.adobe.com Set-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: X-Debug-ID, X-IMS-Nonce, X-IMS-Authentication-State, X-IMS-Authentication-State-Encrypted x-debug-id: e4363269-aa3c-4a76-ac82-d28ff821c378 x-via: e-va6 Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49763	63.140.39.82	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:50 UTC	2252	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=85341411633831769662236559786824843586&ts=1713875269295 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
2024-04-23 12:27:50 UTC	722	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Tue, 23 Apr 2024 12:27:50 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C85341411633831769662236559786824843586; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Thu, 23 Apr 2026 12:27:27 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-23 12:27:50 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 38 35 33 34 31 34 31 31 36 33 33 38 33 31 37 36 39 36 36 32 32 33 36 35 35 39 37 38 36 38 32 34 38 34 33 35 38 36 22 7d Data Ascii: {"mid":"85341411633831769662236559786824843586"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49764	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:50 UTC	2156	OUT	GET /img/social/round/google.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
2024-04-23 12:27:50 UTC	1111	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:50 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 21 Feb 2024 12:00:07 GMT ETag: W/"e3a1f922468504dd26b5beb3feb94c58" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: f0_ntn5b4p2M8TODGhfhEj7DcJhw4bTb Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6fc72fa6c2eb32c52ac1d02c16e75776.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: ljl6pJLWDXZV6gr0FzPLHVpHBPDQwxQj7EQGvcjQSU3SKvWqBc3ZFg== Age: 495088 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Expires: Tue, 30 Apr 2024 12:27:50 GMT Server: cloudflare CF-RAY: 878dd99a5d406763-ATL
2024-04-23 12:27:50 UTC	258	IN	Data Raw: 35 37 38 0d 0a 3c 73 76 67 20 69 64 3d 22 42 75 74 74 6f 6e 5f 2d 5f 47 6f 6f 67 6c 65 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 42 75 74 74 6f 6e 20 2d 20 47 6f 6f 67 6c 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 0a 20 20 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0a 20 20 3c 72 65 63 74 20 69 64 3d 22 42 61 63 6b 67 72 6f 75 6e 64 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 72 78 3d 22 32 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 36 39 38 39 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 36 39 38 39 Data Ascii: 578<svg id="Button_-_Google" data-name="Button - Google" xmlns="http://www.w3.org/2000/svg" width="50" height="50" viewBox="0 0 50 50"> <rect id="Background" width="50" height="50" rx="25" fill="#fff"/> <g id="Group_69890" data-name="Group 6989
2024-04-23 12:27:50 UTC	1149	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 20 31 30 2e 37 37 31 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 6c 6f 67 6f 5f 67 6f 6f 67 6c 65 67 5f 34 38 64 70 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 32 2e 32 32 38 29 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 53 68 61 70 65 22 20 64 3d 22 4d 32 30 2e 35 32 2c 39 2e 38 31 38 41 31 33 2e 37 38 38 2c 31 33 2e 37 38 38 2c 30 2c 30 2c 30 2c 32 30 2e 33 2c 37 2e 33 36 34 48 39 76 34 2e 36 34 32 68 36 2e 34 35 38 61 35 2e 35 32 2c 35 2e 35 32 2c 30 2c 30 2c 31 2d 32 2e 33 39 35 2c 33 2e 36 32 32 76 33 2e 30 31 31 68 33 2e 38 37 38 61 31 31 2e 37 2c 31 31 2e 37 2c 30 2c 30 2c 30 2c 33 2e 35 37 38 2d 38 2e 38 32 5a 22 20 74 72 61 6e 73 66 Data Ascii: transform="translate(13 10.771)"> <g id="logo_googleg_48dp" transform="translate(0 2.228)"> <path id="Shape" d="M20.52,9.818A13.788,13.788,0,0,0,20.3,7.364H9v4.642h6.458a5.52,5.52,0,0,1-2.395,3.622v3.011h3.878a11.7,11.7,0,0,0,3.578-8.82Z" transf
2024-04-23 12:27:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49765	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:50 UTC	2158	OUT	GET /img/social/round/facebook.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0
2024-04-23 12:27:50 UTC	1102	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:50 GMT Content-Type: image/svg+xml Content-Length: 392 Connection: close Last-Modified: Wed, 06 Mar 2024 13:09:47 GMT ETag: "aaeb95990783a7b42bec3670f58e3fe0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: X8F7nzOEoy2MXockXNsCwj_zbSMDqtka X-Cache: Miss from cloudfront Via: 1.1 ff2d6deff1b50282a21f4b199088c76e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: VuyTBF_RZ_rT-CxcPgwO2A_D-mEZw5bavnGMbgp_rU29e4cemm9UDA== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 482180 Expires: Tue, 30 Apr 2024 12:27:50 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd99a6e4253be-ATL
2024-04-23 12:27:50 UTC	267	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 6e 65 77 5f 66 61 63 65 62 6f 6f 6b 5f 6c 6f 67 6f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 6e 65 77 20 66 61 63 65 62 6f 6f 6b 20 6c 6f 67 6f 22 20 64 3d 22 4d 31 36 2c 38 2e 30 34 39 41 38 2c 38 2c 30 2c 31 2c 30 2c 36 2e 37 35 2c 31 36 56 31 30 2e 33 37 36 48 34 2e 37 31 39 56 38 2e 30 34 39 48 36 2e 37 35 56 36 2e 32 37 36 41 32 2e 38 33 32 2c 32 2e 38 33 32 2c 30 2c 30 2c 31 2c 39 2e 37 37 32 2c 33 2e 31 34 34 61 31 32 2e 32 33 35 2c 31 32 2e 32 33 35 2c 30 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 16 16"> <path id="new_facebook_logo" data-name="new facebook logo" d="M16,8.049A8,8,0,1,0,6.75,16V10.376H4.719V8.049H6.75V6.276A2.832,2.832,0,0,1,9.772,3.144a12.235,12.235,0,0
2024-04-23 12:27:50 UTC	125	IN	Data Raw: 56 35 2e 32 38 32 48 31 30 2e 35 35 34 41 31 2e 31 36 2c 31 2e 31 36 2c 30 2c 30 2c 30 2c 39 2e 32 35 2c 36 2e 35 34 56 38 2e 30 34 39 68 32 2e 32 31 39 6c 2d 2e 33 35 35 2c 32 2e 33 32 37 48 39 2e 32 35 56 31 36 41 38 2e 30 33 36 2c 38 2e 30 33 36 2c 30 2c 30 2c 30 2c 31 36 2c 38 2e 30 34 39 5a 22 20 66 69 6c 6c 3d 22 23 31 38 37 37 46 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: V5.282H10.554A1.16,1.16,0,0,0,9.25,6.54V8.049h2.219l-.355,2.327H9.25V16A8.036,8.036,0,0,0,16,8.049Z" fill="#1877F2"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49766	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:55 UTC	2366	OUT	POST /signin/v1/audit HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive Content-Length: 717 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: application/json Accept: application/json, text/plain, / X-DEBUG-ID: e4363269-aa3c-4a76-ac82-d28ff821c378 X-IMS-CLIENTID: CreativeCloudInstaller_v1_0 sec-ch-ua-platform: "Windows" Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
2024-04-23 12:27:55 UTC	717	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 61 6e 61 6c 79 74 69 63 73 22 2c 22 65 6e 76 4e 61 6d 65 22 3a 22 70 72 6f 64 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 43 72 65 61 74 69 76 65 43 6c 6f 75 64 49 6e 73 74 61 6c 6c 65 72 5f 76 31 5f 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 7b 22 64 69 67 69 74 61 6c 44 61 74 61 2e 69 6d 73 2e 63 6c 69 65 6e 74 2e 61 70 70 43 6f 64 65 56 61 6c 75 65 2e 61 63 22 3a 22 43 43 49 6e 73 74 61 6c 6c 65 72 22 2c 22 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 5f 55 53 22 2c 22 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 73 69 74 65 53 65 63 74 69 6f 6e 22 3a 22 49 4d 53 22 2c 22 64 69 67 69 74 61 6c 44 61 74 61 2e 69 6d 73 2e 63 6c 69 Data Ascii: {"name":"analytics","envName":"prod","clientId":"CreativeCloudInstaller_v1_0","message":{"digitalData.ims.client.appCodeValue.ac":"CCInstaller","digitalData.page.pageInfo.language":"en_US","digitalData.page.pageInfo.siteSection":"IMS","digitalData.ims.cli
2024-04-23 12:27:55 UTC	712	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:55 GMT Content-Length: 0 Connection: close CF-Ray: 878dd9b59bb28bb5-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://auth.services.adobe.com Set-Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true access-control-expose-headers: X-Debug-ID, X-IMS-Nonce, X-IMS-Authentication-State, X-IMS-Authentication-State-Encrypted x-debug-id: e4363269-aa3c-4a76-ac82-d28ff821c378 x-via: e-va6 Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49768	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:55 UTC	2210	OUT	GET /img/social/round/apple.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
2024-04-23 12:27:55 UTC	1101	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:55 GMT Content-Type: image/svg+xml Content-Length: 748 Connection: close Last-Modified: Wed, 06 Mar 2024 13:09:47 GMT ETag: "4c5a5a172465befd580445c07f70f2f0" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: 4lDcYwaIO1UVV2sVSepBbGG4YQvOWxfj X-Cache: Hit from cloudfront Via: 1.1 86150a7b1da76d1a806dc0cdda8debc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: Mnt0gBHZwL50Vo5h9tL1poJCYh9nS0vLc_6ly6IQ0FnmnT7Fdw8RYQ== Age: 310852 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Expires: Tue, 30 Apr 2024 12:27:55 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd9b5a831672b-ATL
2024-04-23 12:27:55 UTC	268	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 2e 30 33 34 20 33 32 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 31 2e 33 35 34 2c 32 32 2e 36 30 38 61 37 2e 32 37 32 2c 37 2e 32 37 32 2c 30 2c 30 2c 31 2c 33 2e 34 36 33 2d 36 2e 31 2c 37 2e 34 34 34 2c 37 2e 34 34 34 2c 30 2c 30 2c 30 2d 35 2e 38 36 35 2d 33 2e 31 37 31 63 2d 32 2e 34 36 38 2d 2e 32 35 39 2d 34 2e 38 36 2c 31 2e 34 37 37 2d 36 2e 31 31 37 2c 31 2e 34 37 37 2d 31 2e 32 38 32 2c 30 2d 33 2e 32 31 38 2d 31 2e 34 35 31 2d 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 26.034 32"><g transform="translate(0 0)"><path d="M31.354,22.608a7.272,7.272,0,0,1,3.463-6.1,7.444,7.444,0,0,0-5.865-3.171c-2.468-.259-4.86,1.477-6.117,1.477-1.282,0-3.218-1.451-5
2024-04-23 12:27:55 UTC	480	IN	Data Raw: 31 2c 37 2e 38 31 31 2c 30 2c 30 2c 30 2d 36 2e 35 37 33 2c 34 2e 30 30 39 63 2d 32 2e 38 34 32 2c 34 2e 39 32 31 2d 2e 37 32 32 2c 31 32 2e 31 35 32 2c 32 2c 31 36 2e 31 32 39 2c 31 2e 33 36 32 2c 31 2e 39 34 38 2c 32 2e 39 35 34 2c 34 2e 31 32 33 2c 35 2e 30 33 37 2c 34 2e 30 34 36 2c 32 2e 30 33 38 2d 2e 30 38 35 2c 32 2e 38 2d 31 2e 33 2c 35 2e 32 36 2d 31 2e 33 2c 32 2e 34 33 38 2c 30 2c 33 2e 31 35 32 2c 31 2e 33 2c 35 2e 32 37 37 2c 31 2e 32 35 31 2c 32 2e 31 38 37 2d 2e 30 33 35 2c 33 2e 35 36 35 2d 31 2e 39 35 36 2c 34 2e 38 38 2d 33 2e 39 32 32 61 31 36 2e 31 30 39 2c 31 36 2e 31 30 39 2c 30 2c 30 2c 30 2c 32 2e 32 33 31 2d 34 2e 35 34 34 2c 37 2e 30 32 37 2c 37 2e 30 32 37 2c 30 2c 30 2c 31 2d 34 2e 32 39 2d 36 2e 34 36 35 5a 22 20 74 72 61 6e Data Ascii: 1,7.811,0,0,0-6.573,4.009c-2.842,4.921-.722,12.152,2,16.129,1.362,1.948,2.954,4.123,5.037,4.046,2.038-.085,2.8-1.3,5.26-1.3,2.438,0,3.152,1.3,5.277,1.251,2.187-.035,3.565-1.956,4.88-3.922a16.109,16.109,0,0,0,2.231-4.544,7.027,7.027,0,0,1-4.29-6.465Z" tran

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49767	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:55 UTC	2214	OUT	GET /img/social/round/microsoft.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CvVersion%7C5.4.0; s_ecid=MCMID%7C85341411633831769662236559786824843586
2024-04-23 12:27:55 UTC	1102	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:55 GMT Content-Type: image/svg+xml Content-Length: 344 Connection: close Last-Modified: Wed, 06 Mar 2024 13:09:47 GMT ETag: "24e5106ccb2bad68cbfd17822ab66c7c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: dNxgB48EhpmPRJuM8xbTXy6q_ju2xf67 X-Cache: Miss from cloudfront Via: 1.1 6893a7827ca9ecde25800b077828fa86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: DXO8JWugJlSV0OpC6Mw6MztLvWItWXD7fshL5DRSe1h_z7DZPE885Q== X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 486547 Expires: Tue, 30 Apr 2024 12:27:55 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd9b5a9c86758-ATL
2024-04-23 12:27:55 UTC	267	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 31 22 3e 3c 74 69 74 6c 65 3e 4d 53 2d 53 79 6d 62 6f 6c 4c 6f 63 6b 75 70 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 78 3d 22 31 22 20 79 3d 22 31 22 20 77 69 64 74 68 3d 22 39 22 20 68 65 69 67 68 74 3d 22 39 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 22 20 79 3d 22 31 31 22 20 77 69 64 74 68 3d 22 39 22 20 68 65 69 67 68 74 3d 22 39 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 31 22 20 79 3d 22 31 22 20 77 69 64 74 68 3d 22 39 22 20 68 65 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 21 21"><title>MS-SymbolLockup</title><rect x="1" y="1" width="9" height="9" fill="#f25022"/><rect x="1" y="11" width="9" height="9" fill="#00a4ef"/><rect x="11" y="1" width="9" he
2024-04-23 12:27:55 UTC	77	IN	Data Raw: 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 31 22 20 79 3d 22 31 31 22 20 77 69 64 74 68 3d 22 39 22 20 68 65 69 67 68 74 3d 22 39 22 20 66 69 6c 6c 3d 22 23 66 66 62 39 30 30 22 2f 3e 3c 2f 73 76 67 3e 0a Data Ascii: l="#7fba00"/><rect x="11" y="11" width="9" height="9" fill="#ffb900"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49769	63.140.39.82	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:56 UTC	2290	OUT	POST /b/ss/adbims,adbadobenonacdcprod,adbadobeprototype/1/JS-2.22.4-LCS4/s24063614990498 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive Content-Length: 5199 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882469s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_cc=true
2024-04-23 12:27:56 UTC	5199	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 32 33 25 32 46 33 25 32 46 32 30 32 34 25 32 30 31 34 25 33 41 32 37 25 33 41 35 35 25 32 30 32 25 32 30 2d 31 32 30 26 6d 69 64 3d 38 35 33 34 31 34 31 31 36 33 33 38 33 31 37 36 39 36 36 32 32 33 36 35 35 39 37 38 36 38 32 34 38 34 33 35 38 36 26 61 61 6d 6c 68 3d 37 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 66 70 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 50 65 72 69 6f 64 73 3d 32 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 75 74 68 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 25 32 46 65 6e 5f 55 53 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 25 33 46 64 65 6c 65 67 61 74 65 64 5f 61 75 74 68 5f 70 61 72 74 79 25 33 44 72 65 71 75 65 73 74 65 72 25 32 36 63 61 6c 6c 62 61 63 6b Data Ascii: AQB=1&ndh=1&pf=1&t=23%2F3%2F2024%2014%3A27%3A55%202%20-120&mid=85341411633831769662236559786824843586&aamlh=7&ce=UTF-8&cdp=2&fpCookieDomainPeriods=2&g=https%3A%2F%2Fauth.services.adobe.com%2Fen_US%2Findex.html%3Fdelegated_auth_party%3Drequester%26callback
2024-04-23 12:27:56 UTC	1141	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Tue, 23 Apr 2024 12:27:56 GMT expires: Mon, 22 Apr 2024 12:27:56 GMT last-modified: Wed, 24 Apr 2024 12:27:56 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C85341411633831769662236559786824843586; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Thu, 23 Apr 2026 12:27:27 GMT; set-cookie: s_ecid=MCMID%7C85341411633831769662236559786824843586; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Thu, 23 Apr 2026 12:27:27 GMT; set-cookie: s_ecid=MCMID%7C85341411633831769662236559786824843586; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Thu, 23 Apr 2026 12:27:27 GMT; etag: 3680519131211563008-4618678377516123416 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-23 12:27:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49770	23.221.212.212	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:56 UTC	686	OUT	GET /af/cb695f/000000000000000000017701/27/l?subset_id=2&fvd=n4&v=3 HTTP/1.1 Host: use.typekit.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Origin: https://auth.services.adobe.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://auth.services.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:57 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/font-woff2 Content-Length: 29924 ETag: "fae41ba404dda76663c7e537ab5cab2de69de329" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: public, max-age=31536000 Date: Tue, 23 Apr 2024 12:27:57 GMT Connection: close
2024-04-23 12:27:57 UTC	16042	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 74 e4 00 0e 00 00 00 00 a2 28 00 00 74 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 81 de 73 3f 44 59 4e 41 83 69 3f 47 44 59 4e 81 79 1b c9 72 06 60 00 83 4e 11 08 01 36 02 24 03 86 48 04 06 05 87 1f 07 20 1b 29 a1 b7 0e 48 0d 1b 07 00 80 2e f3 10 51 d1 ea 61 44 41 1f 02 aa aa aa b7 84 e0 ee 55 fb 0f 10 7e fa e5 b7 3f fc e9 2f 7f fb c7 bf fe f3 bf 3f 42 86 b9 ff 77 ee df 7b 93 0c 80 ef 88 3a 60 76 98 d7 de b6 39 3f 2f 79 27 49 b7 d3 a9 39 40 49 e0 e7 a7 e7 40 98 19 33 56 40 1a c9 81 fc fc 25 57 58 7b 27 d0 de ba 09 54 40 0f e4 d8 60 82 2f 51 84 84 e2 a2 56 9e 54 7a 01 e8 05 c2 67 28 20 07 03 03 87 20 f2 82 e8 9f c8 dc 9e e3 b8 bd 73 46 4f cd b9 87 dc 32 bb 94 6a 81 6e 01 95 52 a5 b4 1e Data Ascii: wOF2OTTOt(tFs?DYNAi?GDYNyr`N6$H )H.QaDAU~?/?Bw{:`v9?/y'I9@I@3V@%WX{'T@`/QVTzg( sFO2jnR
2024-04-23 12:27:57 UTC	13882	IN	Data Raw: 39 b0 ed 51 58 b2 54 78 87 a4 a5 d0 75 c8 f7 6c d4 d4 29 bd e8 3f 28 03 1d 22 57 e0 4d c7 83 0a 67 23 c2 72 ed 19 7d 7a b9 b0 50 6e e7 20 d3 ea a4 8f 1c 19 14 cd 7e 03 1d 22 17 c0 bb f3 0e c4 9e dc 44 29 b2 f4 9e cc 81 1b 9a 6c 50 1e 79 0f 91 92 27 51 0f 2a 26 ff f6 fc b9 ef 69 23 e2 fb 97 5d b2 63 f8 fc 9c cd db f3 92 b3 e7 c6 2f 7c 8c e2 b3 52 f2 25 6f dc 33 71 da 3b bc 05 bd 11 cb 85 da e8 61 92 b8 76 a8 95 3d 9d be 44 a7 0b 6e 20 44 6a 10 23 64 05 85 b6 a0 11 d9 46 61 ef e8 8d 34 85 29 96 6f 8f f8 b5 87 61 1a 8a d8 69 cb 48 d6 65 a1 27 14 a3 7a fd e1 e7 db 51 64 50 04 d3 b0 c9 dc f1 d6 c8 10 42 44 ea b9 e4 4e a6 81 dc e1 c2 91 d9 04 fe 8f 8a af 2c bb 1a f5 e0 fe b6 4b 90 fd c0 37 e7 53 e4 db 33 80 f8 e2 e0 23 3b 9a 77 5e 69 77 99 9b 36 64 15 e5 8f b8 Data Ascii: 9QXTxul)?("WMg#r}zPn ~"D)lPy'Q*&i#]c/\|R%o3q;av=Dn Dj#dFa4)oaiHe'zQdPBDN,K7S3#;w^iw6d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49772	23.221.212.212	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:56 UTC	686	OUT	GET /af/eaf09c/000000000000000000017703/27/l?subset_id=2&fvd=n7&v=3 HTTP/1.1 Host: use.typekit.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Origin: https://auth.services.adobe.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://auth.services.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:57 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/font-woff2 Content-Length: 29980 ETag: "43c835b2f5dd7a9e7fea805e0e9631e337d18a90" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: public, max-age=31536000 Date: Tue, 23 Apr 2024 12:27:57 GMT Connection: close
2024-04-23 12:27:57 UTC	16042	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 75 1c 00 0e 00 00 00 00 a3 30 00 00 74 be 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 81 e1 44 3f 44 59 4e 41 83 69 3f 47 44 59 4e 81 79 1b c9 48 06 60 00 83 4e 11 08 01 36 02 24 03 86 48 04 06 05 87 04 07 20 1b 35 a2 b7 0e 48 dd d3 56 dc 43 44 45 ab 87 11 05 7d 08 a8 aa aa de 12 82 bb 57 ed 3f 40 f8 e9 97 df fe f0 a7 bf fc ed 1f ff fa cf ff fe 08 19 e6 be d4 89 ff 6f 95 39 f0 25 72 09 78 74 6c 25 56 a3 48 39 49 e1 b9 1b f3 d6 b5 7b b7 2e 3b 0e 33 91 c9 cb 81 5f e5 f2 92 4b 6d ae dd e1 ad 9e 4c 4c c4 07 35 8a c3 a4 cd 24 db f6 64 eb 2d 2a 30 8e 62 28 c3 d1 0f 3b 49 20 24 14 07 56 63 33 a9 64 be ec 97 7c f8 89 cc ed 39 8f db 3d 66 e0 c0 2c 1b e5 ce d9 a5 34 05 81 2f 2a a5 14 01 a1 07 08 2d Data Ascii: wOF2OTTOu0tFD?DYNAi?GDYNyH`N6$H 5HVCDE}W?@o9%rxtl%VH9I{.;3_KmLL5$d-0b(;I $Vc3d\|9=f,4/-
2024-04-23 12:27:57 UTC	13938	IN	Data Raw: a5 00 39 5e fd 25 f9 a1 bb 01 bd 4f f9 11 3a de 13 6e 95 70 a9 f2 71 89 a7 6f 37 4b b0 8e b4 85 68 9b 96 49 af 20 e1 4e c6 f6 c2 81 f4 00 49 55 e7 cf 9c 19 12 6e 96 18 33 f6 68 d7 50 9f 84 e1 e3 a1 2d 1e a0 80 89 52 d0 19 28 d7 4b 44 b3 7d ee 50 51 51 47 a5 a6 7a cb c5 6c c3 b1 61 0d 49 41 27 a1 bc 95 1d fc c2 1d 48 33 88 e1 6e 43 c5 ed 89 6a 84 9d d0 ef 90 45 06 1c b2 29 e8 3c 60 3a 9c d4 4d a0 1d 7c 5a 95 08 ff b0 db ee 40 d8 8c 76 e5 51 8e a4 a0 d3 50 d6 21 7a 85 7b 59 74 54 a5 0f c3 d5 87 5c 44 53 c0 45 a6 15 53 e5 00 5b 02 08 dd 0e ce 41 be 42 ac 9c 9b c0 d2 6c f2 0e 9a 23 c7 99 de 10 f4 f8 ec f1 b6 7c 82 f2 7d e0 f2 c8 49 73 7b 40 3c d1 54 33 4c bb a0 1e e4 b8 f2 a3 9f 79 c4 61 c8 fd 41 a4 0d 50 58 9f 00 11 20 d8 c9 90 a8 bf b8 98 65 39 9b 1d d4 8d Data Ascii: 9^%O:npqo7KhI NIUn3hP-R(KD}PQQGzlaIA'H3nCjE)<`:M\|Z@vQP!z{YtT\DSES[ABl#\|}Is{@<T3LyaAPX e9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49771	23.221.212.212	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:56 UTC	686	OUT	GET /af/40207f/0000000000000000000176ff/27/l?subset_id=2&fvd=n3&v=3 HTTP/1.1 Host: use.typekit.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" Origin: https://auth.services.adobe.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://auth.services.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:57 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/font-woff2 Content-Length: 29752 ETag: "fd4970a0ef1a58daf4039ec623a0f43c55c4f6d2" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: public, max-age=31536000 Date: Tue, 23 Apr 2024 12:27:57 GMT Connection: close
2024-04-23 12:27:57 UTC	16042	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 74 38 00 0e 00 00 00 00 a2 ac 00 00 73 db 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 81 df 5d 3f 44 59 4e 41 83 69 3f 47 44 59 4e 81 79 1b c9 72 06 60 00 83 4e 11 08 01 36 02 24 03 86 48 04 06 05 87 37 07 20 1b ab a1 d7 0e c8 0d 1b 07 00 80 ae 79 88 a8 68 f5 30 a2 a0 0f 01 55 55 55 bd 26 04 77 af da 01 20 fc f4 8b 5f fd e6 77 7f f8 d3 5f fe f6 8f 7f fd e7 7f 7f 84 0c 73 df bb d6 3b 93 4c 01 78 4a b4 25 02 b5 34 77 9b f7 f7 92 7b 49 3e 6c 65 2d 90 70 55 ad ae e2 e7 5b 59 8b 42 b1 02 f2 e5 c7 f1 5f 76 cf d9 f6 98 10 61 7c d9 25 38 4a 6a 22 34 8a c3 e0 49 b2 a5 4f f6 4f e0 1b 64 7d b4 41 05 38 50 07 97 ee 94 08 16 c1 61 e4 66 ae ed 53 c0 4f 68 5b cf ba ee 86 9b a7 7b 77 92 f8 cf cd 4d 22 16 Data Ascii: wOF2OTTOt8sF]?DYNAi?GDYNyr`N6$H7 yh0UUU&w _w_s;LxJ%4w{I>le-pU[YB_va\|%8Jj"4IOOd}A8PafSOh[{wM"
2024-04-23 12:27:57 UTC	13710	IN	Data Raw: 9c 34 60 f0 6f 10 90 28 c2 96 24 54 6c df cd 91 e1 0e 3a b6 3d f9 a0 f1 bf 95 d4 32 cb 8c 8b d4 97 38 69 ef 10 ca d0 ce f1 e2 9c 64 14 03 85 a8 89 91 36 aa 1b 37 38 16 90 30 bc 36 19 37 33 b4 77 ce 6f d4 1f de 71 d6 97 ea 59 47 44 4d ed 3e 58 4f ed 47 0a 62 c9 86 3a 13 24 79 fb 21 7b 6a 06 59 9f 71 28 a3 3a e3 4a 46 4e 46 53 06 43 f5 0c 36 35 83 6c ce 38 98 51 99 71 21 23 27 e3 78 86 95 a6 64 f8 0b 85 1b ff 7f c5 df fd 8a ad 11 79 6d 8d af bc e2 7d e5 55 e2 78 83 6c e6 3b b5 fb 94 f3 4b 6d 0f 4b f4 c7 a3 a9 ed a6 b5 9b de 6e 46 bb 99 ed 66 b5 9b dd ee 70 bb 23 ed be 6a 77 cb d4 cd a4 99 5e b4 9f d2 3e a7 7d ae 39 c8 bc c7 7c d8 7c c4 7c c2 7c d2 7c ca 7c da fc bb 5f a0 5f a4 5f 82 df 1d bf bb 7e 0f fd 1e 59 18 4b a1 65 bf e5 a5 e5 3f cb ff cc eb 4c 00 13 Data Ascii: 4`o($Tl:=28id6780673woqYGDM>XOGb:$y!{jYq(:JFNFSC65l8Qq!#'xdym}Uxl;KmKnFfp#jw^>}9\|\|\|\|\|\|___~YKe?L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49773	63.140.39.82	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:57 UTC	2290	OUT	POST /b/ss/adbims,adbadobenonacdcprod,adbadobeprototype/1/JS-2.22.4-LCS4/s25532576123982 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive Content-Length: 5416 sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
2024-04-23 12:27:57 UTC	5416	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 32 33 25 32 46 33 25 32 46 32 30 32 34 25 32 30 31 34 25 33 41 32 37 25 33 41 35 35 25 32 30 32 25 32 30 2d 31 32 30 26 6d 69 64 3d 38 35 33 34 31 34 31 31 36 33 33 38 33 31 37 36 39 36 36 32 32 33 36 35 35 39 37 38 36 38 32 34 38 34 33 35 38 36 26 61 61 6d 6c 68 3d 37 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 66 70 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 50 65 72 69 6f 64 73 3d 32 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 75 74 68 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 25 32 46 65 6e 5f 55 53 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 25 33 46 64 65 6c 65 67 61 74 65 64 5f 61 75 74 68 5f 70 61 72 74 79 25 33 44 72 65 71 75 65 73 74 65 72 25 32 36 63 61 6c 6c 62 61 63 6b Data Ascii: AQB=1&ndh=1&pf=1&t=23%2F3%2F2024%2014%3A27%3A55%202%20-120&mid=85341411633831769662236559786824843586&aamlh=7&ce=UTF-8&cdp=2&fpCookieDomainPeriods=2&g=https%3A%2F%2Fauth.services.adobe.com%2Fen_US%2Findex.html%3Fdelegated_auth_party%3Drequester%26callback
2024-04-23 12:27:57 UTC	1141	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Tue, 23 Apr 2024 12:27:57 GMT expires: Mon, 22 Apr 2024 12:27:57 GMT last-modified: Wed, 24 Apr 2024 12:27:57 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C85341411633831769662236559786824843586; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Thu, 23 Apr 2026 12:27:27 GMT; set-cookie: s_ecid=MCMID%7C85341411633831769662236559786824843586; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Thu, 23 Apr 2026 12:27:27 GMT; set-cookie: s_ecid=MCMID%7C85341411633831769662236559786824843586; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Thu, 23 Apr 2026 12:27:27 GMT; etag: 3680519132985720832-4618601583191373532 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-23 12:27:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49774	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:57 UTC	1173	OUT	GET /img/generic/jarvis_bubble_chat.svg HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/a9bc07eb5/styles.c7b051d2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
2024-04-23 12:27:57 UTC	1111	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close last-modified: Wed, 13 Mar 2024 12:28:39 GMT etag: W/"2f5b6831b8b9863ca44d4c84427d55db" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: RHv0C8pefkjgSNGRFfgXSJNnsiaKQjI2 vary: Accept-Encoding x-cache: Miss from cloudfront via: 1.1 316c0d862340b97a09ec5fe1e5934c38.cloudfront.net (CloudFront) x-amz-cf-pop: ATL58-P9 x-amz-cf-id: ASa1-p022gWtZhOvMWzgTc2Qz5d8a_6U9uva5KHAaMqs525CGrcN4Q== x-xss-protection: 1; mode=block x-frame-options: DENY referrer-policy: no-referrer-when-downgrade content-security-policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Age: 86516 Expires: Tue, 30 Apr 2024 12:27:57 GMT Server: cloudflare CF-RAY: 878dd9c6eb4812e5-ATL
2024-04-23 12:27:57 UTC	258	IN	Data Raw: 33 66 61 0d 0a 3c 73 76 67 20 69 64 3d 22 70 72 6f 64 75 63 74 69 6f 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 34 62 34 62 34 62 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 41 72 74 62 6f 61 72 64 20 36 38 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 37 2e 39 39 Data Ascii: 3fa<svg id="production" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"> <defs> <style> .cls-1 { fill: #4b4b4b; } </style> </defs> <title>Artboard 68</title> <path class="cls-1" d="M17.99
2024-04-23 12:27:57 UTC	767	IN	Data Raw: 2c 33 30 2e 30 36 34 34 35 61 31 2e 39 38 34 31 35 2c 31 2e 39 38 34 31 35 2c 30 2c 30 2c 31 2d 31 2e 34 38 38 32 38 2d 2e 36 37 33 38 33 4c 31 30 2e 38 32 34 32 32 2c 32 33 48 35 2e 30 35 39 35 37 41 35 2e 30 36 35 39 2c 35 2e 30 36 35 39 2c 30 2c 30 2c 31 2c 30 2c 31 37 2e 39 33 39 34 35 56 37 2e 30 35 39 35 37 41 35 2e 30 36 35 30 36 2c 35 2e 30 36 35 30 36 2c 30 2c 30 2c 31 2c 35 2e 30 35 39 35 37 2c 32 48 32 36 2e 39 33 39 39 34 41 35 2e 30 36 35 34 38 2c 35 2e 30 36 35 34 38 2c 30 2c 30 2c 31 2c 33 32 2c 37 2e 30 35 39 35 37 56 31 37 2e 39 33 39 34 35 41 35 2e 30 36 36 33 32 2c 35 2e 30 36 36 33 32 2c 30 2c 30 2c 31 2c 32 36 2e 39 33 39 39 34 2c 32 33 48 32 30 76 35 2e 30 36 32 35 61 31 2e 39 38 35 31 37 2c 31 2e 39 38 35 31 37 2c 30 2c 30 2c 31 2d Data Ascii: ,30.06445a1.98415,1.98415,0,0,1-1.48828-.67383L10.82422,23H5.05957A5.0659,5.0659,0,0,1,0,17.93945V7.05957A5.06506,5.06506,0,0,1,5.05957,2H26.93994A5.06548,5.06548,0,0,1,32,7.05957V17.93945A5.06632,5.06632,0,0,1,26.93994,23H20v5.0625a1.98517,1.98517,0,0,1-
2024-04-23 12:27:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49775	23.221.212.210	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:58 UTC	1856	OUT	GET /p.gif?s=1&k=ecr2zvs&ht=tk&h=auth.services.adobe.com&f=7180.7182.7184&a=1164490&js=1.21.0&app=typekit&e=js&_=1713875277124 HTTP/1.1 Host: p.typekit.net Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-04-23 12:27:58 UTC	339	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800 Content-Type: image/gif Cross-Origin-Resource-Policy: cross-origin ETag: "616a8b62-23" Last-Modified: Sat, 16 Oct 2021 08:20:50 GMT Server: nginx Content-Length: 35 Date: Tue, 23 Apr 2024 12:27:58 GMT Connection: close
2024-04-23 12:27:58 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49776	172.64.155.179	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:27:59 UTC	2221	OUT	GET /favicon.ico HTTP/1.1 Host: auth.services.adobe.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117", "Microsoft Edge WebView2";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 sec-ch-ua-platform: "Windows" Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.services.adobe.com/en_US/index.html?delegated_auth_party=requester&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCreativeCloudInstaller_v1_0%2FAdobeID%2Fdevice%3Fredirect_uri%3Dhttps%253A%252F%252Foobe.adobe.com%252F%26state%3D%257B%2522ac%2522%253A%2522CCInstaller%2522%252C%2522av%2522%253A%25222.12.0.23%2522%257D%26hashed_device_id%3DPI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8%26device_name%3D992547%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dfalse&client_id=CreativeCloudInstaller_v1_0&scope=openid%2CAdobeID%2Ccreative_cloud%2Ccreative_sdk%2Cread_organizations%2Csao.cce_private%2Cadditional_info.account_type&state=%7B%22ac%22%3A%22CCInstaller%22%2C%22av%22%3A%222.12.0.23%22%7D&relay=e4363269-aa3c-4a76-ac82-d28ff821c378&locale=en_US&flow_type=device&dctx_id=v%3A2%2Cs%2Cbg%3Akaizen%2C0f006db0-9d68-11ee-ac84-4fb64a02ffee&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&response_type=device&device_name=992547&hashed_device_id=PI-MsMZYHT26rRN6SBauwb5_nNZkpARyvo6l4Z0Kyf8&code_challenge_method=plain&redirect_uri=https%3A%2F%2Foobe.adobe.com%2F&use_ms_for_expiry=false Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: relay=e4363269-aa3c-4a76-ac82-d28ff821c378; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C85341411633831769662236559786824843586; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C85341411633831769662236559786824843586%7CMCAAMLH-1714480069%7C7%7CMCAAMB-1714480069%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713882475s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
2024-04-23 12:27:59 UTC	1113	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 12:27:59 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 5430 Connection: close Last-Modified: Wed, 21 Feb 2024 12:00:05 GMT ETag: "dc94f1054a50b313ee14bbd3d4bc1c0a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=604800 x-amz-version-id: wj1La.m4s3e9SoP5Z_qaoj7Bsk3LSQQc X-Cache: Hit from cloudfront Via: 1.1 86150a7b1da76d1a806dc0cdda8debc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: KSm4gk0gfEBWLqJFNCGc8k7j6z5MeZ4UIm571-2xP5oXiiTycEAxUQ== Age: 482181 X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to https://auth.services.adobe.com/signin/v1/audit/csp-violation-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-robots-tag: noindex CF-Cache-Status: HIT Expires: Tue, 30 Apr 2024 12:27:59 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 878dd9d2d869ad62-ATL
2024-04-23 12:27:59 UTC	256	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 ff 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 14 ff e7 00 14 ff ff 00 14 ff 8e 00 00 00 00 00 00 00 00 00 00 00 00 00 12 ff 38 00 13 ff a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 ff 51 00 14 ff ff 00 13 ff fe 00 0f ff 23 00 Data Ascii: h& ( 88Q#
2024-04-23 12:27:59 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 14 ff a8 00 14 ff f5 00 0e ff 12 00 00 00 00 00 00 00 00 00 00 00 00 00 0f ff 22 00 14 ff 40 00 14 ff 40 00 14 ff c0 00 14 ff ff 00 14 ff b6 00 00 00 00 00 00 00 00 00 00 00 00 00 0e ff 12 00 13 ff fb 00 14 ff ff 00 13 ff 78 00 00 00 00 00 00 00 00 00 00 00 00 00 12 ff 48 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 13 ff 78 00 14 ff ff 00 14 ff ff 00 13 ff e2 00 00 ff 04 00 00 00 00 00 00 00 00 00 00 ff 01 00 13 ff e1 00 14 ff ff 00 14 ff ff 00 13 ff e2 00 00 ff 01 00 00 00 00 00 00 00 00 00 00 ff 04 00 13 ff e2 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 11 ff 58 00 00 00 00 00 00 00 00 00 00 00 00 00 14 ff 73 00 14 ff ff 00 14 ff ff 00 13 ff 76 00 00 00 00 00 00 00 00 00 Data Ascii: "@@xHMxXsv
2024-04-23 12:27:59 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 07 00 14 ff f4 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff e7 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 ff a8 00 14 ff f5 00 0e ff 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 ff 61 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 12 ff 7d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e ff 12 00 13 ff fb 00 14 ff ff 00 13 ff 78 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: a}x
2024-04-23 12:27:59 UTC	1369	IN	Data Raw: 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 12 ff 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 ff 51 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 ff 48 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 13 ff b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 02 00 13 ff e2 00 14 ff ff 00 14 ff ff 00 13 ff e2 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 ff b8 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff Data Ascii: HQNH
2024-04-23 12:27:59 UTC	1067	IN	Data Raw: 00 00 00 00 13 ff 88 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 13 ff ed 00 00 ff 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 04 00 13 ff ed 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 14 ff ff 00 11 ff 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49779	13.107.21.239	443	1816	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:28:04 UTC	1284	OUT	POST /componentupdater/api/v1/update?cup2key=6:Uqes3HAGxR2XxTJykP0zs2DnVllXPRuU_vY0FxPhPbE&cup2hreq=fb38ed1d55496230a72f3033c1099ae991e3e1ca8070f5b1a3833fa34defef3e HTTP/1.1 Host: edge.microsoft.com Connection: keep-alive Content-Length: 4903 X-Microsoft-Update-AppId: kpfehajjjbbcifeehjgfgnabifknmdad,oankkpibpaokgecfckkdkgaoafllipag,fppmbhmldokgmleojlplaaodlkibgikh,ohckeflnhegojcjlcpbfpciadgikcohk,fgbafbciocncjfbbonhocjaohoknlaco,ndikpojcjlepofdkaaldkinkjbeeebkl,ahmaebgpfccdhgidjaidaoojjcijckba,eeobbhfgfagbclfofmgbdfoicabjdbkn,ojblfafjmiikbkepnnolpgbbhejhlcim,jbfaflocpnkhbgcijpkiafdpbjkedane,alpjnmnfbgfkmmpcfpejmmoebdndedno X-Microsoft-Update-Interactivity: bg X-Microsoft-Update-Service-Cohort: 5992 X-Microsoft-Update-Updater: msedge-117.0.2045.47 Content-Type: application/json Sec-Mesh-Client-Edge-Version: 117.0.2045.47 Sec-Mesh-Client-Edge-Channel: stable Sec-Mesh-Client-OS: Windows Sec-Mesh-Client-OS-Version: 10.0.19045 Sec-Mesh-Client-Arch: x86_64 Sec-Mesh-Client-WebView: 1 X-Client-Data: CL/hygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-04-23 12:28:04 UTC	4903	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 40 6f 73 22 3a 22 77 69 6e 22 2c 22 40 75 70 64 61 74 65 72 22 3a 22 6d 73 65 64 67 65 22 2c 22 61 63 63 65 70 74 66 6f 72 6d 61 74 22 3a 22 63 72 78 33 2c 70 75 66 66 22 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 6b 70 66 65 68 61 6a 6a 6a 62 62 63 69 66 65 65 68 6a 67 66 67 6e 61 62 69 66 6b 6e 6d 64 61 64 22 2c 22 62 72 61 6e 64 22 3a 22 47 47 4c 53 22 2c 22 63 6f 68 6f 72 74 22 3a 22 72 72 66 40 30 2e 39 32 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6e 73 74 61 6c 6c 64 61 74 65 22 3a 2d 31 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 47 42 22 2c 22 70 69 6e 67 22 3a 7b 22 72 22 3a 2d 32 7d 2c 22 74 61 72 67 65 74 69 6e 67 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 41 70 70 43 6f 68 6f 72 74 22 3a Data Ascii: {"request":{"@os":"win","@updater":"msedge","acceptformat":"crx3,puff","app":[{"appid":"kpfehajjjbbcifeehjgfgnabifknmdad","brand":"GGLS","cohort":"rrf@0.92","enabled":true,"installdate":-1,"lang":"en-GB","ping":{"r":-2},"targetingattributes":{"AppCohort":
2024-04-23 12:28:04 UTC	948	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Pragma: no-cache Content-Length: 9798 Content-Type: application/json Content-Encoding: identity Expires: Mon, 01 Jan 1990 00:00:00 GMT ETag: 3045022100988EA779E2837E7FF977D60F228ADAE79F790E5FEE462C85872D0992CD13DF86022052DCF364B084DC487BC75AF3F1DC76727B45FF61CCB04F8BDA55FA1860494B47:fb38ed1d55496230a72f3033c1099ae991e3e1ca8070f5b1a3833fa34defef3e X-Frame-Options: sameorigin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block x-cup-server-proof: 3045022100988EA779E2837E7FF977D60F228ADAE79F790E5FEE462C85872D0992CD13DF86022052DCF364B084DC487BC75AF3F1DC76727B45FF61CCB04F8BDA55FA1860494B47:fb38ed1d55496230a72f3033c1099ae991e3e1ca8070f5b1a3833fa34defef3e X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 65402764A7FD4DC8B0665E122036A63B Ref B: ATL331000103021 Ref C: 2024-04-23T12:28:04Z Date: Tue, 23 Apr 2024 12:28:03 GMT Connection: close
2024-04-23 12:28:04 UTC	3214	IN	Data Raw: 29 5d 7d 27 0a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 65 72 76 65 72 22 3a 22 70 72 6f 64 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 33 2e 31 22 2c 22 64 61 79 73 74 61 72 74 22 3a 7b 22 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 22 3a 34 2c 22 65 6c 61 70 73 65 64 5f 64 61 79 73 22 3a 36 33 32 32 2e 35 31 39 34 39 38 32 37 37 37 39 34 7d 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 6b 70 66 65 68 61 6a 6a 6a 62 62 63 69 66 65 65 68 6a 67 66 67 6e 61 62 69 66 6b 6e 6d 64 61 64 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 22 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b 7b Data Ascii: )]}'{"response":{"server":"prod","protocol":"3.1","daystart":{"elapsed_seconds":4,"elapsed_days":6322.519498277794},"app":[{"appid":"kpfehajjjbbcifeehjgfgnabifknmdad","cohort":"","status":"ok","cohortname":"","updatecheck":{"status":"ok","urls":{"url":[{
2024-04-23 12:28:04 UTC	48	IN	Data Raw: 4c 66 76 71 31 55 75 30 44 54 6e 4d 4d 75 6e 4e 33 65 37 34 4d 59 6e 35 55 44 4e 32 4d 63 3d 22 7d 7d 7d 7d 5d 7d 2c 22 61 72 67 75 6d 65 6e 74 Data Ascii: Lfvq1Uu0DTnMMunN3e74MYn5UDN2Mc="}}}}]},"argument
2024-04-23 12:28:04 UTC	4096	IN	Data Raw: 73 22 3a 22 22 7d 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 6f 68 63 6b 65 66 6c 6e 68 65 67 6f 6a 63 6a 6c 63 70 62 66 70 63 69 61 64 67 69 6b 63 6f 68 6b 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 22 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 6d 73 65 64 67 65 2e 62 2e 74 6c 75 2e 64 6c 2e 64 65 6c 69 76 65 72 79 2e 6d 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 69 6c 65 73 74 72 65 61 6d 69 6e 67 73 65 72 76 69 63 65 2f 66 69 6c 65 73 2f 62 32 32 66 35 66 31 38 2d 66 37 65 61 2d 34 32 39 30 2d 39 32 39 64 2d 62 31 33 Data Ascii: s":""}}},{"appid":"ohckeflnhegojcjlcpbfpciadgikcohk","cohort":"","status":"ok","cohortname":"","updatecheck":{"status":"ok","urls":{"url":[{"codebase":"http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/b22f5f18-f7ea-4290-929d-b13
2024-04-23 12:28:04 UTC	2440	IN	Data Raw: 22 68 74 74 70 3a 2f 2f 6d 73 65 64 67 65 2e 66 2e 64 6c 2e 64 65 6c 69 76 65 72 79 2e 6d 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 69 6c 65 73 74 72 65 61 6d 69 6e 67 73 65 72 76 69 63 65 2f 66 69 6c 65 73 2f 65 66 35 66 37 39 32 65 2d 39 64 66 37 2d 34 37 34 38 2d 61 63 63 66 2d 30 32 65 63 33 33 61 34 61 32 63 34 2f 70 69 65 63 65 73 68 61 73 68 22 2c 22 48 61 73 68 4f 66 48 61 73 68 65 73 22 3a 22 36 4d 38 73 62 2b 65 2b 70 4e 39 4e 62 58 74 50 32 35 47 33 64 67 6c 65 2f 38 31 65 56 2f 31 42 77 44 57 61 71 4d 35 6d 77 53 30 3d 22 7d 7d 7d 7d 5d 7d 2c 22 61 72 67 75 6d 65 6e 74 73 22 3a 22 22 7d 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 6f 6a 62 6c 66 61 66 6a 6d 69 69 6b 62 6b 65 70 6e 6e 6f 6c 70 67 62 62 68 65 6a 68 6c 63 69 6d 22 2c 22 63 6f Data Ascii: "http://msedge.f.dl.delivery.mp.microsoft.com/filestreamingservice/files/ef5f792e-9df7-4748-accf-02ec33a4a2c4/pieceshash","HashOfHashes":"6M8sb+e+pN9NbXtP25G3dgle/81eV/1BwDWaqM5mwS0="}}}}]},"arguments":""}}},{"appid":"ojblfafjmiikbkepnnolpgbbhejhlcim","co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49780	204.79.197.239	443	6532	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 12:28:04 UTC	1284	OUT	POST /componentupdater/api/v1/update?cup2key=6:tFZ5UCrdntPX_6fmQJV5BGOK6CxNMrlCeRqM6lpPbN0&cup2hreq=833c43bb0d4c05428b9a04764d90234365125d9769176603170febb89ad8f4c2 HTTP/1.1 Host: edge.microsoft.com Connection: keep-alive Content-Length: 4903 X-Microsoft-Update-AppId: oankkpibpaokgecfckkdkgaoafllipag,ndikpojcjlepofdkaaldkinkjbeeebkl,kpfehajjjbbcifeehjgfgnabifknmdad,fppmbhmldokgmleojlplaaodlkibgikh,jbfaflocpnkhbgcijpkiafdpbjkedane,ohckeflnhegojcjlcpbfpciadgikcohk,eeobbhfgfagbclfofmgbdfoicabjdbkn,fgbafbciocncjfbbonhocjaohoknlaco,ahmaebgpfccdhgidjaidaoojjcijckba,alpjnmnfbgfkmmpcfpejmmoebdndedno,ojblfafjmiikbkepnnolpgbbhejhlcim X-Microsoft-Update-Interactivity: bg X-Microsoft-Update-Service-Cohort: 1624 X-Microsoft-Update-Updater: msedge-117.0.2045.47 Content-Type: application/json Sec-Mesh-Client-Edge-Version: 117.0.2045.47 Sec-Mesh-Client-Edge-Channel: stable Sec-Mesh-Client-OS: Windows Sec-Mesh-Client-OS-Version: 10.0.19045 Sec-Mesh-Client-Arch: x86_64 Sec-Mesh-Client-WebView: 1 X-Client-Data: CK3iygE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br
2024-04-23 12:28:04 UTC	4903	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 40 6f 73 22 3a 22 77 69 6e 22 2c 22 40 75 70 64 61 74 65 72 22 3a 22 6d 73 65 64 67 65 22 2c 22 61 63 63 65 70 74 66 6f 72 6d 61 74 22 3a 22 63 72 78 33 2c 70 75 66 66 22 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 6f 61 6e 6b 6b 70 69 62 70 61 6f 6b 67 65 63 66 63 6b 6b 64 6b 67 61 6f 61 66 6c 6c 69 70 61 67 22 2c 22 62 72 61 6e 64 22 3a 22 47 47 4c 53 22 2c 22 63 6f 68 6f 72 74 22 3a 22 72 72 66 40 30 2e 39 39 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 6e 73 74 61 6c 6c 64 61 74 65 22 3a 2d 31 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 47 42 22 2c 22 70 69 6e 67 22 3a 7b 22 72 22 3a 2d 32 7d 2c 22 74 61 72 67 65 74 69 6e 67 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 41 70 70 43 6f 68 6f 72 74 22 3a Data Ascii: {"request":{"@os":"win","@updater":"msedge","acceptformat":"crx3,puff","app":[{"appid":"oankkpibpaokgecfckkdkgaoafllipag","brand":"GGLS","cohort":"rrf@0.99","enabled":true,"installdate":-1,"lang":"en-GB","ping":{"r":-2},"targetingattributes":{"AppCohort":
2024-04-23 12:28:04 UTC	948	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Pragma: no-cache Content-Length: 9785 Content-Type: application/json Content-Encoding: identity Expires: Mon, 01 Jan 1990 00:00:00 GMT ETag: 3045022100CC748298FC2F81B5C0E678AED711DFAD93E2E4AAEBFAA04C095E5E9D79F073F3022077ACDD275FC72B5DD01BBB1394E9FEB66A9B56A1D83812C8C99FCC162FE1BD91:833c43bb0d4c05428b9a04764d90234365125d9769176603170febb89ad8f4c2 X-Frame-Options: sameorigin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block x-cup-server-proof: 3045022100CC748298FC2F81B5C0E678AED711DFAD93E2E4AAEBFAA04C095E5E9D79F073F3022077ACDD275FC72B5DD01BBB1394E9FEB66A9B56A1D83812C8C99FCC162FE1BD91:833c43bb0d4c05428b9a04764d90234365125d9769176603170febb89ad8f4c2 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EB65FA5E49DA4B7E9C46AF231453755C Ref B: ATL331000105023 Ref C: 2024-04-23T12:28:04Z Date: Tue, 23 Apr 2024 12:28:04 GMT Connection: close
2024-04-23 12:28:04 UTC	929	IN	Data Raw: 29 5d 7d 27 0a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 65 72 76 65 72 22 3a 22 70 72 6f 64 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 33 2e 31 22 2c 22 64 61 79 73 74 61 72 74 22 3a 7b 22 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 22 3a 34 2c 22 65 6c 61 70 73 65 64 5f 64 61 79 73 22 3a 36 33 32 32 2e 35 31 39 34 39 38 35 34 33 33 37 7d 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 6f 61 6e 6b 6b 70 69 62 70 61 6f 6b 67 65 63 66 63 6b 6b 64 6b 67 61 6f 61 66 6c 6c 69 70 61 67 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 22 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b 7b 22 Data Ascii: )]}'{"response":{"server":"prod","protocol":"3.1","daystart":{"elapsed_seconds":4,"elapsed_days":6322.51949854337},"app":[{"appid":"oankkpibpaokgecfckkdkgaoafllipag","cohort":"","status":"ok","cohortname":"","updatecheck":{"status":"ok","urls":{"url":[{"
2024-04-23 12:28:04 UTC	2333	IN	Data Raw: 68 65 63 6b 49 6e 66 6f 22 3a 7b 22 50 69 65 63 65 73 48 61 73 68 46 69 6c 65 55 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 6d 73 65 64 67 65 2e 66 2e 64 6c 2e 64 65 6c 69 76 65 72 79 2e 6d 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 69 6c 65 73 74 72 65 61 6d 69 6e 67 73 65 72 76 69 63 65 2f 66 69 6c 65 73 2f 38 37 33 34 38 39 62 31 2d 33 33 62 32 2d 34 38 30 61 2d 62 61 61 32 2d 36 34 31 62 39 65 30 39 65 64 63 64 2f 70 69 65 63 65 73 68 61 73 68 22 2c 22 48 61 73 68 4f 66 48 61 73 68 65 73 22 3a 22 56 35 46 77 4e 63 38 47 4f 2b 47 33 46 64 58 6d 2b 58 79 30 55 4d 64 50 6b 31 5a 39 32 4b 6f 62 6f 36 61 69 2f 32 58 73 73 65 30 3d 22 7d 7d 7d 7d 5d 7d 2c 22 61 72 67 75 6d 65 6e 74 73 22 3a 22 22 7d 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 6e 64 69 6b 70 6f Data Ascii: heckInfo":{"PiecesHashFileUrl":"http://msedge.f.dl.delivery.mp.microsoft.com/filestreamingservice/files/873489b1-33b2-480a-baa2-641b9e09edcd/pieceshash","HashOfHashes":"V5FwNc8GO+G3FdXm+Xy0UMdPk1Z92Kobo6ai/2Xsse0="}}}}]},"arguments":""}}},{"appid":"ndikpo
2024-04-23 12:28:04 UTC	4096	IN	Data Raw: 22 61 70 70 69 64 22 3a 22 66 70 70 6d 62 68 6d 6c 64 6f 6b 67 6d 6c 65 6f 6a 6c 70 6c 61 61 6f 64 6c 6b 69 62 67 69 6b 68 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 22 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 6d 73 65 64 67 65 2e 62 2e 74 6c 75 2e 64 6c 2e 64 65 6c 69 76 65 72 79 2e 6d 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 69 6c 65 73 74 72 65 61 6d 69 6e 67 73 65 72 76 69 63 65 2f 66 69 6c 65 73 2f 32 31 33 32 66 36 31 66 2d 66 37 39 30 2d 34 61 65 36 2d 61 33 35 35 2d 38 63 66 39 61 31 35 33 33 38 30 30 3f Data Ascii: "appid":"fppmbhmldokgmleojlplaaodlkibgikh","cohort":"","status":"ok","cohortname":"","updatecheck":{"status":"ok","urls":{"url":[{"codebase":"http://msedge.b.tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/2132f61f-f790-4ae6-a355-8cf9a1533800?
2024-04-23 12:28:04 UTC	2427	IN	Data Raw: 73 65 64 67 65 2e 66 2e 64 6c 2e 64 65 6c 69 76 65 72 79 2e 6d 70 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 69 6c 65 73 74 72 65 61 6d 69 6e 67 73 65 72 76 69 63 65 2f 66 69 6c 65 73 2f 36 66 66 34 64 31 34 62 2d 65 30 37 36 2d 34 35 36 37 2d 39 63 35 31 2d 33 34 34 65 63 64 63 33 31 38 31 61 2f 70 69 65 63 65 73 68 61 73 68 22 2c 22 48 61 73 68 4f 66 48 61 73 68 65 73 22 3a 22 35 63 47 57 44 36 4c 71 4b 53 75 39 4d 47 38 72 4f 4b 34 41 36 34 73 4a 2f 62 68 6c 57 56 4a 37 52 4e 56 4b 6b 4a 38 38 4f 58 63 3d 22 7d 7d 7d 7d 5d 7d 2c 22 61 72 67 75 6d 65 6e 74 73 22 3a 22 22 7d 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 61 68 6d 61 65 62 67 70 66 63 63 64 68 67 69 64 6a 61 69 64 61 6f 6f 6a 6a 63 69 6a 63 6b 62 61 22 2c 22 63 6f 68 6f 72 74 22 3a 22 22 2c Data Ascii: sedge.f.dl.delivery.mp.microsoft.com/filestreamingservice/files/6ff4d14b-e076-4567-9c51-344ecdc3181a/pieceshash","HashOfHashes":"5cGWD6LqKSu9MG8rOK4A64sJ/bhlWVJ7RNVKkJ88OXc="}}}}]},"arguments":""}}},{"appid":"ahmaebgpfccdhgidjaidaoojjcijckba","cohort":"",

Target ID:	0
Start time:	14:27:01
Start date:	23/04/2024
Path:	C:\Users\user\Desktop\Acrobat_Set-Up.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Acrobat_Set-Up.exe"
Imagebase:	0x540000
File size:	3'160'568 bytes
MD5 hash:	C02DA0A54B7990494D373B1BBA38E53E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:27:02
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7100.2080.4400570537256243048
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	14:27:02
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=7100.2080.18407888704770657282
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	14:27:02
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7fff28fd8e88,0x7fff28fd8e98,0x7fff28fd8ea8
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	14:27:02
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7fff28fd8e88,0x7fff28fd8e98,0x7fff28fd8ea8
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:2
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:2
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2108 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:3
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=1972 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:3
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2536 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:8
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --mojo-platform-channel-handle=2468 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:8
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1713867994182546 --launch-time-ticks=7229637667 --mojo-platform-channel-handle=3360 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:1
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	14:27:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1713867994185397 --launch-time-ticks=7229621524 --mojo-platform-channel-handle=3360 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:1
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	28
Start time:	14:29:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4544 --field-trial-handle=1736,i,11302001976447578962,6141052540685699755,262144 --enable-features=MojoIpcz /prefetch:2
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	14:29:03
Start date:	23/04/2024
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --noerrdialogs --user-data-dir="C:\Users\user\AppData\Local\Temp\{AF7CCBC1-F98B-4EB4-ABDE-15D21C5E4444}\EBWebView" --webview-exe-name=Acrobat_Set-Up.exe --webview-exe-version=2.12.0.23 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4800 --field-trial-handle=1752,i,2376687933976929174,8431868357786446797,262144 --enable-features=MojoIpcz /prefetch:2
Imagebase:	0x7ff608930000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	5.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	8.5%
Total number of Nodes:	1580
Total number of Limit Nodes:	36

Executed Functions

Function 007E32B0 Relevance: 39.1, APIs: 9, Strings: 13, Instructions: 604
memorysynchronizationthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SysAllocString.OLEAUT32(ROOT\CIMV2), ref: 007E3375
VariantClear.OLEAUT32(?), ref: 007E35F9
SysStringLen.OLEAUT32(?), ref: 007E3656
VariantClear.OLEAUT32(?), ref: 007E36C8
VariantClear.OLEAUT32(?), ref: 007E37B7
_com_issue_error.COMSUPP ref: 007E388B
_com_issue_error.COMSUPP ref: 007E3895
CreateThread.KERNELBASE(00000000,00000000,007E32B0,00000000,00000000,00000000), ref: 007E392B
WaitForSingleObject.KERNEL32(00000000,00002710), ref: 007E3937

Strings

HardwareUtils, xrefs: 007E39BF, 007E39E9, 007E3A16
WQL, xrefs: 007E3415
Name, xrefs: 007E35FF
In CPUUtils::GetCPUDetails. Timed out!!! , xrefs: 007E39BA, 007E39DA, 007E3A11
SELECT * FROM Win32_Processor, xrefs: 007E33FF
OOBEUtils, xrefs: 007E39EE
NumberOfCores, xrefs: 007E36CE
P}Y, xrefs: 007E33BF, 007E345A, 007E34B0, 007E352D, 007E3632, 007E3701, 007E3822, 007E3839, 007E3850, 007E39F7, 007E3A28
MaxClockSpeed, xrefs: 007E34F3
name, xrefs: 007E3662
ROOT\CIMV2, xrefs: 007E3362
numberOfCores, xrefs: 007E372C
frequencyInGHz, xrefs: 007E3595

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ClearVariant$String_com_issue_error$AllocCreateObjectSingleThreadWait
String ID: HardwareUtils$In CPUUtils::GetCPUDetails. Timed out!!! $MaxClockSpeed$Name$NumberOfCores$OOBEUtils$P}Y$ROOT\CIMV2$SELECT * FROM Win32_Processor$WQL$frequencyInGHz$name$numberOfCores
API String ID: 1116215273-2939387103
Opcode ID: 08823183b24d9ce4dea59d10933ec496a4b2f514da443ad850455ea10cda5ebf
Instruction ID: dd2a6c8799f2c95f49bddbfe22d47f7f188b03ef986fc22ac2566436b4bcc129
Opcode Fuzzy Hash: 08823183b24d9ce4dea59d10933ec496a4b2f514da443ad850455ea10cda5ebf
Instruction Fuzzy Hash: 0A328D70A01259EFDB14DFA4CC49BAEBBB4FF48714F144159E905BB2D0DBB86A04CB91

Uniqueness

Uniqueness Score: -1.00%

Function 005A4F80 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 199
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 005A5009
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 005A5055
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 005A512D
std::_Lockit::~_Lockit.LIBCPMT ref: 005A51C2
Concurrency::cancel_current_task.LIBCPMT ref: 005A51E7
Concurrency::cancel_current_task.LIBCPMT ref: 005A51EC
Concurrency::cancel_current_task.LIBCPMT ref: 005A51F1

Strings

false, xrefs: 005A50DB
true, xrefs: 005A5105
bad locale name, xrefs: 005A51DD

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Concurrency::cancel_current_task$Locinfo::_Lockit$Locinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name$false$true
API String ID: 3559308103-1062449267
Opcode ID: b949416d885499adc22e8d4431dc8e2b1f90e40e6834bd7f9cc7f2fdd02e1f5f
Instruction ID: 443e3a3a90b061baa4771124b59b509a16baccf8b452cd5da24a7a631a1801d1
Opcode Fuzzy Hash: b949416d885499adc22e8d4431dc8e2b1f90e40e6834bd7f9cc7f2fdd02e1f5f
Instruction Fuzzy Hash: 4B717EB0D003489FDF10DFA8D905BAEBBB4BF05304F144529E954EB381E7B5AA05CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00922905 Relevance: 6.1, APIs: 4, Instructions: 66
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0092DBB6: GetLastError.KERNEL32(00000000,?,00914111,00930A91,?,0092DCAA,00000001,00000364,00000002,000000FF,00000018,00000000,?,0090E6AC,00000000,?), ref: 0092DBBA
Part of subcall function 0092DBB6: SetLastError.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000018,0072B8E6,00000000,00000018,?), ref: 0092DC5C

CloseHandle.KERNEL32(?,?,?,00922A3C,?,?,009228AE,00000000), ref: 00922936
FreeLibraryAndExitThread.KERNELBASE(?,?,?,?,00922A3C,?,?,009228AE,00000000), ref: 0092294C
RtlExitUserThread.NTDLL(?,?,?,00922A3C,?,?,009228AE,00000000), ref: 00922955
GetModuleHandleExW.KERNEL32(00000004,?,0000000C), ref: 00922993

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorExitHandleLastThread$CloseFreeLibraryModuleUser
String ID:
API String ID: 1062721995-0
Opcode ID: c3597723a71384a0437dbddca032e7d4edc60e18a3bf1f0bb8d017f7422c618c
Instruction ID: 60039d878450bdedcf52e9d37f3f0a1bdcea1a8201a1986a0fec2f70ba50b424
Opcode Fuzzy Hash: c3597723a71384a0437dbddca032e7d4edc60e18a3bf1f0bb8d017f7422c618c
Instruction Fuzzy Hash: 1C110835A00624BBC7209B25ED09F5B7BACEF80720F154528FD59D7299DBB0DD41C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 00922850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(00B27E00,0000000C), ref: 00922863
RtlExitUserThread.NTDLL(00000000), ref: 0092286A

Strings

P}Y, xrefs: 009228A0

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorExitLastThreadUser
String ID: P}Y
API String ID: 1750398979-467343689
Opcode ID: 4fa7d8ce578dc82b256e13b3c0eebb4d8f67111cbd2160293fb0d33f02dcdcf6
Instruction ID: f5be9923ce1d1e33829d78e73969329cde51e52880c5c06a1cf42e4b62299aa1
Opcode Fuzzy Hash: 4fa7d8ce578dc82b256e13b3c0eebb4d8f67111cbd2160293fb0d33f02dcdcf6
Instruction Fuzzy Hash: 0AF0A971A44614EFDB01BFB0E80AB2E3BB5FF84710F250188F2059B2A2CF749900DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0093122D Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNELBASE(?,00932F96,?,?,-00000008,?,00000000,00000000,00000000,00000000,00000000), ref: 00931261
LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,-00000008,-00000008,?,00932F96,?,?,-00000008,?,00000000), ref: 0093127F

Strings

P}Y, xrefs: 0093125B

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: String
String ID: P}Y
API String ID: 2568140703-467343689
Opcode ID: ceb8ec8bb0a35b7b867c43df4c987a6dd96b2e229472ffa10a07680481bf3856
Instruction ID: bbeb5f19e7d6e5c591b324e025b5eb6222f8e3f65c3a785fa043b6647efae1bf
Opcode Fuzzy Hash: ceb8ec8bb0a35b7b867c43df4c987a6dd96b2e229472ffa10a07680481bf3856
Instruction Fuzzy Hash: 75F0283640451ABBCF126F90DC05AEE3E66BF987A1F064215FA2965130CA76C971AF90

Uniqueness

Uniqueness Score: -1.00%

Function 00932EA6 Relevance: 4.7, APIs: 3, Instructions: 197
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__freea.LIBCMT ref: 0093305B

Part of subcall function 0092DD50: RtlAllocateHeap.NTDLL(00000000,00000028), ref: 0092DD82

__freea.LIBCMT ref: 0093306E
__freea.LIBCMT ref: 0093307B

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: __freea$AllocateHeap
String ID:
API String ID: 2243444508-0
Opcode ID: faeaebaf07a0c022aaa1977b3788fc1fa211e6415da0d8703d4f7e2710b71624
Instruction ID: 25698712e354384b2b1c3695c9592aebac8808e7f7da5facfbd41e9ebeff0286
Opcode Fuzzy Hash: faeaebaf07a0c022aaa1977b3788fc1fa211e6415da0d8703d4f7e2710b71624
Instruction Fuzzy Hash: 3551B17260020AAFDB245F64DC82EBF76ADEF84710F158528FD18E6151EB35DE10CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0090B2B0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 43
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL(E06D7363,00000001,00000003,00000000,00000000,?,?,008F9DD1,00000000,00B267D0,00000018,00000000,00000018,?), ref: 0090B310

Strings

P}Y, xrefs: 0090B2E0

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID: P}Y
API String ID: 6842923-467343689
Opcode ID: 2e4ea4cec696b26faba494308b6485d5c3ab77b420ead892d421fdd746706de9
Instruction ID: 488a2bbbdfdb90f2a7687dab7122cd632389f1884dfef3d8b309c1a84d3de683
Opcode Fuzzy Hash: 2e4ea4cec696b26faba494308b6485d5c3ab77b420ead892d421fdd746706de9
Instruction Fuzzy Hash: A901D675900209AFC7019F5DD880BAEBBB8FF48714F154069EE15AB3A1D7B0ED01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00935F16 Relevance: 3.2, APIs: 2, Instructions: 177
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00935A4D: GetOEMCP.KERNEL32(00000000), ref: 00935A78

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,00935D5D,?,00000000), ref: 00935F77
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,00935D5D,?,00000000), ref: 00935FB3

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 09b1e5fab8749774f0a209f7a34d7a276c43af7ebae500e7396333d534d34de9
Instruction ID: 39918057cf81dfc9a701d6dc6fbf86fe6cb375325d3e8469baa8d512a042fdb3
Opcode Fuzzy Hash: 09b1e5fab8749774f0a209f7a34d7a276c43af7ebae500e7396333d534d34de9
Instruction Fuzzy Hash: E1513471A00645AFDB24CF76C881BBBBBF8EF85304F15846ED082CB252E6759945CF81

Uniqueness

Uniqueness Score: -1.00%

Function 0092D6ED Relevance: 3.0, APIs: 2, Instructions: 22
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlFreeHeap.NTDLL(00000000,00000000,?,00937171,?,00000000,?,?,00937412,?,00000007,?,?,009379B9,?,?), ref: 0092D703
GetLastError.KERNEL32(?,?,00937171,?,00000000,?,?,00937412,?,00000007,?,?,009379B9,?,?), ref: 0092D70E

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorFreeHeapLast
String ID:
API String ID: 485612231-0
Opcode ID: 163622ada3c266037e933d3fdd078e975f699ab62300de9f8d5f1a28bb973d16
Instruction ID: de2a79d7a940596797d026ee1c2f96040153aad1fa233c2fdf4b8b016947befc
Opcode Fuzzy Hash: 163622ada3c266037e933d3fdd078e975f699ab62300de9f8d5f1a28bb973d16
Instruction Fuzzy Hash: 21E0C232206618ABCB112FE0FC0DB993B6CEF89791F150024F70C8B160EE348880DBC8

Uniqueness

Uniqueness Score: -1.00%

Function 00935B21 Relevance: 1.6, APIs: 1, Instructions: 142
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32(0000FDE9,?,00000005,00935D5D,?), ref: 00935B53

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: 7cd8190a5947dd6da516a2618e262d2b4b7d484670296538d105c02644f49566
Instruction ID: 78337b6979bf3c25f22a4ac94077e7bf365f191c739c7a7802bc09035b070c5a
Opcode Fuzzy Hash: 7cd8190a5947dd6da516a2618e262d2b4b7d484670296538d105c02644f49566
Instruction Fuzzy Hash: 785149B15086589FDB118B28CC84BF9BBBDEF19308F1501E9E589C7182D3759D85CF60

Uniqueness

Uniqueness Score: -1.00%

Function 0058C220 Relevance: 1.6, APIs: 1, Instructions: 69
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0058C270

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 8817005f2f122dfc0e99274374244942e128a17643dfc646f21998f5675e8916
Instruction ID: 4913f26c72ff848c00980baf7aa2a57a11c3057fe8ff7024e0db678be0590dd7
Opcode Fuzzy Hash: 8817005f2f122dfc0e99274374244942e128a17643dfc646f21998f5675e8916
Instruction Fuzzy Hash: 3501C8763041094B9B08F5B8A84596EBBC9FA943607144179FD1AD7681F630E85183A4

Uniqueness

Uniqueness Score: -1.00%

Function 00930A3F Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,00000000,00000000), ref: 00930A80

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 6b4beeed9c85c19bd00cca16dc5b05f7d68e96a3694026e9f5a547524106f98a
Instruction ID: 3498c44962e9cd8919e83641372f5567f4e8b3d2b9142488128a6073c923edcd
Opcode Fuzzy Hash: 6b4beeed9c85c19bd00cca16dc5b05f7d68e96a3694026e9f5a547524106f98a
Instruction Fuzzy Hash: 21F0E935604329A7DB216AA2BC1EB5F3B9CAFC1760F188111EC04E7190CE30DC008EE0

Uniqueness

Uniqueness Score: -1.00%

Function 0092DD50 Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,00000028), ref: 0092DD82

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 67944280201951f9d3ee9b1b9ff787cb57b26f6be5d359331eb641ce4335ad51
Instruction ID: 51b16a4cfed6465b218b5b82c853c73671943ceff9c096a80125ba59d5b320af
Opcode Fuzzy Hash: 67944280201951f9d3ee9b1b9ff787cb57b26f6be5d359331eb641ce4335ad51
Instruction Fuzzy Hash: 4EE0E535106E7866E7222A717C00B9A364C9F827A0F1A0110AD04D69D8DE21CC0185E1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00933B9A Relevance: 10.3, APIs: 1, Strings: 4, Instructions: 1521COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00933DB1

Strings

1#IND, xrefs: 00933C9F
1#SNAN, xrefs: 00933CA6
1#INF, xrefs: 00933CD0
1#QNAN, xrefs: 00933CAD

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 94a1901282617ef63346b29a92077c38d44315deecf05843231d0eeae3db50da
Instruction ID: d1b670dc4664ee523f6ac7bf7d1a2bb2e9488eff58842ac49aa010f355e2fcaf
Opcode Fuzzy Hash: 94a1901282617ef63346b29a92077c38d44315deecf05843231d0eeae3db50da
Instruction Fuzzy Hash: A4D23A71E086298FDB64CE28DD407EAB7B9FB44305F1545EAD84DE7240EB78AE818F41

Uniqueness

Uniqueness Score: -1.00%

Function 009389CF Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(0000009D,2000000B,00000000,00000002,00000000,?,?,?,00938CE1,?,00000000), ref: 00938A68
GetLocaleInfoW.KERNEL32(0000009D,20001004,00000000,00000002,00000000,?,?,?,00938CE1,?,00000000), ref: 00938A91
GetACP.KERNEL32(?,?,00938CE1,?,00000000), ref: 00938AA6

Strings

ACP, xrefs: 009389ED
OCP, xrefs: 00938A23

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: a94b975a607d9bac411b9aa3f942b7a0e3bece499763e647a0c6903d2e4971ef
Instruction ID: b5c990db4804337f08d25fb5d769c856c8dd00a2c6afce5d8eb089361376364b
Opcode Fuzzy Hash: a94b975a607d9bac411b9aa3f942b7a0e3bece499763e647a0c6903d2e4971ef
Instruction Fuzzy Hash: EE219522704305EADB34CF68CD05AA777AAEB90B64F568866F90AD7100EF32DD41DB50

Uniqueness

Uniqueness Score: -1.00%

Function 00938BAB Relevance: 7.7, APIs: 5, Instructions: 182COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

GetUserDefaultLCID.KERNEL32(?,?,?), ref: 00938CB3
IsValidCodePage.KERNEL32(00000000), ref: 00938CF1
IsValidLocale.KERNEL32(?,00000001), ref: 00938D04
GetLocaleInfoW.KERNEL32(?,00001001,?,00000040,?,?,00000055,00000000,?,?,00000055,00000000), ref: 00938D4C
GetLocaleInfoW.KERNEL32(?,00001002,?,00000040), ref: 00938D67

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 28dc77d3d45447ba5bbd7ad82c412a076c4a9fd26a662ea3884a8d9bdcec32b2
Instruction ID: 86c5b37d81b4524f559ac540915294ae6b9b8a763d8b2d7b2e50362d518783c6
Opcode Fuzzy Hash: 28dc77d3d45447ba5bbd7ad82c412a076c4a9fd26a662ea3884a8d9bdcec32b2
Instruction Fuzzy Hash: 33516B71A01309EBDB10EFA4CC45ABB77B8BF58700F184569F950E7191EBB09E418F61

Uniqueness

Uniqueness Score: -1.00%

Function 00618290 Relevance: 7.5, APIs: 1, Strings: 2, Instructions: 2235COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0061842B

Part of subcall function 005A4E50: std::_Lockit::_Lockit.LIBCPMT ref: 005A4E86
Part of subcall function 005A4E50: std::_Lockit::_Lockit.LIBCPMT ref: 005A4EA9
Part of subcall function 005A4E50: std::_Lockit::~_Lockit.LIBCPMT ref: 005A4EC9
Part of subcall function 005A4E50: std::_Lockit::~_Lockit.LIBCPMT ref: 005A4F53

Strings

0123456789ABCDEFabcdef-+Xx, xrefs: 00619246
0123456789-+Ee, xrefs: 0061855C

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID: 0123456789-+Ee$0123456789ABCDEFabcdef-+Xx
API String ID: 3053331623-2210447354
Opcode ID: 10381f6e355ad33470a0b8279aa3a9c97d3bfc95776b18950b0e4e7416c7235c
Instruction ID: 6f1340146d631590a518a0c989a5cb45602c1697c8a16655f9c811f33eb2d115
Opcode Fuzzy Hash: 10381f6e355ad33470a0b8279aa3a9c97d3bfc95776b18950b0e4e7416c7235c
Instruction Fuzzy Hash: C013AC70A042448FDB25CF68C494BE9BBF2AF16314F2C859DD8959B392D735EC86CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00938236 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 254COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

GetACP.KERNEL32(?,?,?,?,?,?,0092B30E,?,?,?,?,?,-00000050,?,?,?), ref: 009382F5
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,0092B30E,?,?,?,?,?,-00000050,?,?), ref: 0093832C
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,?,00000000,?), ref: 0093848F

Strings

utf8, xrefs: 009383FE

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: 6d75ecf91eea96a6341f66f209f5b52013bb22acd99ffda08885a5c2fa27571e
Instruction ID: 8b4a339c4450deae71ecba447861ec07e29fc98322201afb26dfa95f34d88f52
Opcode Fuzzy Hash: 6d75ecf91eea96a6341f66f209f5b52013bb22acd99ffda08885a5c2fa27571e
Instruction Fuzzy Hash: D371F176604706AAEB24ABB4CC46FBB73ACEF44740F104429FA15DB591EF74E940CEA0

Uniqueness

Uniqueness Score: -1.00%

Function 0091D800 Relevance: 6.5, APIs: 4, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 058068402dfdf0993c448be6f8f23b606da59b32ab6e66df6ce56724297ba296
Instruction ID: d6a91dabf40ae3fe106eabf373d775f14598975e9dcaffb04fc871f44ff4b603
Opcode Fuzzy Hash: 058068402dfdf0993c448be6f8f23b606da59b32ab6e66df6ce56724297ba296
Instruction Fuzzy Hash: 79021A71E012199BDF14CFA9D8806EEFBB5FF48314F258669D519EB380D731AA81CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00938653 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 009386A7
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 009386F1
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 009387B7

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 80d6f36003465160953f03577b740d2fb4a264140d4bb95694a5a53ea2886d7e
Instruction ID: 22a29dfa4c2df6d2d2759e07d728bb03de7ab73457778ee43c704cb97e968146
Opcode Fuzzy Hash: 80d6f36003465160953f03577b740d2fb4a264140d4bb95694a5a53ea2886d7e
Instruction Fuzzy Hash: F7618D72910217DBEB289F29CC82BBBB7A9EF04300F244169F916C6285EB74DD85CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0090E6DE Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,00000018), ref: 0090E7D6
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,00000018), ref: 0090E7E0
UnhandledExceptionFilter.KERNEL32(-00000328,?,?,?,?,?,00000018), ref: 0090E7ED

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 615aec688c1c5c2f84e91e8a4fb134e997cacbe34f8be42388986e170699dcd4
Instruction ID: f72e793a64c10512029da86492944536477c58ba5d14ae2ab5ddc00c8881224b
Opcode Fuzzy Hash: 615aec688c1c5c2f84e91e8a4fb134e997cacbe34f8be42388986e170699dcd4
Instruction Fuzzy Hash: 4F31D47490122CABCB61DF28D9887DCBBB8BF08310F5041EAE81CA7290E7709F818F45

Uniqueness

Uniqueness Score: -1.00%

Function 0093106C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,?,?,?,?,0092BE84,?,20001004,00000000,00000002), ref: 009310A0

Strings

P}Y, xrefs: 0093108B

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: InfoLocale
String ID: P}Y
API String ID: 2299586839-467343689
Opcode ID: 729d7af315b6d0d9851a3bfb595b7f7258719e4abb97c1319b3a1d505b65dbd2
Instruction ID: dde463895baa517c01c75326f45cc7703c0f560105c28786f083c0bc257153e5
Opcode Fuzzy Hash: 729d7af315b6d0d9851a3bfb595b7f7258719e4abb97c1319b3a1d505b65dbd2
Instruction Fuzzy Hash: 66E04F36501618BBCF222F61DC09FAE7F2AEF847A0F054011FD0569131CBB28D20AE95

Uniqueness

Uniqueness Score: -1.00%

Function 00619AE0 Relevance: 2.6, Strings: 1, Instructions: 1396COMMON

Download Yara Rule

Strings

0123456789ABCDEFabcdef-+XxPp, xrefs: 00619BCD

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_
String ID: 0123456789ABCDEFabcdef-+XxPp
API String ID: 593203224-3606100449
Opcode ID: d8aeba30ee16c9614908ed307c4a8ba30d00bc95ba6608a292a9ccff0518d64a
Instruction ID: 426effc9b742894c05f6a0a5d7d09b98c5bf52c7ddd7f1cdedcdd720431f424e
Opcode Fuzzy Hash: d8aeba30ee16c9614908ed307c4a8ba30d00bc95ba6608a292a9ccff0518d64a
Instruction Fuzzy Hash: FBC27A746062858FDB25CFA8C450BE9BBF2AF16314F2C859CD4958B392D331DD86CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0092C75E Relevance: 1.8, APIs: 1, Instructions: 269COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,0092C759,?,?,00000008,?,?,0093CC09,00000000), ref: 0092C98B

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 4b14928187e65a871a0adf7671e51dcc27c388d3d687f2acfe95ef5e7b848e37
Instruction ID: 30a6a048268147a3d71fde852cc25141b4434ba99f2345a762252d8007749f71
Opcode Fuzzy Hash: 4b14928187e65a871a0adf7671e51dcc27c388d3d687f2acfe95ef5e7b848e37
Instruction Fuzzy Hash: 71B18DB6610618DFD719CF28D48AB687BE0FF05364F29C658E899CF2A5C335E981CB40

Uniqueness

Uniqueness Score: -1.00%

Function 009388A6 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 009388FA

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 35ba4ecb01d54b78033b9a7c425e990beeade32d1fcb72ba7e48622df2f7189e
Instruction ID: b2cc0af5c3da43c567cc2209398fe3dd50870570dff82016f67f187dc813cf0f
Opcode Fuzzy Hash: 35ba4ecb01d54b78033b9a7c425e990beeade32d1fcb72ba7e48622df2f7189e
Instruction Fuzzy Hash: 3F218E7261521AABDB289A29DC42BBB77ACEF44760F20406AFD05E7241EF74AD008A51

Uniqueness

Uniqueness Score: -1.00%

Function 0093852D Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

EnumSystemLocalesW.KERNEL32(00938653,00000001,00000000,?,?,?,00938C87,00000000,?,?,?), ref: 0093859F

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 93179f11dc803f96522ee01399437498776233b8758fd795172102448d090710
Instruction ID: dcd3b167e3e8ac83a3c0191cf817a740b079e289c9b8d305248b42e3a6f392cc
Opcode Fuzzy Hash: 93179f11dc803f96522ee01399437498776233b8758fd795172102448d090710
Instruction Fuzzy Hash: C611063A6047059FDB189F38C8956BBB791FB80358F19442CF54647A40D771A902CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00938AD5 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,00938950,00000000,00000000,?), ref: 00938B01

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 471ffc6e48fee23948e52fd835427c7a4b72977545313b38260d78fa35bf64bd
Instruction ID: 244190d7b1c0e7b1f85fccc261b4bed267589680bca5fdb67a4e91b4c2bef7ca
Opcode Fuzzy Hash: 471ffc6e48fee23948e52fd835427c7a4b72977545313b38260d78fa35bf64bd
Instruction Fuzzy Hash: A201F473614213ABDB285A248C47BBBB778EB40764F154829FD02A3280EE74FE41CA90

Uniqueness

Uniqueness Score: -1.00%

Function 0093843B Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,?,00000000,?), ref: 0093848F

Strings

utf8, xrefs: 009383FE

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID: utf8
API String ID: 3736152602-905460609
Opcode ID: 3a878a7b0522d9e7d30652e84b1e5d8bf141e6544f346d67ec036667780704fc
Instruction ID: 1184e7d23a44f9e1a96129673c5ccabc74d18c9252d79e8f80b95b5edaea2664
Opcode Fuzzy Hash: 3a878a7b0522d9e7d30652e84b1e5d8bf141e6544f346d67ec036667780704fc
Instruction Fuzzy Hash: 65F0C833611219EBCB14AB78DC49EBF73ECEB44715F1140B9B602D7241EE78AD058790

Uniqueness

Uniqueness Score: -1.00%

Function 009385C8 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

EnumSystemLocalesW.KERNEL32(009388A6,00000001,?,?,?,?,00938C4F,?,?,?,?), ref: 00938612

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: e37812b0874fcf361aab623b572eb3788e0da89ed8696d8c3cfe2b6336d491d1
Instruction ID: 6a29ef5df798b47791a0fae3fe04d114f45da31d954ab073c9d5864d973c1438
Opcode Fuzzy Hash: e37812b0874fcf361aab623b572eb3788e0da89ed8696d8c3cfe2b6336d491d1
Instruction Fuzzy Hash: ABF0F6362043045FDB249F399C82A7B7B95FFC076CF19446CFA464B680DAB1AC01DA50

Uniqueness

Uniqueness Score: -1.00%

Function 00930AA9 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0092CBC0: RtlEnterCriticalSection.NTDLL(?), ref: 0092CBCF

EnumSystemLocalesW.KERNEL32(00930A9C,00000001,00B281C0,0000000C,00930F11,00000000), ref: 00930AE1

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 167d28f8d3c5e2e3a81e553f9308886d90eba73d75686ba3f767fbff2241c898
Instruction ID: 57e437f9615ec5b7e2ae0dfd303ef01c29402c06fa51e6a44d666f26b30c4800
Opcode Fuzzy Hash: 167d28f8d3c5e2e3a81e553f9308886d90eba73d75686ba3f767fbff2241c898
Instruction Fuzzy Hash: 9EF03776A00314DFDB04EF98E842BAC77F0EB89725F10812AF410DB2A1CBB54900CF80

Uniqueness

Uniqueness Score: -1.00%

Function 009384E2 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0092DA65: GetLastError.KERNEL32(00000000,00000000,00932E19), ref: 0092DA69
Part of subcall function 0092DA65: SetLastError.KERNEL32(00000000,00000000,00000018,00000002,000000FF), ref: 0092DB0B

EnumSystemLocalesW.KERNEL32(0093843B,00000001,?,?,?,00938CA9,?,?,?,?), ref: 00938519

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: effa447317a4db1c63ed58e81116024defd0b18d5db23bea5fb770f24b936110
Instruction ID: 3bcc9a999d50e15851cc777bd8f62cb6a1b4139cc6a2363b0ea175f35491907e
Opcode Fuzzy Hash: effa447317a4db1c63ed58e81116024defd0b18d5db23bea5fb770f24b936110
Instruction Fuzzy Hash: 9AF0A03630030597CB04AF39E849A6A7B94EFC1754F4A405DFA058B650CAB19942CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00939569 Relevance: .6, Instructions: 637COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2bcafbf959d6368fb2187d6569d231492a92815a9c45b0e1352e8e0c1b3f906
Instruction ID: 92699f6d9b2acdf2c04a3403371bfb732ec87fd933bec53f1bdc1a99fea49420
Opcode Fuzzy Hash: d2bcafbf959d6368fb2187d6569d231492a92815a9c45b0e1352e8e0c1b3f906
Instruction Fuzzy Hash: 37322731D29F014DD7239634D862339A68DAFB73C5F15D727F82AF5AA9EB29C4834500

Uniqueness

Uniqueness Score: -1.00%

Function 00912CEC Relevance: .4, Instructions: 385COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a54d35d0c9389e7603d1b2460d174c4094716899daba5f4a2e7b22a63fd65d02
Instruction ID: b614fa5335647d04ea932a42935c621b2bb91605f708a43a6e922dbee8f3c8b1
Opcode Fuzzy Hash: a54d35d0c9389e7603d1b2460d174c4094716899daba5f4a2e7b22a63fd65d02
Instruction Fuzzy Hash: 54D1AC38B0060E8FCB28EF68D584AEAB7B5FF48310F14861DD4569B691D735AED2CB50

Uniqueness

Uniqueness Score: -1.00%

Function 008104B0 Relevance: 30.1, APIs: 12, Strings: 5, Instructions: 352COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000), ref: 008104E0
RtlEnterCriticalSection.NTDLL(00000000), ref: 008104EF
RtlLeaveCriticalSection.NTDLL(00000000), ref: 008104F9
RtlEnterCriticalSection.NTDLL(?), ref: 0081050B
RtlLeaveCriticalSection.NTDLL(?), ref: 00810518
RtlEnterCriticalSection.NTDLL(?), ref: 00810566
RtlLeaveCriticalSection.NTDLL(?), ref: 00810573
RtlEnterCriticalSection.NTDLL(?), ref: 008105F5
RtlLeaveCriticalSection.NTDLL(?), ref: 008106CD
RtlEnterCriticalSection.NTDLL(00000018), ref: 00810775
RtlLeaveCriticalSection.NTDLL(00000018), ref: 0081077C
Concurrency::cancel_current_task.LIBCPMT ref: 008108B8

Strings

Event with guid '%s' is being sent, xrefs: 008107A4
failure in WaitforEvent, xrefs: 00810545
P}Y, xrefs: 00810555, 0081066F, 008106F1, 00810719, 008107AF, 0081080A, 0081085D, 00810887, 008108DC
Event with guid '%s' has been discarded. So it won't be sent, xrefs: 00810852
Async thread is completed. Now exiting from function., xrefs: 0081087C

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Concurrency::cancel_current_taskInitialize
String ID: Async thread is completed. Now exiting from function.$Event with guid '%s' has been discarded. So it won't be sent$Event with guid '%s' is being sent$P}Y$failure in WaitforEvent
API String ID: 3507388499-3947899308
Opcode ID: cae659d3daff3fde9c52d30a7f11d4e4f494579c7c823fd34af4352318ca814a
Instruction ID: 7eb9efe53bbb137a3fa199018ffd4cc92397f370f4ceaee484d0e4bc69dffadd
Opcode Fuzzy Hash: cae659d3daff3fde9c52d30a7f11d4e4f494579c7c823fd34af4352318ca814a
Instruction Fuzzy Hash: 13D1A975A00618DFCF04DFA4D884AAEBBB9FF88310F154159E805AB391DB74AD85CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00676FB0 Relevance: 28.4, APIs: 15, Strings: 1, Instructions: 359COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00676FE6
std::_Lockit::_Lockit.LIBCPMT ref: 00677008
std::_Lockit::~_Lockit.LIBCPMT ref: 00677028
std::_Lockit::~_Lockit.LIBCPMT ref: 0067704F
std::_Lockit::_Lockit.LIBCPMT ref: 006770C8
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00677114
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0067712E
std::_Lockit::~_Lockit.LIBCPMT ref: 006771C3
std::_Facet_Register.LIBCPMT ref: 006771D0
std::_Lockit::_Lockit.LIBCPMT ref: 006772D6
std::_Lockit::_Lockit.LIBCPMT ref: 006772F9
std::_Lockit::~_Lockit.LIBCPMT ref: 00677319
std::_Facet_Register.LIBCPMT ref: 0067738B
std::_Lockit::~_Lockit.LIBCPMT ref: 006773A3
Concurrency::cancel_current_task.LIBCPMT ref: 006773C6

Strings

bad locale name, xrefs: 006771EA

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Locinfo::_Register$Concurrency::cancel_current_taskLocinfo_ctorLocinfo_dtor
String ID: bad locale name
API String ID: 686092742-1405518554
Opcode ID: 34e0086eb4c317f265f063bda86faa8717084231b60089c3b9e70c37b7644c7f
Instruction ID: 0e7c21ce6b42445edf62a0b4790ef64bde782d5a8a2c8c45bb489b5e15288f6f
Opcode Fuzzy Hash: 34e0086eb4c317f265f063bda86faa8717084231b60089c3b9e70c37b7644c7f
Instruction Fuzzy Hash: 34D1BFB1D04208DFDF10DFA8D841BAEBBB5FB58320F144569E819A7391EB74A904CB92

Uniqueness

Uniqueness Score: -1.00%

Function 0059F6D0 Relevance: 28.3, APIs: 15, Strings: 1, Instructions: 313COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0059F706
std::_Lockit::_Lockit.LIBCPMT ref: 0059F729
std::_Lockit::~_Lockit.LIBCPMT ref: 0059F749
std::_Facet_Register.LIBCPMT ref: 0059F7BB
std::_Lockit::~_Lockit.LIBCPMT ref: 0059F7D3
Concurrency::cancel_current_task.LIBCPMT ref: 0059F7F6
std::_Lockit::_Lockit.LIBCPMT ref: 0059F836
std::_Lockit::_Lockit.LIBCPMT ref: 0059F858
std::_Lockit::~_Lockit.LIBCPMT ref: 0059F878
std::_Lockit::~_Lockit.LIBCPMT ref: 0059F89F
std::_Lockit::_Lockit.LIBCPMT ref: 0059F918
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0059F964
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0059F97E
std::_Lockit::~_Lockit.LIBCPMT ref: 0059FA13
std::_Facet_Register.LIBCPMT ref: 0059FA20

Strings

bad locale name, xrefs: 0059FA3A

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Facet_Locinfo::_Register$Concurrency::cancel_current_taskLocinfo_ctorLocinfo_dtor
String ID: bad locale name
API String ID: 686092742-1405518554
Opcode ID: 5a64d6c4d078e1963b340785526576e9f0e1a5ae5e0d1ca2149e6c1a9031b7df
Instruction ID: 277df4748f2bbc084b69b5fadd6c0fb78d538096c7775c41011e35d9ec130ff2
Opcode Fuzzy Hash: 5a64d6c4d078e1963b340785526576e9f0e1a5ae5e0d1ca2149e6c1a9031b7df
Instruction Fuzzy Hash: C3C189B5D002199FDF20DFA8D845BAEBBB4FF04714F144529E909E7391EB74A904CB92

Uniqueness

Uniqueness Score: -1.00%

Function 0090A410 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 154memoryCOMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00697B45,00697B47,00000000,00000000,599C3CDC,?,00000000,?,0090AE40,00B27A48,000000FE,?,00697B45,?), ref: 0090A499
MultiByteToWideChar.KERNEL32(00000000,00000000,00697B45,?,00000000,00000000,?,0090AE40,00B27A48,000000FE,?,00697B45), ref: 0090A514
SysAllocString.OLEAUT32(00000000), ref: 0090A51F
_com_issue_error.COMSUPP ref: 0090A548
_com_issue_error.COMSUPP ref: 0090A552
GetLastError.KERNEL32(80070057,599C3CDC,?,00000000,?,0090AE40,00B27A48,000000FE,?,00697B45,?), ref: 0090A557
_com_issue_error.COMSUPP ref: 0090A56A
GetLastError.KERNEL32(00000000,?,0090AE40,00B27A48,000000FE,?,00697B45,?), ref: 0090A580
_com_issue_error.COMSUPP ref: 0090A593

Strings

P}Y, xrefs: 0090A5CF

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: _com_issue_error$ByteCharErrorLastMultiWide$AllocString
String ID: P}Y
API String ID: 1353541977-467343689
Opcode ID: 6e24b18ef88491a9b6d341dfc45678d042497a7ecb38f5ba6b8c080647ae21df
Instruction ID: e576501ca8be55f9c9b4bc881aa685cac0db5e56c02b75a74b4ff4b537ac2db1
Opcode Fuzzy Hash: 6e24b18ef88491a9b6d341dfc45678d042497a7ecb38f5ba6b8c080647ae21df
Instruction Fuzzy Hash: 1141D571A04705AFCB109F68DC45BAEBBA8FF48710F14462AF509EB2D0DB759900C7E6

Uniqueness

Uniqueness Score: -1.00%

Function 006773D0 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 335COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00677476
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 006774D1
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00677615
std::_Lockit::~_Lockit.LIBCPMT ref: 006776B9
Concurrency::cancel_current_task.LIBCPMT ref: 006776EB

Strings

false, xrefs: 0067756F
true, xrefs: 00677585
bad locale name, xrefs: 006776E1

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$Concurrency::cancel_current_taskLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name$false$true
API String ID: 3204333896-1062449267
Opcode ID: e46abf3b1d2d68505272e60d72eb7cf9d5b72b063dfb057d297ed3eb4eaf757f
Instruction ID: 309fcb42892a8ad13012a0f725b2c4a69fbff8d5cdeaf4048c207d7b957a5b9a
Opcode Fuzzy Hash: e46abf3b1d2d68505272e60d72eb7cf9d5b72b063dfb057d297ed3eb4eaf757f
Instruction Fuzzy Hash: 9CD16EB1D043489FDB10DFA8C945BEAB7F5FF48304F1481A9E909AB381EB75AA44CB51

Uniqueness

Uniqueness Score: -1.00%

Function 005E08E0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 185COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 005E0969
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 005E09BE
__Getctype.LIBCPMT ref: 005E09D7
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 005E0A21
std::_Lockit::~_Lockit.LIBCPMT ref: 005E0ABF
__Getctype.LIBCPMT ref: 005E0AFD

Strings

bad locale name, xrefs: 005E0ADD

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$GetctypeLocinfo::_Lockit$Locinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 888940092-1405518554
Opcode ID: be8513bfd4328c480beb424fa2fa7fd1db2b3d633c10597f6d05c36cd7e7dd4f
Instruction ID: 0c923358c30e32e3375df114c8669623c0c9fcfd287ba7772488d88a0686e8bc
Opcode Fuzzy Hash: be8513bfd4328c480beb424fa2fa7fd1db2b3d633c10597f6d05c36cd7e7dd4f
Instruction Fuzzy Hash: 1B61B7B1C047588FEB10DF69C9417AABBB4FF14314F148669E989E7282FB70E984CB51

Uniqueness

Uniqueness Score: -1.00%

Function 005976F0 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 162COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00597773
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 005977BF
__Getctype.LIBCPMT ref: 005977D8
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 005977F4
std::_Lockit::~_Lockit.LIBCPMT ref: 00597889

Strings

bad locale name, xrefs: 005978A7
yY, xrefs: 005977D2

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$GetctypeLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID: bad locale name$yY
API String ID: 1840309910-2801357669
Opcode ID: 5479fd7d08c0e18cf6e3b9ed607879f379b055fc73444d03bdbc7aeb573d6c74
Instruction ID: b0b6fcf8b68da0308b0eee07e9291835b1afaaac487ca7ce44d354f23704e54b
Opcode Fuzzy Hash: 5479fd7d08c0e18cf6e3b9ed607879f379b055fc73444d03bdbc7aeb573d6c74
Instruction Fuzzy Hash: C9516CB1D0424C9BDF10DFA8D945BAEBBB8FF14714F14452AE908E7381E775A904CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0092DF5F Relevance: 10.8, APIs: 7, Instructions: 329COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0092DFE5

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: acd14ba4dbb45cf7c3b96fdbb56981c52d7a56cc04f5614965da6b7b3e033d53
Instruction ID: e8cce92f216686170ae8ea8726b43b118909c207388592d5590060156e6100fb
Opcode Fuzzy Hash: acd14ba4dbb45cf7c3b96fdbb56981c52d7a56cc04f5614965da6b7b3e033d53
Instruction Fuzzy Hash: E8B18772A04369DFEB11CF28ECC1BBE7BA9EF59310F144165E915AF286D2749901CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0080B8B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 74COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL(?), ref: 0080B8C9
RtlLeaveCriticalSection.NTDLL(?), ref: 0080B8F2
RtlEnterCriticalSection.NTDLL(00000000), ref: 0080B905
RtlLeaveCriticalSection.NTDLL(00000000), ref: 0080B922
RtlDeleteCriticalSection.NTDLL(?), ref: 0080B959

Strings

P}Y, xrefs: 0080B944

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Delete
String ID: P}Y
API String ID: 2284602516-467343689
Opcode ID: 4036953d19997ad47e35724b8c23a02ba32e89af08a11f548dfd7339788e568a
Instruction ID: 55aaf291fd0114e6f0532171f716358f0912570e3abf0cb3296e7fea27d66120
Opcode Fuzzy Hash: 4036953d19997ad47e35724b8c23a02ba32e89af08a11f548dfd7339788e568a
Instruction Fuzzy Hash: F021A471A00608EFCB00EF64DCC5AAE7B78FF54300F150058EE05A7252DB71A955DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00930C76 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00930D85,00000018,0072B8E6,00000000,00000000,?,?,00930FEF,00000022,FlsSetValue,00A12354,00A1235C,00000000), ref: 00930D37

Strings

ext-ms-, xrefs: 00930CE1
api-ms-, xrefs: 00930CCD

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 1d96eb6dc8c15e3f9c492bb6ebab3bc9a5d6018589b8ba1fb259ae2ea5bfa3e4
Instruction ID: 6fa26d376c8d7ad7766fecb660cf84d30267193985dfc66852f25e37420cc039
Opcode Fuzzy Hash: 1d96eb6dc8c15e3f9c492bb6ebab3bc9a5d6018589b8ba1fb259ae2ea5bfa3e4
Instruction Fuzzy Hash: A721DA31A02715ABCB219BA5EC55F6A77ACAB81760F254520FE29E72D1DB70FD00CED0

Uniqueness

Uniqueness Score: -1.00%

Function 007CEA60 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 70synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,000000FF,?,?,?,0081052E,000000FF,000000FF), ref: 007CEAF7
ResetEvent.KERNEL32(?,?,0081052E,000000FF,000000FF), ref: 007CEB0E

Strings

OOBEUtils, xrefs: 007CEA8C
OOBEEvents, xrefs: 007CEA87, 007CEABB
P}Y, xrefs: 007CEA95, 007CEACD
NULL OOBE_Event_t object passed in WaitforEvent , xrefs: 007CEA78, 007CEAB6

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: EventObjectResetSingleWait
String ID: NULL OOBE_Event_t object passed in WaitforEvent $OOBEEvents$OOBEUtils$P}Y
API String ID: 3162950495-845940147
Opcode ID: be0bf2ed3d068ef278dc82a7910ffc8691f5bcdffb42752740a0fc257363a2f4
Instruction ID: e092215e5dd640745df249b5aafc8929073afb81c8488f1f22d4241226af1d5f
Opcode Fuzzy Hash: be0bf2ed3d068ef278dc82a7910ffc8691f5bcdffb42752740a0fc257363a2f4
Instruction Fuzzy Hash: EB11E6367956147FEE209A1C9C46AAA3384FB00771B45066DFC14AB2D0CA919D5086C0

Uniqueness

Uniqueness Score: -1.00%

Function 00929B7B Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,599C3CDC,00000000,?,00000000,0093EA70,000000FF,?,00929B57,?,?,00929B2B,00000000), ref: 00929BB0
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00929BC2
FreeLibrary.KERNEL32(00000000,?,00000000,0093EA70,000000FF,?,00929B57,?,?,00929B2B,00000000), ref: 00929BE4

Strings

P}Y, xrefs: 00929BD3
mscoree.dll, xrefs: 00929BA9
CorExitProcess, xrefs: 00929BBA

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$P}Y$mscoree.dll
API String ID: 4061214504-105810892
Opcode ID: 00d9c46b4dd7d0717ca6474f86fe016aa50b99b39cf336be404d30d6756cee8a
Instruction ID: 1faef9875cabfa1ba58784a81ac8d743cb983f0ae134989f7e0b04491ce872cc
Opcode Fuzzy Hash: 00d9c46b4dd7d0717ca6474f86fe016aa50b99b39cf336be404d30d6756cee8a
Instruction Fuzzy Hash: 1601A231918A29BFDB119B54EC05FBEBBBCFB04B14F014929F811A22E0DBB49800CA90

Uniqueness

Uniqueness Score: -1.00%

Function 008FD507 Relevance: 9.2, APIs: 6, Instructions: 175COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001,?,?,00A22067,?,?,bad locale name), ref: 008FD550
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000,?,?,00A22067,?,?,bad locale name), ref: 008FD5BB
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00A22067,?,?,bad locale name), ref: 008FD5D8
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,?,00000000,00000000,00000000,?,?,00A22067,?,?,bad locale name), ref: 008FD617
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,?,00A22067,?,?,bad locale name), ref: 008FD676
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000,?,?,00A22067,?,?,bad locale name), ref: 008FD699

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ByteCharMultiStringWide
String ID:
API String ID: 2829165498-0
Opcode ID: 3b1577d99f4df655c27918246b8c3a24d7993834dac4cc1362e86c46e8ed41b8
Instruction ID: 320127ea9425194ffcebb81a4c7cc3649a826e085f188e6d67e3d1878df1eef1
Opcode Fuzzy Hash: 3b1577d99f4df655c27918246b8c3a24d7993834dac4cc1362e86c46e8ed41b8
Instruction Fuzzy Hash: FD519B7261030EABEB219F64CC45FBA3AAAFF64744F114024BB19D6190DB799850CAA0

Uniqueness

Uniqueness Score: -1.00%

Function 005E6790 Relevance: 9.1, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 005E67C6
std::_Lockit::_Lockit.LIBCPMT ref: 005E67E9
std::_Lockit::~_Lockit.LIBCPMT ref: 005E6809
std::_Facet_Register.LIBCPMT ref: 005E687B
std::_Lockit::~_Lockit.LIBCPMT ref: 005E6893
Concurrency::cancel_current_task.LIBCPMT ref: 005E68B6

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: c379f00c1754cc0d38aed67732cade757c3e61020441e009a7aa589fe66bfc87
Instruction ID: cb977675fad23f92ab160d2a2512da0eb4267a2bf8fa39143dc1c5130c6b4e45
Opcode Fuzzy Hash: c379f00c1754cc0d38aed67732cade757c3e61020441e009a7aa589fe66bfc87
Instruction Fuzzy Hash: C341E071D04259CFCB18DF68D840BAEBBB4FB14790F244669E895A7382DB70A940CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 005A4E50 Relevance: 9.1, APIs: 6, Instructions: 103COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 005A4E86
std::_Lockit::_Lockit.LIBCPMT ref: 005A4EA9
std::_Lockit::~_Lockit.LIBCPMT ref: 005A4EC9
std::_Facet_Register.LIBCPMT ref: 005A4F3B
std::_Lockit::~_Lockit.LIBCPMT ref: 005A4F53
Concurrency::cancel_current_task.LIBCPMT ref: 005A4F76

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 14e84fb61b264885ac58df8423ee806f76fba6168b55d9158df6eb4a2e27d78f
Instruction ID: 97edfa5394104b22f8e3596dbf9aed71151aad450caff71483afb7fa6955c861
Opcode Fuzzy Hash: 14e84fb61b264885ac58df8423ee806f76fba6168b55d9158df6eb4a2e27d78f
Instruction Fuzzy Hash: 6E41A275D00259CFCB10DFA8D881AAEBBB4FB89724F140519E915A7391DBB4AD40CFD2

Uniqueness

Uniqueness Score: -1.00%

Function 00673360 Relevance: 7.7, APIs: 5, Instructions: 221COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 0067342B
std::_Lockit::_Lockit.LIBCPMT ref: 0067349A
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 006734E2
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00673517
std::_Lockit::~_Lockit.LIBCPMT ref: 006735AC

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: std::_$Locinfo::_Lockit$Concurrency::cancel_current_taskLocinfo_ctorLocinfo_dtorLockit::_Lockit::~_
String ID:
API String ID: 3204333896-0
Opcode ID: 4319bbc0d01effd8e1f00b4a3c88f9fee30975335b50358fa735a173772432da
Instruction ID: 301ca392a223078856a8abcb1004ed01124dacd597ec084370850dcb6173b136
Opcode Fuzzy Hash: 4319bbc0d01effd8e1f00b4a3c88f9fee30975335b50358fa735a173772432da
Instruction Fuzzy Hash: D5716FB1D002589BDF10DFA8D945BEEBBF9BF18314F144529E809F7341EB749A448B61

Uniqueness

Uniqueness Score: -1.00%

Function 00597B20 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 98COMMON

Download Yara Rule

APIs

std::locale::_Init.LIBCPMT ref: 00597C31

Part of subcall function 0090B2B0: KiUserExceptionDispatcher.NTDLL(E06D7363,00000001,00000003,00000000,00000000,?,?,008F9DD1,00000000,00B267D0,00000018,00000000,00000018,?), ref: 0090B310

Strings

ios_base::badbit set, xrefs: 00597B57, 00597B82, 00597BB1
ios_base::failbit set, xrefs: 00597A55, 00597B61
ios_base::eofbit set, xrefs: 00597B66

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: DispatcherExceptionInitUserstd::locale::_
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 2553404379-1866435925
Opcode ID: f1e03b04507a2003198dad2b69197b8f15a0093aec85eaa560b11dc17d624b54
Instruction ID: 81a9a49f4537a4d30423262a16ce6dcc1c16f3792d7da11dc30394e2e62f3f9e
Opcode Fuzzy Hash: f1e03b04507a2003198dad2b69197b8f15a0093aec85eaa560b11dc17d624b54
Instruction Fuzzy Hash: B3314CB1904708BBD710DF54D806B9ABBE4FB04710F00462AF9188B6C1E7B6B914CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 00810900 Relevance: 6.1, APIs: 4, Instructions: 54COMMON

Download Yara Rule

APIs

RtlEnterCriticalSection.NTDLL(00000000), ref: 0081090C
RtlLeaveCriticalSection.NTDLL(00000000), ref: 00810947
RtlLeaveCriticalSection.NTDLL(00000000), ref: 0081095C
RtlLeaveCriticalSection.NTDLL(00000000), ref: 0081096E

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: CriticalSection$Leave$Enter
String ID:
API String ID: 2978645861-0
Opcode ID: 63ebe2935650858be0a9212530b93f3411fd07d42e7eea529a03b861447021dc
Instruction ID: b932df37e8e445a33c729d78ac72f3adbe5209084ba7d8fe8d8a4323696cdaa7
Opcode Fuzzy Hash: 63ebe2935650858be0a9212530b93f3411fd07d42e7eea529a03b861447021dc
Instruction Fuzzy Hash: 44019276251A009FC3208F19E8549E6B3E8FB9A330B05861FE65AC3651C771A845DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0092D49D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMONLIBRARYCODE

Download Yara Rule

APIs

__startOneArgErrorHandling.LIBCMT ref: 0092D52D

Strings

pow, xrefs: 0092D505, 0092D522

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: ErrorHandling__start
String ID: pow
API String ID: 3213639722-2276729525
Opcode ID: 4e8a663d86a770561c828b206d32e53165bd0bc2e10e8e126eb0b77bec64d6cc
Instruction ID: 016c1dc23aea8db948b09a639dec6c88b054083ebe98b545c7d095d87e8cdbe7
Opcode Fuzzy Hash: 4e8a663d86a770561c828b206d32e53165bd0bc2e10e8e126eb0b77bec64d6cc
Instruction Fuzzy Hash: 10519061E1A2019ACB12BB14ED017AE3BACDB80754F248D58F4D5422FDEF388C919F47

Uniqueness

Uniqueness Score: -1.00%

Function 00932948 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 147COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlDecodePointer.NTDLL(00000000), ref: 00932961

Strings

P}Y, xrefs: 00932A2B, 00932AD5, 00932B1B
log, xrefs: 009329BE, 009329CD

Memory Dump Source

Source File: 00000000.00000002.2400800838.0000000000541000.00000040.00000001.01000000.00000003.sdmp, Offset: 00540000, based on PE: true

Associated: 00000000.00000002.2399841454.0000000000540000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000B2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000E78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000ECD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2400800838.0000000000EEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2650333202.0000000000F04000.00000004.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_540000_Acrobat_Set-Up.jbxd

Similarity

API ID: DecodePointer
String ID: P}Y$log
API String ID: 3527080286-1663569106
Opcode ID: acf4983050f910a6dc1f74bbfcb5789e9aa0b25f773a551c0dc8a3f3b920a304
Instruction ID: f6161c5f33d1a6e91a3e581acdab0da03f7716662ae890047a8ed76da50031a7
Opcode Fuzzy Hash: acf4983050f910a6dc1f74bbfcb5789e9aa0b25f773a551c0dc8a3f3b920a304
Instruction Fuzzy Hash: 9D51BC7190460ACBCF209F59E9481BEBFB8FF06300F610545D581EB2A4CBB889A4DF95

Uniqueness

Uniqueness Score: -1.00%

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Acrobat_Set-Up.exe

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

Bitcoin Miner

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Adobe\OOBE\temp_lbs_wid

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\0a5c9686-bf2f-4836-9261-89a937cf8358.tmp

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\1790bab6-6ae5-409d-9978-81abfc52873e.tmp

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\52dfa16d-6029-467b-8f6c-c65c886558da.tmp

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\BrowserMetrics-spare.pma (copy)

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\BrowserMetrics-spare.pma.tmp

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Crashpad\settings.dat

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Crashpad\throttle_store.dat

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\550ee668-e570-499a-9f73-4b7b39c825b0.tmp

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\5b49605a-9938-47d0-b609-35a95eef27b3.tmp

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_0

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_1

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_2

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\data_3

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\f_000001

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\f_000002

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Cache\Cache_Data\index

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\js\index

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\js\index-dir\temp-index

C:\Users\user\AppData\Local\Adobe\webview2\Acrobat_Set-Up.exe\EBWebView\Default\Code Cache\js\index-dir\the-real-index (copy)

Windows Analysis Report
Acrobat_Set-Up.exe