Edit tour

Windows Analysis Report
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41

Overview

General Information

Sample URL:	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41
Analysis ID:	1432031
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body contains password input but no form action

Phishing site detected (based on OCR NLP Model)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4104 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5760 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: chromecache_549.2.dr

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_069bf212-b

Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: Chrome DOM: 4.6	ML Model on OCR Text: Matched 99.2% probability on "@ Edit Convert R SOCIAL Q 6) E-sign A1 ASWnt Sign in PDF Welcome to Acrobat Sign in to do more with the file shared with you. SOCIMORCASAL ATUALIZACO IMPORTANTE DO SWI in DOCUMENTO YOU MAY LIKE Ask A1 Assistant PDF Generate a summary Edit text & images Compress a PDF PDF to JPG Export a PDF z Fill & Sign CLIQUE PARA VISUALIZAR DOCUMENTO Melhores Cumprimentos, Rui Alves Departamento Tcnico I Comercial rulalves@socimorcasal.pt M- +351964632 572 c 18/ 12/ 2023 SOCIMORCA "
Source: Chrome DOM: 5.7	ML Model on OCR Text: Matched 87.4% probability on "O SOCIAL Edit Convert E-sign A1 AssWnt Sign in x Generative summary SOCIMORCASAL ATUALIZACO IMPORTANTE I DOCUMENTO PDF Get a document outline and summaries, automatically generated with A1. Quickly understand this document Get detailed summaries of key sections Find and easily navigate to the information you CLIQUE PARA VISUALIZAR DOCUMENTO Melhores Cumprimentos, Please double-check summaries and sources as they may not always be accurate. You shouldn't rely on summaries Rui Alves for professional advice. Leam more Departamento Tcnico I Comercial rmalves@socimorcasal.pt M- +351964632 572 Adobe protects your dcKuments and content using c cesponsible practices. 1981 18/ 12/ 2025 Sign in to start using A1 Assistant. gy clicking Get started, you agree to our User Guidelines. SOCIMORCA Get "

HTTP Parser: <input type="password" .../> found

Source: https://acrobat.adobe.com/dcpreviewdropin/3.0.2_2.720.0/printHelper.html	HTTP Parser: No favicon
Source: https://documentcloud.adobe.com/proxy/pdfverbs-web/3.17.1_4.821.0/shared-storage.html	HTTP Parser: No favicon

Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl	HTTP Parser: No <meta name="author".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl	HTTP Parser: No <meta name="author".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl	HTTP Parser: No <meta name="author".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl	HTTP Parser: No <meta name="author".. found

Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...	HTTP Parser: No <meta name="copyright".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...	HTTP Parser: No <meta name="copyright".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...	HTTP Parser: No <meta name="copyright".. found
Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.193.120.112:443 -> 192.168.2.4:49794 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.193.120.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ZWVmMDQyMzYtNmRkOC00ODQzLTg5MTktOGZiNWQzMzY2OTNiL2pwZy8xMjAwLzAvdHJ1ZQ=="
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ZWVmMDQyMzYtNmRkOC00ODQzLTg5MTktOGZiNWQzMzY2OTNiL2pwZy8xMjAwLzAvdHJ1ZQ=="
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.css HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ZWVmMDQyMzYtNmRkOC00ODQzLTg5MTktOGZiNWQzMzY2OTNiL2pwZy8xMjAwLzAvdHJ1ZQ=="
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.js HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6gNXXegDB6rtHARrNKRF8w.js HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t2/496015/web/track.js?_=1714119635375&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOmQzNWFlYzk1LWYzNjUtNDE0Yy04MzcxLTY4ZTZkN2QyZWM0MT92aWV3ZXIlMjFtZWdhVmVyYj1ncm91cC1kaXNjb3ZlciIsInIiOiIifX0%3D HTTP/1.1Host: by2.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=hy4YeR0tw4YYc.I77Tp3wjw5p.QT2CMmLGpjdLivO8w-1714119618-1.0.1.1-TIjK6BBGv.WYpmljdOSkMdTuxxXxwTmRckrWxSPN1tC6zZ_lYhycFRn23Gx9fSkh2v63i5Bsi7VlDXNvJSKlzA
Source: global traffic	HTTP traffic detected: GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1Host: use1.fptls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://commerce.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1Host: use1.fptls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_inf
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=48478830665637706781090513820271629869&ts=1714119660933 HTTP/1.1Host: sstats.adobe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=48323040384845285681110877930366804643
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=48478830665637706781090513820271629869&ts=1714119660933 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s4368940554895 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s41896443507574 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s4368940554895?AQB=1&pccr=true&vidn=3315B1F8B783E857-60001584A938EE70&g=none&AQE=1 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|3315B1F8CA360B4F-6000049410E9BF3E[CE]
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s41896443507574?AQB=1&pccr=true&vidn=3315B1F8CA360B4F-6000049410E9BF3E&g=none&AQE=1 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|3315B1F8CA360B4F-6000049410E9BF3E[CE]
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s45131463930155 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|3315B1F8CA360B4F-6000049410E9BF3E[CE]; fg=YMVTLQ5JFPP5EDEKFAQVYHAADQ======
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s4518887252496 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|3315B1F8CA360B4F-6000049410E9BF3E[CE]; fg=YMVTLQ5JFPP5EDEKFAQVYHAADQ======
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s49110352978227 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|3315B1F8CA360B4F-6000049410E9BF3E[CE]; fg=YMVTLQ5JFPP5EDEKFAQVYHAADQ======
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s44604865034082 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|3315B1F8CA360B4F-6000049410E9BF3E[CE]; fg=YMVTLQ5JFPP5EDEKFAQVYHAADQ======

Source: global traffic	DNS traffic detected: DNS query: adobe.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: widget.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: static.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: prod.adobeccstatic.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: l.betrad.com
Source: global traffic	DNS traffic detected: DNS query: ims-na1.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: files-download2.acrocomcontent.com
Source: global traffic	DNS traffic detected: DNS query: dc-api-v2.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: dc-api.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: c.evidon.com
Source: global traffic	DNS traffic detected: DNS query: by2.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.echosign.com
Source: global traffic	DNS traffic detected: DNS query: cdn-sharing.adobecc.com
Source: global traffic	DNS traffic detected: DNS query: detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _19292._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _39691._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _49100._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: use1.fptls.com
Source: global traffic	DNS traffic detected: DNS query: use1-turn.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: stun.fpapi.io
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net

Source: unknown

HTTP traffic detected: POST /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s4368940554895 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveContent-Length: 11143sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional

Source: chromecache_470.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_611.2.dr	String found in binary or memory: http://github.com/janl/mustache.js
Source: chromecache_549.2.dr, chromecache_610.2.dr	String found in binary or memory: http://iso.org/pdf/ssn
Source: chromecache_549.2.dr, chromecache_610.2.dr	String found in binary or memory: http://iso.org/pdf2/ssn
Source: chromecache_533.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_654.2.dr, chromecache_667.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: chromecache_654.2.dr, chromecache_667.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: chromecache_654.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017702
Source: chromecache_654.2.dr, chromecache_667.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: chromecache_654.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017704
Source: chromecache_654.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: chromecache_640.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f83
Source: chromecache_640.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f85
Source: chromecache_640.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f86
Source: chromecache_640.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f88
Source: chromecache_605.2.dr, chromecache_387.2.dr, chromecache_533.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_492.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_615.2.dr	String found in binary or memory: https://adobereview.uservoice.com/forums/598411-document-review
Source: chromecache_492.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_492.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_492.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_492.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_615.2.dr	String found in binary or memory: https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160
Source: chromecache_683.2.dr	String found in binary or memory: https://fingerprint.com)
Source: chromecache_573.2.dr	String found in binary or memory: https://ims-na1.adobelogin.com/
Source: chromecache_492.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_654.2.dr, chromecache_667.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_409.2.dr, chromecache_427.2.dr	String found in binary or memory: https://sso.behance.net/ims
Source: chromecache_366.2.dr, chromecache_666.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_654.2.dr, chromecache_667.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: chromecache_654.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: chromecache_654.2.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_654.2.dr	String found in binary or memory: https://use.typekit.net/af/a2527e/000000000000000000017704/27/
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_640.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_654.2.dr, chromecache_667.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: chromecache_654.2.dr, chromecache_667.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4104 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5760 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4104 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5760 --field-trial-handle=1960,i,8203976332558224498,3452396537597929701,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 618
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 472	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 618	Jump to dropped file

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41	0%	Avira URL Cloud	safe
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41	1%	Virustotal		Browse
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
use1.fptls.com	0%	Virustotal	Browse
cdn-sharing.adobecc.map.fastly.net	0%	Virustotal	Browse
detect.adobedccdn.com	0%	Virustotal	Browse
adobe.com.ssl.d1.sc.omtrdc.net	0%	Virustotal	Browse
use1-turn.fpjs.io	0%	Virustotal	Browse
adobe.tt.omtrdc.net	0%	Virustotal	Browse
adobetarget.data.adobedc.net	0%	Virustotal	Browse
prod.adobeccstatic.com	0%	Virustotal	Browse
dc-api-v2.adobecontent.io	0%	Virustotal	Browse
cdn-sharing.adobecc.com	0%	Virustotal	Browse
dc-api.adobecontent.io	0%	Virustotal	Browse
files-download2.acrocomcontent.com	0%	Virustotal	Browse
stun.fpapi.io	0%	Virustotal	Browse
_49100._https.detect.adobedccdn.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://use1.fptls.com/?q=dSMHmEUM9QSIKQm9iy0W	0%	Avira URL Cloud	safe
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	0%	Avira URL Cloud	safe
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	0%	Avira URL Cloud	safe
https://fingerprint.com)	0%	Avira URL Cloud	safe
https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack	0%	Avira URL Cloud	safe
https://use1.fptls.com/?q=dSMHmEUM9QSIKQm9iy0W	0%	Virustotal		Browse
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	0%	Virustotal		Browse
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	0%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dd20fzx9mj46f.cloudfront.net	13.35.116.94	true	false		high
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	3.217.3.83	true	false		high
use1-turn.fpjs.io	18.212.47.155	true	false	0%, Virustotal, Browse	unknown
widget.uservoice.com	104.17.28.92	true	false		high
api.echosign.com	52.71.63.230	true	false		high
detect.adobedccdn.com	127.0.0.1	true	false	0%, Virustotal, Browse	unknown
cdn-sharing.adobecc.map.fastly.net	151.101.129.138	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	3.215.128.155	true	false		high
adobetarget.data.adobedc.net	63.140.38.217	true	false	0%, Virustotal, Browse	unknown
stun-anycast.l.google.com	74.125.250.129	true	false		high
adobe.com.ssl.d1.sc.omtrdc.net	63.140.39.35	true	false	0%, Virustotal, Browse	unknown
use1.fptls.com	75.2.10.96	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.64.196	true	false		high
by2.uservoice.com	104.17.28.92	true	false		high
prod.adobeccstatic.com	18.64.174.68	true	false	0%, Virustotal, Browse	unknown
c.evidon.com	unknown	unknown	false		high
ims-na1.adobelogin.com	unknown	unknown	false		high
dc-api-v2.adobecontent.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
adobe.tt.omtrdc.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn-sharing.adobecc.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
dpm.demdex.net	unknown	unknown	false		high
static.adobelogin.com	unknown	unknown	false		high
_49100._https.detect.adobedccdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
use.typekit.net	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
_39691._https.detect.adobedccdn.com	unknown	unknown	false		unknown
l.betrad.com	unknown	unknown	false		high
p.typekit.net	unknown	unknown	false		high
_19292._https.detect.adobedccdn.com	unknown	unknown	false		unknown
stun.fpapi.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
dc-api.adobecontent.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
stun.l.google.com	unknown	unknown	false		high
files-download2.acrocomcontent.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466	false		high
about:blank	false	Avira URL Cloud: safe	low
https://widget.uservoice.com/6gNXXegDB6rtHARrNKRF8w.js	false		high
https://use1.fptls.com/?q=dSMHmEUM9QSIKQm9iy0W	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466	false		high
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack	false	Avira URL Cloud: safe	unknown
https://by2.uservoice.com/t2/496015/web/track.js?_=1714119635375&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOmQzNWFlYzk1LWYzNjUtNDE0Yy04MzcxLTY4ZTZkN2QyZWM0MT92aWV3ZXIlMjFtZWdhVmVyYj1ncm91cC1kaXNjb3ZlciIsInIiOiIifX0%3D	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.138	unknown	United States	54113	FASTLYUS	false
18.64.174.68	prod.adobeccstatic.com	United States	3	MIT-GATEWAYSUS	false
3.215.200.220	unknown	United States	14618	AMAZON-AESUS	false
63.140.38.217	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.39.35	adobe.com.ssl.d1.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
75.2.10.96	use1.fptls.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.71.63.230	api.echosign.com	United States	14618	AMAZON-AESUS	false
34.231.53.248	unknown	United States	14618	AMAZON-AESUS	false
104.17.28.92	widget.uservoice.com	United States	13335	CLOUDFLARENETUS	false
74.125.250.129	stun-anycast.l.google.com	United States	15169	GOOGLEUS	false
151.101.129.138	cdn-sharing.adobecc.map.fastly.net	United States	54113	FASTLYUS	false
3.215.128.155	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.64.196	www.google.com	United States	15169	GOOGLEUS	false
63.140.39.240	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
13.35.116.94	dd20fzx9mj46f.cloudfront.net	United States	16509	AMAZON-02US	false

IP
192.168.2.4
127.0.0.1

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432031
Start date and time:	2024-04-26 10:19:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@30/613@97/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://acrobat.adobe.com/link/home/ Browse: https://acrobat.adobe.com/link/home/ Browse: https://acrobat.adobe.com/link/home/

Name	Source	Malicious	Antivirus Detection	Reputation
https://sso.behance.net/ims	chromecache_409.2.dr, chromecache_427.2.dr	false		high
https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/a2527e/000000000000000000017704/27/	chromecache_654.2.dr	false		high
https://adobereview.uservoice.com/forums/598411-document-review	chromecache_615.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_492.2.dr	false		high
https://use.typekit.net/af/cb695f/000000000000000000017701/27/	chromecache_654.2.dr, chromecache_667.2.dr	false		high
http://typekit.com/eulas/000000000000000000017704	chromecache_654.2.dr	false		high
https://static.adobelogin.com/imslib/imslib.min.js	chromecache_366.2.dr, chromecache_666.2.dr	false		high
http://typekit.com/eulas/000000000000000000017706	chromecache_654.2.dr	false		high
http://typekit.com/eulas/0000000000000000000176ff	chromecache_654.2.dr, chromecache_667.2.dr	false		high
https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160	chromecache_615.2.dr	false		high
http://typekit.com/eulas/000000000000000000017701	chromecache_654.2.dr, chromecache_667.2.dr	false		high
http://typekit.com/eulas/000000000000000000017702	chromecache_654.2.dr	false		high
http://typekit.com/eulas/000000000000000000017703	chromecache_654.2.dr, chromecache_667.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	chromecache_654.2.dr	false		high
http://jedwatson.github.io/classnames	chromecache_533.2.dr	false	URL Reputation: safe	unknown
http://iso.org/pdf/ssn	chromecache_549.2.dr, chromecache_610.2.dr	false		high
https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_605.2.dr, chromecache_387.2.dr, chromecache_533.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout	chromecache_492.2.dr	false		high
https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	chromecache_654.2.dr, chromecache_667.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)	chromecache_492.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/	chromecache_654.2.dr	false		high
https://fingerprint.com)	chromecache_683.2.dr	false	Avira URL Cloud: safe	low
https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://p.typekit.net/p.gif	chromecache_654.2.dr, chromecache_667.2.dr	false		high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/	chromecache_654.2.dr, chromecache_667.2.dr	false		high
http://github.com/janl/mustache.js	chromecache_611.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_640.2.dr	false		high
http://feross.org	chromecache_470.2.dr	false		high
http://iso.org/pdf2/ssn	chromecache_549.2.dr, chromecache_610.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f83	chromecache_640.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment	chromecache_492.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f85	chromecache_640.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f86	chromecache_640.2.dr	false		high
https://ims-na1.adobelogin.com/	chromecache_573.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f88	chromecache_640.2.dr	false		high

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41570), with no line terminators
Category:	downloaded
Size (bytes):	41570
Entropy (8bit):	5.286973939072438
Encrypted:	false
SSDEEP:	768:iLkHDY7yLVCIgLJwNEkqPtnSDjkFYEaDjkFYEZ:XM7yhCDDj
MD5:	3906A972664DF82B5712A30C6DC117A9
SHA1:	70B2D0DCF8EC6A7FB5FD1D81D7E69A10311DE199
SHA-256:	C6C133E4DAAF8BCBBED3A07992A39411356947736D8B65CD382B066B8B0277DE
SHA-512:	3CF67E632FE88803D327F8C23EB7A5C2BA819A212789DCB63F3837517B964703551701DCDBE650C45FFD8868F9B44AD797904286D1409A7376106602D57C4A60
Malicious:	false
Reputation:	low
URL:	https://commerce.adobe.com/store/_next/static/chunks/2952-ebe78e00ee4fb25c40f0.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2952],{32952:function(e,t,n){var r=n(67294),o=n(85893),i=n(11065),c=n(64063),a=function(){throw new Error("You forgot to wrap your component in <FpjsProvider>.")},u={getVisitorData:a,clearCache:a},s=r.createContext(u),f=function(e,t){return(f=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)};var l=function(){return(l=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)};function p(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.indexOf(r)<0&&(n[r]=e[r]);if(null!=e&&"function"===typeof Object.getOwnPropertySymbols){var o=0;for(r=Object.getOwnPropertySymbols(e);o<r.length;o++)t.indexOf(r[o])<0&&Object.prototype.propertyIsEnumerable.call(e,r[o])&&(n[r[o]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 10:20:03.124799013 CEST	53	63684	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:03.179899931 CEST	53	55266	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:04.120991945 CEST	53	64097	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:05.861505985 CEST	51452	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:05.861922979 CEST	54160	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:05.986725092 CEST	53	51452	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:05.989979029 CEST	53	54160	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:05.992419004 CEST	63452	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:05.992645979 CEST	53158	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.023353100 CEST	50950	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.023798943 CEST	59490	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.117849112 CEST	53	63452	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.118990898 CEST	53	53158	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.123959064 CEST	62967	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.124140024 CEST	60411	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.152030945 CEST	60132	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.152620077 CEST	62800	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.249779940 CEST	53	60411	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.277858019 CEST	53	60132	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.277944088 CEST	53	62800	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.279969931 CEST	57492	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.280426025 CEST	56922	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.384155989 CEST	53	62967	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.385598898 CEST	53	62108	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.477313995 CEST	55764	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.478111029 CEST	61027	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.594835997 CEST	53	51714	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.598758936 CEST	53	56130	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.602586985 CEST	53	55764	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.618699074 CEST	53	61027	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.656122923 CEST	54812	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.656599998 CEST	51486	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.657412052 CEST	54541	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.658068895 CEST	63745	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.666256905 CEST	52285	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.666608095 CEST	54556	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.792011023 CEST	53	54556	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.829698086 CEST	65283	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.830616951 CEST	52044	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:06.958899021 CEST	53	52044	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:06.969733000 CEST	53	49602	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.087436914 CEST	53	61046	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.092001915 CEST	62367	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.093260050 CEST	55557	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.100256920 CEST	53	58246	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.103463888 CEST	57084	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.104254961 CEST	60857	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.178344011 CEST	50257	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.179560900 CEST	59477	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.217529058 CEST	53	62367	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.218180895 CEST	53	55557	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.222860098 CEST	63585	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.223670959 CEST	56920	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.233160973 CEST	50115	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.234023094 CEST	55561	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.303436041 CEST	53	50257	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.305066109 CEST	53	59477	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.350830078 CEST	55871	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.351305962 CEST	64986	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:07.360192060 CEST	53	55561	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.372605085 CEST	53	50115	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.476886034 CEST	53	55871	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:07.493432045 CEST	53	64986	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:08.005011082 CEST	53	55544	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:08.888274908 CEST	53	58461	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:08.975269079 CEST	58602	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:08.975359917 CEST	63172	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:09.100924969 CEST	53	58602	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:09.101917982 CEST	53	63172	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:10.320831060 CEST	53	53462	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:10.332931042 CEST	53	55231	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:16.028589964 CEST	53	65063	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:19.486052036 CEST	53	49514	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:20.603677988 CEST	51694	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:20.604635000 CEST	60893	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:21.119760036 CEST	53	62125	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:22.402048111 CEST	53	54866	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:22.527981043 CEST	53	63870	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:22.529481888 CEST	53	50563	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:24.568780899 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 10:20:24.760787964 CEST	53	63140	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:28.210846901 CEST	53	53235	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:30.106502056 CEST	57407	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:30.106841087 CEST	58386	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:30.246325970 CEST	53	58386	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:30.248282909 CEST	53	57407	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:30.585810900 CEST	53	59789	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:32.319498062 CEST	50274	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:32.319631100 CEST	59305	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:32.460356951 CEST	53	50274	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:32.462498903 CEST	53	59305	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:34.517708063 CEST	56644	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:34.517833948 CEST	49425	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:34.659620047 CEST	53	56644	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:34.660518885 CEST	53	49425	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:41.639760971 CEST	53	59539	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:49.752810955 CEST	55372	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:49.755106926 CEST	51332	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:49.880778074 CEST	53	51332	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:49.892189980 CEST	53	55372	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.097611904 CEST	60213	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.100202084 CEST	65356	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.226110935 CEST	53	60213	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.228665113 CEST	53	65356	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.232852936 CEST	64666	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.233295918 CEST	51460	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.234148979 CEST	54703	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.235100031 CEST	62000	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.240690947 CEST	55968	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.328464985 CEST	63873	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.357563972 CEST	53	64666	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.358382940 CEST	62771	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.358510971 CEST	53	51460	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.359235048 CEST	53	54703	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.360512972 CEST	65088	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.361510992 CEST	53	62000	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.366624117 CEST	53	55968	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.368145943 CEST	59449	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.381400108 CEST	53923	19302	192.168.2.4	74.125.250.129
Apr 26, 2024 10:20:50.453898907 CEST	53	63873	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.483001947 CEST	53	62771	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.486042023 CEST	53	65088	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.493360043 CEST	53	59449	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.537317038 CEST	50533	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.537616014 CEST	49247	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:50.544181108 CEST	19302	53923	74.125.250.129	192.168.2.4
Apr 26, 2024 10:20:50.663270950 CEST	53	49247	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:50.679996967 CEST	53	50533	1.1.1.1	192.168.2.4
Apr 26, 2024 10:20:57.410579920 CEST	62767	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:20:57.410785913 CEST	58129	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:00.491589069 CEST	58768	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:00.491700888 CEST	63784	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:00.617285967 CEST	53	58768	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:00.617332935 CEST	53	63784	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:02.755012035 CEST	57528	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:02.755422115 CEST	52361	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:02.762290001 CEST	53	62305	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:02.880125046 CEST	53	57528	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:02.880480051 CEST	53	52361	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:03.291619062 CEST	53	64197	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:06.056569099 CEST	62880	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:06.056938887 CEST	63463	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:06.182306051 CEST	53	62880	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:06.184541941 CEST	53	63463	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:06.197571039 CEST	59790	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:06.197711945 CEST	57480	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:06.373456001 CEST	52556	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:06.373590946 CEST	53729	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:06.499248028 CEST	53	52556	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:06.499757051 CEST	53	53729	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:06.881788969 CEST	51081	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:06.881973028 CEST	54696	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.007896900 CEST	53	55095	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:07.007956028 CEST	53	55045	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:07.039134026 CEST	50394	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.039235115 CEST	59401	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.040296078 CEST	55641	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.040497065 CEST	50721	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.041387081 CEST	50753	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.041513920 CEST	60129	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.166625977 CEST	53	60129	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:07.168216944 CEST	53	50721	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:07.421286106 CEST	56337	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.421850920 CEST	58910	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:07.450077057 CEST	53	52602	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:07.451417923 CEST	53	62048	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:08.220463991 CEST	62500	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:08.221082926 CEST	50987	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:08.252806902 CEST	52209	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:08.252959967 CEST	55315	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:08.366350889 CEST	53	62500	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:08.366380930 CEST	53	50987	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:08.382035017 CEST	53	52209	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:08.382936954 CEST	53	55315	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:08.635632992 CEST	53	61169	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.006095886 CEST	55733	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.006419897 CEST	50931	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.134571075 CEST	53	50927	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.193753004 CEST	52544	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.194195032 CEST	63105	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.216810942 CEST	55044	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.217174053 CEST	64172	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.258613110 CEST	53	50931	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.263381958 CEST	53	55733	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.318558931 CEST	53	52544	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.319586992 CEST	53	63105	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.352438927 CEST	62932	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.352951050 CEST	64177	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.478041887 CEST	53	51829	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.506901979 CEST	63602	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.507225990 CEST	58133	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:14.633080959 CEST	53	58133	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:14.633097887 CEST	53	63602	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:16.913161039 CEST	65210	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:17.039011002 CEST	53	65210	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:18.381035089 CEST	53	61451	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:33.099481106 CEST	53	53359	1.1.1.1	192.168.2.4
Apr 26, 2024 10:21:46.797957897 CEST	51797	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:21:46.923197985 CEST	53	51797	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 10:20:06.225833893 CEST	192.168.2.4	1.1.1.1	c2ca	(Port unreachable)	Destination Unreachable
Apr 26, 2024 10:20:10.454376936 CEST	192.168.2.4	1.1.1.1	c27f	(Port unreachable)	Destination Unreachable
Apr 26, 2024 10:21:07.288991928 CEST	192.168.2.4	1.1.1.1	c27b	(Port unreachable)	Destination Unreachable
Apr 26, 2024 10:21:09.760725975 CEST	192.168.2.4	1.1.1.1	c28a	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:08 UTC	832	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://acrobat.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:20:09 UTC	1370	IN	HTTP/1.1 200 OK Connection: close Content-Length: 110794 Server: openresty Content-Type: image/jpeg access-control-allow-credentials: true access-control-allow-headers: Authorization,Content-Type,X-Api-Key,User-Agent,If-Modified-Since,If-Match,expires,cache-control,pragma,X-Sharing-Password,X-Access-Token,X-Feature-Override,Captcha-Site-Key,Captcha-User-Response,X-Request-Id,Storage-Client,Uber-Trace-Id,Reminder-Duration,priority access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-expose-headers: Etag,Location,Password-Access,Retry-After,X-Latest-Version,Version,link access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41 build: 60de599a etag: "ZWVmMDQyMzYtNmRkOC00ODQzLTg5MTktOGZiNWQzMzY2OTNiL2pwZy8xMjAwLzAvdHJ1ZQ==" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true" link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective" link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41>; rel="http://ns.adobe.com/adobecloud/rel/ac/policy"
2024-04-26 08:20:09 UTC	1317	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 64 33 35 61 65 63 39 35 2d 66 33 36 35 2d 34 31 34 63 2d 38 33 37 31 2d 36 38 65 36 64 37 64 32 65 63 34 31 2f 3a 62 6c 6f 63 6b 5f 75 70 6c 6f 61 64 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 62 6c 6f 63 6b 2f 69 6e 69 74 22 3b 20 72 65 70 6f 3a 6d 61 78 53 69 6e 67 6c 65 54 72 61 6e 73 66 65 72 53 69 7a 65 3d 22 31 30 34 38 35 37 36 30 22 3b 20 72 65 70 6f 3a 6d 69 6e 42 6c 6f 63 6b 54 72 61 6e 73 66 65 72 53 69 7a 65 3d 22 31 22 0d 0a 6c 69 6e Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:block_upload>; rel="http://ns.adobe.com/adobecloud/rel/block/init"; repo:maxSingleTransferSize="10485760"; repo:minBlockTransferSize="1"lin
2024-04-26 08:20:09 UTC	1360	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 64 33 35 61 65 63 39 35 2d 66 33 36 35 2d 34 31 34 63 2d 38 33 37 31 2d 36 38 65 36 64 37 64 32 65 63 34 31 2f 3a 61 70 70 6c 69 63 61 74 69 6f 6e 6d 65 74 61 64 61 74 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 6d 65 74 61 64 61 74 61 2f 61 70 70 6c 69 63 61 74 69 6f 6e 22 3b 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:applicationmetadata>; rel="http://ns.adobe.com/adobecloud/rel/metadata/application"; type="application/json"link: <https://cdn-sharing.adob
2024-04-26 08:20:09 UTC	1360	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 64 33 35 61 65 63 39 35 2d 66 33 36 35 2d 34 31 34 63 2d 38 33 37 31 2d 36 38 65 36 64 37 64 32 65 63 34 31 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 70 72 69 6d 61 72 79 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 64 69 72 65 63 74 6f 72 79 2f 72 65 70 6f 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 31 35 65 30 65 36 62 30 2d 33 33 61 39 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41>; rel="http://ns.adobe.com/adobecloud/rel/primary"link: <https://platform-cs.adobe.io/content/directory/repo/urn:aaid:sc:VA6C2:15e0e6b0-33a9
2024-04-26 08:20:09 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 32 61 30 64 38 64 39 2c 20 32 30 32 33 2f 30 33 2f 31 34 2d 31 31 3a 31 39 3a 34 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.2a0d8d9, 2023/03/14-11:19:46 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-04-26 08:20:09 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 08:20:09 UTC	1371	IN	Data Raw: 08 05 06 07 01 04 09 03 02 0a 0b 01 01 00 02 03 01 01 00 03 01 00 00 00 00 00 00 00 00 03 06 02 04 05 07 01 08 09 0a 0b 10 00 01 03 03 02 02 04 04 08 09 0e 0f 61 00 00 00 01 00 02 03 04 05 11 06 12 07 21 08 13 31 41 14 22 51 b2 15 32 37 61 71 74 81 91 23 33 42 52 54 62 a1 d1 f0 16 17 18 53 55 72 82 92 95 b1 b4 c1 d3 e1 24 25 35 36 43 64 73 75 76 83 84 93 94 a2 d2 09 0a 19 1a 26 27 28 29 2a 34 38 39 3a 44 45 46 47 48 49 4a 56 57 58 59 5a 63 65 66 67 68 69 6a 77 78 79 7a 85 86 87 88 89 8a 96 97 98 99 9a a3 a4 a5 a6 a7 a8 a9 aa b3 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 01 02 02 03 08 07 05 0a 05 75 01 00 00 00 00 01 02 11 03 21 04 12 31 05 06 13 32 41 51 71 81 14 22 Data Ascii: a!1A"Q27aqt#3BRTbSUr$%56Cdsuv&'()*489:DEFGHIJVWXYZcefghijwxyzu!12AQq"
2024-04-26 08:20:09 UTC	1371	IN	Data Raw: d7 aa 50 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 7f ff d0 aa 50 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 7f ff d1 aa 50 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii: PPP
2024-04-26 08:20:09 UTC	1371	IN	Data Raw: b2 4a d7 b9 c5 a0 b4 b1 a3 61 66 ec fa 50 a3 b4 bd 9d 9c 22 e1 6d 73 2e 97 49 6f 34 96 36 55 56 47 3c 80 b2 43 00 cb e2 80 07 3a 40 1d c8 46 dc 10 cd ce e4 d0 10 4e dc 3d d0 7a b7 a4 2d e2 eb a9 f5 85 f2 a2 9a c9 45 37 51 4f 0c 00 39 a2 47 0d fd 45 3b 1d 98 e1 64 31 b9 85 ef 2c 73 de 5e d2 77 39 cf 78 07 15 78 33 7d e0 9b 2d fa d7 44 5f eb 0d 3b 67 6d 3d 51 7e d6 cb 1b dc 0b 98 5f d5 e2 39 a0 93 6b 98 f6 3e 3c 03 b5 a7 78 93 c5 0e b3 ad fa 41 4f 6f e0 2d a7 5a db 59 1c 77 ed 42 d6 d2 52 47 e9 99 0d 53 77 b6 a6 40 d3 9d cd 85 d0 c8 18 1d 91 bc c6 1f b8 12 08 73 8e 19 f4 65 ab e2 26 9e 8f 5a eb 7d 41 5a da cb ce e9 e9 63 66 d9 26 31 17 10 d9 65 96 6d f9 eb 39 b9 91 b5 a0 36 32 d3 bf 2e 2c 68 75 1d 2b c2 fd 43 c3 ae 1c 6b bb 4d 65 f0 de 2c d2 50 54 49 64 0e Data Ascii: JafP"ms.Io46UVG<C:@FN=z-E7QO9GE;d1,s^w9xx3}-D_;gm=Q~_9k><xAOo-ZYwBRGSw@se&Z}AZcf&1em962.,hu+CkMe,PTId
2024-04-26 08:20:09 UTC	1371	IN	Data Raw: 85 af a6 8d b1 be 36 f5 31 36 21 b3 77 30 08 60 71 1d 9b 8b 8f 7a 09 aa c5 c3 1a 1b c7 1b a1 d2 3a 2a ba 7a fb 6d be a9 ae a9 bc 48 1a d2 d8 e9 5c d3 53 3b 76 78 a1 8d 7f c0 e1 39 f8 23 cc 78 23 ac 18 0b 57 8a ba c1 9a 3f 87 b7 dd 43 bb 6c f4 74 ce 14 7e bd 4c b8 8a 01 8e f1 d6 bd 85 df 2a 09 ee 41 0e 68 d3 7f e1 e5 ff 00 43 f1 0e af 7b 6d f7 69 e6 98 3c ee 0e 7d 3c 53 1a 7a b6 b8 f3 c9 7c 4f 2e 69 39 ce f6 bb 04 60 b8 2f 8d 49 a9 ad d6 1d 2d 70 d4 95 0e 12 50 d0 52 49 58 4b 48 f8 23 58 c2 f6 b5 87 98 26 4e 4d 67 6e 4b 82 09 17 42 68 bd 5f d2 27 52 5d 35 16 ab bc 4d 45 62 a0 91 b1 c7 0c 03 73 5a f7 e5 cd a7 a5 63 8f 57 18 8e 3c 3a 49 5c d7 bd c5 cc 2e 0f 73 dc e6 87 63 e1 af 47 8b 8f 0e 75 dd 35 d6 c3 a9 26 a9 d3 52 c3 34 77 3b 55 4e 58 f7 bd cc c4 4e 1d Data Ascii: 616!w0`qz:zmH\S;vx9#x#W?Clt~LAhC{mi<}<Sz\|O.i9`/I-pPRIXKH#X&NMgnKBh_'R]5MEbsZcW<:I\.scGu5&R4w;UNXN
2024-04-26 08:20:09 UTC	1371	IN	Data Raw: 77 4a eb 8d aa e5 5b 5b 25 7c 02 9e 48 ea 8c 7b 03 5a f0 f0 e0 23 63 32 ec 8c 02 73 80 4e 3b 4a 0d cb 5f 3d ec d0 ba 8d ec 71 6b db 6b ad 2d 70 38 20 8a 77 90 41 1c c1 07 b0 a0 8e 7a 3f f0 0f 4f f1 36 c5 77 af b9 5c aa e8 67 a0 a8 64 10 8a 61 19 61 0f 8f 7e 5c 1e d2 49 07 c8 e1 c9 06 6e e9 5d c4 5e 8e 9a ee dd 4f 25 e2 6b ee 8e b9 7c 14 53 ca 5d b2 58 58 e0 d9 98 d8 de e7 88 2a a2 6b 98 e0 f8 dd b1 fb a2 df b9 bb a3 68 75 0e 94 1c 64 af d2 7a 52 d9 6f d3 35 46 0b a6 a2 6b a5 65 7c 7c 9f 0d 1b 1a dc be 3c 8c b2 49 4c 8d 6c 6f f4 cc 6b 64 2d da f0 d7 00 d5 74 c7 43 6a 5b ad 8a 9e e7 ab 6f f5 cc d4 15 f1 8a 8a a8 a1 0c 70 89 f2 37 76 c9 1d 28 7b e5 91 b9 c4 8e cb 01 76 5a dc 80 1e 43 09 c2 eb ee b0 e1 0f 1b 63 e1 9d de e0 fa fd 3d 70 9e 3a 5a 76 bc bb ab cd Data Ascii: wJ[[%\|H{Z#c2sN;J_=qkk-p8 wAz?O6w\gdaa~\In]^O%k\|S]XX*khudzRo5Fke\|\|<ILlokd-tCj[op7v({vZCc=p:Zv

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 08:20:09 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=81864 Date: Fri, 26 Apr 2024 08:20:08 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 08:20:09 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=81876 Date: Fri, 26 Apr 2024 08:20:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 08:20:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:09 UTC	624	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1714162777_urn%3Aaaid%3Asc%3AVA6C2%3Ad35aec95-f365-414c-8371-68e6d7d2ec41%3Bpublic_c62b9afcbd9431aefee9d36156fda10e4e766403&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:20:10 UTC	1286	IN	HTTP/1.1 200 OK Connection: close Content-Length: 110794 Server: openresty Content-Type: image/jpeg access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-expose-headers: Etag,Location,Password-Access,Retry-After,X-Latest-Version,Version,link access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41 build: 60de599a etag: "ZWVmMDQyMzYtNmRkOC00ODQzLTg5MTktOGZiNWQzMzY2OTNiL2pwZy8xMjAwLzAvdHJ1ZQ==" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true" link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective" link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41>; rel="http://ns.adobe.com/adobecloud/rel/ac/policy" link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:block_upload>; rel="http://ns.adobe.com/adobecloud/rel/block/init"; repo:maxSingleTransferSize="10485760"; repo:minBlockTransferSize="1"
2024-04-26 08:20:10 UTC	1289	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 6e 74 65 72 6e 61 6c 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 64 33 35 61 65 63 39 35 2d 66 33 36 35 2d 34 31 34 63 2d 38 33 37 31 2d 36 38 65 36 64 37 64 32 65 63 34 31 2f 3a 62 6c 6f 63 6b 5f 74 72 61 6e 73 66 65 72 5f 6c 65 67 61 63 79 7b 3f 6d 6f 64 65 2c 63 6f 6d 70 6f 6e 65 6e 74 5f 69 64 2c 72 65 70 6f 4d 65 74 61 50 61 74 63 68 2a 7d 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 63 63 61 70 69 2f 62 6c 6f 63 6b 75 70 6c 6f 61 64 22 3b 20 74 65 6d 70 6c 61 74 65 64 3d 22 74 72 75 65 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/internal/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:block_transfer_legacy{?mode,component_id,repoMetaPatch*}>; rel="http://ns.adobe.com/ccapi/blockupload"; templated="true"link: <htt
2024-04-26 08:20:10 UTC	1489	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 64 33 35 61 65 63 39 35 2d 66 33 36 35 2d 34 31 34 63 2d 38 33 37 31 2d 36 38 65 36 64 37 64 32 65 63 34 31 2f 3a 65 6d 62 65 64 64 65 64 6d 65 74 61 64 61 74 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 6d 65 74 61 64 61 74 61 2f 65 6d 62 65 64 64 65 64 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:embeddedmetadata>; rel="http://ns.adobe.com/adobecloud/rel/metadata/embedded"link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:
2024-04-26 08:20:10 UTC	1308	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 64 33 35 61 65 63 39 35 2d 66 33 36 35 2d 34 31 34 63 2d 38 33 37 31 2d 36 38 65 36 64 37 64 32 65 63 34 31 2f 3a 72 65 6e 64 69 74 69 6f 6e 7b 3b 70 61 67 65 2c 73 69 7a 65 2c 74 79 70 65 7d 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 72 65 6e 64 69 74 69 6f 6e 22 3b 20 74 65 6d 70 6c 61 74 65 64 3d 22 74 72 75 65 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41/:rendition{;page,size,type}>; rel="http://ns.adobe.com/adobecloud/rel/rendition"; templated="true"link: <https://cdn-sharing.adobecc.com/con
2024-04-26 08:20:10 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 32 61 30 64 38 64 39 2c 20 32 30 32 33 2f 30 33 2f 31 34 2d 31 31 3a 31 39 3a 34 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.2a0d8d9, 2023/03/14-11:19:46 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-04-26 08:20:10 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-26 08:20:10 UTC	1371	IN	Data Raw: 08 05 06 07 01 04 09 03 02 0a 0b 01 01 00 02 03 01 01 00 03 01 00 00 00 00 00 00 00 00 03 06 02 04 05 07 01 08 09 0a 0b 10 00 01 03 03 02 02 04 04 08 09 0e 0f 61 00 00 00 01 00 02 03 04 05 11 06 12 07 21 08 13 31 41 14 22 51 b2 15 32 37 61 71 74 81 91 23 33 42 52 54 62 a1 d1 f0 16 17 18 53 55 72 82 92 95 b1 b4 c1 d3 e1 24 25 35 36 43 64 73 75 76 83 84 93 94 a2 d2 09 0a 19 1a 26 27 28 29 2a 34 38 39 3a 44 45 46 47 48 49 4a 56 57 58 59 5a 63 65 66 67 68 69 6a 77 78 79 7a 85 86 87 88 89 8a 96 97 98 99 9a a3 a4 a5 a6 a7 a8 a9 aa b3 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 01 02 02 03 08 07 05 0a 05 75 01 00 00 00 00 01 02 11 03 21 04 12 31 05 06 13 32 41 51 71 81 14 22 Data Ascii: a!1A"Q27aqt#3BRTbSUr$%56Cdsuv&'()*489:DEFGHIJVWXYZcefghijwxyzu!12AQq"
2024-04-26 08:20:10 UTC	1371	IN	Data Raw: d7 aa 50 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 7f ff d0 aa 50 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 7f ff d1 aa 50 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii: PPP
2024-04-26 08:20:10 UTC	1371	IN	Data Raw: b2 4a d7 b9 c5 a0 b4 b1 a3 61 66 ec fa 50 a3 b4 bd 9d 9c 22 e1 6d 73 2e 97 49 6f 34 96 36 55 56 47 3c 80 b2 43 00 cb e2 80 07 3a 40 1d c8 46 dc 10 cd ce e4 d0 10 4e dc 3d d0 7a b7 a4 2d e2 eb a9 f5 85 f2 a2 9a c9 45 37 51 4f 0c 00 39 a2 47 0d fd 45 3b 1d 98 e1 64 31 b9 85 ef 2c 73 de 5e d2 77 39 cf 78 07 15 78 33 7d e0 9b 2d fa d7 44 5f eb 0d 3b 67 6d 3d 51 7e d6 cb 1b dc 0b 98 5f d5 e2 39 a0 93 6b 98 f6 3e 3c 03 b5 a7 78 93 c5 0e b3 ad fa 41 4f 6f e0 2d a7 5a db 59 1c 77 ed 42 d6 d2 52 47 e9 99 0d 53 77 b6 a6 40 d3 9d cd 85 d0 c8 18 1d 91 bc c6 1f b8 12 08 73 8e 19 f4 65 ab e2 26 9e 8f 5a eb 7d 41 5a da cb ce e9 e9 63 66 d9 26 31 17 10 d9 65 96 6d f9 eb 39 b9 91 b5 a0 36 32 d3 bf 2e 2c 68 75 1d 2b c2 fd 43 c3 ae 1c 6b bb 4d 65 f0 de 2c d2 50 54 49 64 0e Data Ascii: JafP"ms.Io46UVG<C:@FN=z-E7QO9GE;d1,s^w9xx3}-D_;gm=Q~_9k><xAOo-ZYwBRGSw@se&Z}AZcf&1em962.,hu+CkMe,PTId
2024-04-26 08:20:10 UTC	1371	IN	Data Raw: 85 af a6 8d b1 be 36 f5 31 36 21 b3 77 30 08 60 71 1d 9b 8b 8f 7a 09 aa c5 c3 1a 1b c7 1b a1 d2 3a 2a ba 7a fb 6d be a9 ae a9 bc 48 1a d2 d8 e9 5c d3 53 3b 76 78 a1 8d 7f c0 e1 39 f8 23 cc 78 23 ac 18 0b 57 8a ba c1 9a 3f 87 b7 dd 43 bb 6c f4 74 ce 14 7e bd 4c b8 8a 01 8e f1 d6 bd 85 df 2a 09 ee 41 0e 68 d3 7f e1 e5 ff 00 43 f1 0e af 7b 6d f7 69 e6 98 3c ee 0e 7d 3c 53 1a 7a b6 b8 f3 c9 7c 4f 2e 69 39 ce f6 bb 04 60 b8 2f 8d 49 a9 ad d6 1d 2d 70 d4 95 0e 12 50 d0 52 49 58 4b 48 f8 23 58 c2 f6 b5 87 98 26 4e 4d 67 6e 4b 82 09 17 42 68 bd 5f d2 27 52 5d 35 16 ab bc 4d 45 62 a0 91 b1 c7 0c 03 73 5a f7 e5 cd a7 a5 63 8f 57 18 8e 3c 3a 49 5c d7 bd c5 cc 2e 0f 73 dc e6 87 63 e1 af 47 8b 8f 0e 75 dd 35 d6 c3 a9 26 a9 d3 52 c3 34 77 3b 55 4e 58 f7 bd cc c4 4e 1d Data Ascii: 616!w0`qz:zmH\S;vx9#x#W?Clt~LAhC{mi<}<Sz\|O.i9`/I-pPRIXKH#X&NMgnKBh_'R]5MEbsZcW<:I\.scGu5&R4w;UNXN
2024-04-26 08:20:10 UTC	1371	IN	Data Raw: 77 4a eb 8d aa e5 5b 5b 25 7c 02 9e 48 ea 8c 7b 03 5a f0 f0 e0 23 63 32 ec 8c 02 73 80 4e 3b 4a 0d cb 5f 3d ec d0 ba 8d ec 71 6b db 6b ad 2d 70 38 20 8a 77 90 41 1c c1 07 b0 a0 8e 7a 3f f0 0f 4f f1 36 c5 77 af b9 5c aa e8 67 a0 a8 64 10 8a 61 19 61 0f 8f 7e 5c 1e d2 49 07 c8 e1 c9 06 6e e9 5d c4 5e 8e 9a ee dd 4f 25 e2 6b ee 8e b9 7c 14 53 ca 5d b2 58 58 e0 d9 98 d8 de e7 88 2a a2 6b 98 e0 f8 dd b1 fb a2 df b9 bb a3 68 75 0e 94 1c 64 af d2 7a 52 d9 6f d3 35 46 0b a6 a2 6b a5 65 7c 7c 9f 0d 1b 1a dc be 3c 8c b2 49 4c 8d 6c 6f f4 cc 6b 64 2d da f0 d7 00 d5 74 c7 43 6a 5b ad 8a 9e e7 ab 6f f5 cc d4 15 f1 8a 8a a8 a1 0c 70 89 f2 37 76 c9 1d 28 7b e5 91 b9 c4 8e cb 01 76 5a dc 80 1e 43 09 c2 eb ee b0 e1 0f 1b 63 e1 9d de e0 fa fd 3d 70 9e 3a 5a 76 bc bb ab cd Data Ascii: wJ[[%\|H{Z#c2sN;J_=qkk-p8 wAz?O6w\gdaa~\In]^O%k\|S]XX*khudzRo5Fke\|\|<ILlokd-tCj[op7v({vZCc=p:Zv

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:12 UTC	563	OUT	GET /utilnav/9.2/utilitynav.css HTTP/1.1 Host: prod.adobeccstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:20:12 UTC	596	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 170927 Connection: close Last-Modified: Tue, 10 May 2022 06:05:18 GMT x-amz-storage-class: INTELLIGENT_TIERING Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 08:20:12 GMT Cache-Control: max-age=43200 ETag: "f1502fac113b15d77b859c2478d9b136" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6bc6021a7bdfc58790cf40fa0ce05e78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P4 X-Amz-Cf-Id: paCa-BW7QS4q7amZ8bD-ZpLYfMKiQqmgCYqAOtrlE-qDnAQqayCO9g== Age: 2446 Cross-Origin-Resource-Policy: cross-origin
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 20 6f Data Ascii: /* * Copyright 2018 Adobe Systems Incorporated. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * o
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 64 69 73 70 6c 61 79 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 64 69 73 70 6c 61 79 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 20 65 6d Data Ascii: um-Heading1--display.spectrum-Heading1--quiet{font-size:45px;font-weight:300;line-height:1.3;font-style:normal;letter-spacing:0;text-transform:none;margin-bottom:8px;margin-top:8px}.utilnav-container .spectrum-Heading1--display.spectrum-Heading1--quiet em
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 6d 2d 42 6f 64 79 33 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 33 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 2d 2d 73 65 63 6f 6e 64 61 72 79 2c 2e 75 74 69 6c 6e 61 76 2d Data Ascii: m-Body3 strong,.utilnav-container .spectrum:lang(zh) .spectrum-Body3 strong{font-size:16px;font-weight:900;line-height:1.7;font-style:normal;letter-spacing:.05em;text-transform:none}.utilnav-container .spectrum:lang(ja) .spectrum-Body--secondary,.utilnav-
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 Data Ascii: ding2--strong strong,.utilnav-container .spectrum:lang(ko) .spectrum-Heading2--strong strong,.utilnav-container .spectrum:lang(zh) .spectrum-Heading2--strong strong{font-size:25px;font-weight:900;line-height:1.5;font-style:normal;letter-spacing:.05em;text
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 29 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 7b 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 Data Ascii: ) .spectrum-Detail,.utilnav-container .spectrum--light .spectrum:lang(ko) .spectrum-Detail,.utilnav-container .spectrum--light .spectrum:lang(zh) .spectrum-Detail{color:#4b4b4b}.utilnav-container .spectrum--light .spectrum:lang(ja) .spectrum-Heading1--qui
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 70 65 63 74 72 75 6d 2d 2d 6c 61 72 67 65 20 2e 73 70 65 63 74 72 75 6d 2d 55 49 49 63 6f 6e 2d 2d 6c 61 72 67 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 61 72 67 65 7b 2d 2d 75 69 2d 69 63 6f 6e 2d 6c 61 72 67 65 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 2d 75 69 2d 69 63 6f 6e 2d 6d 65 64 69 75 6d 2d 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6d 65 64 69 75 6d 7b 2d 2d 75 69 2d 69 63 6f 6e 2d 6d 65 64 69 75 6d 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 2d 75 69 2d 69 63 6f 6e 2d 6c 61 72 67 65 2d 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 Data Ascii: pectrum--large .spectrum-UIIcon--large{display:inline}.utilnav-container .spectrum--large{--ui-icon-large-display:block;--ui-icon-medium-display:none}.utilnav-container .spectrum--medium{--ui-icon-medium-display:block;--ui-icon-large-display:none}.utilnav
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 2e 69 73 2d 64 69 73 61 62 6c 65 64 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 73 Data Ascii: lnav-container .spectrum--light .spectrum-Button--secondary:active{background-color:#4b4b4b;border-color:#4b4b4b;color:#fff}.utilnav-container .spectrum--light .spectrum-Button--secondary.is-disabled,.utilnav-container .spectrum--light .spectrum-Button--s
2024-04-26 08:20:12 UTC	15259	IN	Data Raw: 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2d 2d 71 75 69 65 74 2e 69 73 2d 73 65 6c 65 63 74 65 64 2e 66 6f 63 75 73 2d 72 69 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2d 2d 71 75 69 65 74 2e 69 73 2d 73 65 6c 65 63 74 65 64 2e 69 73 2d 66 6f 63 75 73 65 64 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e Data Ascii: olor:transparent;border-color:transparent}.utilnav-container .spectrum--light .spectrum-FieldButton--quiet.is-selected.focus-ring,.utilnav-container .spectrum--light .spectrum-FieldButton--quiet.is-selected.is-focused,.utilnav-container .spectrum--light .
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2d 2d 71 75 69 65 74 2e 66 6f 63 75 73 2d 72 69 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 54 6f 6f 6c 2e 66 6f 63 75 73 2d 72 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 23 32 36 38 30 65 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 36 38 30 65 62 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 Data Ascii: m--dark .spectrum-ActionButton--quiet.focus-ring,.utilnav-container .spectrum--dark .spectrum-Tool.focus-ring{background-color:transparent;box-shadow:0 0 0 1px #2680eb;border-color:#2680eb;color:#fff}.utilnav-container .spectrum--dark .spectrum-ActionButt
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 6c 6f 67 2d 2d 64 69 73 6d 69 73 73 69 62 6c 65 20 2e 73 70 65 63 74 72 75 6d 2d 44 69 61 6c 6f 67 2d 63 6c 6f 73 65 42 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 69 74 69 61 6c 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 44 69 61 6c 6f 67 2d 63 6c 6f 73 65 42 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 70 78 3b 72 69 67 68 74 3a 2d 32 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 44 69 61 6c 6f 67 2d 74 79 70 65 49 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 44 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 7b 64 69 Data Ascii: log--dismissible .spectrum-Dialog-closeButton{display:initial}.utilnav-container .spectrum-Dialog-closeButton{position:absolute;top:-28px;right:-28px}.utilnav-container .spectrum-Dialog-typeIcon{display:block}.utilnav-container .spectrum-Dialog-content{di

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:12 UTC	548	OUT	GET /utilnav/9.2/utilitynav.js HTTP/1.1 Host: prod.adobeccstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:20:12 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 522263 Connection: close Last-Modified: Tue, 10 May 2022 06:05:18 GMT x-amz-storage-class: INTELLIGENT_TIERING Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 08:20:12 GMT Cache-Control: max-age=43200 ETag: "4dd04062ef449c113de9536573f87393" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 527715fc8b8c6fc58dafc25125fc8102.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P4 X-Amz-Cf-Id: oFY0xaMtWTtPjYaX4EXVlbnvrLmur9oyMUTzSbNV1rFQclGWh_VZMg== Age: 18906 Cross-Origin-Resource-Policy: cross-origin
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 20 6f Data Ascii: /* * Copyright 2018 Adobe Systems Incorporated. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * o
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 2e 61 70 70 6c 79 28 43 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6c 61 73 74 49 6e 64 65 78 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 75 65 2e 61 70 70 6c 79 28 43 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 65 28 43 65 28 74 68 69 73 29 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 72 65 64 75 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: e,arguments.length>1?arguments[1]:void 0)},join:function(e){return ce.apply(Ce(this),arguments)},lastIndexOf:function(e){return ue.apply(Ce(this),arguments)},map:function(e){return Se(Ce(this),e,arguments.length>1?arguments[1]:void 0)},reduce:function(e){
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 28 65 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 40 61 75 74 6f 62 69 6e 64 20 64 65 63 6f 72 61 74 6f 72 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 65 74 68 6f 64 73 20 6e 6f 74 3a 20 22 2b 28 76 6f 69 64 20 30 Data Ascii: urn e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":void 0===e?"undefined":r(e)};function i(e,t,n){var r=n.value;if("function"!=typeof r)throw new Error("@autobind decorator can only be applied to methods not: "+(void 0
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 6e 75 6c 6c 22 29 3b 72 65 74 75 72 6e 20 61 7d 69 66 28 22 52 65 67 45 78 70 22 21 3d 3d 6f 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 67 45 78 70 23 65 78 65 63 20 63 61 6c 6c 65 64 20 6f 6e 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 22 29 3b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 32 33 35 29 3b 76 61 72 20 72 3d 6e 28 33 34 29 2c 6f 3d 6e 28 31 38 29 2c 69 3d 6e 28 39 29 2c 61 3d 6e 28 34 35 29 2c 75 3d 6e 28 38 29 2c 6c 3d 6e 28 31 30 36 29 2c 73 3d 75 28 22 73 70 65 63 69 65 73 22 29 2c 63 3d 21 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 2e 2f 3b 72 65 74 75 Data Ascii: null");return a}if("RegExp"!==o(e))throw new TypeError("RegExp#exec called on incompatible receiver");return i.call(e,t)}},function(e,t,n){"use strict";n(235);var r=n(34),o=n(18),i=n(9),a=n(45),u=n(8),l=n(106),s=u("species"),c=!i(function(){var e=/./;retu
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 64 65 66 61 75 6c 74 7d 7d 29 3b 76 61 72 20 6f 3d 72 28 6e 28 34 34 30 29 29 2c 69 3d 72 28 6e 28 34 34 34 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 21 6e 28 31 33 29 26 26 21 6e 28 39 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 28 39 32 29 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 29 2c 6f 3d 6e 28 31 33 29 2c 69 Data Ascii: function(){return i.default}});var o=r(n(440)),i=r(n(444))},function(e,t,n){"use strict";e.exports=!n(13)&&!n(9)(function(){return 7!=Object.defineProperty(n(92)("div"),"a",{get:function(){return 7}}).a})},function(e,t,n){"use strict";var r=n(5),o=n(13),i
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 2c 72 2c 6f 2c 69 2c 61 29 7b 76 61 72 20 75 3d 6f 7c 7c 22 3c 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 3e 22 2c 6c 3d 61 7c 7c 72 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 5b 72 5d 29 72 65 74 75 72 6e 20 74 3f 6e 65 77 20 45 72 72 6f 72 28 22 52 65 71 75 69 72 65 64 20 22 2b 69 2b 22 20 60 22 2b 6c 2b 22 60 20 77 61 73 20 6e 6f 74 20 73 70 65 63 69 66 69 65 64 20 69 6e 20 60 22 2b 75 2b 22 60 2e 22 29 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 41 72 72 61 79 28 73 3e 36 3f 73 2d 36 3a 30 29 2c 66 3d 36 3b 66 Data Ascii: erty(t,"__esModule",{value:!0}),t.default=function(e){function t(t,n,r,o,i,a){var u=o\|\|"<<anonymous>>",l=a\|\|r;if(null==n[r])return t?new Error("Required "+i+" `"+l+"` was not specified in `"+u+"`."):null;for(var s=arguments.length,c=Array(s>6?s-6:0),f=6;f
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 7b 7d 2c 74 68 65 6d 65 3a 22 6c 69 67 68 74 22 2c 69 6e 67 65 73 74 3a 7b 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 22 73 74 61 67 65 22 2c 72 73 69 64 3a 22 61 64 62 65 6d 2d 63 63 68 6f 6d 65 2d 64 65 76 22 7d 7d 2c 71 65 3a 7b 66 65 61 74 75 72 65 46 6c 61 67 73 3a 22 68 74 74 70 73 3a 2f 2f 71 65 2e 61 64 6f 62 65 63 63 73 74 61 74 69 63 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 66 65 61 74 75 72 65 73 2e 6a 73 6f 6e 22 2c 63 6f 6e 66 69 67 55 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 71 65 2e 61 64 6f 62 65 63 63 73 74 61 74 69 63 2e 63 6f 6d 2f 61 70 70 6c 2f 61 73 73 65 74 73 2f 63 6f 6e 66 69 67 2e 6a 73 6f 6e 22 2c 61 64 6f 62 65 43 43 53 74 61 74 69 63 42 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 71 65 2e 61 64 6f 62 65 63 63 73 74 61 74 69 63 2e 63 6f 6d 2f 61 70 Data Ascii: {},theme:"light",ingest:{environment:"stage",rsid:"adbem-cchome-dev"}},qe:{featureFlags:"https://qe.adobeccstatic.com/common/features.json",configUrl:"https://qe.adobeccstatic.com/appl/assets/config.json",adobeCCStaticBase:"https://qe.adobeccstatic.com/ap
2024-04-26 08:20:12 UTC	15246	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 2e 63 61 6c 6c 28 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 6f 3d 65 2e 5f 76 2c 69 3d 6a 28 65 29 3b 69 66 28 69 26 26 28 74 3d 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 3f 45 2e 65 6d 69 74 28 22 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 22 2c 6f 2c 65 29 3a 28 6e 3d 6c 2e 6f 6e 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 29 3f 6e 28 7b 70 72 6f 6d 69 73 65 3a 65 2c 72 65 61 73 6f 6e 3a 6f 7d 29 3a 28 72 3d 6c 2e 63 6f 6e 73 6f 6c 65 29 26 26 72 2e 65 72 72 6f 72 26 26 72 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 70 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 22 2c 6f 29 7d 29 2c 65 2e 5f 68 3d 50 7c 7c 6a 28 65 29 3f 32 3a 31 29 2c 65 2e 5f 61 3d 76 Data Ascii: function(e){y.call(l,function(){var t,n,r,o=e._v,i=j(e);if(i&&(t=w(function(){P?E.emit("unhandledRejection",o,e):(n=l.onunhandledrejection)?n({promise:e,reason:o}):(r=l.console)&&r.error&&r.error("Unhandled promise rejection",o)}),e._h=P\|\|j(e)?2:1),e._a=v
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 29 28 74 29 3b 74 3e 65 3b 29 6f 28 6e 2c 65 2c 61 72 67 75 6d 65 6e 74 73 5b 65 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3d 74 2c 6e 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 30 29 3b 72 28 72 2e 50 2c 22 41 72 72 61 79 22 2c 7b 63 6f 70 79 57 69 74 68 69 6e 3a 6e 28 31 32 35 29 7d 29 2c 6e 28 35 39 29 28 22 63 6f 70 79 57 69 74 68 69 6e 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 30 29 2c 6f 3d 6e 28 37 30 29 28 35 29 2c 69 3d 21 30 3b 22 66 69 6e 64 22 69 6e 5b 5d 26 26 41 72 72 61 79 28 31 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 21 31 7d 29 2c 72 28 72 Data Ascii: )(t);t>e;)o(n,e,arguments[e++]);return n.length=t,n}})},function(e,t,n){"use strict";var r=n(0);r(r.P,"Array",{copyWithin:n(125)}),n(59)("copyWithin")},function(e,t,n){"use strict";var r=n(0),o=n(70)(5),i=!0;"find"in[]&&Array(1).find(function(){i=!1}),r(r
2024-04-26 08:20:12 UTC	16384	IN	Data Raw: 29 72 65 74 75 72 6e 20 6f 28 69 2c 74 2c 22 22 3d 3d 3d 6e 3f 22 2e 22 2b 6a 28 74 2c 30 29 3a 6e 29 2c 31 3b 69 66 28 73 3d 30 2c 6e 3d 22 22 3d 3d 3d 6e 3f 22 2e 22 3a 6e 2b 22 3a 22 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 74 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 6e 2b 6a 28 6c 3d 74 5b 63 5d 2c 63 29 3b 73 2b 3d 65 28 6c 2c 66 2c 6f 2c 69 29 7d 65 6c 73 65 20 69 66 28 66 3d 6e 75 6c 6c 3d 3d 3d 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 28 74 29 29 3f 6e 75 6c 6c 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 66 3d 79 26 26 74 5b 79 5d 7c 7c 74 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 3f Data Ascii: )return o(i,t,""===n?"."+j(t,0):n),1;if(s=0,n=""===n?".":n+":",Array.isArray(t))for(var c=0;c<t.length;c++){var f=n+j(l=t[c],c);s+=e(l,f,o,i)}else if(f=null===t\|\|"object"!==(void 0===t?"undefined":r(t))?null:"function"==typeof(f=y&&t[y]\|\|t["@@iterator"])?

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Chrome Cache Entry: 369

Chrome Cache Entry: 370

Chrome Cache Entry: 371

Chrome Cache Entry: 372

Chrome Cache Entry: 373

Chrome Cache Entry: 374

Chrome Cache Entry: 375

Chrome Cache Entry: 376

Chrome Cache Entry: 377

Chrome Cache Entry: 378

Chrome Cache Entry: 379

Chrome Cache Entry: 380

Windows Analysis Report
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:d35aec95-f365-414c-8371-68e6d7d2ec41

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:18 UTC	546	OUT	GET /6gNXXegDB6rtHARrNKRF8w.js HTTP/1.1 Host: widget.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:20:18 UTC	1036	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:20:18 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * etag: W/"7509d39cde95667aa73a3af6f1ebe0c5" Cache-Control: public, max-age=14400 content-security-policy: x-request-id: 65fe3b0403d340984151d46ace06e262 CF-Cache-Status: HIT Age: 331900 Expires: Fri, 26 Apr 2024 12:20:18 GMT Set-Cookie: __cf_bm=hy4YeR0tw4YYc.I77Tp3wjw5p.QT2CMmLGpjdLivO8w-1714119618-1.0.1.1-TIjK6BBGv.WYpmljdOSkMdTuxxXxwTmRckrWxSPN1tC6zZ_lYhycFRn23Gx9fSkh2v63i5Bsi7VlDXNvJSKlzA; path=/; expires=Fri, 26-Apr-24 08:50:18 GMT; domain=.uservoice.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a5271efa66336d-MIA
2024-04-26 08:20:18 UTC	333	IN	Data Raw: 37 62 39 38 0d 0a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 20 3d 20 7b 65 76 65 6e 74 73 3a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 7c 7c 5b 5d 2c 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 78 29 7d 2c 61 63 63 6f 75 6e 74 3a 7b 22 61 63 74 69 76 65 5f 77 69 64 67 65 74 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 22 3a 22 66 6f 6f 74 65 72 5f 70 6f 77 65 72 65 64 62 79 22 2c 22 6e 61 6d 65 22 3a 22 41 64 6f 62 65 22 2c 22 77 68 69 74 65 5f 6c 61 62 65 6c 65 64 22 3a 66 61 6c 73 65 2c 22 77 69 64 67 65 74 32 5f 64 6f 6d 61 69 6e 22 3a 22 61 63 72 6f 62 61 74 2e 75 73 65 72 76 6f 69 63 65 2e 63 6f 6d 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 73 73 6c Data Ascii: 7b98window.UserVoice = {events:window.UserVoice\|\|[],push:function(x){window.UserVoice.events.push(x)},account:{"active_widgets":[],"campaign":"footer_poweredby","name":"Adobe","white_labeled":false,"widget2_domain":"acrobat.uservoice.com","subdomain_ssl
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 73 75 62 64 6f 6d 61 69 6e 5f 6b 65 79 22 3a 22 61 63 72 6f 62 61 74 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 69 64 22 3a 34 39 36 30 31 35 2c 22 63 6c 69 65 6e 74 5f 6b 65 79 22 3a 22 36 67 4e 58 58 65 67 44 42 36 72 74 48 41 52 72 4e 4b 52 46 38 77 22 2c 22 63 6c 69 65 6e 74 5f 6f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 73 61 74 69 73 66 61 63 74 69 6f 6e 5f 61 75 74 6f 70 72 6f 6d 70 74 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 4c 6f 61 64 69 6e 67 22 3a 22 4c 6f 61 64 69 6e 67 22 2c 22 4f 70 65 6e 43 6f 6e 74 61 63 74 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 43 6f 6e 74 61 63 74 20 57 69 64 67 65 74 22 2c 22 4f 70 65 6e 46 65 65 64 62 61 63 6b 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 46 65 65 64 62 61 63 Data Ascii: subdomain_key":"acrobat","subdomain_id":496015,"client_key":"6gNXXegDB6rtHARrNKRF8w","client_options":null,"satisfaction_autoprompt_enabled":false,"messages":{"Loading":"Loading","OpenContactWidget":"Open Contact Widget","OpenFeedbackWidget":"Open Feedbac
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 77 69 64 67 65 74 32 2f 63 6c 6f 73 65 2d 38 38 38 37 37 32 30 38 62 36 30 34 63 32 37 35 61 64 63 31 37 65 61 63 32 37 35 31 33 32 33 30 64 36 38 63 63 30 32 32 32 65 33 61 34 63 62 31 34 37 62 62 63 30 66 65 62 61 35 64 32 36 37 63 2e 70 6e 67 22 2c 22 70 62 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 77 69 64 67 65 74 32 2f 55 73 65 72 56 6f 69 63 65 2d 6c 6f 67 6f 2d 6c 69 67 68 74 2d 63 34 30 61 66 32 66 30 35 63 35 66 31 64 66 65 30 36 64 65 31 61 38 33 38 37 35 37 33 30 35 35 33 64 39 62 36 63 38 63 36 36 33 66 39 38 30 65 37 30 30 65 31 63 35 61 31 66 31 66 61 63 35 36 2e 73 76 67 22 2c 22 73 63 72 65 65 6e 73 68 6f 74 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 6f 6d 6e 69 62 6f 78 2f 73 63 Data Ascii: ":"/pkg/clients/widget2/close-88877208b604c275adc17eac27513230d68cc0222e3a4cb147bbc0feba5d267c.png","pb":"/pkg/clients/widget2/UserVoice-logo-light-c40af2f05c5f1dfe06de1a83875730553d9b6c8c663f980e700e1c5a1f1fac56.svg","screenshot":"/pkg/clients/omnibox/sc
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 61 6d 65 22 2c 22 76 69 65 77 70 6f 72 74 22 29 2c 6d 65 74 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 2c 74 29 2c 65 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 65 74 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 69 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2c 6f 3d 30 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 2f 76 69 65 77 70 6f 72 74 2f 69 2e 74 65 73 74 28 69 5b 6f 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 29 29 7b 74 3d 69 5b 6f 5d 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 66 28 21 44 29 7b 76 61 72 20 74 3d 6c 28 29 2c 65 3d 2f 75 73 65 72 Data Ascii: ame","viewport"),meta.setAttribute("content",t),e.head.appendChild(meta)}function l(){for(var t,i=e.getElementsByTagName("meta"),o=0;o<i.length;o++)if(/viewport/i.test(i[o].getAttribute("name"))){t=i[o];break}return t}function c(){if(!D){var t=l(),e=/user
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 3d 74 3a 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 74 29 29 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 50 7c 7c 28 6d 28 22 23 75 76 54 61 62 2c 2e 75 76 2d 74 72 61 79 2c 2e 75 76 2d 69 63 6f 6e 2c 2e 75 76 2d 70 6f 70 6f 76 65 72 2c 2e 75 76 2d 62 75 62 62 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 22 2c 22 70 72 69 6e 74 22 29 2c 50 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 52 7c 7c 28 6d 28 22 2e 75 76 2d 69 63 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 22 29 2c 52 3d 21 30 29 7d 66 75 6e 63 74 69 Data Ascii: =t:o.appendChild(e.createTextNode(t)),e.getElementsByTagName("head")[0].appendChild(o)}function v(){P\|\|(m("#uvTab,.uv-tray,.uv-icon,.uv-popover,.uv-bubble{display:none!important}","print"),P=!0)}function b(){R\|\|(m(".uv-icon:hover{opacity:1}"),R=!0)}functi
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 3d 6e 2e 73 75 62 73 74 72 28 6c 2b 61 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6f 74 5b 74 5d 5b 65 5d 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 4f 2e 66 69 72 65 64 7c 7c 28 4f 2e 66 69 72 65 64 3d 21 30 2c 55 73 65 72 56 6f 69 63 65 2e 61 63 63 6f 75 6e 74 2e 64 65 61 63 74 69 76 61 74 65 64 7c 7c 28 65 74 2e 74 72 61 63 6b 65 72 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 56 69 65 77 28 29 2c 65 74 2e 74 72 61 63 6b 65 72 2e 72 65 61 64 79 28 29 29 2c 65 74 2e 73 63 61 6e 28 29 29 7d 76 61 72 20 54 3d 7b 7d 3b 54 2e 73 61 6e 69 74 69 7a 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: =n.substr(l+a.length)}return ot[t][e]=!0}function O(){O.fired\|\|(O.fired=!0,UserVoice.account.deactivated\|\|(et.tracker.trackExternalView(),et.tracker.ready()),et.scan())}var T={};T.sanitizeValue=function(t,e){function i(t){if("[object Date]"===Object.proto
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 29 2c 6e 3d 65 3e 3e 32 2c 73 3d 28 33 26 65 29 3c 3c 34 7c 69 3e 3e 34 2c 72 3d 28 31 35 26 69 29 3c 3c 32 7c 6f 3e 3e 36 2c 61 3d 36 33 26 6f 2c 69 73 4e 61 4e 28 69 29 3f 72 3d 61 3d 36 34 3a 69 73 4e 61 4e 28 6f 29 26 26 28 61 3d 36 34 29 2c 63 3d 63 2b 6c 2e 63 68 61 72 41 74 28 6e 29 2b 6c 2e 63 68 61 72 41 74 28 73 29 2b 6c 2e 63 68 61 72 41 74 28 72 29 2b 6c 2e 63 68 61 72 41 74 28 61 29 3b 72 65 74 75 72 6e 20 63 7d 2c 54 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 3b 69 3e 6f 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 5b 6f 5d Data Ascii: ),n=e>>2,s=(3&e)<<4\|i>>4,r=(15&i)<<2\|o>>6,a=63&o,isNaN(i)?r=a=64:isNaN(o)&&(a=64),c=c+l.charAt(n)+l.charAt(s)+l.charAt(r)+l.charAt(a);return c},T.extend=function(t){for(var e=Array.prototype.slice.call(arguments,1),i=e.length,o=0;i>o;o++)for(var n in e[o]
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 67 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 31 30 3e 74 3f 22 30 22 2b 74 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 61 2e 74 65 73 74 28 74 29 3f 27 22 27 2b 74 2e 72 65 70 6c 61 63 65 28 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6c 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 74 2e 63 68 61 Data Ascii: g&&"undefined"!=typeof console.log.apply&&console.log.apply(console,arguments)},function(){function e(t){return 10>t?"0"+t:t}function i(t){return a.lastIndex=0,a.test(t)?'"'+t.replace(a,function(t){var e=l[t];return"string"==typeof e?e:"\\u"+("0000"+t.cha
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 69 73 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 29 2b 22 5a 22 3a 6e 75 6c 6c 7d 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 4e 75 6d 62 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 7d 29 3b 76 61 72 20 6e 2c 73 2c 72 2c 61 3d 2f 5b 5c 5c 5c 22 5c 78 30 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 78 39 66 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 Data Ascii: is.getUTCHours())+":"+e(this.getUTCMinutes())+":"+e(this.getUTCSeconds())+"Z":null},String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(){return this.valueOf()});var n,s,r,a=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u
2024-04-26 08:20:18 UTC	1369	IN	Data Raw: 2e 73 74 6f 72 65 3d 6e 65 77 20 72 2c 74 68 69 73 2e 72 65 63 75 72 72 65 6e 74 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 28 22 72 22 29 2c 74 68 69 73 2e 73 74 6f 72 65 2e 73 65 74 28 22 72 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 65 3d 22 78 22 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3b 74 72 79 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 69 6e 20 74 26 26 74 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 74 68 69 73 2e 73 65 74 28 65 2c 65 29 2c 74 68 69 73 2e 67 65 74 28 65 29 21 3d 3d 65 3f 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3a 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 7d 63 61 74 63 68 28 69 29 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 Data Ascii: .store=new r,this.recurrent=this.store.get("r"),this.store.set("r",!0)}function r(){var e="x";this.storage=null;try{this.storage="sessionStorage"in t&&t.sessionStorage,this.set(e,e),this.get(e)!==e?this.storage=null:this.remove(e)}catch(i){this.storage=nu

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:36 UTC	935	OUT	GET /t2/496015/web/track.js?_=1714119635375&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOmQzNWFlYzk1LWYzNjUtNDE0Yy04MzcxLTY4ZTZkN2QyZWM0MT92aWV3ZXIlMjFtZWdhVmVyYj1ncm91cC1kaXNjb3ZlciIsInIiOiIifX0%3D HTTP/1.1 Host: by2.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=hy4YeR0tw4YYc.I77Tp3wjw5p.QT2CMmLGpjdLivO8w-1714119618-1.0.1.1-TIjK6BBGv.WYpmljdOSkMdTuxxXxwTmRckrWxSPN1tC6zZ_lYhycFRn23Gx9fSkh2v63i5Bsi7VlDXNvJSKlzA
2024-04-26 08:20:37 UTC	614	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:20:36 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 66 Connection: close Cache-Control: no-cache Cache-Control: private set-cookie: uvts=cf769bea-5842-4095-43b6-0c0c145cf9f2; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None set-cookie: uvts=cf769bea-5842-4095-43b6-0c0c145cf9f2; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None; Partitioned strict-transport-security: max-age=31536000; includeSubDomains expires: Fri, 26 Apr 2024 08:20:35 GMT CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a52792cb930981-MIA
2024-04-26 08:20:37 UTC	66	IN	Data Raw: 5f 5f 75 76 53 65 73 73 69 6f 6e 44 61 74 61 30 28 7b 22 75 76 74 73 22 3a 22 63 66 37 36 39 62 65 61 2d 35 38 34 32 2d 34 30 39 35 2d 34 33 62 36 2d 30 63 30 63 31 34 35 63 66 39 66 32 22 7d 29 3b Data Ascii: __uvSessionData0({"uvts":"cf769bea-5842-4095-43b6-0c0c145cf9f2"});

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:50 UTC	533	OUT	GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1 Host: use1.fptls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://commerce.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:20:50 UTC	512	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:20:50 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex
2024-04-26 08:20:50 UTC	96	IN	Data Raw: 6e 4c 57 4f 53 4f 58 63 2b 72 73 41 2f 32 44 43 4c 4e 57 6d 2f 71 4c 6a 51 4a 54 59 2f 42 2b 56 31 6d 77 30 65 46 59 6b 4c 35 73 57 43 61 6f 30 5a 57 6d 41 4b 76 45 71 78 58 77 53 76 65 37 36 36 4b 68 64 75 74 76 37 2b 2f 4a 65 73 58 70 4a 41 51 6e 79 41 63 6e 66 47 63 67 77 72 49 6f 3d Data Ascii: nLWOSOXc+rsA/2DCLNWm/qLjQJTY/B+V1mw0eFYkL5sWCao0ZWmAKvEqxXwSve766Khdutv7+/JesXpJAQnyAcnfGcgwrIo=

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:20:50 UTC	361	OUT	GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1 Host: use1.fptls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:20:51 UTC	468	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:20:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex
2024-04-26 08:20:51 UTC	96	IN	Data Raw: 39 4d 6f 54 78 6a 78 65 45 4b 55 68 50 72 6d 36 64 6c 58 50 68 6e 6f 7a 52 6a 2b 61 36 71 2f 33 55 30 6b 48 36 67 52 75 48 75 44 4d 36 58 70 72 64 48 74 53 77 63 63 6e 31 71 64 50 73 45 45 67 46 35 62 39 32 78 39 2f 39 4d 4b 62 37 32 6f 71 4e 45 66 69 36 51 39 4d 35 48 61 6e 71 41 3d 3d Data Ascii: 9MoTxjxeEKUhPrm6dlXPhnozRj+a6q/3U0kH6gRuHuDM6XprdHtSwccn1qdPsEEgF5b92x9/9MKb72oqNEfi6Q9M5HanqA==

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:21:00 UTC	3604	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:21:01 UTC	956	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 08:21:01 GMT Content-Length: 0 Connection: close X-TID: rzd6RCOCQ1c= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466 DCS: dcs-prod-va6-1-v059-0f602f544.edge-va6.demdex.com 0 ms set-cookie: demdex=48323040384845285681110877930366804643; Max-Age=15552000; Expires=Wed, 23 Oct 2024 08:21:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:21:01 UTC	3662	OUT	GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1714119659466 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=48323040384845285681110877930366804643
2024-04-26 08:21:01 UTC	827	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:21:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4280 Connection: close X-TID: cUiw6CdsR24= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v059-0ddf3444c.edge-va6.demdex.com 2 ms set-cookie: demdex=48323040384845285681110877930366804643; Max-Age=15552000; Expires=Wed, 23 Oct 2024 08:21:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-26 08:21:01 UTC	4280	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 34 38 34 37 38 38 33 30 36 36 35 36 33 37 37 30 36 37 38 31 30 39 30 35 31 33 38 32 30 32 37 31 36 32 39 38 36 39 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 69 64 73 79 6e 63 2e 72 Data Ascii: {"d_mid":"48478830665637706781090513820271629869","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"60","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//idsync.r

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:21:02 UTC	4053	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=48478830665637706781090513820271629869&ts=1714119660933 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126860s%7CNONE%7CvVersion%7C5.4.0
2024-04-26 08:21:02 UTC	722	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Fri, 26 Apr 2024 08:21:02 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-26 08:21:02 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 34 38 34 37 38 38 33 30 36 36 35 36 33 37 37 30 36 37 38 31 30 39 30 35 31 33 38 32 30 32 37 31 36 32 39 38 36 39 22 7d Data Ascii: {"mid":"48478830665637706781090513820271629869"}

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:21:03 UTC	4104	OUT	POST /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s4368940554895 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive Content-Length: 11143 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126860s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_cc=true
2024-04-26 08:21:03 UTC	11143	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 32 36 25 32 46 33 25 32 46 32 30 32 34 25 32 30 31 30 25 33 41 32 31 25 33 41 31 25 32 30 35 25 32 30 2d 31 32 30 26 6d 69 64 3d 34 38 34 37 38 38 33 30 36 36 35 36 33 37 37 30 36 37 38 31 30 39 30 35 31 33 38 32 30 32 37 31 36 32 39 38 36 39 26 61 61 6d 6c 68 3d 37 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 66 70 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 50 65 72 69 6f 64 73 3d 32 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 75 74 68 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 25 32 46 65 6e 5f 55 53 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 25 33 46 63 61 6c 6c 62 61 63 6b 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 69 6d 73 2d 6e 61 31 2e 61 64 6f 62 65 Data Ascii: AQB=1&ndh=1&pf=1&t=26%2F3%2F2024%2010%3A21%3A1%205%20-120&mid=48478830665637706781090513820271629869&aamlh=7&ce=UTF-8&cdp=2&fpCookieDomainPeriods=2&g=https%3A%2F%2Fauth.services.adobe.com%2Fen_US%2Findex.html%3Fcallback%3Dhttps%253A%252F%252Fims-na1.adobe
2024-04-26 08:21:03 UTC	1292	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Fri, 26 Apr 2024 08:21:03 GMT expires: Thu, 25 Apr 2024 08:21:03 GMT last-modified: Sat, 27 Apr 2024 08:21:03 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; etag: 3681043947304353792-4618420041019503156 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-26 08:21:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:21:04 UTC	4105	OUT	POST /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s41896443507574 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive Content-Length: 11323 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25223815905980362690%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%223815905980362690%22%7D&relay=b36d061a-37d1-4105-adbb-f6f3680f22f9&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&use_ms_for_expiry=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
2024-04-26 08:21:04 UTC	11323	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 32 36 25 32 46 33 25 32 46 32 30 32 34 25 32 30 31 30 25 33 41 32 31 25 33 41 31 25 32 30 35 25 32 30 2d 31 32 30 26 6d 69 64 3d 34 38 34 37 38 38 33 30 36 36 35 36 33 37 37 30 36 37 38 31 30 39 30 35 31 33 38 32 30 32 37 31 36 32 39 38 36 39 26 61 61 6d 6c 68 3d 37 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 66 70 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 50 65 72 69 6f 64 73 3d 32 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 75 74 68 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 25 32 46 65 6e 5f 55 53 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 25 33 46 63 61 6c 6c 62 61 63 6b 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 69 6d 73 2d 6e 61 31 2e 61 64 6f 62 65 Data Ascii: AQB=1&ndh=1&pf=1&t=26%2F3%2F2024%2010%3A21%3A1%205%20-120&mid=48478830665637706781090513820271629869&aamlh=7&ce=UTF-8&cdp=2&fpCookieDomainPeriods=2&g=https%3A%2F%2Fauth.services.adobe.com%2Fen_US%2Findex.html%3Fcallback%3Dhttps%253A%252F%252Fims-na1.adobe
2024-04-26 08:21:04 UTC	1292	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Fri, 26 Apr 2024 08:21:04 GMT expires: Thu, 25 Apr 2024 08:21:04 GMT last-modified: Sat, 27 Apr 2024 08:21:04 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; etag: 3681043951122219008-4618479399407761935 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-26 08:21:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:21:05 UTC	1006	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=48478830665637706781090513820271629869&ts=1714119660933 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; fg=YMVTJQ5JFPP5EDEKFAQVYHAADQ======; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C48478830665637706781090513820271629869; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C48478830665637706781090513820271629869%7CMCAAMLH-1714724460%7C7%7CMCAAMB-1714724460%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1714126861s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
2024-04-26 08:21:06 UTC	652	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 26 Apr 2024 08:21:05 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C48478830665637706781090513820271629869; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Sun, 26 Apr 2026 08:21:21 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-26 08:21:06 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 34 38 34 37 38 38 33 30 36 36 35 36 33 37 37 30 36 37 38 31 30 39 30 35 31 33 38 32 30 32 37 31 36 32 39 38 36 39 22 7d Data Ascii: {"mid":"48478830665637706781090513820271629869"}