Edit tour

Windows Analysis Report
https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmciLCJyZXF1ZXN0SWQiOiJhN2FlZTBmNS0xZDFkLTQxOTgtN2MwYi1jMGFhYzUwNmNhNTIiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF

Overview

General Information

Sample URL:	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmc
Analysis ID:	1438602
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

LLM detected suspicious URL

LLM detected suspicious webpage text

Phishing site or detected (based on various text indicators)

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5532 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5504 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmciLCJyZXF1ZXN0SWQiOiJhN2FlZTBmNS0xZDFkLTQxOTgtN2MwYi1jMGFhYzUwNmNhNTIiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjozNzE0ZjAzZC04Mzc4LTQ5OWMtOTg4Zi0yYjExMDc3ZmNkOGEiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ.cHka_UyRufdl2FWExn4qK06yf5bY5SzHk_Dl30luv6TNezuMfluGHXeuU150Kj9T8ZluD7HZilv5699deMPC-g" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmciLCJyZXF1ZXN0SWQiOiJhN2FlZTBmNS0xZDFkLTQxOTgtN2MwYi1jMGFhYzUwNmNhNTIiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjozNzE0ZjAzZC04Mzc4LTQ5OWMtOTg4Zi0yYjExMDc3ZmNkOGEiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ.cHka_UyRufdl2FWExn4qK06yf5bY5SzHk_Dl30luv6TNezuMfluGHXeuU150Kj9T8ZluD7HZilv5699deMPC-g

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: chromecache_412.2.dr

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_c085c674-f

Phishing

LLM detected suspicious URL

LLM: Score: 7 Reasons: The URL 'https://auth.services.adobe.com/en_US/index.html' appears to be a legitimate Adobe subdomain, 'auth.services.adobe.com'. However, the query parameter 'callback' in the URL contains a URL that is not an Adobe domain, 'ims-na1.adobelogin.com'. This could indicate a potential typosquatting attempt. It is recommended to verify the authenticity of the URL before proceeding. DOM: 8.10.pages.csv

LLM detected suspicious webpage text

Source: https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a

LLM: Score: 8 Reasons: The text contains a call-to-action to click a button and log in with an email account, which could potentially be a phishing attempt. The URL provided does not match the expected One Drive URL, adding to the suspicion of malicious intent. However, without further analysis of the actual URL and the behavior of the page it leads to, a definitive verdict cannot be given. DOM: 0.0.pages.csv

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 4.6	OCR Text: @ Edit Convert Q 6) E-sign A1 ASWnt Sign in Closing Docume... Welcome to Acrobat Sign in to do more with the file shared with you. SWI in O Office 365 YOU MAY LIKE Ask A1 Assistant Generate a summary Edit text & images A document has been sent through One Drive. Click theAccess Document button below and Log in with your email accountto Compress a PDF viewit. PDF to JPG Export a PDF z Access Document Fill & Sign c
Source: Chrome DOM: 3.3	OCR Text: O Office 365 A document has been sent through One Drive. Click theAccess Document button below and Log in with your email accountto viewit. Access Document
Source: Chrome DOM: 5.7	OCR Text: Edit Convert E-sign A1 AssWnt Sign in Closing Docume... PDF x Generative summary O Office 365 A document has been sent through One Drive. Click theAccess Document button below and Log in with your email accountto Get a document outline and summaries, automatically viewit. generated with A1. Quickly understand this document Get detailed summaries of key sections Access mcument Find and easily navigate to the information you Please double-check summaries and sources as they may not always be accurate. You shouldn't rely on summaries for professional advice. Leam more Adobe protects your dcKuments and content using c cesponsible practices. Sign in to start using A1 Assistant. gy clicking Get started, you agree to our User Guidelines. Get

Source: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jsl...

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: <input type="password" .../> found

Source: https://acrobat.adobe.com/dcpreviewdropin/3.0.2_2.748.1/printHelper.html	HTTP Parser: No favicon
Source: https://documentcloud.adobe.com/proxy/pdfverbs-web/3.17.1_4.845.0/shared-storage.html	HTTP Parser: No favicon

HTTP Parser: No <meta name="author".. found

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.208.109:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.192.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.75.15
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.75.15
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.75.15
Source: unknown	TCP traffic detected without corresponding DNS query: 23.32.75.15
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ=="
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ=="
Source: global traffic	HTTP traffic detected: GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ=="
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.css HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.js HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6gNXXegDB6rtHARrNKRF8w.js HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t2/496015/web/track.js?_=1715198878489&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOjM3MTRmMDNkLTgzNzgtNDk5Yy05ODhmLTJiMTEwNzdmY2Q4YT92aWV3ZXIlMjFtZWdhVmVyYj1ncm91cC1kaXNjb3ZlciIsInIiOiIifX0%3D HTTP/1.1Host: by2.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=PE0gKkNkJUc8m3HgRubbbiQWjBSoo6sdrvaftg_EGU8-1715198860-1.0.1.1-frL_UEoBHHQfI.h9sveaQbbnLII9ZnqpO6S3pJqc2W4JOBmr049qJAhEC6wswmcym1llyd5Y0YMz4YsG2iNdhw
Source: global traffic	HTTP traffic detected: GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1Host: use1.fptls.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://commerce.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1Host: use1.fptls.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221780822077138140%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221780822077138140%22%7D&relay=9679a61c-f426-4c4c-873f-3b333201640a&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_inf
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221780822077138140%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221780822077138140%22%7D&relay=9679a61c-f426-4c4c-873f-3b333201640a&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=71473923911726687243962295091633716325&ts=1715198907572 HTTP/1.1Host: sstats.adobe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221780822077138140%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221780822077138140%22%7D&relay=9679a61c-f426-4c4c-873f-3b333201640a&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=71675608569673998663941792589102811371
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=71473923911726687243962295091633716325&ts=1715198907572 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YNYXRWTTFPP5EDEKFAQVYHAADQ======; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C71473923911726687243962295091633716325; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C71473923911726687243962295091633716325%7CMCAAMLH-1715803707%7C9%7CMCAAMB-1715803707%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715206108s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s47632546992862 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YNYXRWTTFPP5EDEKFAQVYHAADQ======; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C71473923911726687243962295091633716325; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C71473923911726687243962295091633716325%7CMCAAMLH-1715803707%7C9%7CMCAAMB-1715803707%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715206108s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s41908733897725 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YNYXRWTTFPP5EDEKFAQVYHAADQ======; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C71473923911726687243962295091633716325; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C71473923911726687243962295091633716325%7CMCAAMLH-1715803707%7C9%7CMCAAMB-1715803707%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715206108s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s47632546992862?AQB=1&pccr=true&vidn=331DEDDF2A6CF012-60000C2342DFDFC1&g=none&AQE=1 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YNYXRWTTFPP5EDEKFAQVYHAADQ======; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C71473923911726687243962295091633716325; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C71473923911726687243962295091633716325%7CMCAAMLH-1715803707%7C9%7CMCAAMB-1715803707%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715206108s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|331DEDDF2A6CF012-60000C2342DFDFC1[CE]
Source: global traffic	HTTP traffic detected: GET /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s41908733897725?AQB=1&pccr=true&vidn=331DEDDF64FB486A-6000045DAACA9C6E&g=none&AQE=1 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YNYXRWTTFPP5EDEKFAQVYHAADQ======; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C71473923911726687243962295091633716325; s_cc=true; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C71473923911726687243962295091633716325%7CMCAAMLH-1715803707%7C9%7CMCAAMB-1715803707%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715206108s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_vi=[CS]v1\|331DEDDF64FB486A-6000045DAACA9C6E[CE]

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: widget.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: static.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: prod.adobeccstatic.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: l.betrad.com
Source: global traffic	DNS traffic detected: DNS query: ims-na1.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: files-download2.acrocomcontent.com
Source: global traffic	DNS traffic detected: DNS query: dc-api-v2.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: dc-api.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: c.evidon.com
Source: global traffic	DNS traffic detected: DNS query: by2.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.echosign.com
Source: global traffic	DNS traffic detected: DNS query: cdn-sharing.adobecc.com
Source: global traffic	DNS traffic detected: DNS query: adobe.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _19292._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _39691._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _49100._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: use1.fptls.com
Source: global traffic	DNS traffic detected: DNS query: stun.fpapi.io
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: use1-turn.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net

Source: unknown

HTTP traffic detected: POST /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s47632546992862 HTTP/1.1Host: sstats.adobe.comConnection: keep-aliveContent-Length: 11142sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://auth.services.adobe.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252C%2522jslibver%2522%253A%2522v2-v0.40.0-17-g241fb07%2522%252C%2522nonce%2522%253A%25221780822077138140%2522%257D%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=dc-prod-virgoweb&scope=AdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditional_info.optionalAgreements%2Cagreement_sign%2Cagreement_send%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_library_read%2Csign_user_login%2Csao.ACOM_ESIGN_TRIAL%2Cee.dcweb%2Ctk_platform%2Ctk_platform_sync%2Cab.manage%2Cadditional_info.incomplete%2Cadditional_info.creation_source%2Cadditional_info.roles%2Cpps.read%2Cupdate_profile.first_name%2Cupdate_profile.last_name&state=%7B%22ac%22%3A%22adobe.com_acrobatweb_login%22%2C%22jslibver%22%3A%22v2-v0.40.0-17-g241fb07%22%2C%22nonce%22%3A%221780822077138140%22%7D&relay=9679a61c-f426-4c4c-873f-3b333201640a&locale=en_US&flow_type=token&dctx_id=v%3A2%2Cs%2C6eca5110-6cfa-11ed-b11c-3982bff8dfd0&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft&check_pba=true&response_type=token&code_challenge_method=plain&redirect_uri=https%3A%2F%2Facrobat.adobe.com%2Flink%2Fhome%2F%23old_hash%3D%26from_ims%3Dtrue%3Fclient_id%3Ddc-prod-virgoweb%26api%3Dauthorize%26scope%3DAdobeID%2Copenid%2CDCAPI%2Cadditional_info.account_type%2Cadditiona

Source: chromecache_454.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_579.2.dr	String found in binary or memory: http://github.com/janl/mustache.js
Source: chromecache_412.2.dr, chromecache_455.2.dr	String found in binary or memory: http://iso.org/pdf/ssn
Source: chromecache_412.2.dr, chromecache_455.2.dr	String found in binary or memory: http://iso.org/pdf2/ssn
Source: chromecache_508.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_625.2.dr, chromecache_634.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: chromecache_625.2.dr, chromecache_634.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: chromecache_625.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017702
Source: chromecache_625.2.dr, chromecache_634.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: chromecache_625.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017704
Source: chromecache_625.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: chromecache_609.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f83
Source: chromecache_609.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f85
Source: chromecache_609.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f86
Source: chromecache_609.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f88
Source: chromecache_375.2.dr, chromecache_575.2.dr, chromecache_508.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_470.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_590.2.dr	String found in binary or memory: https://adobereview.uservoice.com/forums/598411-document-review
Source: chromecache_470.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_470.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_470.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_470.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_590.2.dr	String found in binary or memory: https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160
Source: chromecache_650.2.dr	String found in binary or memory: https://fingerprint.com)
Source: chromecache_539.2.dr	String found in binary or memory: https://ims-na1.adobelogin.com/
Source: chromecache_470.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_625.2.dr, chromecache_634.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_417.2.dr, chromecache_394.2.dr	String found in binary or memory: https://sso.behance.net/ims
Source: chromecache_360.2.dr, chromecache_501.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_625.2.dr, chromecache_634.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: chromecache_625.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: chromecache_625.2.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_625.2.dr	String found in binary or memory: https://use.typekit.net/af/a2527e/000000000000000000017704/27/
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_609.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_625.2.dr, chromecache_634.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: chromecache_625.2.dr, chromecache_634.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
Source: chromecache_601.2.dr, chromecache_652.2.dr	String found in binary or memory: https://views7closingdocument.weebly.com)

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50231 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmciLCJyZXF1ZXN0SWQiOiJhN2FlZTBmNS0xZDFkLTQxOTgtN2MwYi1jMGFhYzUwNmNhNTIiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjozNzE0ZjAzZC04Mzc4LTQ5OWMtOTg4Zi0yYjExMDc3ZmNkOGEiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ.cHka_UyRufdl2FWExn4qK06yf5bY5SzHk_Dl30luv6TNezuMfluGHXeuU150Kj9T8ZluD7HZilv5699deMPC-g"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5532 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5504 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5532 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5504 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5532 --field-trial-handle=1976,i,11233652730624539999,3457103367940332808,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 601	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 652
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 652	Jump to dropped file

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmciLCJyZXF1ZXN0SWQiOiJhN2FlZTBmNS0xZDFkLTQxOTgtN2MwYi1jMGFhYzUwNmNhNTIiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjozNzE0ZjAzZC04Mzc4LTQ5OWMtOTg4Zi0yYjExMDc3ZmNkOGEiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ.cHka_UyRufdl2FWExn4qK06yf5bY5SzHk_Dl30luv6TNezuMfluGHXeuU150Kj9T8ZluD7HZilv5699deMPC-g	0%	Avira URL Cloud	safe
https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmciLCJyZXF1ZXN0SWQiOiJhN2FlZTBmNS0xZDFkLTQxOTgtN2MwYi1jMGFhYzUwNmNhNTIiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjozNzE0ZjAzZC04Mzc4LTQ5OWMtOTg4Zi0yYjExMDc3ZmNkOGEiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ.cHka_UyRufdl2FWExn4qK06yf5bY5SzHk_Dl30luv6TNezuMfluGHXeuU150Kj9T8ZluD7HZilv5699deMPC-g	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	0%	URL Reputation	safe
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	0%	URL Reputation	safe
https://fingerprint.com)	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack	0%	Avira URL Cloud	safe
https://use1.fptls.com/?q=dSMHmEUM9QSIKQm9iy0W	0%	Avira URL Cloud	safe
https://views7closingdocument.weebly.com)	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
dd20fzx9mj46f.cloudfront.net	18.238.217.126	true	false	high
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	34.236.183.224	true	false	high
use1-turn.fpjs.io	18.212.47.155	true	false	unknown
widget.uservoice.com	104.17.30.92	true	false	high
api.echosign.com	52.71.63.232	true	false	high
detect.adobedccdn.com	127.0.0.1	true	false	unknown
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	54.191.172.25	true	false	high
cdn-sharing.adobecc.map.fastly.net	151.101.1.138	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
adobetarget.data.adobedc.net	63.140.36.145	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
adobe.com.ssl.d1.sc.omtrdc.net	63.140.36.51	true	false	unknown
use1.fptls.com	99.83.173.21	true	false	unknown
www.google.com	142.250.69.196	true	false	high
by2.uservoice.com	104.17.30.92	true	false	high
prod.adobeccstatic.com	3.163.165.25	true	false	unknown
stun.l.google.com	74.125.250.129	true	false	high
c.evidon.com	unknown	unknown	false	high
ims-na1.adobelogin.com	unknown	unknown	false	high
dc-api-v2.adobecontent.io	unknown	unknown	false	unknown
adobe.tt.omtrdc.net	unknown	unknown	false	unknown
cdn-sharing.adobecc.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	high
static.adobelogin.com	unknown	unknown	false	high
_49100._https.detect.adobedccdn.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
_39691._https.detect.adobedccdn.com	unknown	unknown	false	unknown
l.betrad.com	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
_19292._https.detect.adobedccdn.com	unknown	unknown	false	unknown
stun.fpapi.io	unknown	unknown	false	unknown
dc-api.adobecontent.io	unknown	unknown	false	unknown
files-download2.acrocomcontent.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997	false		high
https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://widget.uservoice.com/6gNXXegDB6rtHARrNKRF8w.js	false		high
https://use1.fptls.com/?q=dSMHmEUM9QSIKQm9iy0W	false	Avira URL Cloud: safe	unknown
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	false	URL Reputation: safe	unknown
https://dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997	false		high
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	false	URL Reputation: safe	unknown
https://by2.uservoice.com/t2/496015/web/track.js?_=1715198878489&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOjM3MTRmMDNkLTgzNzgtNDk5Yy05ODhmLTJiMTEwNzdmY2Q4YT92aWV3ZXIlMjFtZWdhVmVyYj1ncm91cC1kaXNjb3ZlciIsInIiOiIifX0%3D	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://sso.behance.net/ims	chromecache_417.2.dr, chromecache_394.2.dr	false		high
https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/a2527e/000000000000000000017704/27/	chromecache_625.2.dr	false		high
https://adobereview.uservoice.com/forums/598411-document-review	chromecache_590.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_470.2.dr	false		high
https://use.typekit.net/af/cb695f/000000000000000000017701/27/	chromecache_625.2.dr, chromecache_634.2.dr	false		high
http://typekit.com/eulas/000000000000000000017704	chromecache_625.2.dr	false		high
https://static.adobelogin.com/imslib/imslib.min.js	chromecache_360.2.dr, chromecache_501.2.dr	false		high
http://typekit.com/eulas/000000000000000000017706	chromecache_625.2.dr	false		high
http://typekit.com/eulas/0000000000000000000176ff	chromecache_625.2.dr, chromecache_634.2.dr	false		high
https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160	chromecache_590.2.dr	false		high
http://typekit.com/eulas/000000000000000000017701	chromecache_625.2.dr, chromecache_634.2.dr	false		high
http://typekit.com/eulas/000000000000000000017702	chromecache_625.2.dr	false		high
http://typekit.com/eulas/000000000000000000017703	chromecache_625.2.dr, chromecache_634.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	chromecache_625.2.dr	false		high
http://jedwatson.github.io/classnames	chromecache_508.2.dr	false	URL Reputation: safe	unknown
http://iso.org/pdf/ssn	chromecache_412.2.dr, chromecache_455.2.dr	false		high
https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_375.2.dr, chromecache_575.2.dr, chromecache_508.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout	chromecache_470.2.dr	false		high
https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/a?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	chromecache_625.2.dr, chromecache_634.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)	chromecache_470.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/	chromecache_625.2.dr	false		high
https://fingerprint.com)	chromecache_650.2.dr	false	Avira URL Cloud: safe	low
https://views7closingdocument.weebly.com)	chromecache_601.2.dr, chromecache_652.2.dr	false	Avira URL Cloud: safe	low
https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/d?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://p.typekit.net/p.gif	chromecache_625.2.dr, chromecache_634.2.dr	false		high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/	chromecache_625.2.dr, chromecache_634.2.dr	false		high
http://github.com/janl/mustache.js	chromecache_579.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/l?primer=7fa3915bdafdf03041871920a205b	chromecache_609.2.dr	false		high
http://feross.org	chromecache_454.2.dr	false		high
http://iso.org/pdf2/ssn	chromecache_412.2.dr, chromecache_455.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f83	chromecache_609.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment	chromecache_470.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f85	chromecache_609.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f86	chromecache_609.2.dr	false		high
https://ims-na1.adobelogin.com/	chromecache_539.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f88	chromecache_609.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.138	cdn-sharing.adobecc.map.fastly.net	United States	54113	FASTLYUS	false
18.238.217.50	unknown	United States	16509	AMAZON-02US	false
54.191.172.25	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.163.165.96	unknown	United States	16509	AMAZON-02US	false
63.140.36.145	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
99.83.173.21	use1.fptls.com	United States	16509	AMAZON-02US	false
75.2.10.96	unknown	United States	16509	AMAZON-02US	false
50.112.189.71	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.71.63.231	unknown	United States	14618	AMAZON-AESUS	false
52.71.63.232	api.echosign.com	United States	14618	AMAZON-AESUS	false
104.17.30.92	widget.uservoice.com	United States	13335	CLOUDFLARENETUS	false
142.250.69.196	www.google.com	United States	15169	GOOGLEUS	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false
18.212.47.155	use1-turn.fpjs.io	United States	14618	AMAZON-AESUS	false
63.140.37.206	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
18.238.217.126	dd20fzx9mj46f.cloudfront.net	United States	16509	AMAZON-02US	false
63.140.36.51	adobe.com.ssl.d1.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
3.163.165.25	prod.adobeccstatic.com	United States	16509	AMAZON-02US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1438602
Start date and time:	2024-05-08 22:06:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImppbGwub2tlZWZmZUBhdGxhbnRpY2FyZS5vcmciLCJyZXF1ZXN0SWQiOiJhN2FlZTBmNS0xZDFkLTQxOTgtN2MwYi1jMGFhYzUwNmNhNTIiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjozNzE0ZjAzZC04Mzc4LTQ5OWMtOTg4Zi0yYjExMDc3ZmNkOGEiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ.cHka_UyRufdl2FWExn4qK06yf5bY5SzHk_Dl30luv6TNezuMfluGHXeuU150Kj9T8ZluD7HZilv5699deMPC-g
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@23/579@94/21
Cookbook Comments:	Browse: https://acrobat.adobe.com/link/home/

Input	Output
URL: https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a	```json { "riskscore": 2, "reasons": "The URL appears to be a legitimate Adobe Acrobat page. The top-level domain is 'adobe.com' and the second-level domain is 'acrobat', both of which match the company's official website 'adobe.com'. There do not appear to be any typosquatting issues with this URL." } ```"
https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a
URL: https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a	{ "riskscore": 8, "reasons": "The text contains a call-to-action to click a button and log in with an email account, which could potentially be a phishing attempt. The URL provided does not match the expected One Drive URL, adding to the suspicion of malicious intent. However, without further analysis of the actual URL and the behavior of the page it leads to, a definitive verdict cannot be given." }"
O Office 365 A document has been sent through One Drive. Click theAccess Document button below and Log in with your email accountto viewit. Access Document
URL: https://acrobat.adobe.com/dcpreviewdropin/3.0.2_2.748.1/printHelper.html	{ "riskscore": 2, "reasons": "The URL 'https://acrobat.adobe.com/dcpreviewdropin/3.0.2_2.748.1/printHelper.html' has a low risk of typosquatting.\ \ Top Level Domain: com\ Second Level Domain: adobe\ \ The second level domain 'adobe' is a well-known brand and company, which reduces the likelihood of typosquatting.\ \ However, it is still possible for a typosquatting attack to occur, so it is recommended to double-check the URL and ensure that it is the intended destination." }"
https://acrobat.adobe.com/dcpreviewdropin/3.0.2_2.748.1/printHelper.html
URL: https://commerce.adobe.com/store/iframe/preload	{ "riskscore": 2, "reasons": "The URL appears to be a legitimate Adobe commerce site. The top level domain is 'adobe.com' and the second level domain is 'commerce'. These are both well-known and established brands, so the risk of typosquatting is low. However, it is always important to double-check the URL and ensure that it is the correct and intended site." }"
https://commerce.adobe.com/store/iframe/preload
URL: https://acrobat.adobe.com/link/home/	{ "riskscore": 2, "reasons": "The URL appears to be a legitimate Adobe Acrobat link. The top level domain is 'adobe.com' and the second level domain is 'acrobat'. These are both well-known brands and companies, and there do not appear to be any typosquatting attempts in this URL." }"
https://acrobat.adobe.com/link/home/
URL: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526fr	```json { "riskscore": 2, "
!function(){var e=document.getElementById("App"),t=document.getElementById("UnsupportedBrowser");!function(){var e,t=new RegExp("ab_test=ie11-incompat"),l=window.location.href.match(t);try{l?(e=document.createElement("div")).style.display="grid":((e=document.createElement("div")).style.display="-webkit-flex",e.style.display="flex")}catch(e){return!1}return(l?"grid"===e.style.display:"flex"===e.style.display\|\|"-webkit-flex"===e.style.display)&&"MutationObserver"in window}()?t.style.display="block":e.style.display="block"}()	```json { "riskscore": 2, "
URL: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526fr	```json { "riskscore": 1, "reasons": "The JavaScript code and URL provided do not appear to be malicious. The code is defining some objects related to user authentication and localization, and the URL is for an Adobe login page. However, it is always important to thoroughly examine any code or URL before trusting it, as even seemingly harmless elements can be used maliciously in some contexts." } ```"
window.offlineData={analytics:{events:[]},user:{username:""}},window.SUSI2Locales={email:{title:"Sign in",createAccount:"New user? {0} Create an account {1}",social:{or:"Or"},getHelp:"Get help signing in",input:"Email address",inputEmailOrPhone:"Email address or mobile phone number",viewMoreSocialProviders:"View more",errors:{personalAccountDeactivated:"Your Personal Account has been deactivated. Please review our {0} and contact {1} if you believe this is an error.",personalAccountClosed:"Your Personal Account has been closed. Please review our {0} and contact {1} if you believe this is an error.",companyOrSchoolAccountDeactivated:"Your Company or School Account has been deactivated. Please review our {0} and contact {1} if you believe this is an error.",companyOrSchoolAccountClosed:"Your Company or School Account has been closed. Please review our {0} and contact {1} if you believe this is an error.",blockCreateAccount:"No account associated with the email address",accountCreationBlockedByPolicy:"Can't sign in with this email address",block:{individual:"Personal Accounts are not supported. Continue with a Company or School Account to access the service. {0} Learn more {1}",enterprise:"Company or School Accounts are not supported. Continue with a Personal Account to access the service. {0} Learn more {1}",federated:"Company or School Accounts are not supported. Continue with a Personal Account to access the service. {0} Learn more {1}"},invalidEmail:"Please enter an email address.",invalidLength:"The email address length should be between 6 and 60 characters.",incorrectEmail:"We don't have an account with that email address.",incorrectEmailWithLink:"We don't have an account with that email address. {0}Find your account{1} {2} or {3} {4}create a new account{5}",accountNotFound:"Check your email address or {0} create a new account {1}",passkeyFailed:"Passkey Sign-In Failed. Please use a different method to sign in.",socialIsDisabled:"Do you usually sign in with Facebook, Google or Apple? Enter your email below and we'll help you sign in."}},common:{continueWithEmail:"Continue with email",countries:{AF:"Afghanistan",AL:"Albania",DZ:"Algeria",AS:"American Samoa",AD:"Andorra",AO:"Angola",AI:"Anguilla",AQ:"Antarctica",AG:"Antigua and Barbuda",AR:"Argentina",AM:"Armenia",AW:"Aruba",AU:"Australia",AT:"Austria",AZ:"Azerbaijan",BS:"Bahamas",BH:"Bahrain",BD:"Bangladesh",BB:"Barbados",BY:"Belarus",BE:"Belgium",BZ:"Belize",BJ:"Benin",BM:"Bermuda",BT:"Bhutan",BO:"Bolivia",BA:"Bosnia and Herzegovina",BW:"Botswana",BR:"Brazil",IO:"British Indian Ocean",BN:"Brunei",BG:"Bulgaria",BF:"Burkina Faso",BI:"Burundi",KH:"Cambodia",CM:"Cameroon",CA:"Canada",CV:"Cape Verde",KY:"Cayman Islands",CF:"Central African Republic",TD:"Chad",CL:"Chile",CN:"China",CX:"Christmas Island",CC:"Cocos (Keeling) Islands",CO:"Colombia",KM:"Comoros",CG:"Congo, Republic of the",CK:"Cook Islands",CR:"Costa Rica",HR:"Croatia",CY:"Cyprus",CZ:"Czech Republic",CD:"Democratic Republic of the Congo",DK:"Denmark",DJ:"Djibouti",DM:"Dominica",DO:"Dominican Republic",TL:"East Timor",EC:"Ecuador",EG:"Egypt",SV:"El Salvador",GQ:"Equatorial Guinea",ER:"Eritrea",EE:"Estonia",ET:"Ethiopia",FK:"Falkland Islands (Malvinas)",FO:"Faroe Islands",FJ:"Fiji",FI:"Finland",FR:"France",GF:"French Guiana",PF:"French Polynesia",GA:"Gabon",GM:"Gambia",GE:"Georgia",DE:"Germany",GH:"Ghana",GI:"Gibraltar",GR:"Greece",GL:"Greenland",GD:"Grenada",GP:"Guadeloupe",GT:"Guatemala",GN:"Guinea",GW:"Guinea-Bissau",GY:"Guyana",HT:"Haiti",HN:"Honduras",HK:"Hong Kong SAR of China",HU:"Hungary",IS:"Iceland",IN:"India",ID:"Indonesia",IQ:"Iraq",IE:"Ireland",IL:"Israel",IT:"Italy",CI:"Ivory Coast (Cte d'Ivoire)",JM:"Jamaica",JP:"Japan",JO:"Jordan",KZ:"Kazakhstan",KE:"Kenya",KI:"Kiribati",KR:"Korea, South",KV:"Kosovo",KW:"Kuwait",KG:"Kyrgyzstan",LA:"Laos",LV:"Latvia",LB:"Lebanon",LS:"Lesotho",LR:"Liberia",LY:"Libya",LI:"Liechtenstein",LT:"Lithuania",LU:"Luxembourg",MO:"Macau SAR of China",MK:"Macedonia, Republic of",MG:"Madagascar",MW:"Malawi",MY:"Malaysia",MV:"Maldives",ML:"Mali",MT:"Malta",MH:"Marshall Islands",MQ:"Martinique",MR:"Mauritania",MU:"Mauritius",YT:"Mayotte",MX:"Mexico",FM:"Micronesia",MD:"Moldova",MC:"Monaco",MN:"Mongolia",ME:"Montenegro",MS:"Montserrat",MA:"Morocco",MZ:"Mozambique",MM:"Myanmar",NA:"Namibia",NR:"Nauru",NP:"Nepal",NL:"Netherlands",AN:"Netherlands Antilles",NC:"New Caledonia",NZ:"New Zealand",NI:"Nicaragua",NE:"Niger",NG:"Nigeria",NU:"Niue",NF:"Norfolk Island",NO:"Norway",OM:"Oman",PK:"Pakistan",PS:"Palestinian Territory",PA:"Panama",PG:"Papua New Guinea",PY:"Paraguay",PE:"Peru",PH:"Philippines",PN:"Pitcairn Island",PL:"Poland",PT:"Portugal",QA:"Qatar",RE:"Runion",RO:"Romania",RU:"Russia",RW:"Rwanda",SH:"Saint Helena",KN:"Saint Kitts and Nevis",LC:"Saint Lucia",PM:"Saint Pierre and Miquelon",VC:"Saint Vincent and the Grenadines",WS:"Samoa",SM:"San Marino",ST:"So Tome and Principe",SA:"Saudi Arabia",SN:"Senegal",RS:"Serbia",SC:"Seychelles",SL:"Sierra Leone",SG:"Singapor
URL: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526fr	{ "riskscore": 7, "reasons": "The URL 'https://auth.services.adobe.com/en_US/index.html' appears to be a legitimate Adobe subdomain, 'auth.services.adobe.com'. However, the query parameter 'callback' in the URL contains a URL that is not an Adobe domain, 'ims-na1.adobelogin.com'. This could indicate a potential typosquatting attempt. It is recommended to verify the authenticity of the URL before proceeding." }"
https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526fr
URL: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526fr	{ "riskscore": 2, "reasons": "The JavaScript code and URL provided do not appear to be malicious at first glance. The JavaScript code is adding a load event listener to a CSS link element and setting its 'rel' attribute to 'stylesheet' if it hasn't been set already. This is not inherently malicious and could be used for legitimate purposes such as lazy loading of CSS. The URL provided is for a subdomain of Adobe's authentication service, which is a legitimate domain. However, it is always important to thoroughly examine the context in which the code is running and the behavior of the website to ensure that it is not being used for malicious purposes. A risk score of 2 is given because, based on the provided information, the code and URL do not appear to be malicious, but further investigation is recommended." }"
var cssLink = document.getElementById("css-link");cssLink.addEventListener("load", function cssOnloadHandler() {this.setAttribute("rel", "stylesheet");this.removeEventListener("load", cssOnloadHandler);});window.addEventListener("load", function() {if (cssLink.getAttribute("rel") !== "stylesheet") {cssLink.setAttribute("rel", "stylesheet");}});
URL: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_im	```json { "phishing_score": 2, "brands": "Adobe Acrobat", "phishing": false, "suspicious_domain": false, "has_loginform": true, "has_captcha": false, "setechniques": false, "reasons": "The URL contains 'adobe.com' and 'adobelogin.com' which are legitimate domains associated with Adobe. The URL parameters and structure, although complex, are consistent with legitimate Adobe authentication flows. The image shows a typical Adobe sign-in page with options to log in via Google, Facebook, and Apple, which is a common practice for many legitimate sites. There is no evidence of typical phishing tactics such as misspelled domain names or urgent language urging immediate action. The site appears to be a legitimate Adobe login page." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41570), with no line terminators
Category:	downloaded
Size (bytes):	41570
Entropy (8bit):	5.286973939072438
Encrypted:	false
SSDEEP:	768:iLkHDY7yLVCIgLJwNEkqPtnSDjkFYEaDjkFYEZ:XM7yhCDDj
MD5:	3906A972664DF82B5712A30C6DC117A9
SHA1:	70B2D0DCF8EC6A7FB5FD1D81D7E69A10311DE199
SHA-256:	C6C133E4DAAF8BCBBED3A07992A39411356947736D8B65CD382B066B8B0277DE
SHA-512:	3CF67E632FE88803D327F8C23EB7A5C2BA819A212789DCB63F3837517B964703551701DCDBE650C45FFD8868F9B44AD797904286D1409A7376106602D57C4A60
Malicious:	false
Reputation:	low
URL:	https://commerce.adobe.com/store/_next/static/chunks/2952-ebe78e00ee4fb25c40f0.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2952],{32952:function(e,t,n){var r=n(67294),o=n(85893),i=n(11065),c=n(64063),a=function(){throw new Error("You forgot to wrap your component in <FpjsProvider>.")},u={getVisitorData:a,clearCache:a},s=r.createContext(u),f=function(e,t){return(f=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])})(e,t)};var l=function(){return(l=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)};function p(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.indexOf(r)<0&&(n[r]=e[r]);if(null!=e&&"function"===typeof Object.getOwnPropertySymbols){var o=0;for(r=Object.getOwnPropertySymbols(e);o<r.length;o++)t.indexOf(r[o])<0&&Object.prototype.propertyIsEnumerable.call(e,r[o])&&(n[r[o]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 8, 2024 22:07:11.265269995 CEST	53	60611	1.1.1.1	192.168.2.4
May 8, 2024 22:07:11.284399033 CEST	53	50996	1.1.1.1	192.168.2.4
May 8, 2024 22:07:12.296574116 CEST	53	64066	1.1.1.1	192.168.2.4
May 8, 2024 22:07:13.007330894 CEST	53	60401	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.339133978 CEST	50208	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.339488029 CEST	57485	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.502110958 CEST	53	50208	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.502497911 CEST	53	57485	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.541084051 CEST	61105	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.541985035 CEST	52334	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.542155981 CEST	64652	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.542351007 CEST	65340	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.687752008 CEST	52630	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.687993050 CEST	61490	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.704267979 CEST	53	61105	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.706870079 CEST	53	52334	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.708904028 CEST	53513	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.709253073 CEST	62557	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.851843119 CEST	53	61490	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.872112036 CEST	53	62557	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.873256922 CEST	53	53513	1.1.1.1	192.168.2.4
May 8, 2024 22:07:15.878599882 CEST	51204	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.879005909 CEST	64193	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:15.899245024 CEST	53	52630	1.1.1.1	192.168.2.4
May 8, 2024 22:07:16.040816069 CEST	53	60728	1.1.1.1	192.168.2.4
May 8, 2024 22:07:16.047873974 CEST	55897	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.048203945 CEST	64202	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.064336061 CEST	53	57412	1.1.1.1	192.168.2.4
May 8, 2024 22:07:16.067126989 CEST	55133	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.067532063 CEST	61612	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.212116957 CEST	53	64202	1.1.1.1	192.168.2.4
May 8, 2024 22:07:16.212130070 CEST	53	50457	1.1.1.1	192.168.2.4
May 8, 2024 22:07:16.212573051 CEST	53	55897	1.1.1.1	192.168.2.4
May 8, 2024 22:07:16.216464996 CEST	55501	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.217118979 CEST	53866	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.217820883 CEST	55629	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.218246937 CEST	51286	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.235802889 CEST	58643	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.236280918 CEST	65001	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:16.382333040 CEST	53	51286	1.1.1.1	192.168.2.4
May 8, 2024 22:07:16.400681019 CEST	53	65001	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.122353077 CEST	53	64781	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.125848055 CEST	53	52777	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.127728939 CEST	52464	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.128252029 CEST	57299	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.130063057 CEST	54181	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.130481005 CEST	54005	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.139564037 CEST	53	65425	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.164778948 CEST	55457	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.164778948 CEST	56436	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.293333054 CEST	53	54005	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.293818951 CEST	53	54181	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.315661907 CEST	55443	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.316833019 CEST	59401	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.330053091 CEST	63827	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.330723047 CEST	60093	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.479341984 CEST	53	55443	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.480782032 CEST	53	59401	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.494806051 CEST	53	60093	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.515785933 CEST	53	63827	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.556727886 CEST	55359	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.556727886 CEST	49534	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:17.658497095 CEST	53	59572	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.720645905 CEST	53	49534	1.1.1.1	192.168.2.4
May 8, 2024 22:07:17.721904039 CEST	53	55359	1.1.1.1	192.168.2.4
May 8, 2024 22:07:20.004369974 CEST	53	53637	1.1.1.1	192.168.2.4
May 8, 2024 22:07:20.041014910 CEST	61200	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:20.041270971 CEST	52933	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:20.226250887 CEST	53	52933	1.1.1.1	192.168.2.4
May 8, 2024 22:07:20.251990080 CEST	53	52160	1.1.1.1	192.168.2.4
May 8, 2024 22:07:20.282253981 CEST	53	61200	1.1.1.1	192.168.2.4
May 8, 2024 22:07:21.268791914 CEST	53	55524	1.1.1.1	192.168.2.4
May 8, 2024 22:07:30.579967976 CEST	53	54044	1.1.1.1	192.168.2.4
May 8, 2024 22:07:31.602459908 CEST	53	62106	1.1.1.1	192.168.2.4
May 8, 2024 22:07:33.801913023 CEST	138	138	192.168.2.4	192.168.2.255
May 8, 2024 22:07:37.850642920 CEST	53	50924	1.1.1.1	192.168.2.4
May 8, 2024 22:07:43.485075951 CEST	53	63472	1.1.1.1	192.168.2.4
May 8, 2024 22:07:44.360409021 CEST	53	58946	1.1.1.1	192.168.2.4
May 8, 2024 22:07:44.592596054 CEST	53	63009	1.1.1.1	192.168.2.4
May 8, 2024 22:07:45.907756090 CEST	53	58306	1.1.1.1	192.168.2.4
May 8, 2024 22:07:46.088715076 CEST	54929	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:46.088867903 CEST	53929	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:46.252434969 CEST	53	53929	1.1.1.1	192.168.2.4
May 8, 2024 22:07:46.252600908 CEST	53	54929	1.1.1.1	192.168.2.4
May 8, 2024 22:07:49.469155073 CEST	61669	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:49.469621897 CEST	62819	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:49.633181095 CEST	53	61669	1.1.1.1	192.168.2.4
May 8, 2024 22:07:49.633919954 CEST	53	62819	1.1.1.1	192.168.2.4
May 8, 2024 22:07:50.469568968 CEST	53	55427	1.1.1.1	192.168.2.4
May 8, 2024 22:07:50.725728989 CEST	53	60185	1.1.1.1	192.168.2.4
May 8, 2024 22:07:52.993491888 CEST	61833	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:52.994153976 CEST	55698	53	192.168.2.4	1.1.1.1
May 8, 2024 22:07:53.159888029 CEST	53	55698	1.1.1.1	192.168.2.4
May 8, 2024 22:07:53.184088945 CEST	53	61833	1.1.1.1	192.168.2.4
May 8, 2024 22:07:55.260216951 CEST	53	49828	1.1.1.1	192.168.2.4
May 8, 2024 22:08:10.704495907 CEST	53	51979	1.1.1.1	192.168.2.4
May 8, 2024 22:08:12.547791958 CEST	53	54672	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.123864889 CEST	54113	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.124219894 CEST	52381	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.287772894 CEST	53	54113	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.287846088 CEST	53	52381	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.383380890 CEST	53817	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.383380890 CEST	62450	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.384073973 CEST	56479	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.384388924 CEST	62725	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.389739990 CEST	58557	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.389739990 CEST	55841	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.547502995 CEST	53	62450	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.548217058 CEST	53	53817	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.548912048 CEST	58331	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.549041033 CEST	53	56479	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.549297094 CEST	53	62725	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.549796104 CEST	61075	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.552134991 CEST	64615	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.553129911 CEST	53	55841	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.553630114 CEST	53	58557	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.554752111 CEST	53176	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.595149994 CEST	52382	19302	192.168.2.4	74.125.250.129
May 8, 2024 22:08:15.595839977 CEST	63838	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:15.712938070 CEST	53	58331	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.713459969 CEST	53	61075	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.715142965 CEST	53	64615	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.718025923 CEST	53	53176	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.759967089 CEST	53	63838	1.1.1.1	192.168.2.4
May 8, 2024 22:08:15.764636993 CEST	19302	52382	74.125.250.129	192.168.2.4
May 8, 2024 22:08:16.143738031 CEST	59080	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:16.144151926 CEST	58399	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:16.308176041 CEST	53	59080	1.1.1.1	192.168.2.4
May 8, 2024 22:08:16.309262037 CEST	53	58399	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.198422909 CEST	56592	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.198591948 CEST	51725	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.209244967 CEST	53	57998	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.362042904 CEST	53	56592	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.370987892 CEST	56035	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.371150970 CEST	51919	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.371176004 CEST	53	51725	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.372993946 CEST	62348	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.373141050 CEST	55447	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.537389040 CEST	60874	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.537543058 CEST	60944	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.537544012 CEST	53	62348	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.592958927 CEST	53	55447	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.700500965 CEST	53	60944	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.701746941 CEST	53	60874	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.727518082 CEST	53020	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.727658987 CEST	55895	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.742820978 CEST	53	61680	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.893157005 CEST	53	52289	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.895085096 CEST	51080	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.895231009 CEST	62858	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.895766020 CEST	53222	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.895931005 CEST	58804	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.910386086 CEST	53	55761	1.1.1.1	192.168.2.4
May 8, 2024 22:08:18.911968946 CEST	53840	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:18.912117958 CEST	60498	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.059672117 CEST	53	62858	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.059937000 CEST	53	51080	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.061677933 CEST	51895	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.061831951 CEST	62538	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.062314987 CEST	52229	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.062561035 CEST	60025	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.224780083 CEST	53	62538	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.225821018 CEST	53	60025	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.246521950 CEST	53	51866	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.252974987 CEST	58099	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.253109932 CEST	56021	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.257677078 CEST	55860	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.257817030 CEST	57868	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.411174059 CEST	53	59116	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.413094044 CEST	65356	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.413332939 CEST	49317	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.422744036 CEST	51964	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.422972918 CEST	58558	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:19.576843023 CEST	53	65356	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.577521086 CEST	53	49317	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.587029934 CEST	53	51964	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.637465954 CEST	53	58558	1.1.1.1	192.168.2.4
May 8, 2024 22:08:19.789927006 CEST	53	56411	1.1.1.1	192.168.2.4
May 8, 2024 22:08:20.650573015 CEST	62088	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:20.651025057 CEST	56383	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:24.039486885 CEST	58451	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:24.039680958 CEST	50576	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:24.167447090 CEST	53	55620	1.1.1.1	192.168.2.4
May 8, 2024 22:08:26.326908112 CEST	50712	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:26.327125072 CEST	55977	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:26.490842104 CEST	53	55977	1.1.1.1	192.168.2.4
May 8, 2024 22:08:26.492324114 CEST	53	50712	1.1.1.1	192.168.2.4
May 8, 2024 22:08:27.995549917 CEST	64434	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:27.995551109 CEST	60367	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:28.158282042 CEST	53	64434	1.1.1.1	192.168.2.4
May 8, 2024 22:08:28.158438921 CEST	53	60367	1.1.1.1	192.168.2.4
May 8, 2024 22:08:40.239008904 CEST	53	56602	1.1.1.1	192.168.2.4
May 8, 2024 22:08:53.186517000 CEST	59960	53	192.168.2.4	1.1.1.1
May 8, 2024 22:08:53.349699974 CEST	53	59960	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 8, 2024 22:07:16.581068039 CEST	192.168.2.4	1.1.1.1	c2a3	(Port unreachable)	Destination Unreachable
May 8, 2024 22:08:18.593024969 CEST	192.168.2.4	1.1.1.1	c29b	(Port unreachable)	Destination Unreachable
May 8, 2024 22:08:19.637517929 CEST	192.168.2.4	1.1.1.1	c257	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-08 20:07:16 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=39349 Date: Wed, 08 May 2024 20:07:16 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-08 20:07:17 UTC	538	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0MNkrYwAAAADiUL7L3dxqSIABzBrl++yWQ082QUEzMTUwODEwMDIxAGNlZmMyNTgzLWE5YjItNDRhNy05NzU1LWI3NmQxN2UwNWY3Zg== Cache-Control: public, max-age=39397 Date: Wed, 08 May 2024 20:07:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-08 20:07:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:19 UTC	832	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://acrobat.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 20:07:19 UTC	1220	IN	HTTP/1.1 200 OK Connection: close Content-Length: 97864 Server: openresty Content-Type: image/jpeg access-control-allow-credentials: true access-control-allow-headers: Authorization,Content-Type,X-Api-Key,User-Agent,If-Modified-Since,If-Match,expires,cache-control,pragma,X-Sharing-Password,X-Access-Token,X-Feature-Override,Captcha-Site-Key,Captcha-User-Response,X-Request-Id,Storage-Client,Uber-Trace-Id,Reminder-Duration,priority access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-expose-headers: Etag,Location,Password-Access,Retry-After,X-Latest-Version,Version,link,X-Cache,X-Request-Id access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a build: 08bcfb39 etag: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ==" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true" link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective"
2024-05-08 20:07:20 UTC	1487	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 70 6f 6c 69 63 79 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 33 37 31 34 66 30 33 64 2d 38 33 37 38 2d 34 39 39 63 2d 39 38 38 66 2d 32 62 31 31 30 37 37 66 63 64 38 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 61 63 2f 70 6f 6c 69 63 79 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 33 37 31 34 66 30 33 64 2d Data Ascii: link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a>; rel="http://ns.adobe.com/adobecloud/rel/ac/policy"link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:3714f03d-
2024-05-08 20:07:20 UTC	1383	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 33 37 31 34 66 30 33 64 2d 38 33 37 38 2d 34 39 39 63 2d 39 38 38 66 2d 32 62 31 31 30 37 37 66 63 64 38 61 2f 3a 61 70 70 6c 69 63 61 74 69 6f 6e 6d 65 74 61 64 61 74 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 6d 65 74 61 64 61 74 61 2f 61 70 70 6c 69 63 61 74 69 6f 6e 22 3b 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:applicationmetadata>; rel="http://ns.adobe.com/adobecloud/rel/metadata/application"; type="application/json"link: <https://cdn-sharing.adob
2024-05-08 20:07:20 UTC	1399	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 33 37 31 34 66 30 33 64 2d 38 33 37 38 2d 34 39 39 63 2d 39 38 38 66 2d 32 62 31 31 30 37 37 66 63 64 38 61 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 70 72 69 6d 61 72 79 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 64 69 72 65 63 74 6f 72 79 2f 72 65 70 6f 2f 32 39 31 46 31 44 39 32 36 35 41 39 37 46 45 35 30 41 34 39 35 45 34 38 40 41 64 6f 62 65 4f Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a>; rel="http://ns.adobe.com/adobecloud/rel/primary"link: <https://platform-cs.adobe.io/content/directory/repo/291F1D9265A97FE50A495E48@AdobeO
2024-05-08 20:07:20 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 32 61 30 64 38 64 39 2c 20 32 30 32 33 2f 30 33 2f 31 34 2d 31 31 3a 31 39 3a 34 36 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.2a0d8d9, 2023/03/14-11:19:46 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-05-08 20:07:20 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-08 20:07:20 UTC	1371	IN	Data Raw: 05 01 06 07 08 02 03 04 09 0a 0b 01 01 01 00 03 01 01 01 00 03 01 00 00 00 00 00 00 00 07 01 05 06 04 02 03 08 09 0a 0b 10 01 00 01 02 04 02 04 05 05 0a 0c 1b 59 00 00 00 00 01 02 03 04 05 06 11 12 21 07 13 31 41 14 16 22 51 d2 32 52 55 61 94 15 34 37 42 72 73 81 92 b1 f0 23 33 36 43 53 54 71 91 a1 a3 b2 b3 08 09 0a 17 18 19 1a 24 25 26 27 28 29 2a 35 38 39 3a 44 45 46 47 48 49 4a 62 74 56 57 58 59 5a 63 64 65 66 67 68 69 6a 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 93 95 96 97 98 99 9a a2 a4 a5 a6 a7 a8 a9 aa b4 b5 b6 b7 b8 b9 ba c1 c2 c3 c4 c5 c6 c7 c8 c9 ca d1 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 01 02 04 01 04 09 0a 05 07 05 71 00 00 00 00 01 02 11 03 04 12 21 31 05 41 51 61 13 14 15 22 32 71 Data Ascii: Y!1A"Q2RUa47Brs#36CSTq$%&'()*589:DEFGHIJbtVWXYZcdefghijuvwxyzq!1AQa"2q
2024-05-08 20:07:20 UTC	1371	IN	Data Raw: f4 9d cd cb 7b 16 17 b9 d1 f2 4f 1d 35 8f b3 b9 8f ba ef fa 67 6e 63 7a fa fd b5 5e 93 b9 b9 6f 62 c2 f7 3a 3e 49 e3 a6 b1 f6 77 31 f7 5d ff 00 4c ed cc 6f 5f 5f b6 ab d2 77 37 2d ec 58 5e e7 47 c9 3c 74 d6 3e ce e6 3e eb bf e9 9d b9 8d eb eb f6 d5 7a 4e e6 e5 bd 8b 0b dc e8 f9 27 8e 9a c7 d9 dc c7 dd 77 fd 33 b7 31 bd 7d 7e da af 49 dc dc b7 b1 61 7b 9d 1f 24 f1 d3 58 fb 3b 98 fb ae ff 00 a6 76 e6 37 af af db 55 e9 3b 9b 96 f6 2c 2f 73 a3 e4 9e 3a 6b 1f 67 73 1f 75 df f4 ce dc c6 f5 f5 fb 6a bd 27 73 72 de c5 85 ee 74 7c 93 c7 4d 63 ec ee 63 ee bb fe 99 db 98 de be bf 6d 57 a4 ee 6e 5b d8 b0 bd ce 8f 92 78 e9 ac 7d 9d cc 7d d7 7f d3 3b 73 1b d7 d7 ed aa f4 9d cd cb 7b 16 17 b9 d1 f2 4f 1d 35 8f b3 b9 8f ba ef fa 67 6e 63 7a fa fd b5 5e 93 b9 b9 6f 62 c2 Data Ascii: {O5gncz^ob:>Iw1]Lo__w7-X^G<t>>zN'w31}~Ia{$X;v7U;,/s:kgsuj'srt\|MccmWn[x}};s{O5gncz^ob
2024-05-08 20:07:20 UTC	1371	IN	Data Raw: 5d ff 00 4c ed cc 6f 5f 5f b6 ab d2 77 37 2d ec 58 5e e7 47 c9 3c 74 d6 3e ce e6 3e eb bf e9 9d b9 8d eb eb f6 d5 7a 4e e6 e5 bd 8b 0b dc e8 f9 27 8e 9a c7 d9 dc c7 dd 77 fd 33 b7 31 bd 7d 7e da af 49 dc dc b7 b1 61 7b 9d 1f 24 f1 d3 58 fb 3b 98 fb ae ff 00 a6 76 e6 37 af af db 55 e9 3b 9b 96 f6 2c 2f 73 a3 e4 9e 3a 6b 1f 67 73 1f 75 df f4 ce dc c6 f5 f5 fb 6a bd 27 73 72 de c5 85 ee 74 7c 93 c7 4d 63 ec ee 63 ee bb fe 99 db 98 de be bf 6d 57 a4 ee 6e 5b d8 b0 bd ce 8f 92 78 e9 ac 7d 9d cc 7d d7 7f d3 3b 73 1b d7 d7 ed aa f4 9d cd cb 7b 16 17 b9 d1 f2 4f 1d 35 8f b3 b9 8f ba ef fa 67 6e 63 7a fa fd b5 5e 93 b9 b9 6f 62 c2 f7 3a 3e 49 e3 a6 b1 f6 77 31 f7 5d ff 00 4c ed cc 6f 5f 5f b6 ab d2 77 37 2d ec 58 5e e7 47 c9 3c 74 d6 3e ce e6 3e eb bf e9 9d b9 8d Data Ascii: ]Lo__w7-X^G<t>>zN'w31}~Ia{$X;v7U;,/s:kgsuj'srt\|MccmWn[x}};s{O5gncz^ob:>Iw1]Lo__w7-X^G<t>>
2024-05-08 20:07:20 UTC	1371	IN	Data Raw: dc e8 f9 27 8e 9a c7 d9 dc c7 dd 77 fd 33 b7 31 bd 7d 7e da af 49 dc dc b7 b1 61 7b 9d 1f 24 f1 d3 58 fb 3b 98 fb ae ff 00 a6 76 e6 37 af af db 55 e9 3b 9b 96 f6 2c 2f 73 a3 e4 9e 3a 6b 1f 67 73 1f 75 df f4 ce dc c6 f5 f5 fb 6a bd 27 73 72 de c5 85 ee 74 7c 93 c7 4d 63 ec ee 63 ee bb fe 99 db 98 de be bf 6d 57 a4 ee 6e 5b d8 b0 bd ce 8f 92 78 e9 ac 7d 9d cc 7d d7 7f d3 3b 73 1b d7 d7 ed aa f4 9d cd cb 7b 16 17 b9 d1 f2 4f 1d 35 8f b3 b9 8f ba ef fa 67 6e 63 7a fa fd b5 5e 93 b9 b9 6f 62 c2 f7 3a 3e 49 e3 a6 b1 f6 77 31 f7 5d ff 00 4c ed cc 6f 5f 5f b6 ab d2 77 37 2d ec 58 5e e7 47 c9 3c 74 d6 3e ce e6 3e eb bf e9 9d b9 8d eb eb f6 d5 7a 4e e6 e5 bd 8b 0b dc e8 f9 27 8e 9a c7 d9 dc c7 dd 77 fd 33 b7 31 bd 7d 7e da af 49 dc dc b7 b1 61 7b 9d 1f 24 f1 d3 58 Data Ascii: 'w31}~Ia{$X;v7U;,/s:kgsuj'srt\|MccmWn[x}};s{O5gncz^ob:>Iw1]Lo__w7-X^G<t>>zN'w31}~Ia{$X
2024-05-08 20:07:20 UTC	1371	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f ff d0 80 9d ad 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f ff d1 80 9d ad 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f Data Ascii: ?@?@?

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:21 UTC	715	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ=="
2024-05-08 20:07:21 UTC	343	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 08 May 2024 20:07:21 GMT Via: 1.1 varnish ETag: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ==" Age: 1375 X-Served-By: cache-bfi-kbfi7400036-BFI X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1715198842.544637,VS0,VE2 Vary: Origin,Accept-Encoding,Priority

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:21 UTC	715	OUT	GET /content/storage/id/urn:aaid:sc:VA6C2:3714f03d-8378-499c-988f-2b11077fcd8a/:rendition;page=0;size=1200;type=image%2Fjpeg?access_token=1715242038_urn%3Aaaid%3Asc%3AVA6C2%3A3714f03d-8378-499c-988f-2b11077fcd8a%3Bpublic_d535363e2ccf8aaf980bed926867af61c96a10b4&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ=="
2024-05-08 20:07:22 UTC	343	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 08 May 2024 20:07:22 GMT Via: 1.1 varnish ETag: "NTIxNTM2YTUtMWNkMS00MjJmLWIzNDItYTZkYmNjN2Y3Yjg2L2pwZy8xMjAwLzAvdHJ1ZQ==" Age: 1376 X-Served-By: cache-bfi-kbfi7400033-BFI X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1715198842.226790,VS0,VE2 Vary: Origin,Accept-Encoding,Priority

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Chrome Cache Entry: 369

Chrome Cache Entry: 370

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:24 UTC	563	OUT	GET /utilnav/9.2/utilitynav.css HTTP/1.1 Host: prod.adobeccstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 20:07:25 UTC	599	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 170927 Connection: close Last-Modified: Tue, 10 May 2022 06:05:18 GMT x-amz-storage-class: INTELLIGENT_TIERING Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 08 May 2024 12:16:44 GMT Cache-Control: max-age=43200 ETag: "f1502fac113b15d77b859c2478d9b136" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 703fa1c0d963ed47d6bfdf23501a3408.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA900-P2 X-Amz-Cf-Id: 9KNLMh5uCAEyQUp7G9VGMnT2zjQJ4rQYu_4f4glOiKPpAOkxEhl9UA== Age: 28242 Cross-Origin-Resource-Policy: cross-origin
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 20 6f Data Ascii: /* * Copyright 2018 Adobe Systems Incorporated. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * o
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 64 69 73 70 6c 61 79 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 64 69 73 70 6c 61 79 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 20 65 6d Data Ascii: um-Heading1--display.spectrum-Heading1--quiet{font-size:45px;font-weight:300;line-height:1.3;font-style:normal;letter-spacing:0;text-transform:none;margin-bottom:8px;margin-top:8px}.utilnav-container .spectrum-Heading1--display.spectrum-Heading1--quiet em
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 6d 2d 42 6f 64 79 33 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 33 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 2d 2d 73 65 63 6f 6e 64 61 72 79 2c 2e 75 74 69 6c 6e 61 76 2d Data Ascii: m-Body3 strong,.utilnav-container .spectrum:lang(zh) .spectrum-Body3 strong{font-size:16px;font-weight:900;line-height:1.7;font-style:normal;letter-spacing:.05em;text-transform:none}.utilnav-container .spectrum:lang(ja) .spectrum-Body--secondary,.utilnav-
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 2d 2d 73 74 72 6f 6e 67 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 Data Ascii: ding2--strong strong,.utilnav-container .spectrum:lang(ko) .spectrum-Heading2--strong strong,.utilnav-container .spectrum:lang(zh) .spectrum-Heading2--strong strong{font-size:25px;font-weight:900;line-height:1.5;font-style:normal;letter-spacing:.05em;text
2024-05-08 20:07:25 UTC	8468	IN	Data Raw: 29 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 7b 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 Data Ascii: ) .spectrum-Detail,.utilnav-container .spectrum--light .spectrum:lang(ko) .spectrum-Detail,.utilnav-container .spectrum--light .spectrum:lang(zh) .spectrum-Detail{color:#4b4b4b}.utilnav-container .spectrum--light .spectrum:lang(ja) .spectrum-Heading1--qui
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 2d 42 6f 64 79 35 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 35 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 35 7b 63 6f 6c 6f 72 3a 23 63 64 63 64 63 64 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 Data Ascii: -Body5,.utilnav-container .spectrum--dark .spectrum:lang(ko) .spectrum-Body5,.utilnav-container .spectrum--dark .spectrum:lang(zh) .spectrum-Body5{color:#cdcdcd}.utilnav-container .spectrum--dark .spectrum:lang(ja) .spectrum-Heading1,.utilnav-container .s
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 64 6f 62 65 2d 63 6c 65 61 6e 2d 75 78 2c 61 64 6f 62 65 2d 63 6c 65 61 6e 2c 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 27 53 65 67 6f 65 20 55 49 27 2c 52 6f 62 6f 74 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e Data Ascii: coration:none;font-family:adobe-clean-ux,adobe-clean,'Source Sans Pro',-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;line-height:1.3;cursor:pointer}.utilnav-container .spectrum-ActionButton:focus,.utilnav-container .spectrum-Button:focus,.
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2e 69 73 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 61 65 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 61 63 61 63 61 3b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2e 69 73 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 49 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 41 63 74 69 6f 6e Data Ascii: ctrum-ActionButton.is-selected:hover{background-color:#eaeaea;border-color:#cacaca;color:#2c2c2c}.utilnav-container .spectrum--light .spectrum-ActionButton.is-selected:hover .spectrum-Icon{color:#2c2c2c}.utilnav-container .spectrum--light .spectrum-Action
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 77 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 6f 76 65 72 42 61 63 6b 67 72 6f 75 6e 64 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 71 75 69 65 74 2e 69 73 2d 64 69 73 61 62 6c 65 64 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 6f 76 65 72 42 61 63 6b 67 72 6f 75 6e 64 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2d 2d 71 75 69 65 74 3a 64 69 73 61 62 6c 65 64 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d Data Ascii: w:none}.utilnav-container .spectrum--dark .spectrum-Button--overBackground.spectrum-Button--quiet.is-disabled,.utilnav-container .spectrum--dark .spectrum-Button--overBackground.spectrum-Button--quiet:disabled,.utilnav-container .spectrum--dark .spectrum-
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 6d 2d 44 69 61 6c 6f 67 2e 72 65 61 63 74 2d 73 70 65 63 74 72 75 6d 2d 44 69 61 6c 6f 67 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 73 70 65 63 74 72 75 6d 2d 44 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 50 6f 70 6f 76 65 72 2e 72 65 61 63 74 2d 73 70 65 63 74 72 75 6d 2d 50 6f 70 6f 76 65 72 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 50 6f 70 6f 76 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 44 69 61 6c 6f 67 2d 63 6f 6e Data Ascii: m-Dialog.react-spectrum-Dialog{visibility:visible}.utilnav-container .react-spectrum-Dialog-buttons{white-space:nowrap}.utilnav-container .spectrum-Popover.react-spectrum-Popover{visibility:visible}.utilnav-container .spectrum-Popover .spectrum-Dialog-con

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:24 UTC	548	OUT	GET /utilnav/9.2/utilitynav.js HTTP/1.1 Host: prod.adobeccstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 20:07:25 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 522263 Connection: close Last-Modified: Tue, 10 May 2022 06:05:18 GMT x-amz-storage-class: INTELLIGENT_TIERING Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 08 May 2024 12:48:03 GMT Cache-Control: max-age=43200 ETag: "4dd04062ef449c113de9536573f87393" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 703fa1c0d963ed47d6bfdf23501a3408.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA900-P2 X-Amz-Cf-Id: V_drBelE5Ho32xOSpwDLpOoPIhzaSJNfikILBKXxTasiQCgBZR9EsQ== Age: 26363 Cross-Origin-Resource-Policy: cross-origin
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 20 6f Data Ascii: /* * Copyright 2018 Adobe Systems Incorporated. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * o
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 2e 61 70 70 6c 79 28 43 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6c 61 73 74 49 6e 64 65 78 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 75 65 2e 61 70 70 6c 79 28 43 65 28 74 68 69 73 29 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 65 28 43 65 28 74 68 69 73 29 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 29 7d 2c 72 65 64 75 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: e,arguments.length>1?arguments[1]:void 0)},join:function(e){return ce.apply(Ce(this),arguments)},lastIndexOf:function(e){return ue.apply(Ce(this),arguments)},map:function(e){return Se(Ce(this),e,arguments.length>1?arguments[1]:void 0)},reduce:function(e){
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 28 65 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 40 61 75 74 6f 62 69 6e 64 20 64 65 63 6f 72 61 74 6f 72 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 61 70 70 6c 69 65 64 20 74 6f 20 6d 65 74 68 6f 64 73 20 6e 6f 74 3a 20 22 2b 28 76 6f 69 64 20 30 Data Ascii: urn e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":void 0===e?"undefined":r(e)};function i(e,t,n){var r=n.value;if("function"!=typeof r)throw new Error("@autobind decorator can only be applied to methods not: "+(void 0
2024-05-08 20:07:25 UTC	14808	IN	Data Raw: 6e 75 6c 6c 22 29 3b 72 65 74 75 72 6e 20 61 7d 69 66 28 22 52 65 67 45 78 70 22 21 3d 3d 6f 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 67 45 78 70 23 65 78 65 63 20 63 61 6c 6c 65 64 20 6f 6e 20 69 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 22 29 3b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 32 33 35 29 3b 76 61 72 20 72 3d 6e 28 33 34 29 2c 6f 3d 6e 28 31 38 29 2c 69 3d 6e 28 39 29 2c 61 3d 6e 28 34 35 29 2c 75 3d 6e 28 38 29 2c 6c 3d 6e 28 31 30 36 29 2c 73 3d 75 28 22 73 70 65 63 69 65 73 22 29 2c 63 3d 21 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 2e 2f 3b 72 65 74 75 Data Ascii: null");return a}if("RegExp"!==o(e))throw new TypeError("RegExp#exec called on incompatible receiver");return i.call(e,t)}},function(e,t,n){"use strict";n(235);var r=n(34),o=n(18),i=n(9),a=n(45),u=n(8),l=n(106),s=u("species"),c=!i(function(){var e=/./;retu
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 65 77 20 6f 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: ew o},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 65 28 74 2c 72 29 2c 74 7d 7d 28 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 28 6e 28 31 29 29 3b 6e 28 33 32 30 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: nfigurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}return function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),i=function(e){return e&&e.__esModule?e:{default:e}}(n(1));n(320);var a=function(e){function t(){return function(
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 7d 72 65 74 75 72 6e 20 72 28 65 2c 5b 7b 6b 65 79 3a 22 73 65 74 41 6e 61 6c 79 74 69 63 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 3d 65 7d 7d 2c 7b 6b 65 79 3a 22 68 61 73 55 73 65 72 43 6f 6e 73 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 55 73 65 72 43 6f 6e 73 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 Data Ascii: !function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e)}return r(e,[{key:"setAnalytics",value:function(e){this.analytics=e}},{key:"hasUserConsent",value:function(){return o}},{key:"setUserConsent",value:functi
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 72 20 72 3d 6e 28 31 32 29 2c 6f 3d 6e 28 33 30 29 2c 69 3d 6e 28 35 38 29 2c 61 3d 6e 28 31 39 29 2c 75 3d 6e 28 30 29 2c 6c 3d 6e 28 34 31 29 2c 73 3d 6e 28 34 29 2c 63 3d 6e 28 33 29 3b 75 28 75 2e 53 2c 22 52 65 66 6c 65 63 74 22 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 75 29 7b 76 61 72 20 66 2c 64 2c 70 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 34 3f 74 3a 61 72 67 75 6d 65 6e 74 73 5b 33 5d 2c 68 3d 6f 2e 66 28 73 28 74 29 2c 6e 29 3b 69 66 28 21 68 29 7b 69 66 28 63 28 64 3d 69 28 74 29 29 29 72 65 74 75 72 6e 20 65 28 64 2c 6e 2c 75 2c 70 29 3b 68 3d 6c 28 30 29 7d 69 66 28 61 28 68 2c 22 76 61 6c 75 65 22 29 29 7b 69 66 28 21 31 3d 3d 3d 68 2e 77 72 69 74 61 62 6c 65 7c 7c 21 63 28 70 29 29 72 65 74 75 72 6e 21 Data Ascii: r r=n(12),o=n(30),i=n(58),a=n(19),u=n(0),l=n(41),s=n(4),c=n(3);u(u.S,"Reflect",{set:function e(t,n,u){var f,d,p=arguments.length<4?t:arguments[3],h=o.f(s(t),n);if(!h){if(c(d=i(t)))return e(d,n,u,p);h=l(0)}if(a(h,"value")){if(!1===h.writable\|\|!c(p))return!
2024-05-08 20:07:25 UTC	437	IN	Data Raw: 5b 32 5d 3a 76 6f 69 64 20 30 2c 32 29 29 2c 76 6f 69 64 20 30 3d 3d 67 7c 7c 70 3d 3d 41 72 72 61 79 26 26 75 28 67 29 29 66 6f 72 28 6e 3d 6e 65 77 20 70 28 74 3d 6c 28 64 2e 6c 65 6e 67 74 68 29 29 3b 74 3e 79 3b 79 2b 2b 29 73 28 6e 2c 79 2c 6d 3f 76 28 64 5b 79 5d 2c 79 29 3a 64 5b 79 5d 29 3b 65 6c 73 65 20 66 6f 72 28 66 3d 67 2e 63 61 6c 6c 28 64 29 2c 6e 3d 6e 65 77 20 70 3b 21 28 6f 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 79 2b 2b 29 73 28 6e 2c 79 2c 6d 3f 61 28 66 2c 76 2c 5b 6f 2e 76 61 6c 75 65 2c 79 5d 2c 21 30 29 3a 6f 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3d 79 2c 6e 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 30 29 2c Data Ascii: [2]:void 0,2)),void 0==g\|\|p==Array&&u(g))for(n=new p(t=l(d.length));t>y;y++)s(n,y,m?v(d[y],y):d[y]);else for(f=g.call(d),n=new p;!(o=f.next()).done;y++)s(n,y,m?a(f,v,[o.value,y],!0):o.value);return n.length=y,n}})},function(e,t,n){"use strict";var r=n(0),
2024-05-08 20:07:25 UTC	16384	IN	Data Raw: 79 29 28 74 29 3b 74 3e 65 3b 29 6f 28 6e 2c 65 2c 61 72 67 75 6d 65 6e 74 73 5b 65 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3d 74 2c 6e 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 30 29 3b 72 28 72 2e 50 2c 22 41 72 72 61 79 22 2c 7b 63 6f 70 79 57 69 74 68 69 6e 3a 6e 28 31 32 35 29 7d 29 2c 6e 28 35 39 29 28 22 63 6f 70 79 57 69 74 68 69 6e 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 30 29 2c 6f 3d 6e 28 37 30 29 28 35 29 2c 69 3d 21 30 3b 22 66 69 6e 64 22 69 6e 5b 5d 26 26 41 72 72 61 79 28 31 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 21 31 7d 29 2c 72 28 Data Ascii: y)(t);t>e;)o(n,e,arguments[e++]);return n.length=t,n}})},function(e,t,n){"use strict";var r=n(0);r(r.P,"Array",{copyWithin:n(125)}),n(59)("copyWithin")},function(e,t,n){"use strict";var r=n(0),o=n(70)(5),i=!0;"find"in[]&&Array(1).find(function(){i=!1}),r(

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:07:40 UTC	546	OUT	GET /6gNXXegDB6rtHARrNKRF8w.js HTTP/1.1 Host: widget.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 20:07:40 UTC	1036	IN	HTTP/1.1 200 OK Date: Wed, 08 May 2024 20:07:40 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * etag: W/"f37ebf328ff79869aa1b7a348360f693" Cache-Control: public, max-age=14400 content-security-policy: x-request-id: 7b2ad579f6299f9015a3d1cb4d6887e1 CF-Cache-Status: HIT Age: 201661 Expires: Thu, 09 May 2024 00:07:40 GMT Set-Cookie: __cf_bm=PE0gKkNkJUc8m3HgRubbbiQWjBSoo6sdrvaftg_EGU8-1715198860-1.0.1.1-frL_UEoBHHQfI.h9sveaQbbnLII9ZnqpO6S3pJqc2W4JOBmr049qJAhEC6wswmcym1llyd5Y0YMz4YsG2iNdhw; path=/; expires=Wed, 08-May-24 20:37:40 GMT; domain=.uservoice.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 880c13d02cff769c-SEA
2024-05-08 20:07:40 UTC	333	IN	Data Raw: 37 62 39 35 0d 0a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 20 3d 20 7b 65 76 65 6e 74 73 3a 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 7c 7c 5b 5d 2c 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 77 69 6e 64 6f 77 2e 55 73 65 72 56 6f 69 63 65 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 78 29 7d 2c 61 63 63 6f 75 6e 74 3a 7b 22 61 63 74 69 76 65 5f 77 69 64 67 65 74 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 22 3a 22 66 6f 6f 74 65 72 5f 70 6f 77 65 72 65 64 62 79 22 2c 22 6e 61 6d 65 22 3a 22 41 64 6f 62 65 22 2c 22 77 68 69 74 65 5f 6c 61 62 65 6c 65 64 22 3a 66 61 6c 73 65 2c 22 77 69 64 67 65 74 32 5f 64 6f 6d 61 69 6e 22 3a 22 61 63 72 6f 62 61 74 2e 75 73 65 72 76 6f 69 63 65 2e 63 6f 6d 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 73 73 6c Data Ascii: 7b95window.UserVoice = {events:window.UserVoice\|\|[],push:function(x){window.UserVoice.events.push(x)},account:{"active_widgets":[],"campaign":"footer_poweredby","name":"Adobe","white_labeled":false,"widget2_domain":"acrobat.uservoice.com","subdomain_ssl
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 73 75 62 64 6f 6d 61 69 6e 5f 6b 65 79 22 3a 22 61 63 72 6f 62 61 74 22 2c 22 73 75 62 64 6f 6d 61 69 6e 5f 69 64 22 3a 34 39 36 30 31 35 2c 22 63 6c 69 65 6e 74 5f 6b 65 79 22 3a 22 36 67 4e 58 58 65 67 44 42 36 72 74 48 41 52 72 4e 4b 52 46 38 77 22 2c 22 63 6c 69 65 6e 74 5f 6f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 73 61 74 69 73 66 61 63 74 69 6f 6e 5f 61 75 74 6f 70 72 6f 6d 70 74 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 4c 6f 61 64 69 6e 67 22 3a 22 4c 6f 61 64 69 6e 67 22 2c 22 4f 70 65 6e 43 6f 6e 74 61 63 74 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 43 6f 6e 74 61 63 74 20 57 69 64 67 65 74 22 2c 22 4f 70 65 6e 46 65 65 64 62 61 63 6b 57 69 64 67 65 74 22 3a 22 4f 70 65 6e 20 46 65 65 64 62 61 63 Data Ascii: subdomain_key":"acrobat","subdomain_id":496015,"client_key":"6gNXXegDB6rtHARrNKRF8w","client_options":null,"satisfaction_autoprompt_enabled":false,"messages":{"Loading":"Loading","OpenContactWidget":"Open Contact Widget","OpenFeedbackWidget":"Open Feedbac
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 77 69 64 67 65 74 32 2f 63 6c 6f 73 65 2d 38 38 38 37 37 32 30 38 62 36 30 34 63 32 37 35 61 64 63 31 37 65 61 63 32 37 35 31 33 32 33 30 64 36 38 63 63 30 32 32 32 65 33 61 34 63 62 31 34 37 62 62 63 30 66 65 62 61 35 64 32 36 37 63 2e 70 6e 67 22 2c 22 70 62 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 77 69 64 67 65 74 32 2f 55 73 65 72 56 6f 69 63 65 2d 6c 6f 67 6f 2d 6c 69 67 68 74 2d 63 34 30 61 66 32 66 30 35 63 35 66 31 64 66 65 30 36 64 65 31 61 38 33 38 37 35 37 33 30 35 35 33 64 39 62 36 63 38 63 36 36 33 66 39 38 30 65 37 30 30 65 31 63 35 61 31 66 31 66 61 63 35 36 2e 73 76 67 22 2c 22 73 63 72 65 65 6e 73 68 6f 74 22 3a 22 2f 70 6b 67 2f 63 6c 69 65 6e 74 73 2f 6f 6d 6e 69 62 6f 78 2f 73 63 Data Ascii: ":"/pkg/clients/widget2/close-88877208b604c275adc17eac27513230d68cc0222e3a4cb147bbc0feba5d267c.png","pb":"/pkg/clients/widget2/UserVoice-logo-light-c40af2f05c5f1dfe06de1a83875730553d9b6c8c663f980e700e1c5a1f1fac56.svg","screenshot":"/pkg/clients/omnibox/sc
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 61 6d 65 22 2c 22 76 69 65 77 70 6f 72 74 22 29 2c 6d 65 74 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 2c 74 29 2c 65 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6d 65 74 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 69 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2c 6f 3d 30 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 2f 76 69 65 77 70 6f 72 74 2f 69 2e 74 65 73 74 28 69 5b 6f 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 29 29 7b 74 3d 69 5b 6f 5d 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 69 66 28 21 44 29 7b 76 61 72 20 74 3d 6c 28 29 2c 65 3d 2f 75 73 65 72 Data Ascii: ame","viewport"),meta.setAttribute("content",t),e.head.appendChild(meta)}function l(){for(var t,i=e.getElementsByTagName("meta"),o=0;o<i.length;o++)if(/viewport/i.test(i[o].getAttribute("name"))){t=i[o];break}return t}function c(){if(!D){var t=l(),e=/user
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 3d 74 3a 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 74 29 29 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 50 7c 7c 28 6d 28 22 23 75 76 54 61 62 2c 2e 75 76 2d 74 72 61 79 2c 2e 75 76 2d 69 63 6f 6e 2c 2e 75 76 2d 70 6f 70 6f 76 65 72 2c 2e 75 76 2d 62 75 62 62 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 22 2c 22 70 72 69 6e 74 22 29 2c 50 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 52 7c 7c 28 6d 28 22 2e 75 76 2d 69 63 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 22 29 2c 52 3d 21 30 29 7d 66 75 6e 63 74 69 Data Ascii: =t:o.appendChild(e.createTextNode(t)),e.getElementsByTagName("head")[0].appendChild(o)}function v(){P\|\|(m("#uvTab,.uv-tray,.uv-icon,.uv-popover,.uv-bubble{display:none!important}","print"),P=!0)}function b(){R\|\|(m(".uv-icon:hover{opacity:1}"),R=!0)}functi
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 3d 6e 2e 73 75 62 73 74 72 28 6c 2b 61 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6f 74 5b 74 5d 5b 65 5d 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 4f 2e 66 69 72 65 64 7c 7c 28 4f 2e 66 69 72 65 64 3d 21 30 2c 55 73 65 72 56 6f 69 63 65 2e 61 63 63 6f 75 6e 74 2e 64 65 61 63 74 69 76 61 74 65 64 7c 7c 28 65 74 2e 74 72 61 63 6b 65 72 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 56 69 65 77 28 29 2c 65 74 2e 74 72 61 63 6b 65 72 2e 72 65 61 64 79 28 29 29 2c 65 74 2e 73 63 61 6e 28 29 29 7d 76 61 72 20 54 3d 7b 7d 3b 54 2e 73 61 6e 69 74 69 7a 65 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: =n.substr(l+a.length)}return ot[t][e]=!0}function O(){O.fired\|\|(O.fired=!0,UserVoice.account.deactivated\|\|(et.tracker.trackExternalView(),et.tracker.ready()),et.scan())}var T={};T.sanitizeValue=function(t,e){function i(t){if("[object Date]"===Object.proto
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 29 2c 6e 3d 65 3e 3e 32 2c 73 3d 28 33 26 65 29 3c 3c 34 7c 69 3e 3e 34 2c 72 3d 28 31 35 26 69 29 3c 3c 32 7c 6f 3e 3e 36 2c 61 3d 36 33 26 6f 2c 69 73 4e 61 4e 28 69 29 3f 72 3d 61 3d 36 34 3a 69 73 4e 61 4e 28 6f 29 26 26 28 61 3d 36 34 29 2c 63 3d 63 2b 6c 2e 63 68 61 72 41 74 28 6e 29 2b 6c 2e 63 68 61 72 41 74 28 73 29 2b 6c 2e 63 68 61 72 41 74 28 72 29 2b 6c 2e 63 68 61 72 41 74 28 61 29 3b 72 65 74 75 72 6e 20 63 7d 2c 54 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 69 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 3b 69 3e 6f 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 5b 6f 5d Data Ascii: ),n=e>>2,s=(3&e)<<4\|i>>4,r=(15&i)<<2\|o>>6,a=63&o,isNaN(i)?r=a=64:isNaN(o)&&(a=64),c=c+l.charAt(n)+l.charAt(s)+l.charAt(r)+l.charAt(a);return c},T.extend=function(t){for(var e=Array.prototype.slice.call(arguments,1),i=e.length,o=0;i>o;o++)for(var n in e[o]
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 67 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 63 6f 6e 73 6f 6c 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 31 30 3e 74 3f 22 30 22 2b 74 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 20 61 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 61 2e 74 65 73 74 28 74 29 3f 27 22 27 2b 74 2e 72 65 70 6c 61 63 65 28 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6c 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 74 2e 63 68 61 Data Ascii: g&&"undefined"!=typeof console.log.apply&&console.log.apply(console,arguments)},function(){function e(t){return 10>t?"0"+t:t}function i(t){return a.lastIndex=0,a.test(t)?'"'+t.replace(a,function(t){var e=l[t];return"string"==typeof e?e:"\\u"+("0000"+t.cha
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 69 73 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 4d 69 6e 75 74 65 73 28 29 29 2b 22 3a 22 2b 65 28 74 68 69 73 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 28 29 29 2b 22 5a 22 3a 6e 75 6c 6c 7d 2c 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 4e 75 6d 62 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 7d 29 3b 76 61 72 20 6e 2c 73 2c 72 2c 61 3d 2f 5b 5c 5c 5c 22 5c 78 30 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 78 39 66 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 Data Ascii: is.getUTCHours())+":"+e(this.getUTCMinutes())+":"+e(this.getUTCSeconds())+"Z":null},String.prototype.toJSON=Number.prototype.toJSON=Boolean.prototype.toJSON=function(){return this.valueOf()});var n,s,r,a=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u
2024-05-08 20:07:40 UTC	1369	IN	Data Raw: 2e 73 74 6f 72 65 3d 6e 65 77 20 72 2c 74 68 69 73 2e 72 65 63 75 72 72 65 6e 74 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 28 22 72 22 29 2c 74 68 69 73 2e 73 74 6f 72 65 2e 73 65 74 28 22 72 22 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 65 3d 22 78 22 3b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3b 74 72 79 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 69 6e 20 74 26 26 74 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2c 74 68 69 73 2e 73 65 74 28 65 2c 65 29 2c 74 68 69 73 2e 67 65 74 28 65 29 21 3d 3d 65 3f 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 6c 6c 3a 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 7d 63 61 74 63 68 28 69 29 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 6e 75 Data Ascii: .store=new r,this.recurrent=this.store.get("r"),this.store.set("r",!0)}function r(){var e="x";this.storage=null;try{this.storage="sessionStorage"in t&&t.sessionStorage,this.set(e,e),this.get(e)!==e?this.storage=null:this.remove(e)}catch(i){this.storage=nu

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:08:00 UTC	935	OUT	GET /t2/496015/web/track.js?_=1715198878489&s=0&c=__uvSessionData0&d=eyJlIjp7InUiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOjM3MTRmMDNkLTgzNzgtNDk5Yy05ODhmLTJiMTEwNzdmY2Q4YT92aWV3ZXIlMjFtZWdhVmVyYj1ncm91cC1kaXNjb3ZlciIsInIiOiIifX0%3D HTTP/1.1 Host: by2.uservoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=PE0gKkNkJUc8m3HgRubbbiQWjBSoo6sdrvaftg_EGU8-1715198860-1.0.1.1-frL_UEoBHHQfI.h9sveaQbbnLII9ZnqpO6S3pJqc2W4JOBmr049qJAhEC6wswmcym1llyd5Y0YMz4YsG2iNdhw
2024-05-08 20:08:00 UTC	614	IN	HTTP/1.1 200 OK Date: Wed, 08 May 2024 20:08:00 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 66 Connection: close Cache-Control: no-cache Cache-Control: private set-cookie: uvts=d9d38023-8280-4b2e-5095-98b5a2ac4e6f; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None set-cookie: uvts=d9d38023-8280-4b2e-5095-98b5a2ac4e6f; Path=/; Domain=by2.uservoice.com; Secure; SameSite=None; Partitioned strict-transport-security: max-age=31536000; includeSubDomains expires: Wed, 08 May 2024 20:07:59 GMT CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 880c144a8dd0751c-SEA
2024-05-08 20:08:00 UTC	66	IN	Data Raw: 5f 5f 75 76 53 65 73 73 69 6f 6e 44 61 74 61 30 28 7b 22 75 76 74 73 22 3a 22 64 39 64 33 38 30 32 33 2d 38 32 38 30 2d 34 62 32 65 2d 35 30 39 35 2d 39 38 62 35 61 32 61 63 34 65 36 66 22 7d 29 3b Data Ascii: __uvSessionData0({"uvts":"d9d38023-8280-4b2e-5095-98b5a2ac4e6f"});

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:08:15 UTC	533	OUT	GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1 Host: use1.fptls.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://commerce.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 20:08:16 UTC	512	IN	HTTP/1.1 200 OK Date: Wed, 08 May 2024 20:08:16 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex
2024-05-08 20:08:16 UTC	96	IN	Data Raw: 47 59 73 5a 63 32 4a 67 58 57 66 6f 36 44 77 42 70 6d 66 4e 65 72 33 78 63 70 4e 51 74 50 30 58 73 73 4e 72 73 50 38 79 58 58 56 68 6b 57 62 44 76 6f 35 59 45 59 6f 51 75 6e 4c 49 64 39 41 32 46 74 6c 36 6c 43 38 66 36 4a 2f 77 30 51 4c 33 4f 42 71 6f 35 47 6c 6e 5a 35 64 6e 42 67 3d 3d Data Ascii: GYsZc2JgXWfo6DwBpmfNer3xcpNQtP0XssNrsP8yXXVhkWbDvo5YEYoQunLId9A2Ftl6lC8f6J/w0QL3OBqo5GlnZ5dnBg==

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:08:16 UTC	361	OUT	GET /?q=dSMHmEUM9QSIKQm9iy0W HTTP/1.1 Host: use1.fptls.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 20:08:17 UTC	468	IN	HTTP/1.1 200 OK Date: Wed, 08 May 2024 20:08:17 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 96 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000, immutable, private Content-Security-Policy: default-src 'none'; frame-ancestors 'none' Referrer-Policy: no-referrer Strict-Transport-Security: max-age=63072000 Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Robots-Tag: noindex
2024-05-08 20:08:17 UTC	96	IN	Data Raw: 38 63 53 42 55 6a 4e 46 31 66 75 42 70 6d 2b 65 39 45 33 52 5a 4a 75 42 35 65 44 31 71 79 75 6d 45 77 4c 61 51 54 61 59 77 6c 7a 76 42 50 64 48 53 31 45 6b 4b 39 72 36 6e 76 6e 35 56 2b 59 73 35 68 70 4e 6a 59 45 69 6b 75 54 45 57 4d 6f 68 6d 72 45 44 35 70 33 2f 56 48 41 6b 75 72 77 3d Data Ascii: 8cSBUjNF1fuBpm+e9E3RZJuB5eD1qyumEwLaQTaYwlzvBPdHS1EkK9r6nvn5V+Ys5hpNjYEikuTEWMohmrED5p3/VHAkurw=

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:08:26 UTC	3604	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 20:08:27 UTC	958	IN	HTTP/1.1 302 Found Date: Wed, 08 May 2024 20:08:27 GMT Content-Length: 0 Connection: close X-TID: sfetNgFjS5c= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997 DCS: dcs-prod-usw2-1-v056-0a1747cc4.edge-usw2.demdex.com 0 ms set-cookie: demdex=71675608569673998663941792589102811371; Max-Age=15552000; Expires=Mon, 04 Nov 2024 20:08:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:08:27 UTC	3662	OUT	GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1715198905997 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=71675608569673998663941792589102811371
2024-05-08 20:08:27 UTC	829	IN	HTTP/1.1 200 OK Date: Wed, 08 May 2024 20:08:27 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4280 Connection: close X-TID: USlOAXPXTPU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://auth.services.adobe.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-1-v056-0ab501ee7.edge-usw2.demdex.com 6 ms set-cookie: demdex=71675608569673998663941792589102811371; Max-Age=15552000; Expires=Mon, 04 Nov 2024 20:08:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-05-08 20:08:27 UTC	4280	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 31 34 37 33 39 32 33 39 31 31 37 32 36 36 38 37 32 34 33 39 36 32 32 39 35 30 39 31 36 33 33 37 31 36 33 32 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 36 30 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 69 64 73 79 6e 63 2e 72 Data Ascii: {"d_mid":"71473923911726687243962295091633716325","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"60","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//idsync.r

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:08:28 UTC	4053	OUT	GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=9E1005A551ED61CA0A490D45%40AdobeOrg&mid=71473923911726687243962295091633716325&ts=1715198907572 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YNYXRWTTFPP5EDEKFAQVYHAADQ======; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C71473923911726687243962295091633716325%7CMCAAMLH-1715803707%7C9%7CMCAAMB-1715803707%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715206107s%7CNONE%7CvVersion%7C5.4.0
2024-05-08 20:08:28 UTC	722	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Wed, 08 May 2024 20:08:28 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C71473923911726687243962295091633716325; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Fri, 08 May 2026 20:08:08 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-08 20:08:28 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 37 31 34 37 33 39 32 33 39 31 31 37 32 36 36 38 37 32 34 33 39 36 32 32 39 35 30 39 31 36 33 33 37 31 36 33 32 35 22 7d Data Ascii: {"mid":"71473923911726687243962295091633716325"}

Timestamp	Bytes transferred	Direction	Data
2024-05-08 20:08:28 UTC	4105	OUT	POST /b/ss/adbims,adbadobenonacdcprod,adbdcwebprod,adbadobeprototype/1/JS-2.22.4-LCS4/s47632546992862 HTTP/1.1 Host: sstats.adobe.com Connection: keep-alive Content-Length: 11142 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://auth.services.adobe.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://auth.services.adobe.com/en_US/index.html?callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2Fdc-prod-virgoweb%2FAdobeID%2Ftoken%3Fredirect_uri%3Dhttps%253A%252F%252Facrobat.adobe.com%252Flink%252Fhome%252F%2523old_hash%253D%2526from_ims%253Dtrue%253Fclient_id%253Ddc-prod-virgoweb%2526api%253Dauthorize%2526scope%253DAdobeID%252Copenid%252CDCAPI%252Cadditional_info.account_type%252Cadditional_info.optionalAgreements%252Cagreement_sign%252Cagreement_send%252Csign_library_write%252Csign_user_read%252Csign_user_write%252Cagreement_read%252Cagreement_write%252Cwidget_read%252Cwidget_write%252Cworkflow_read%252Cworkflow_write%252Csign_library_read%252Csign_user_login%252Csao.ACOM_ESIGN_TRIAL%252Cee.dcweb%252Ctk_platform%252Ctk_platform_sync%252Cab.manage%252Cadditional_info.incomplete%252Cadditional_info.creation_source%252Cadditional_info.roles%252Cpps.read%252Cupdate_profile.first_name%252Cupdate_profile.last_name%26state%3D%257B%2522ac%2522%253A%2522adobe.com_acrobatweb_login%2522%252 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A; platformMetaData=%7B%22isAndroidAppInstalled%22%3Afalse%7D; fg=YNYXRWTTFPP5EDEKFAQVYHAADQ======; gpv=Account:IMS:GetStarted:OnLoad; AMCVS_9E1005A551ED61CA0A490D45%40AdobeOrg=1; s_ecid=MCMID%7C71473923911726687243962295091633716325; AMCV_9E1005A551ED61CA0A490D45%40AdobeOrg=1176715910%7CMCMID%7C71473923911726687243962295091633716325%7CMCAAMLH-1715803707%7C9%7CMCAAMB-1715803707%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1715206107s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.4.0; s_cc=true
2024-05-08 20:08:28 UTC	11142	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 38 25 32 46 34 25 32 46 32 30 32 34 25 32 30 32 32 25 33 41 38 25 33 41 32 38 25 32 30 33 25 32 30 2d 31 32 30 26 6d 69 64 3d 37 31 34 37 33 39 32 33 39 31 31 37 32 36 36 38 37 32 34 33 39 36 32 32 39 35 30 39 31 36 33 33 37 31 36 33 32 35 26 61 61 6d 6c 68 3d 39 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 66 70 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 50 65 72 69 6f 64 73 3d 32 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 75 74 68 2e 73 65 72 76 69 63 65 73 2e 61 64 6f 62 65 2e 63 6f 6d 25 32 46 65 6e 5f 55 53 25 32 46 69 6e 64 65 78 2e 68 74 6d 6c 25 33 46 63 61 6c 6c 62 61 63 6b 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 69 6d 73 2d 6e 61 31 2e 61 64 6f 62 65 6c Data Ascii: AQB=1&ndh=1&pf=1&t=8%2F4%2F2024%2022%3A8%3A28%203%20-120&mid=71473923911726687243962295091633716325&aamlh=9&ce=UTF-8&cdp=2&fpCookieDomainPeriods=2&g=https%3A%2F%2Fauth.services.adobe.com%2Fen_US%2Findex.html%3Fcallback%3Dhttps%253A%252F%252Fims-na1.adobel
2024-05-08 20:08:29 UTC	1292	IN	HTTP/1.1 200 OK access-control-allow-origin: https://auth.services.adobe.com access-control-allow-credentials: true date: Wed, 08 May 2024 20:08:29 GMT expires: Tue, 07 May 2024 20:08:29 GMT last-modified: Thu, 09 May 2024 20:08:29 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C71473923911726687243962295091633716325; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Fri, 08 May 2026 20:08:08 GMT; set-cookie: s_ecid=MCMID%7C71473923911726687243962295091633716325; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Fri, 08 May 2026 20:08:08 GMT; set-cookie: s_ecid=MCMID%7C71473923911726687243962295091633716325; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Fri, 08 May 2026 20:08:08 GMT; set-cookie: s_ecid=MCMID%7C71473923911726687243962295091633716325; Path=/; Domain=adobe.com; Max-Age=63072000; Expires=Fri, 08 May 2026 20:08:08 GMT; etag: 3683361610457382912-4618565096618247818 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-05-08 20:08:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;