Play interactive tour

Edit tour

Analysis Report https://spark.adobe.com/page/T6EbJMut5FyGq/

Overview

General Information

Sample URL:	https://spark.adobe.com/page/T6EbJMut5FyGq/
Analysis ID:	338147
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish_7

Phishing site detected (based on logo template match)

HTML body contains low number of good links

HTML title does not match URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 1112 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5980 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1112 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\index[1].htm	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

Phishing:

Yara detected HtmlPhish_7

Show sources

Source: Yara match	File source: 301389.2.links.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\index[1].htm, type: DROPPED

Phishing site detected (based on logo template match)

Show sources

Source: https://politicalface.org/rfp/index.php

Matcher: Template: microsoft matched

Source: https://politicalface.org/rfp/index.php	HTTP Parser: Number of links: 0
Source: https://politicalface.org/rfp/index.php	HTTP Parser: Number of links: 0

Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: Title: Proposal Document does not match URL
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: Title: Proposal Document does not match URL
Source: https://politicalface.org/rfp/index.php	HTTP Parser: Title: Microsoft Teams does not match URL
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: Title: Proposal Document does not match URL
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: Title: Proposal Document does not match URL
Source: https://politicalface.org/rfp/index.php	HTTP Parser: Title: Microsoft Teams does not match URL

Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="author".. found
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="author".. found
Source: https://politicalface.org/rfp/index.php	HTTP Parser: No <meta name="author".. found
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="author".. found
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="author".. found
Source: https://politicalface.org/rfp/index.php	HTTP Parser: No <meta name="author".. found

Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="copyright".. found
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="copyright".. found
Source: https://politicalface.org/rfp/index.php	HTTP Parser: No <meta name="copyright".. found
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="copyright".. found
Source: https://spark.adobe.com/page/T6EbJMut5FyGq/	HTTP Parser: No <meta name="copyright".. found
Source: https://politicalface.org/rfp/index.php	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Source: unknown	HTTPS traffic detected: 99.86.159.4:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.4:443 -> 192.168.2.3:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.113.221:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.113.221:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.250.201.182:443 -> 192.168.2.3:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.250.201.182:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.3:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.32.152.233:443 -> 192.168.2.3:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.32.152.233:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.90:443 -> 192.168.2.3:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.90:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.91:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.3:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.237.136.106:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.237.136.106:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.84:443 -> 192.168.2.3:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.84:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.210.132.160:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.210.132.160:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.51.251.137:443 -> 192.168.2.3:49813 version: TLS 1.2

Source: unsupported[1].htm0.2.dr	String found in binary or memory: <a href="https://www.facebook.com/AdobeSpark" target="_blank" data-analytics-context="footer" data-type="facebook" equals www.facebook.com (Facebook)
Source: about[1].htm.2.dr	String found in binary or memory: <div class="glb-nav-social-icons"><h3 class="drop-by-text">Drop by, say hi!</h3><a href="https://www.facebook.com/AdobeSpark" data-auto="glb-nav-social-facebook" data-context="global-nav" data-type="facebook" class="social-button glb-nav-social-icon glb-nav-fb" target="_blank"></a><a href="https://twitter.com/AdobeSpark" data-auto="glb-nav-social-twitter" data-context="global-nav" data-type="twitter" class="social-button glb-nav-social-icon glb-nav-tw" target="_blank"></a><a href="https://www.instagram.com/AdobeSpark" data-auto="glb-nav-social-instagram" data-context="global-nav" data-type="instagram" class="social-button glb-nav-social-icon glb-nav-in" target="_blank"></a></div> equals www.facebook.com (Facebook)
Source: about[1].htm.2.dr	String found in binary or memory: <div class="glb-nav-social-icons"><h3 class="drop-by-text">Drop by, say hi!</h3><a href="https://www.facebook.com/AdobeSpark" data-auto="glb-nav-social-facebook" data-context="global-nav" data-type="facebook" class="social-button glb-nav-social-icon glb-nav-fb" target="_blank"></a><a href="https://twitter.com/AdobeSpark" data-auto="glb-nav-social-twitter" data-context="global-nav" data-type="twitter" class="social-button glb-nav-social-icon glb-nav-tw" target="_blank"></a><a href="https://www.instagram.com/AdobeSpark" data-auto="glb-nav-social-instagram" data-context="global-nav" data-type="instagram" class="social-button glb-nav-social-icon glb-nav-in" target="_blank"></a></div> equals www.twitter.com (Twitter)
Source: resumes[1].htm.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=1772359959706965&ev=PageView&noscript=1"/> equals www.facebook.com (Facebook)
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: <a id="gnav_831" href="http://www.facebook.com/adobe" class="feds-navLink" target="_blank" data-feds-action="none" data-feds-element="link" daa-ll="Facebook-1"> equals www.facebook.com (Facebook)
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: <a id="gnav_841" href="https://www.linkedin.com/company/adobe" class="feds-navLink" target="_blank" data-feds-action="none" data-feds-element="link" daa-ll="LinkedIn-3"> equals www.linkedin.com (Linkedin)
Source: about[1].htm.2.dr	String found in binary or memory: <iframe class="youtube-frame" data-src="https://www.youtube.com/embed/ZWEVOghjkaw?showinfo=0&rel=0&enablejsapi=1"></iframe> equals www.youtube.com (Youtube)
Source: fbevents[2].js.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func

Source: unknown

DNS traffic detected: queries for: page.adobespark-assets.com

Source: 280[5].jpg.2.dr	String found in binary or memory: http://creativecommons.org/lice8BIM
Source: 280[5].jpg.2.dr, 280[2].jpg.2.dr, 280[8].jpg0.2.dr, 280LP7VDTEJ.jpg.2.dr, 280[7].jpg2.2.dr, 280[1].jpg.2.dr, 280[1].jpg1.2.dr, 280[3].jpg2.2.dr, 280[7].jpg.2.dr, 280[3].jpg1.2.dr, 280[2].jpg2.2.dr, 280VB2JYP2D.jpg.2.dr, 280[5].jpg1.2.dr, 280[3].jpg0.2.dr, 280[8].jpg1.2.dr, 280[7].jpg0.2.dr, 280[2].jpg0.2.dr, 280[10].jpg2.2.dr, 280R7YO4J2Q.jpg.2.dr, 280[6].jpg.2.dr, 280[8].jpg.2.dr, 300[3].jpg0.2.dr, 280[5].jpg0.2.dr, 280[4].jpg.2.dr, 280[6].jpg2.2.dr, 280[9].jpg2.2.dr, 280[3].jpg.2.dr, 300[4].jpg.2.dr, 280L0AZXQ0B.jpg.2.dr, 300[1].jpg.2.dr, 280[4].jpg2.2.dr, 280[9].jpg1.2.dr, 280[6].jpg0.2.dr, 300[3].jpg.2.dr, 280[10].jpg0.2.dr, 280[4].jpg1.2.dr, 280[10].jpg.2.dr, 280[8].jpg2.2.dr, 300[2].jpg0.2.dr, 280YS8RRKZZ.jpg.2.dr, 300[1].jpg0.2.dr, 300[2].jpg.2.dr, 280[4].jpg0.2.dr, 280[2].jpg1.2.dr, 300[4].jpg0.2.dr, 2805NDRA41U.jpg.2.dr, 280VM200EAZ.jpg.2.dr, 280[9].jpg0.2.dr, 280[5].jpg2.2.dr, 280[7].jpg1.2.dr, 280[10].jpg1.2.dr, 280[1].jpg0.2.dr, 280AV6IZ2PD.jpg.2.dr, 280[6].jpg1.2.dr, 280V9XCL4LA.jpg.2.dr, 280[1].jpg2.2.dr, 280[9].jpg.2.dr, 28071TWUH7N.jpg.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by-nc/4.0/
Source: m-unsupported-fd0ade07[1].js.2.dr	String found in binary or memory: http://feross.org
Source: adobe-profile.min[1].js.2.dr	String found in binary or memory: http://github.com/janl/mustache.js
Source: hover[1].css.2.dr	String found in binary or memory: http://ianlunn.co.uk/
Source: hover[1].css.2.dr	String found in binary or memory: http://ianlunn.github.io/Hover/)
Source: publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chrome[1].js.2.dr	String found in binary or memory: http://mathiasbynens.be/demo/url-regex
Source: m-unsupported-fd0ade07[1].js.2.dr	String found in binary or memory: http://medialize.github.io/URI.js/
Source: popper.min[1].js.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: logo-maker[1].htm.2.dr	String found in binary or memory: http://schema.org
Source: xfq6xbo[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000124f3
Source: xfq6xbo[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000124f4
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132df
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132e1
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132e3
Source: oea2wtv[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001522a
Source: oea2wtv[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001522c
Source: oea2wtv[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001522d
Source: oea2wtv[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000015231
Source: oea2wtv[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000015236
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9aee45
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9aee47
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3068
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f83
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f84
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f85
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f86
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f88
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f8a
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f8c
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: utilitynav[1].js.2.dr, marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chrome[1].js.2.dr	String found in binary or memory: http://www.iport.it)
Source: m-unsupported-fd0ade07[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: ~DFB67A7B416E347265.TMP.1.dr	String found in binary or memory: https://adobe.demdex.net/dest5.html?d_nsid=0
Source: RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	String found in binary or memory: https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/ecids.json?ecid=
Source: RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	String found in binary or memory: https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/sids.json?demandbase_sid=
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://adobesearch.adobe.io/autocomplete/completions
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://adobespark.uservoice.com
Source: resumes[1].htm.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-US/categories/202688167-Adobe-Spark
Source: resumes[1].htm.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-US/requests/new
Source: en-US_bundle-fe08ea30[1].js.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/218956027
Source: en-US_bundle-fe08ea30[1].js.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/219243657
Source: en-US_bundle-fe08ea30[1].js.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/219243657-Can-students-use-Adobe-Spark-
Source: about[1].htm.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/categories/202688167-Adobe-Spark
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/requests/new
Source: logo-maker[1].htm.2.dr	String found in binary or memory: https://adobesparkpost.app.link/D3pjXtHPicb
Source: resumes[1].htm.2.dr	String found in binary or memory: https://adobesparkpost.app.link/g8sk4xb8AV
Source: index[1].htm.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 0135[1].json0.2.dr	String found in binary or memory: https://app.crazyegg.com
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://assets.adobedtm.com
Source: RC1bc70f0c17a44296971da4381a721bda-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC1bc70f0c17a44296971da4381a721bd
Source: RC252f840aaf624dd8a3342f251aa80827-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC252f840aaf624dd8a3342f251aa8082
Source: RC29e82c9b5c6e48a4a3a7a5958e0e76d4-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC29e82c9b5c6e48a4a3a7a5958e0e76d
Source: RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC2a643f872978403daaac6c6eb27b1c2
Source: RC6171a193c5f749b6901942c8c5ed07c3-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6171a193c5f749b6901942c8c5ed07c
Source: RC6e74d481191548f1ab0614710465b88a-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6e74d481191548f1ab0614710465b88
Source: RC6f46e43fa6d44dbeb45cc5801ffded0e-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6f46e43fa6d44dbeb45cc5801ffded0
Source: RCbbd93c1920fd422b84787f67ddbfbe55-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RCbbd93c1920fd422b84787f67ddbfbe5
Source: RCe603adad0e60478b927c5da4f78b4f0e-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RCe603adad0e60478b927c5da4f78b4f0
Source: RCfbd58215d7e94835b68ade2bedc29ed2-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RCfbd58215d7e94835b68ade2bedc29ed
Source: launch-EN919758db9a654a17bac7d184b99c4820.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN919758db9a654a17bac7d184b99c4820.js
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://cc-collab.adobe.io/profile
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://cdn.cookielaw.org
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: resumes[1].htm.2.dr, logo-maker[1].htm.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/loading-attribute-polyfill
Source: index[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: index[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: index[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: index[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: RC1bc70f0c17a44296971da4381a721bda-file.min[1].js.2.dr, resumes[1].htm.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: headIE.fp-99254388ab2bb00e43cbc5fbabe0e392[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/NodeList/forEach
Source: publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: m-unsupported-fd0ade07[1].js.2.dr	String found in binary or memory: https://feross.org
Source: free.min[1].css.2.dr	String found in binary or memory: https://fontawesome.com
Source: free.min[1].css.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: index[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Yellowtail&display=swap
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yellowtail/v11/OZpGg_pnoDtINPfRIlLohlvHxw.woff)
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: hover[1].css.2.dr	String found in binary or memory: https://github.com/IanLunn/Hover
Source: chrome[1].js.2.dr	String found in binary or memory: https://github.com/janl/mustache.js/issues/186
Source: chrome[1].js.2.dr	String found in binary or memory: https://github.com/janl/mustache.js/issues/189
Source: chrome[1].js.2.dr	String found in binary or memory: https://github.com/janl/mustache.js/issues/244
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://github.com/kriskowal/q/blob/v1/LICENSE
Source: loading-attribute-polyfill.min[1].js.2.dr	String found in binary or memory: https://github.com/mfranzke/loading-attribute-polyfill
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: bootstrap.min[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: index[1].htm.2.dr	String found in binary or memory: https://ia802700.us.archive.org/3/items/voice_404/Voicemsg.wav
Source: chrome[1].js.2.dr	String found in binary or memory: https://issues.apache.org/jira/browse/COUCHDB-577
Source: 585b051251[1].js.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: index[1].htm.2.dr	String found in binary or memory: https://kit.fontawesome.com/585b051251.js
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://lodash.com/
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://lodash.com/license
Source: index[1].htm.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: index[1].htm.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://openjsf.org/
Source: en-US_bundle-fe08ea30[1].js.2.dr	String found in binary or memory: https://opsparc.gsfc.nasa.gov/?sdid=MC95SNMJ&mv=social
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=vtg4qoo&ht=tk&f=7180.7182.7184.22474.10294.10296.10302&a=1655249&a
Source: onz5gap[1].js0.2.dr, xfq6xbo[1].js0.2.dr, vtg4qoo[1].js.2.dr, oea2wtv[1].js.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: RCbbd93c1920fd422b84787f67ddbfbe55-file.min[1].js.2.dr	String found in binary or memory: https://p13n-stage.adobe.io/psdk/v2/content
Source: RCbbd93c1920fd422b84787f67ddbfbe55-file.min[1].js.2.dr	String found in binary or memory: https://p13n.adobe.io/psdk/v2/content
Source: T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/base-fonts.gz.js
Source: T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/font-subgroup-kits/lato.gz.js
Source: T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/font-subgroup-kits/pt-sans-narrow.gz.js
Source: imagestore.dat.2.dr, T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico
Source: T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/noscript.gz.css
Source: T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js
Source: T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/runtime.gz.css
Source: T6EbJMut5FyGq[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/typekit-load.gz.js
Source: about[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.adobe.spark.post&referrer=utm_source%3DSpark%2520A
Source: about[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.adobe.spark.post&referrer=utm_source%3DSpark%2520H
Source: imagestore.dat.2.dr	String found in binary or memory: https://politicalface.org/favicon.ico
Source: ~DFB67A7B416E347265.TMP.1.dr	String found in binary or memory: https://politicalface.org/rfp/index.php
Source: ~DFB67A7B416E347265.TMP.1.dr	String found in binary or memory: https://politicalface.org/rfp/index.phpGq/images/25c34d37-381b-48ff-bcc5-fc53bbfba5f6.jpg?asset_id=f
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://prod.adobeccstatic.com/appl/latest/AppLauncher.css
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://prod.adobeccstatic.com/appl/latest/AppLauncher.js
Source: publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: 0135[1].json0.2.dr	String found in binary or memory: https://recording.crazyegg.com
Source: 0135[1].json0.2.dr	String found in binary or memory: https://sample-api-v2.crazyegg.com
Source: 0135[1].json0.2.dr	String found in binary or memory: https://sampling-ratio.crazyegg.com/ratio/v2
Source: 0135[1].json0.2.dr, 0135[1].js.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0088/0135.json
Source: 0135[1].json0.2.dr, 0135[1].js.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/common-scripts/11.1.185.js
Source: 0135[1].json0.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/tracking-scripts/11.1.185.js
Source: 0135[1].json0.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/11.1.185.js
Source: {757E09F2-547A-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://spark.ado
Source: {757E09F2-547A-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://spark.adobe.co
Source: {757E09F2-547A-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://spark.adoh
Source: login[1].htm1.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: privacy[1].htm0.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://support.apple.com/downloads/safari
Source: 0135[1].json0.2.dr	String found in binary or memory: https://tracking.crazyegg.com/clock
Source: 0135[1].json0.2.dr	String found in binary or memory: https://tracking.crazyegg.com/v11
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://twitter.com/Adobe
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://twitter.com/AdobeSpark
Source: oea2wtv[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/180254/00000000000000000001522c/27/
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/a?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/d?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/l?primer=7a5a436c948772f5260024dfadc8f
Source: oea2wtv[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/220823/000000000000000000015231/27/
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: xfq6xbo[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/841c9f/0000000000000000000124f4/27/
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/a?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/d?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/l?primer=7a5a436c948772f5260024dfadc8f
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/949f99/00000000000000003b9b3068/27/
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/a0c22f/00000000000000003b9b3f84/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/a0c22f/00000000000000003b9b3f84/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/a0c22f/00000000000000003b9b3f84/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: oea2wtv[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/a2df1e/00000000000000000001522a/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: xfq6xbo[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/bb203d/0000000000000000000124f3/27/
Source: oea2wtv[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/bdde80/00000000000000000001522d/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/a?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/d?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/l?primer=7a5a436c948772f5260024dfadc8f
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: oea2wtv[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/efba8b/000000000000000000015236/27/
Source: privacy[1].htm0.2.dr	String found in binary or memory: https://use.typekit.net/pps7abe.css
Source: about[1].htm.2.dr	String found in binary or memory: https://use.typekit.net/vtg4qoo.css
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://use.typekit.net/vtg4qoo.js
Source: 0135[1].json0.2.dr	String found in binary or memory: https://user-event-tracker.crazyegg.com/
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.adobe.io/?promoid=1SQHD8GY&mv=other
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.adobeexchange.com/?promoid=6S3T78GQ&mv=other
Source: config[1].json.2.dr	String found in binary or memory: https://www.behance.net/
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.behance.net/?promoid=ZXL8F4M6&mv=other
Source: RCfbd58215d7e94835b68ade2bedc29ed2-file.min[1].js.2.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://www.google.com/chrome/browser/desktop/index.html
Source: chrome[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://www.instagram.com/AdobeSpark
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.instagram.com/adobe/
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.linkedin.com/company/adobe
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.marketo.com/
Source: unsupported[1].htm0.2.dr	String found in binary or memory: https://www.mozilla.org/firefox
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.workfront.com/
Source: about[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/ZWEVOghjkaw?showinfo=0&rel=0&enablejsapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 99.86.159.4:443 -> 192.168.2.3:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.4:443 -> 192.168.2.3:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.2.115:443 -> 192.168.2.3:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.113.221:443 -> 192.168.2.3:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.113.221:443 -> 192.168.2.3:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.250.201.182:443 -> 192.168.2.3:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.250.201.182:443 -> 192.168.2.3:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.18.94:443 -> 192.168.2.3:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.3:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.3:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.64:443 -> 192.168.2.3:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.32.152.233:443 -> 192.168.2.3:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.32.152.233:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.90:443 -> 192.168.2.3:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.90:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.91:443 -> 192.168.2.3:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.3:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.237.136.106:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.237.136.106:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.3:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.84:443 -> 192.168.2.3:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.84:443 -> 192.168.2.3:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.3:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.210.132.160:443 -> 192.168.2.3:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.210.132.160:443 -> 192.168.2.3:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.51.251.137:443 -> 192.168.2.3:49813 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@3/319@26/19

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF71CA949AC247B91A.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1112 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1112 CREDAT:17410 /prefetch:2

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Source: Contact_72px_lt-gray[1].svg.2.dr	Binary or memory string: NEIBESjjzwKWaQEmuhbGgACFWDKdB5OZZSX+agjjkcZegD1y0h+ELA7oCf9h2TzH5Lk87RNpJWUz
Source: LawEnforcement_72px_lt-gray[1].svg.2.dr	Binary or memory string: 4RfwbOThACGyTEZ5moRPrV2QweL6BvvMQAZIZXEdT2O5NEPgUsRJGSwFUuYlgyhgfSp3NY2hgKUv
Source: Policies_72px_lt-gray[1].svg.2.dr	Binary or memory string: 4tB1EVplopO2rztHQjrQqeMUbUqdlUYbWkVkAS0rzSFGk5qfcFFaK8X2oKw7N1FayNdH7BQ+Tst9

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	Security Software Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	File and Directory Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://spark.adobe.com/page/T6EbJMut5FyGq/	0%	Virustotal		Browse
https://spark.adobe.com/page/T6EbJMut5FyGq/	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
services.prod.ims.adobejanus.com	0%	Virustotal	Browse
spark.adobeprojectm.com	0%	Virustotal	Browse
adobelogin.prod.ims.adobejanus.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/ecids.json?ecid=	0%	Avira URL Cloud	safe
https://page.adobespark-assets.com/runtime/1.22/typekit-load.gz.js	0%	Avira URL Cloud	safe
https://openjsf.org/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://ianlunn.co.uk/	0%	URL Reputation	safe
http://ianlunn.co.uk/	0%	URL Reputation	safe
http://ianlunn.co.uk/	0%	URL Reputation	safe
https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico	0%	Avira URL Cloud	safe
http://www.iport.it)	0%	Avira URL Cloud	safe
https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js	0%	Avira URL Cloud	safe
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/sids.json?demandbase_sid=	0%	Avira URL Cloud	safe
https://prod.adobeccstatic.com/appl/latest/AppLauncher.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dd20fzx9mj46f.cloudfront.net	13.226.151.66	true	false		high
services.prod.ims.adobejanus.com	52.213.176.171	true	false	0%, Virustotal, Browse	unknown
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	63.32.152.233	true	false		high
spark.adobeprojectm.com	99.86.159.4	true	false	0%, Virustotal, Browse	unknown
politicalface.org	199.250.201.182	true	false		unknown
scontent.xx.fbcdn.net	31.13.92.14	true	false		high
s3.amazonaws.com	52.216.113.221	true	false		high
adobelogin.prod.ims.adobejanus.com	52.48.170.34	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.16.18.94	true	false		high
adobe.com.ssl.d1.sc.omtrdc.net	15.237.136.106	true	false		unknown
api.demandbase.com	99.86.159.84	true	false		high
adobe.tt.omtrdc.net	52.51.251.137	true	false		unknown
prod.adobeccstatic.com	13.226.169.90	true	false		unknown
page.adobespark-assets.com	143.204.2.115	true	false		unknown
cdn.cookielaw.org	104.16.149.64	true	false		high
geolocation.onetrust.com	104.20.185.68	true	false		high
tracking.crazyegg.com	18.210.132.160	true	false		high
api2.branch.io	99.86.159.91	true	false		high
ka-f.fontawesome.com	unknown	unknown	false		high
ims-na1.adobelogin.com	unknown	unknown	false		high
cdn.jsdelivr.net	unknown	unknown	false		high
cm.everesttech.net	unknown	unknown	false		high
script.crazyegg.com	unknown	unknown	false		high
code.jquery.com	unknown	unknown	false		high
dpm.demdex.net	unknown	unknown	false		high
static.adobelogin.com	unknown	unknown	false		high
use.typekit.net	unknown	unknown	false		high
kit.fontawesome.com	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
maxcdn.bootstrapcdn.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
p.typekit.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://politicalface.org/rfp/index.php	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://politicalface.org/rfp/index.php	~DFB67A7B416E347265.TMP.1.dr	false		unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	index[1].htm.2.dr	false		high
https://use.typekit.net/af/1da05b/0000000000000000000132df/27/l?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://adobespark.zendesk.com/hc/en-US/categories/202688167-Adobe-Spark	resumes[1].htm.2.dr	false		high
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/ecids.json?ecid=	RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC1bc70f0c17a44296971da4381a721bd	RC1bc70f0c17a44296971da4381a721bda-file.min[1].js.2.dr	false		high
https://page.adobespark-assets.com/runtime/1.22/typekit-load.gz.js	T6EbJMut5FyGq[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://assets.adobedtm.com	unsupported[1].htm0.2.dr	false		high
https://fontawesome.com	free.min[1].css.2.dr	false		high
https://static.adobelogin.com/imslib/imslib.min.js	privacy[1].htm0.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RCfbd58215d7e94835b68ade2bedc29ed	RCfbd58215d7e94835b68ade2bedc29ed2-file.min[1].js.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	bootstrap.min[1].js.2.dr	false		high
https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/d?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/	vtg4qoo[1].js.2.dr	false		high
https://use.typekit.net/af/220823/000000000000000000015231/27/	oea2wtv[1].js.2.dr	false		high
http://typekit.com/eulas/0000000000000000000124f4	xfq6xbo[1].js0.2.dr	false		high
https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
http://typekit.com/eulas/0000000000000000000124f3	xfq6xbo[1].js0.2.dr	false		high
https://kit.fontawesome.com/585b051251.js	index[1].htm.2.dr	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	index[1].htm.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://openjsf.org/	marvelcommon-152d9848[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://adobespark.uservoice.com	unsupported[1].htm0.2.dr	false		high
https://use.typekit.net/af/bdde80/00000000000000000001522d/27/	oea2wtv[1].js.2.dr	false		high
https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/a?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://github.com/mfranzke/loading-attribute-polyfill	loading-attribute-polyfill.min[1].js.2.dr	false		high
https://ia802700.us.archive.org/3/items/voice_404/Voicemsg.wav	index[1].htm.2.dr	false		high
https://use.typekit.net/af/1da05b/0000000000000000000132df/27/a?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/a?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC2a643f872978403daaac6c6eb27b1c2	RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://use.typekit.net/af/180254/00000000000000000001522c/27/	oea2wtv[1].js.2.dr	false		high
http://creativecommons.org/licenses/by-nc/4.0/	280[5].jpg.2.dr, 280[2].jpg.2.dr, 280[8].jpg0.2.dr, 280LP7VDTEJ.jpg.2.dr, 280[7].jpg2.2.dr, 280[1].jpg.2.dr, 280[1].jpg1.2.dr, 280[3].jpg2.2.dr, 280[7].jpg.2.dr, 280[3].jpg1.2.dr, 280[2].jpg2.2.dr, 280VB2JYP2D.jpg.2.dr, 280[5].jpg1.2.dr, 280[3].jpg0.2.dr, 280[8].jpg1.2.dr, 280[7].jpg0.2.dr, 280[2].jpg0.2.dr, 280[10].jpg2.2.dr, 280R7YO4J2Q.jpg.2.dr, 280[6].jpg.2.dr, 280[8].jpg.2.dr, 300[3].jpg0.2.dr, 280[5].jpg0.2.dr, 280[4].jpg.2.dr, 280[6].jpg2.2.dr, 280[9].jpg2.2.dr, 280[3].jpg.2.dr, 300[4].jpg.2.dr, 280L0AZXQ0B.jpg.2.dr, 300[1].jpg.2.dr, 280[4].jpg2.2.dr, 280[9].jpg1.2.dr, 280[6].jpg0.2.dr, 300[3].jpg.2.dr, 280[10].jpg0.2.dr, 280[4].jpg1.2.dr, 280[10].jpg.2.dr, 280[8].jpg2.2.dr, 300[2].jpg0.2.dr, 280YS8RRKZZ.jpg.2.dr, 300[1].jpg0.2.dr, 300[2].jpg.2.dr, 280[4].jpg0.2.dr, 280[2].jpg1.2.dr, 300[4].jpg0.2.dr, 2805NDRA41U.jpg.2.dr, 280VM200EAZ.jpg.2.dr, 280[9].jpg0.2.dr, 280[5].jpg2.2.dr, 280[7].jpg1.2.dr, 280[10].jpg1.2.dr, 280[1].jpg0.2.dr, 280AV6IZ2PD.jpg.2.dr, 280[6].jpg1.2.dr, 280V9XCL4LA.jpg.2.dr, 280[1].jpg2.2.dr, 280[9].jpg.2.dr, 28071TWUH7N.jpg.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC252f840aaf624dd8a3342f251aa8082	RC252f840aaf624dd8a3342f251aa80827-file.min[1].js.2.dr	false		high
https://tracking.crazyegg.com/clock	0135[1].json0.2.dr	false		high
https://github.com/kriskowal/q/blob/v1/LICENSE	marvelcommon-152d9848[1].js.2.dr	false		high
http://underscorejs.org/LICENSE	marvelcommon-152d9848[1].js.2.dr	false		high
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://adobespark.zendesk.com/hc/en-US/requests/new	resumes[1].htm.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6171a193c5f749b6901942c8c5ed07c	RC6171a193c5f749b6901942c8c5ed07c3-file.min[1].js.2.dr	false		high
https://app.crazyegg.com	0135[1].json0.2.dr	false		high
https://script.crazyegg.com/pages/versioned/common-scripts/11.1.185.js	0135[1].json0.2.dr, 0135[1].js.2.dr	false		high
https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/l?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
http://ianlunn.co.uk/	hover[1].css.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://adobespark.zendesk.com/hc/en-us/articles/219243657	en-US_bundle-fe08ea30[1].js.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	false		high
https://github.com/IanLunn/Hover	hover[1].css.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RCe603adad0e60478b927c5da4f78b4f0	RCe603adad0e60478b927c5da4f78b4f0e-file.min[1].js.2.dr	false		high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/vtg4qoo.css	about[1].htm.2.dr	false		high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	www.adobe.com[1].htm.2.dr	false		high
https://adobespark.zendesk.com/hc/en-us/articles/218956027	en-US_bundle-fe08ea30[1].js.2.dr	false		high
https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/11.1.185.js	0135[1].json0.2.dr	false		high
https://npms.io/search?q=ponyfill.	marvelcommon-152d9848[1].js.2.dr	false		high
https://ka-f.fontawesome.com	585b051251[1].js.2.dr	false		high
https://www.linkedin.com/company/adobe	www.adobe.com[1].htm.2.dr	false		high
https://cdn.cookielaw.org	unsupported[1].htm0.2.dr	false		high
https://twitter.com/Adobe	www.adobe.com[1].htm.2.dr	false		high
https://adobesparkpost.app.link/D3pjXtHPicb	logo-maker[1].htm.2.dr	false		high
https://use.typekit.net/af/841c9f/0000000000000000000124f4/27/	xfq6xbo[1].js0.2.dr	false		high
https://use.typekit.net/af/1da05b/0000000000000000000132df/27/d?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://fontawesome.com/license/free	free.min[1].css.2.dr	false		high
https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico	imagestore.dat.2.dr, T6EbJMut5FyGq[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.iport.it)	chrome[1].js.2.dr	false	Avira URL Cloud: safe	low
http://schema.org	logo-maker[1].htm.2.dr	false		high
http://www.opensource.org/licenses/mit-license.html	marvelcommon-152d9848[1].js.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/googleData.json	7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	false		high
https://use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/	onz5gap[1].js0.2.dr	false		high
https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/d?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
http://www.opensource.org/licenses/mit-license	m-unsupported-fd0ade07[1].js.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f8a	onz5gap[1].js0.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f8c	pps7abe[1].css0.2.dr	false		high
http://typekit.com/eulas/0000000000000000000176ff	vtg4qoo[1].css.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/iab2Data.json	7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	false		high
https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js	T6EbJMut5FyGq[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000000001522d	oea2wtv[1].js.2.dr	false		high
http://typekit.com/eulas/00000000000000000001522c	oea2wtv[1].js.2.dr	false		high
http://typekit.com/eulas/00000000000000000001522a	oea2wtv[1].js.2.dr	false		high
https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/sids.json?demandbase_sid=	RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://prod.adobeccstatic.com/appl/latest/AppLauncher.css	www.adobe.com[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/a?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://twitter.com/AdobeSpark	unsupported[1].htm0.2.dr	false		high
https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://user-event-tracker.crazyegg.com/	0135[1].json0.2.dr	false		high
https://code.jquery.com/jquery-3.1.1.min.js	index[1].htm.2.dr	false		high
https://use.typekit.net/af/a2df1e/00000000000000000001522a/27/	oea2wtv[1].js.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	vtg4qoo[1].js.2.dr	false		high
https://reactjs.org/docs/error-decoder.html?invariant=	publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	false		high
https://adobesparkpost.app.link/g8sk4xb8AV	resumes[1].htm.2.dr	false		high
https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/a?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
http://mathiasbynens.be/demo/url-regex	chrome[1].js.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://use.typekit.net/pps7abe.css	privacy[1].htm0.2.dr	false		high
https://www.marketo.com/	www.adobe.com[1].htm.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
13.226.169.90	unknown	United States	16509	AMAZON-02US	false
13.226.151.66	unknown	United States	16509	AMAZON-02US	false
31.13.92.14	unknown	Ireland	32934	FACEBOOKUS	false
52.51.251.137	unknown	United States	16509	AMAZON-02US	false
18.210.132.160	unknown	United States	14618	AMAZON-AESUS	false
99.86.159.91	unknown	United States	16509	AMAZON-02US	false
99.86.159.4	unknown	United States	16509	AMAZON-02US	false
63.32.152.233	unknown	United States	16509	AMAZON-02US	false
104.16.18.94	unknown	United States	13335	CLOUDFLARENETUS	false
15.237.136.106	unknown	United States	16509	AMAZON-02US	false
104.16.149.64	unknown	United States	13335	CLOUDFLARENETUS	false
52.216.113.221	unknown	United States	16509	AMAZON-02US	false
99.86.159.84	unknown	United States	16509	AMAZON-02US	false
104.20.185.68	unknown	United States	13335	CLOUDFLARENETUS	false
143.204.2.115	unknown	United States	16509	AMAZON-02US	false
52.48.170.34	unknown	United States	16509	AMAZON-02US	false
199.250.201.182	unknown	United States	54641	INMOTI-1US	false
52.213.176.171	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	31.0.0 Red Diamond
Analysis ID:	338147
Start date:	11.01.2021
Start time:	18:03:22
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 46s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://spark.adobe.com/page/T6EbJMut5FyGq/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@3/319@26/19
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://spark.adobe.com/page/T6EbJMut5FyGq/?page-mode=static Browsing link: https://spark.adobe.com/page/T6EbJMut5FyGq/images/25c34d37-381b-48ff-bcc5-fc53bbfba5f6.jpg?asset_id=fdf4a666-fbfa-48f7-9365-005592c35c4b&img_etag=%220x8D8B431BDBD0B11%22&size=1024 Browsing link: https://politicalface.org/rfp/index.php Browsing link: https://spark.adobe.com/page/T6EbJMut5FyGq Browsing link: https://spark.adobe.com/about?r=reader_page_logo Browsing link: https://spark.adobe.com/make/logo-maker?r=reader_page_learnmore Browsing link: https://spark.adobe.com/login?r=reader_page_bumper_createyourown Browsing link: http://www.adobe.com/legal/terms.html Browsing link: http://www.adobe.com/go/privacy Browsing link: https://spark.adobe.com/login?r=reader_page_topbar_createyourown Browsing link: https://spark.adobe.com/templates/resumes/
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, audiodg.exe, BackgroundTransferHost.exe, ielowutil.exe, RuntimeBroker.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 52.255.188.83, 104.42.151.234, 88.221.62.148, 92.122.213.187, 92.122.213.200, 23.37.33.211, 209.197.3.24, 209.197.3.15, 172.217.22.202, 172.217.20.234, 104.18.23.52, 104.18.22.52, 172.64.202.28, 172.64.203.28, 95.101.22.195, 23.210.248.45, 23.210.248.85, 152.199.19.161, 23.210.248.158, 52.213.13.209, 54.229.6.121, 52.19.56.127, 54.194.167.246, 54.154.30.7, 52.214.21.195, 34.250.164.43, 63.33.223.206, 104.19.148.8, 104.19.147.8, 151.101.2.109, 151.101.66.109, 151.101.130.109, 151.101.194.109, 143.204.2.12, 143.204.2.32, 143.204.2.46, 143.204.2.82, 23.210.248.251, 99.81.11.244, 34.250.153.194, 34.255.166.243, 54.194.191.134, 54.171.42.33, 34.253.145.149, 67.27.159.126, 8.248.139.254, 8.253.204.121, 8.248.135.254, 67.26.73.254, 8.253.204.120, 67.26.139.254, 67.27.157.126, 67.26.75.254, 67.27.233.126, 51.103.5.186, 40.126.1.145, 40.126.1.166, 20.190.129.24, 20.190.129.130, 40.126.1.142, 20.190.129.19, 20.190.129.160, 20.190.129.133, 51.11.168.160, 92.122.213.247, 92.122.213.194, 20.54.26.129 Excluded domains from analysis (whitelisted): e6653.dscf.akamaiedge.net, cds.s5x3j6q5.hwcdn.net, arc.msn.com.nsatc.net, ka-f.fontawesome.com.cdn.cloudflare.net, cn-assets.adobedtm.com.edgekey.net, www.tm.lg.prod.aadmsa.akadns.net, spark.adobe.com, fs-wildcard.microsoft.com.edgekey.net, wns.notify.windows.com.akadns.net, e11290.dspg.akamaiedge.net, script.crazyegg.com.cdn.cloudflare.net, use-stls.adobe.com.edgesuite.net, ssl-delivery.adobe.com.edgekey.net, login.live.com, audownload.windowsupdate.nsatc.net, watson.telemetry.microsoft.com, au-bg-shim.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, stls.adobe.com-cn.edgesuite.net.globalredir.akadns.net, ajax.googleapis.com, cm.everesttech.net.akadns.net, ris-prod.trafficmanager.net, e7933.dscg.akamaiedge.net, www.tm.a.prd.aadg.akadns.net, ris.api.iris.microsoft.com, blobcollector.events.data.trafficmanager.net, a1815.dscr.akamai.net, geo2.adobe.com, cs9.wpc.v0cdn.net, e4578.dscg.akamaiedge.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, wwwimages2.adobe.com, iecvlist.microsoft.com, par02p.wns.notify.windows.com.akadns.net, china-wildcard.adobe.com.edgekey.net.globalredir.akadns.net, go.microsoft.com, emea1.notify.windows.com.akadns.net, auto.au.download.windowsupdate.com.c.footprint.net, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, china-wildcard.adobe.com.edgekey.net, dualstack.f3.shared.global.fastly.net, kit.fontawesome.com.cdn.cloudflare.net, sstats.adobe.com, client.wns.windows.com, p.typekit.net-v3.edgekey.net, ie9comview.vo.msecnd.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, cc-api-data.adobe.io, stls.adobe.com-cn.edgesuite.net, login.msa.msidentity.com, adobeid-na1.services.adobe.com, skypedataprdcoleus17.cloudapp.net, e7808.dscg.akamaiedge.net, go.microsoft.com.edgekey.net, cdn.cp.adobe.io, cds.j3z9t3p6.hwcdn.net, skypedataprdcolwus16.cloudapp.net, a1988.dscg1.akamai.net, www.adobe.com Report size exceeded maximum capacity and may have missing behavior information. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\YVK6JRDA\www.adobe[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	501
Entropy (8bit):	4.768230041156449
Encrypted:	false
SSDEEP:	12:JsrUGemKm6Fz5Dj5rUGemKm6Fz5Dj5rUGemKm6Fz5Dj5rUGemKm6Fz5Dj3:WU1mKm6DDlU1mKm6DDlU1mKm6DDlU1m4
MD5:	412276F8672F5A979E38269DEC3C4B62
SHA1:	C34544752B19296CAA39269BC96266D3322A6A74
SHA-256:	E678E69E177806656FF711E0B03C382B94DA60155844897CD254A6B3D02449C6
SHA-512:	24C69E69B777A78D2ACCE3F73A6A5EDE7584BC421BC3156573FF5B4A95832F31FD6F6F02E3DF707783AFBEF463501BD5FE932C14F92CA7B90F3C5CE808734BA6
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1360542688" htime="30861447" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1360542688" htime="30861447" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1360542688" htime="30861447" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1360542688" htime="30861447" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\ZAP30NTU\spark.adobe[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2307
Entropy (8bit):	5.056770025733902
Encrypted:	false
SSDEEP:	48:LsKVmsKVmsKVgx0msKVgx0YmsKVgx0YmsKVgx0Y75AmsKVgx0Y75AmsKVgx0Y75m:3V6V6VZ6VZY6VZY6VZY75A6VZY75A6VJ
MD5:	D0F5A4E6B846A6C38FB4F955FD01752C
SHA1:	D1D9269948D08A6D0F6771C5F2F01BAF0D35B626
SHA-256:	2D244F191FBEAE52D203006FDFC270B9C98298CA225BED16846EC3960C121E0B
SHA-512:	A97357E7063553F992F005404F400630857CE896760439188C61FCB8546656AD85199DA1F194F31DF86C2FF38DC01175B75C4FB78739FC762909ABAFF72B47E8
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1230722688" htime="30861447" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1230722688" htime="30861447" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1230722688" htime="30861447" /><item name="branch_session_first" value="{}" ltime="1239042688" htime="30861447" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1230722688" htime="30861447" /><item name="branch_session_first" value="{}" ltime="1239042688" htime="30861447" /><item name="mar_aud" value="Bot" ltime="1295902688" htime="30861447" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="1230722688" htime="30861447" /><item name="branch_session_first" value="{}" ltime="1239042688" htime="30861447" /><item name="mar_aud" value="Bot" ltime="1295902688" htime="30861

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{757E09F0-547A-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.8542265841026708
Encrypted:	false
SSDEEP:	96:rlZaZ22n9W5Ft5if5KRM5D5jl5j4f5jkMX:rlZaZ22n9Wzt4f0RMJZlZ4fZkMX
MD5:	2B2AB39C03729EE2C53364649176077B
SHA1:	528493A91C29EE9D71A2D46C9D92A0D5FA3DCA55
SHA-256:	4855975D29F5F7F82D9689B76BE6B67C44EFB8823691EBE2A4A6A76D5269198A
SHA-512:	C47CB2CCD3AF21342744B2F3D8994C3AA942E629C7D77854A7C86680177D7906D8E223D56183DC1F6D9800E93C8F7BCF97DA64546A19200CD4A838799DE2B06E
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{757E09F2-547A-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	190388
Entropy (8bit):	2.5663834741514644
Encrypted:	false
SSDEEP:	1536:OIHNqLFsiNDFLFsSNjpA1AjExyIx5xAjTJ2Jj7JsSQSAxJC5LP2tjOyGyjlpiLFv:OduisFxR
MD5:	3DB63CBD25829AD39EF527C9CD0B2F88
SHA1:	511027AA0756A3792339713EDC71DD8E97558F2C
SHA-256:	9252058F6E1ADF0BA28B3E9C313D482D7D98821C09F6B9E2E98633E7FACC273D
SHA-512:	26033DC2136FD95EF21F73A93B2A1F96CF076A6A2C03BF09522664D6928D4E219FDE5E16AD67152D5D6C8316A805DB51B5245A98C07380E3BF87ED29D18DDEC1
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7BC021E7-547A-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5654174165228452
Encrypted:	false
SSDEEP:	48:IwMGcpr/hGwpauG4pQiGrapbSQrGQpKOG7HpR+SsTGIpG:rQZjQO6kBSQFAJT+S4A
MD5:	D1E5E7543F4E86FC5E36E1884E89183D
SHA1:	0D60B181AB2FF079440B9F77A3341C17CA805FE3
SHA-256:	0A403F11C31028CCD1D8402E26A712C36D2BC9D1E4B37D0EED942970C04F84FD
SHA-512:	0A23139BA6C05BBC011A381E7DD3B65322B1F05379CB8CAD6A50433A9CDAC260B2F48C4EAA9E15C0B06D57EB95A3FA416C968E7FEEB6F23B1607D42D69EAF1C9
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	27518
Entropy (8bit):	2.354539809210574
Encrypted:	false
SSDEEP:	48:R6fVgizzxxEKzOQBbcpS5WT//zVFRQmMsQz/oXwarqX+gizzxxEKzOQBbcpS5WTS:Md4M57uLnd8j70sI2NmU3GD
MD5:	5CE006C1476CED3FD3859EF808431D27
SHA1:	3DA9BD72085C20A315BE413935BC87781460DB35
SHA-256:	473AAF92AD38972E129111B273231077205F53B82A7557B56F17814884A2064F
SHA-512:	41B8E65DCEAF990A9480D9EC5CA0D019863102706B19C1775434ADB8BBDDC00399AC19CD2D05CC2A733E12F4CDCFE9C0C399988AD41D18A57EC6AA0BE222F360
Malicious:	false
Reputation:	low
Preview:	B.h.t.t.p.s.:././.p.a.g.e...a.d.o.b.e.s.p.a.r.k.-.a.s.s.e.t.s...c.o.m./.r.u.n.t.i.m.e./.1...2.2./.i.m.a.g.e.s./.f.a.v.i.c.o.n...i.c.o........... .... .........(... ...@..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................70..7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...70..............................7`..7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7`......................70..7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...70..................7...7...7...7...7...7.

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\LULCMGOR\landing-animation-page[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	7.745119809574094
Encrypted:	false
SSDEEP:	24576:fjcATpwWtCD6c7+ZIHi00BJqNuruZu3kJkQYN+1RssHp2xe6xc/6u3a/6V0MW1Xi:L5JttHd11Ikml0Bu3N8XkaRn
MD5:	6DF6D0AC7B1C7686A2EF91701EBAEDDC
SHA1:	F0003421CA4A3DC9A9B944F46549FEF602136CB9
SHA-256:	C9BDBB35E5E6F21ED4950530487D0D05D737B2C973B49836DFFCEDA94C0A5F03
SHA-512:	ACBC84AB64B181A85DA9FAADFEA4141ABED7A4B52712FA20F8A7163EDD640084B63B0AE5127DB9016C85D6ECED645B062B33E0520C605AD6D01632AA1521ACE1
Malicious:	false
Reputation:	low
Preview:	....ftypmp42....mp42mp41....moov...lmvhd.......E...E.._....0................................................@...................................trak...\tkhd.......E...E...........0................................................@........X.....$edts....elst...........0...........smdia... mdhd.......E...E...`... .......@hdlr........vide.............Mainconcept Video Media Handler....minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ........stbl....stsd............avc1...........................X.H...H.........AVC Coding............................JavcC.d.)....gd.).,...M......R...........<q0.lB..?..pv..E....h..5%........stts...................<stss...............=...y...........-...i...............Y....sdtp.....................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\LULCMGOR\landing-animation-post[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	2097152
Entropy (8bit):	6.721351059321856
Encrypted:	false
SSDEEP:	24576:1In8GtWHKbVXGfHQckbwxtzel08u40a4Zg+Xch2VIzR/pq8pv/dFBqcU:en8GtFJScm8u9ghhxbF/qcU
MD5:	D4B152DE8B4FB6252BFF7DE39CE4F91E
SHA1:	3776C14E678E1B83E5AC56008E1775A7ABB72F98
SHA-256:	555145A179A541F5E1ADD50B1F15409926A9F1C6AAD47C0D8E36D1F83208D605
SHA-512:	0AB3918BD76671AB58E1CCCF19F3D03D91FE87F3A5CC49F1047D7DCED6F635C62D4CB3D8B4A43D7FDE9B21047F1D9AC4FD877038EDDA6C184A717B36B99AB6B9
Malicious:	false
Reputation:	low
Preview:	............................................................................................................................................................o..........................................................................................................................................................................................................................................................................................................!...................................................................................................................................................................................................................................................................................7............................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\LULCMGOR\landing-animation-video[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	1376256
Entropy (8bit):	7.436843327981342
Encrypted:	false
SSDEEP:	24576:3xOIZ7zTdsM7SBvvWk8lTq5EZ3WzK/mIJOIJwi8C5WdJ70:3x5JzyZB8l283iO14IUXJ
MD5:	0663A76595A9D6742D1152C8F1DBE1EC
SHA1:	55C234ED22D9C242175EB8A129C6DB53D644E06D
SHA-256:	6D43FFF021EF1EC2D04AFC01B05EF88F36B4398A0A15DEDFEA671F8A62809514
SHA-512:	063A2E83022DD4CECD004A5FCCF818FCA5C4A22A240261E0AD3CEFF9C79C8139AC4ED90D3D153092BC95D50DC96DDB9D7E41BCA2221F98F193E5BC92A881151E
Malicious:	false
Reputation:	low
Preview:	.`.<...e#2.70...?D..?.zMJ+0j...1.__.. .e.x.h.cn.2..h.'!..,OIk...q.ZWg8..&f.\|.6....3i..rBs.I..^.S..@E.[...9.<.2....=..!..Oa..jN..s..V.%.....:P..ys:Ue."._.O,@..9..iT./.Ak.!.w.r/..;....MJH..!&?....55 ..0Pe^....a.&...&L.w..?%1]..>U.hP.w.D.8.o#...j..Q,.B..X.}.!.o4m'..A...(..3.F.......N..{.6....vT_.6n.....R:J.f.l...M..........%e.Ky.y../at.......My.o.b6$wO....?.....#D..M.{.#bN;...O&...P......s..l/.b../.Wu.J.....,.$......M....-%......f(<........`8.O.z..".Y'....c...8."p6UE134...@.2{..^K...^1....@......=..95cQ....b2.....^.....y. .p.o...B....az.....I<....L.p.=Bp`.g.D..!].../......Z_....w..p.r...R...&c.R..g.....G..>#..!t.3.Xu`.x{.o.?>..../..Uj...... ..d.UAs5...GOv.^~x?oQn2.2..C-]5...7..: &...LG.m..!....6wl,5_..4..;h......;Xi%.4.$..3..b5..c.."./l.$...N..(".HA:.#1*_.%..Fq...i..../p..90M.s..v..HG.;....~....\....\..U..Y.a..(..S....W>..J....j..b6)0.^]..."S.).......!...6....S/.gF.\...u8 Z7...}$...Z...gA.nN..y...1:....a..[..._0V.d...Sc..6.]..H.J_..k..N.m....[#.=_u.J.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\0135[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3991
Entropy (8bit):	5.025296939449764
Encrypted:	false
SSDEEP:	96:5ue4wWiNSIgNdYTkB6rUC5RrNMBrUFPfgUG:swvN7gNXBeUoZNMBrUFHdG
MD5:	4D771DE1D6BEDE6AC336EAC42D077209
SHA1:	345219BFECC81B3BC04249A85007265F36897EE4
SHA-256:	6A14894E81E7BCAD4657997C2E561960DFC699B2789266D6896EC41EB8251DAB
SHA-512:	248D04A19A1E910E94C3EAC88C6A6677EA82390B9DE6A1157011ACB62915A7F6CC7611DA1C286D0104D9241FE5605A7A2207CD4A77B6EF12F41B3330B0E6F724
Malicious:	false
Reputation:	low
IE Cache URL:	https://script.crazyegg.com/pages/data-scripts/0088/0135.json?t=5368057
Preview:	{"uid":880135,"updated_at":1610380833,"ce_app_url":"https://app.crazyegg.com","version":"11.1.185","clock_url":"https://tracking.crazyegg.com/clock","data_url":"https://script.crazyegg.com/pages/data-scripts/0088/0135.json","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/11.1.185.js","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/11.1.185.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/11.1.185.js","status":"ok","sites":"%8&4!}%\|%]!}$<$4$4$5$9$;$4$,!}&%%?&$%^!}$<!}%?%]&&%@%^$.%[&&&$!}$,!}&+%^&+&+%\|&&&%%.%^%[&&&%]%\|&%%`!}$<&,&&-%^$,!}&%^%[&&&%]%\|&%%`%0%^&,&,%\|&%%`&+!}$<&4!}&(%?%`%^%1%?&%`%^&,%\|&%%`$\|&%%?%@&!%^%]!}$<&,&&-%^$,!}&(%?%`%^%1%?&%`%^&,%\|&%%`%2&&!&+!}$<%8!}%{&,&,&(&+$<$0$0&+&(%?&%~$.%?%]&&%@%^$.%[&&&$$0%^&1$0&(&%\|%[%\|&%%`$0!}%;$,!}&&-&!%^&+!}$<%8&4!}&-!}$<&4!}&(&&&&,&&%[&&&!!}$<!}%{&,&,&(&+!}$,!}%{&&&+&,!}$<!}&+&(%?&*%~$.%?%]&&%@%^$.%[&&&$!}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1772359959706965[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	246818
Entropy (8bit):	5.470592667358909
Encrypted:	false
SSDEEP:	6144:Rk1HWCSntDV/H4K3V/H486EPjQHWuH3HpsGTU:f6Ez
MD5:	C2010B18DA06FB1FADDBA9AF85877D39
SHA1:	20ADBE78EBFC07F4E6632B930A1C099AE2D4ED09
SHA-256:	F4053323E77CC4530780F43756E5963A1C29EE710334A73640066283CFECD826
SHA-512:	23EEEBB3ED829A51E5D4658A086E30644A8683A670B2E2AE3BAC2D6DA818DF0AF3963F676C605D4416406E4B1DD830C018F54A0CC176E37C41AEC259FE0ECBBF
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\25c34d37-381b-48ff-bcc5-fc53bbfba5f6[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, baseline, precision 8, 225x225, frames 3
Category:	downloaded
Size (bytes):	9902
Entropy (8bit):	6.796073612611076
Encrypted:	false
SSDEEP:	192:RGE3svzkppSb/moKxs8wm8Ff/sy8q94eGFAiNZ:R/TpEbTKxnwm810094FFZ
MD5:	60988DC6146D51AB73C479CA5C577502
SHA1:	6344FEACA170879CD94BDDEAE73DC0FDCADEE6B3
SHA-256:	90BF27D12CB008515616E3975503913D8919113794F95BC989F3EB0E3790FB9C
SHA-512:	186D49A6BA36A0782DCD25D644325B81F55E68E480869B5DB406C9FC74B6A6315367FD850598C1BF898B91353FABFA28902A6EBD6A2F2F7D2E265DA86DA41B13
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/page/T6EbJMut5FyGq/images/25c34d37-381b-48ff-bcc5-fc53bbfba5f6.jpg?asset_id=fdf4a666-fbfa-48f7-9365-005592c35c4b&img_etag=%220x8D8B431BDBD0B11%22&size=1024
Preview:	......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/"> <xmpMM:DerivedFrom rdf:parseType="Resource"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\28071TWUH7N.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	24390
Entropy (8bit):	7.618227438741571
Encrypted:	false
SSDEEP:	384:BInGRU0vcekohlZSffkkECZcgpNrxlXORQPk8cF7cLbrqD4:BIyUytkoLZcfkccOxlXOR/8cyXrqD4
MD5:	6F426109AB8974978B7C96A0E95593A5
SHA1:	91F2B97A493EF7D8155B3C821E7C6115F250F552
SHA-256:	27EED1F919BE4DADD8A65DDB798E8F5235C4C964B0A7991DD97470D4F29B49E0
SHA-512:	057EE1D66B1A5878D1B6D7FA1D0FACAB42F52D80EF79BF9F3535E3C0802C0570F6515BECD3374FA66C6713003115BEE1ABBC99D500316B76AEDAE8ED1502A7EA
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/9caa001a-4a5c-4c0b-83cd-5ba449ecb101/artwork/5099e013-000e-4551-aa40-cc15f6520582/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:04:12 10:40:04.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280AV6IZ2PD.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	24387
Entropy (8bit):	7.608884880458332
Encrypted:	false
SSDEEP:	384:Bdn/ST3l/L1BrpoZDwa1jGE5TCuCacGXPQfX+taAkyn5VUnUemcciGUIMhmM2NAX:BdeVL3S+CGEkLGofutaAkyneURFEn2Bm
MD5:	DAB5D95885C1ACC0923ABC4419352E80
SHA1:	FA8C0BC66FD977DDD85C70D1CBE33DCC9C0ED204
SHA-256:	C31C171436CBFC97BE054DE4118A343B9DD5724B503FC9DBE5563FC6BE55E709
SHA-512:	B2B642E6481F3080130CFFF42B529F3A7DD242F8F77EB878D341DC6563284E87BB1BDD5E80671AD69DFFCDFBE7A100AA7CEDC7C6AA425E1CCDEEA36CA4AC6E59
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/835aac0d-c8aa-493c-91b6-0c68f2fb5879/artwork/e276e004-6f25-4ba4-b75f-d62e6b29f3aa/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:17:16.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280VM200EAZ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	33787
Entropy (8bit):	7.747596255181389
Encrypted:	false
SSDEEP:	768:BRZ7qf5YO09nUREPcOIrDWq8MDyxPEMJszrn5T9ymyb:zZsfOURYcOr1Me1E/zt9tY
MD5:	D1EDE1CF236ABF0256B1E99E4828A4CD
SHA1:	8C2639D7D3C4830E7EAB62A4C6AA3DF2320A2014
SHA-256:	1F0D99922590B2B90150F8C5A634603F314608B7515CEBFFE73B84C330976FCB
SHA-512:	FD92E266C8F9BB21D0B714D511EE7954ABDB4C0693175EEFC36A8519277D0B1D903FF24AAA23BAEA16A2FE28A297131EA36983D53AD7D3A668BC132C3D7F9201
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/2b131034-cdbc-43e0-a1bc-edf5139aedd7/artwork/07ea3eb8-2665-4d8a-85e5-522e0b10626e/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:06:17 11:16:44.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	50825
Entropy (8bit):	7.839433899562361
Encrypted:	false
SSDEEP:	768:BkH/E6nVmEijFj+F5Ks/xFTB3CK14SkjhcgKv92hT8rLunTdDIEp3yzl9HuvoMrh:efEOVmbjn01fGSvBZ6dsEp3yzldVKMoJ
MD5:	D808C6B62613019364A40383880ED829
SHA1:	217313A4F33B520F2DBE0A50FFBF002A11EA211A
SHA-256:	63095CDAA95B339C9980C1A4651115DFA86D3F3A743E9341DC5AFD6A37C58597
SHA-512:	920B1E56754BA1BBAD5E27C288C8C1A0460F613B041CDBBA80EB6D8E3BBC815B50F1E70E8D2349E8B4CEB4ED99974D2A99C76156DF17EB2445A1CF0A82714542
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/320b64ba-b0f7-4442-89ee-3bca01413d77/artwork/c371f3de-f476-4ff6-99d1-78d109908cf8/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:07:02 14:55:31.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	42148
Entropy (8bit):	7.810074724638672
Encrypted:	false
SSDEEP:	768:MOa97+mxvhUCtZ31ewRGi+/LSXnBGSJJ4N7FMP74SqN/r50vHu:Di7bvAhDsGI4lF04fr4u
MD5:	0BED2963BE5D3DBB036EF8122F5DEC48
SHA1:	1A761A72719D5824383D7378D678526F07E4C4E0
SHA-256:	462FE30D40C9D9EF5AEDEDBD7F1F30F13696710921D257A0DE52CEA9A213798C
SHA-512:	E5A4B0A548832097E5AA1F0F4B66F8C21137F4ACB6A95781D174396691F935C8E17616D3EE51F446A8CC77F98179105C5C16E7AE6CBA187F948FB0626D90FD63
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/bca25fa4-1458-4955-aa0a-61042ce02b59/artwork/076b9858-a3cd-4471-b600-aaca1e73bee4/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:25 08:10:01.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........534........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	43221
Entropy (8bit):	7.8115422627670705
Encrypted:	false
SSDEEP:	768:Bzz0+P6s/PGHirvPQkjiS1qUbnvu1LWZBmCp45XL3rGL3WCa:5lSx8vPdt1HbvUCp4lGLo
MD5:	C6EC35466A376081E049AFF9B822D931
SHA1:	051B78D45BA8F99FB86425F3E6754C59FC07CC36
SHA-256:	FFEA83CAEDBAD58566BE3D268B57BAB13311807E5ECB65C189F81EAABCED7C7B
SHA-512:	52ED06D80C6D82CF395EEC2286F0C8CBEC2B16BDFD24248D2A9998FE8B848E8DBD1D46944D91092A9F8FA07CE0BBBC8088C8555A35BFD7C6B748A7428F8E3672
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/a71bd6ff-84cf-4781-b1ae-e778e5c72c93/artwork/ae444326-ed96-4d56-8ae3-4f292c283b51/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:07:16 10:45:01.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	36761
Entropy (8bit):	7.776624329124745
Encrypted:	false
SSDEEP:	768:MGiGG3qq6ak9ff03h+dgsvFsVV5uYUHwS7mkfgACuH5gVmE35hzF:z5G6qls303KzvqVTuYUHOkfE0Xqhp
MD5:	C03754A25A065A942040F8BBF72A706E
SHA1:	737091D26C9AD31023B94CC988A71DB358C96721
SHA-256:	28F60A10123772D6406F3867A16BD86CEAB2F09392A9CAB446CAF8D2FB3C1B26
SHA-512:	6BE613FD22219916609373930EDEA97C43ACA436FB46BC90045056D92B7BAB48839BCCA612F1A4E7338AB73265EAB42DB19C3BF5F5A2DD3C76A3D2371995251D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/a0fc267b-14af-4596-873e-11270642b85a/artwork/8dc5e8cd-54ff-4d98-aabd-f080d2fe954a/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:10 15:35:32.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........746........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	35563
Entropy (8bit):	7.710289452236433
Encrypted:	false
SSDEEP:	768:BssqhEGjg1Sk6R0Y3D7FFIAsahIp+SMUz9:2ByGs1SDPz7IAkp+k
MD5:	F01143C910C0D70B46D8A06CF8D12114
SHA1:	140D501973AE299E9FFDBAD8567C7F3C0BFDE29B
SHA-256:	81122FEC9CF2FF74646F92F7D376146E73FDDEBDD043C8E773967F4FED0B57BE
SHA-512:	5D211EFA8AA6FDA47A5A86340DD888315698D8959737900ABA85EAC4012B4F22C5ECFD11AB7C7774C9144878AD285F55E995E59F54FC6CE7C32B2AB4BCCA453B
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/55c57898-ee8e-4d95-b9d1-d5fc1e4809d2/artwork/f9bd7292-283d-4e2d-804b-e850adb2e56b/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:03:24 21:33:44.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	26272
Entropy (8bit):	7.613076553684946
Encrypted:	false
SSDEEP:	768:BsdQJWyRCftza5xhXOIQ8+iZowYSPCncl:y6lRXOI0iZowrj
MD5:	297A92D839862C836808784D9DA8C74F
SHA1:	F2D12905FC5AC6BD8C99ADBCD2FC1812E7A8C277
SHA-256:	91B6E006EA1F14EF308EDFA964B135B29E525156F7FB414F2AC1B8702589A1A6
SHA-512:	AEA33AD7158C00E113B32C8314D52610F458F0646575147A066B85F9444E76DD5BE84942617AECA5A9371350552FBBFBD3FF64F922AB329099B8C90FCBB17C34
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/2e06e219-bb88-4dcc-adde-0d514fbec019/artwork/0f973481-4587-4a50-9b8a-9884b40ec0f7/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:07:21.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	36209
Entropy (8bit):	7.7583169353771515
Encrypted:	false
SSDEEP:	768:BQD8SD3grW3a/8NzAoFAGSN8hGx+/iKIq0ZaNUMoVB:+Dt3A5ezHFABN8cx+qKItZXMoP
MD5:	6633D78237F672BD35B33C8D01F1F73F
SHA1:	9E984CCB28ED044A47291D4F5ACD66056C9A9F92
SHA-256:	46377A8B10003F0EDF8332A1BDAE274537FE62B85C064F90C918E35C1469D10B
SHA-512:	62BEECEA9060C840EA8B241730CDD0317591258CCDC521F9D0F93C5D235B06EEAFB6B5C50472F4EE80461E6D70277058333165E6E2DBD1805F9C0E0AAE169A97
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/71c968c1-6bd0-4dc9-8d8c-6c578fca23f3/artwork/267c0043-39ff-4c3b-84a4-a83e375df505/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:03:24 21:04:46.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	33465
Entropy (8bit):	7.7571953863791645
Encrypted:	false
SSDEEP:	768:BAkzSRp5XyvsoWis6kk7/npr8toCJbPgXyKFTky0Nk42Z9Gv+:+/es5iB7/pygCQTky0y42fGv+
MD5:	6437F61C93834AA2DD5114C8DA3AB4FC
SHA1:	501098477D5F3DAF37CACA34985D9238D6B70620
SHA-256:	A6666E0E2A7C71851DB24CDDA067740DCD039C409F6B3EE9962D16B1BECF0B25
SHA-512:	2F98A026B4FFFB9583CD67985B2DBC90A9F936162841BDE4B37829A9664CE0DDE2343CB7441944964FCE5BC7DBFF112A7BB1ABD6AF55033B6648E4E72BF5BC5E
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/1a7465fc-dd14-4d5f-a99b-c89f3be2c030/artwork/10b9e0fc-f73a-4aa6-be83-62edccd3e116/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:08:03 01:32:52.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	30140
Entropy (8bit):	7.6961947550025105
Encrypted:	false
SSDEEP:	768:MjyjzEHRaeNakpIW67qfkdY8+7lGrTH4SKpO8MQz:uysHR/KPqfIHH4Sr8MQz
MD5:	A790BF49613DCA27A60D8EAD4EF03232
SHA1:	D7CBF55D850D4ED9D149DD40D6F675B5454F3AEA
SHA-256:	8921819E74EB892991EB2511AC068054D3BE3CF36652D81980699CB5DA34525C
SHA-512:	E7299FE0DA1F15292EE7EF979D32CCA8D38ADE123514722D7B45D4C263A626A16D8831C93823D59F12CC024D136D934B4F3BD71D0DE3B5A975151C3B4C4B3EC1
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/84a245a4-c077-42c3-a189-07ae93a60a7a/artwork/a7b9be69-5ec1-4061-a2bd-b9b261d9b1e0/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 12:57:19.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........599........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\280[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	31889
Entropy (8bit):	7.718651885149354
Encrypted:	false
SSDEEP:	768:MaqLE+dMt1VzqJfxOx4QL5fDuUYhhzbo8ah/xgLCaHCEl2yjboJmOxS:7qLDMPP4wJyhzk8aRSVl2yGbS
MD5:	783EB60C9875289740354C0423826C6B
SHA1:	30140AF67591D99BB3A686EB13FBD2478F808597
SHA-256:	180D29C2C5BE74CD94FD6120916750178F985265FF77CFFB18FF24A5442D6DAC
SHA-512:	258FCF6921177E8E952A00F249384472484896E7B8EE8212C8B393026B75D349DE21FD2A99698C5B56AB41CC3559513A1C5F9B9E1F57614F42A7E62C42F4D908
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/9db56f9b-c2a0-4525-841a-5c02f58881b9/artwork/0719d666-3064-49eb-b993-e3961a2f4453/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 15:55:52.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........943........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\300[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	18830
Entropy (8bit):	7.449463821054749
Encrypted:	false
SSDEEP:	192:GNwknPZfc/HsctYZQq+IwRxI45Gan+uMlABMGW0KtVOTVhPwZwslBOSHrqHGZ3bs:G1nNgtQQyKnGUi0VTsraOGudA3x
MD5:	0F12FD8ED31E09A5513C713BCE211EC6
SHA1:	CD26C6B80060541FBCCDA3FBA3949EC73DB78222
SHA-256:	29774F5176D5E5548BACCE22C86F6169428801A9B1F830AD140EA546BD7847D8
SHA-512:	4E3B4DDAF9D4755C870E4AD14D3C2C16363D7D523D976AB73011BFED90B99BC42CC8FA5646FB09ED9C843B67610AA4C98388F4583788D41351E53AC53F61A167
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/6af401d5-dd8f-4971-90c4-f6794f0ca390/artwork/692605f8-b4f0-4d09-9028-675503c57d4a/version/1/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:06:03 11:54:15.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\300[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	17893
Entropy (8bit):	7.341239737283081
Encrypted:	false
SSDEEP:	384:GynveG7lgv1m1fX25dH0Y2FT7Q9EHCMRkr:GyjlgvcOS1FAFMRkr
MD5:	1E8CFA11277913B4F3F48E19F58E6455
SHA1:	C4DD9228B869FCE1B3D26D7A99C9088A03D35148
SHA-256:	C93A406CDC94477237DF4DE1C47CC8B1CC2032EA3CB01950AD74FB4E841AB741
SHA-512:	1EA718139BFE3EF8E719C2E12AE7D569573583FAE733D866FD78BAB9ADB9E39AAA3722FEDE27A69956EB0882DFA57448E3694C6367624F1BF02E514DE7FE7128
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/5f316077-48c9-4813-8eef-de38055127c5/artwork/4ce1043b-d94e-4165-88e0-67a5e1c9a849/version/1/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:06:03 11:50:18.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\300[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	23009
Entropy (8bit):	7.5426557223798
Encrypted:	false
SSDEEP:	384:Gjn6SQKkGNX5PoDFIZqSf5Yt9HriZXm7g03ruJYKqmWkUF6ZbygPt/lXC:GjfQApKqrCt9Hrig7XrEYY5ygPFlXC
MD5:	F712DE852511371CE449AE80A554AF0D
SHA1:	3A69CF6523AC80563625C3F9C11319051356CC30
SHA-256:	070C49EAC06064D77D8983FC69FBE1D5A629576D5C103EDB02317EB077F48485
SHA-512:	95CBCD4B6B2222798BF23D800BEC282E4ADC5AF893125AAE953806455AD6698859554C2BD866618C38B120A25E96EF0CFDFA0A94800A25991AD1482ACDDF4425
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/22509c0e-f5cb-4dcd-9642-854900226383/artwork/c1239ca6-25bd-46cc-a70c-27577230a385/version/2/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:06:07 21:28:15.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\300[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	11182
Entropy (8bit):	6.654259691717572
Encrypted:	false
SSDEEP:	192:GNUknP6jXtnLUUXClUD6JBJ7pb56UXPrNd503wg1ui:GhnsR7CGcRps6rNd5sN
MD5:	319C5BF35F63B0BB8A200C045D6E9541
SHA1:	B5160EA376EAFDAA8DC0CCADB3BF1AC563FD3E94
SHA-256:	19EB530236DD0F78CC64CBFA3B98BFD5EA1C48EDB667EE1F0DD4B294CEC7BBB1
SHA-512:	21E9ED7F7A895CAAF0DDD9EEBABB60312B07F772E8ABC8BF9225591DDD63A18E2B4395A5A60F1957A6BB6430D521A2856E7FB3F606365211065D601EDE9E77D1
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/0170d81a-bb5b-4399-b3fc-d3fa0f2efc49/artwork/ae08db34-85ab-4492-a18f-f235f736538c/version/0/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2018:11:28 14:14:03.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\5koYB-73181-minimized[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 260x195, frames 3
Category:	downloaded
Size (bytes):	18102
Entropy (8bit):	7.963507714247377
Encrypted:	false
SSDEEP:	384:P6Fn9BihMEsweNlLNpesoMXsBfabzRiQEoB4bfKs903c4T+4V8xYj:P60M/lLN87M8uQTv2s9064+Yj
MD5:	9BD2715D2038A3FDF760EA14DD67DD77
SHA1:	2406804553EB02D2ADBA535997BBE06F24ECD583
SHA-256:	DB3019971B0AA7D1A5A7BEA7F579D7A8BFF5ADB5131D112158EB786143EF1D99
SHA-512:	AA661EA64E380C7FBA1FA1A9B6342B8D97E64D7CB67130B6DB7A2351AA5FE80B5363534CA38086CFFD8675DB60C8C9031D8A42F64A873D260BB39D036888582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/carousel/5koYB-73181-minimized.jpg
Preview:	......JFIF.............C....................................................................C............................................................................................................................................................I....O...".3i..(.j ..a..#2^kP.5I..M....B.T.v...=n.....f..0.E...1.$..dg...I&.YL.....oj#..`..!t...).....y....).5I..S..(V.J). J.wZ..........S(3Jd.....&.F.Vi&Sk...1..N]...,..66..'...%.q.va..)..a..#..%W.&3."$...Nm....3.+....b....6w..`..a..:..^Qt..s.........E0.8)S...5Ta..v.o.T....2$....RE.\..6.Z...N.A!.T.'...=..p..;.6.Q.a..S-...."K.P..d.R......;.J.9T.b 7n..L[....0AL!.<.Z..6;j.]........chD.'.T.R2.d....6_m.a..S.h.....-6.h....<f......p....w.. -...9..t&v]..5...P...HL...h].h.....F.(.8..T.7.y7..D....0..@.l...l.-...7dh..%6"5........P.....\..=....BC2.L..o...z.e.\L.$..^d..".[m....8X..*.&`V8Y....b...4...v)..2i#...#......(...-......9+!../.xP...h.kn..&%...'L\...CR.7......&....40....aR.B1.......py9.2~F7c..Hi.@........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3675
Entropy (8bit):	4.6118229671933175
Encrypted:	false
SSDEEP:	96:yyIY40FtdRYzY/alJ5GHZa6AyAY7jjijVjhC4S:OwKzYylJF6vAYTGd1S
MD5:	50C05B3D9502EF883631E56D07D9B540
SHA1:	49EE999E99D9B1625EAD5B7EC5B91DD93AB8C1C2
SHA-256:	587CB3A730ECBFF247942242B99A1497DB61873E8053D22F58224CB465C99F59
SHA-512:	ECBDA80B14144B8BE14D86827E9FDDBEDE89B84A8E84EE52630BEB89A036E90D61D5E847ED0F8184E171C3B85FC364561E13067ED2B474A80F46ECE31F09098B
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cookielaw.org/consent/7a5eb705-95ed-4cc4-a11d-0cc5760e93db/7a5eb705-95ed-4cc4-a11d-0cc5760e93db.json
Preview:	{"CookieSPAEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"6.9.0","OptanonDataJSON":"7a5eb705-95ed-4cc4-a11d-0cc5760e93db","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","RuleSet":[{"Id":"8fc5213e-cec6-4fca-a134-aec9029b0675","Name":"Adobe_EEU_Canada","Countries":["de","no","fi","be","pt","bg","dk","lt","lu","lv","hr","fr","hu","se","si","mc","sk","mf","sm","yt","gb","ie","ca","gf","ee","mq","mt","gp","is","gr","it","es","at","re","cy","cz","ax","pl","ro","li","nl"],"States":{},"LanguageSwitcherPlaceholder":{"no":"no","de":"de","ru":"ru","fi":"fi","pt":"pt","bg":"bg","lt":"lt","lv":"lv","fr":"fr","hu":"hu","zh-Hans":"zh-Hans","default":"en","zh-Hant":"zh-Hant","uk":"uk","sk":"sk","sl":"sl","sv":"sv","ko":"ko","zh-TW":"zh-TW","zh-HK":"zh-HK","pt-BR":"pt-BR","it":"it","es":"es","zh":"zh","et":"et","cs":"cs","ar":"ar","ja":"ja","pl":"pl","ro":"ro","he":"he","da":"da","tr":"tr","nl":"nl"},"Bann

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Adobe_Corporate_Horizontal_Red_HEX[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	397
Entropy (8bit):	4.973746262232231
Encrypted:	false
SSDEEP:	6:tvKIiad4mc4sl3UtpMaguk0BNbO9Z1PHtDjt9INFW39mmJEVitksmHSXqY:tvG1KWanstDjXI4mwIUmyX7
MD5:	4BC0619E030E91ACFDA414626A41B770
SHA1:	BF0BEA50B7C0092B34EB8C06A3DDB52F37AA1860
SHA-256:	57AEBAB4A35ADC7CA5DFA15DC58A19B1457FB314881C3A4CC320CB79E8F006ED
SHA-512:	CF614C4A5C8269F4DCF01694BE15B847783DE0E6CADC914C879C46F6C4B014AF30FD4FA64F27144BA0CFB0F921E8D15BA592147AA0CE29440A18081AD9A69F24
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/content/dam/cc/icons/Adobe_Corporate_Horizontal_Red_HEX.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 133.46 118.11"><defs><style>.cls-1{fill:#fa0f00;}</style></defs><polygon class="cls-1" points="84.13 0 133.46 0 133.46 118.11 84.13 0"/><polygon class="cls-1" points="49.37 0 0 0 0 118.11 49.37 0"/><polygon class="cls-1" points="66.75 43.53 98.18 118.11 77.58 118.11 68.18 94.36 45.18 94.36 66.75 43.53"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\LawEnforcement_72px_lt-gray[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	28018
Entropy (8bit):	6.123287231997608
Encrypted:	false
SSDEEP:	768:3B3bnD+0T1bo4s83RvlSqEOSt1uRgzgd6Hio:I0Bo49h32I6HT
MD5:	203D2596591DD98304B03BDBCFE7948A
SHA1:	145A9AB021FA39848CBF9E95DB7132554469934C
SHA-256:	F0F7F1BB8276F731235B5519886DEF7081CE2AF2A906567888F5CC1F7BBD78C1
SHA-512:	2A36BE5EF21D35EA123BE7CFDB88BC1C025AE359E80068E9E1FAB66748E15D268A7A9162CA0FE5364F34852E5EBA88DE665C5F5710668783ADC55A91D6825629
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/content/dam/cc1/en/privacy/images/LawEnforcement_72px_lt-gray.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="adobeNews_x5F_72_x5F_lt-ou" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="72px" height="72px".. viewBox="-359 271 72 72" style="enab

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RC252f840aaf624dd8a3342f251aa80827-file.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	748
Entropy (8bit):	5.133258854489174
Encrypted:	false
SSDEEP:	12:jvgeASPRmgjW6c+fkfui5y4QKEuMnXDRec4DqfdfdygfdfdALCI/LZSqxh4eA6M/:15pjdc+QuiyrZTRe1Dqll9llALxJh3Pe
MD5:	0AEC08675FF4ABF82A0FA6E5A3292CB7
SHA1:	61B7346184B074DC5E70E9875D15923CFBF5E58B
SHA-256:	28C7DF1332CCE02EACBED412A557F5F8F0BC024D0C04FCA6535E6A707B49C104
SHA-512:	586AB48F036E1BD24AC7898B4649B9AE1CB4321E5A7897683E9BB2F43C2150692C3D9CCF38339B1D1A1EDAF0A6CC6E1DB4EA1883302B0B3EC0EF2DB78726735A
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC252f840aaf624dd8a3342f251aa80827-file.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC252f840aaf624dd8a3342f251aa80827-file.js`..!function(){function i(e){var a=1e13*(Math.random()+""),r=document.createElement("iframe");r.style.display="none",r.style.width="1",r.style.height="1",r.src=e+a+"?",document.body.appendChild(r)}var d=window;_satellite.windowProperty=function(e,a,r){var n=d.location,t=n.hostname,c=n.pathname,s=unescape(unescape(unescape(n.href))),u=unescape(unescape(unescape(document.referrer))),o="";switch(e){case"host":o=t;break;case"path":o=c;break;case"href":o=s;break;case"referrer":o=u;break;case"dClick":i(a);break;case"substr":o=function(e,a){return-1!==e.indexOf(a)}(a,r);break;default:return!1}return o}}();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RC6171a193c5f749b6901942c8c5ed07c3-file.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5903
Entropy (8bit):	5.126738360843436
Encrypted:	false
SSDEEP:	96:1gL2yXX+L6lPxrMCF1OuwYV6vXgmqD9T3h2F5rMCTtykSHKLk4Hcm5zbJdCgTbvN:aL2yXX+LkBMCF1Ou6vXnFJMCTtPSHmjR
MD5:	F544273A500E9035EEB904BCD4A9F5C9
SHA1:	3B6320135B80263CF098C1DC37FC4710E5562503
SHA-256:	A7DAFBDBF53390CA6FD5F1F3C5B969894440CCACD99BEA1481009E9ECCF85CFF
SHA-512:	18AA977FA2C3F4150252DDD063D68D6588F6EEDF40D6B7F792E110CE9A952992CCFDCC8E40F45D3227DFE08C401C758592929B4C715AE815586C6CB00898B958
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6171a193c5f749b6901942c8c5ed07c3-file.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6171a193c5f749b6901942c8c5ed07c3-file.js`..!function(){var e=(0,_satellite.windowProperty)("path")\|\|window.location.pathname,t=document.referrer,a=(window.location.href,_satellite.oneTrustIsHostEnabled),r=function(e,t){return-1!==e.indexOf(t)};if((r(e,"/industries")\|\|_satellite.getVar("adobe_aec_pages")\|\|"/creativecloud/business/teams.html"==e\|\|-1!=e.indexOf("/summit")\|\|-1!=e.indexOf("/event")\|\|-1!=e.search(/\/creativecloud\/business\/teams\/(what-you-can-make\|deploy-and-manage\|use-cases\|plans)(\/(make-better-brand-kit\|marketing\|social\|marketing-communications))?.html/))&&_satellite.track("pageLoad-marketoMunchkin"),-1!==e.search(/\/products\/xd/)&&_satellite.track("pageload-xdDownload"),a("d26x5ounzdjojj.cloudfront.net")&&-1!==e.search(/\/(uk\|africa\|gr_en\|be_nl\|be_fr\|be_en\|cz\|cis_en\|cy_en\|dk\|de\|ee\|es\|fr\|ie\|il_en\|it\|lv\|lt\|lu_de\|lu_en\|lu_fr\|hu\|mt\|mena_en\|nl\|no\|at\|pl\|pt\|ro\|ch_de\|si\|sk\|ch

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RC6e74d481191548f1ab0614710465b88a-file.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8694
Entropy (8bit):	5.414897282748208
Encrypted:	false
SSDEEP:	192:LhZjXXAW3t4dWLMvFjbvrCb73MCv0gtJJ+UbW2SqdjhROxnYdCT:LhZjXj3t4dWLMvFjbrWjMqLJJ+qWPqdG
MD5:	BC4A28C6B6781F0017EFF9572D23F548
SHA1:	FBB6AB8C9843045FC994FEC5F5B275DA7D7D115D
SHA-256:	EDE304224FA5D22185AE3D15F81CC06473437121A0793595D6F5585930ED518F
SHA-512:	3799BFAD489C5DA348C0EBB86C1F22B8BB5A80046682FE4EBC43D7910A79A99E3C599615E50460154B8CF3B6EF4A0E4938CB49B47745DA8B55AFA833349FBF39
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6e74d481191548f1ab0614710465b88a-file.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RC6e74d481191548f1ab0614710465b88a-file.js`..!function(){function e(){var e,t,a,n,o,i;e=window,t=document,a="script",e.twq\|\|((n=e.twq=function(){n.exe?n.exe.apply(n,arguments):n.queue.push(arguments)}).version="1.1",n.queue=[],(o=t.createElement(a)).async=!0,o.src="//static.ads-twitter.com/uwt.js",(i=t.getElementsByTagName(a)[0]).parentNode.insertBefore(o,i)),y&&"/articles/2019/10/adobe-2019-holiday-predictions.html"==y("path")\|\|y&&("summit.adobe.com"===y("host")\|\|"summit-emea.adobe.com"===y("host"))&&(-1!==y("path").indexOf("/na/")\|\|-1!==y("path").indexOf("/emea/"))\|\|_satellite.getVar("adobe_aec_pages")\|\|-1!==y("path").indexOf("/experience-platform.html")\|\|"cmo.adobe.com"===y("host")?twq("init","o02t1"):"/jp/creativecloud/stock.html"==y("path")?twq("init","o1kax"):-1!=y("path").indexOf("/summit")?twq("init","o0xx1"):twq("init","o1w4k"),twq("track","PageView"),-1!=y("path").indexOf("/sum

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\RCbbd93c1920fd422b84787f67ddbfbe55-file.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3910
Entropy (8bit):	5.232040362863565
Encrypted:	false
SSDEEP:	96:1mML5FV9vzTEJCyKsDg1do/N2QaMS+16SuLTRt5Vn5:7V97WvJk1d8gQaX+kbLTRt5Vn5
MD5:	63554A967BE3E7223D9DAACF3C214388
SHA1:	250E094D68BA4FEC8A262C17D2DBF70B77A2459E
SHA-256:	9BAC0A806575D8ACFECA04F8536877CF971EEB20448BC1D2A3CF3BF4E18DBCFF
SHA-512:	F4FCA98785CBF704CC26965B8F8F2898C41B938C4F75B8023E9B604E755BB4D5B569E186E5B67D17299F2C914CB69E346F5F7BD20EFF7B9ADF31199CEFAF0FB5
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RCbbd93c1920fd422b84787f67ddbfbe55-file.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/a031a843445a/RCbbd93c1920fd422b84787f67ddbfbe55-file.js`..window._sophiaLoadedPromise=new Promise(function(e){var w=window.adobeIMS,I=I\|\|function(i){function n(){return window.console&&window.console.log&&window.console.error}var o="[Sophia]",t=function(){},a="head",s={ActionId:"",CampaignId:"",ContainerId:"",ControlGroupId:"",TreatmentId:"",VariationId:"",CardId:"",SurfaceId:""},c=function(n,o,e){var t=performance.now(),a=new XMLHttpRequest;a.onreadystatechange=function(){if(a.readyState==XMLHttpRequest.DONE){var e=performance.now();m.log("Total time taken for fetching response for: ",n,e-t," milliseconds."),o(a)}},a.open("GET",n,!0),e&&e.forEach(function(e){a.setRequestHeader(e.key,e.val)}),m.log("Sending request: ",n),a.send()},r=function(e){var n=document.implementation.createHTMLDocument();return n.body.innerHTML=e,n},d=function(e){m.log("Got response: "+e);var n=document.querySelectorAll(I.conf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\SPRK_color_hover_v3@2x[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1004
Entropy (8bit):	5.187217692853858
Encrypted:	false
SSDEEP:	12:tvG1XftzSHn4vj0SeX47LiiLAiUw/U+VH3NLzaDobULhqq9BS9C6gEKYoaWZKq2e:tu1XftHvxeIAvFiXtTbUJkUEhCP
MD5:	E9D94F821371E183B8B58F618B2FC161
SHA1:	792948E6A17CF091CCDC329A09EE22BF1A1A9CF5
SHA-256:	AC03A140536DC39782AFA5C742E10515D20C24DB3152DCB04471252C856B7FF4
SHA-512:	A9EC755233EAB39EE91630F379412BB469BADE01784095A13F7FC3E62C860E0BD0618A43554D909049B4716C0CF0F6A582E69DF3962384ACEDDBEF911013EEE4
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/SPRK_color_hover_v3@2x.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 56 54" width="56" height="54"><defs><style>.cls-1{fill:#370000;}.cls-2{fill:#fa0f00;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Surfaces"><g id="Spark_Surface" data-name="Spark Surface"><path id="Outline_no_shadow" data-name="Outline no shadow" class="cls-1" d="M9.9,0H46.1A9.8588,9.8588,0,0,1,56,9.9V44.1A9.8588,9.8588,0,0,1,46.1,54H9.9A9.8588,9.8588,0,0,1,0,44.1V9.9A9.8588,9.8588,0,0,1,9.9,0Z"/></g></g><g id="Outlined_Mnemonics_Logos" data-name="Outlined Mnemonics Logos"><g id="Sp"><path class="cls-1" d="M0,0"/></g></g></g><path class="cls-2" d="M43.6,26.3l-15-15a1.1989,1.1989,0,0,0-1.4,0l-15.1,15a1.1989,1.1989,0,0,0,0,1.4l1.8,1.8a1.143,1.143,0,0,0,.7.3h.7V38a1.0714,1.0714,0,0,0,1,1h7.2a1.0714,1.0714,0,0,0,1-1V28.9a1.0714,1.0714,0,0,1,1-1h5.3a1.0714,1.0714,0,0,1,1,1V38a1.0714,1.0714,0,0,0,1,1H40a1.0714,1.0714,0,0,0,1-1V29.7h.7c.3,0,.4-.1.7-.3l1.8-1.8C44.1,27.2,44.1,26.6,43.6,26.3Z"/></s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\arrow-left[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 18 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	446
Entropy (8bit):	7.08048723282186
Encrypted:	false
SSDEEP:	6:6v/lhPzQynDi3URTCMkLPNsidohbJPxNfh9JL4zCh7BnhxCNjep9sEI0AEGdipxd:6v/7MM9CXNsiqRl5L4IrxeeDsELH7rN
MD5:	59F99801C29B6F884941AB4E86435815
SHA1:	D434AF60CC81A5813EB3084AEF70B0CB97E6ED54
SHA-256:	50E89F67220A83D59B25E9EC977F059AEDE2C1499D401A6331219249F0C54CC3
SHA-512:	70F6CDAA488B259CD53F21C4A2253DF3DCBEBC0071D1687FC1E351B169EC0BF8CDC391FB6230A867C0C0F578D2688A75739E1CD59EBC3843B83480F7D8574004
Malicious:	false
Reputation:	low
IE Cache URL:	https://page.adobespark-assets.com/runtime/1.22/images/arrow-left.png
Preview:	.PNG........IHDR.............<.~.....sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS6......tEXtCreation Time.9/11/13.9I.....IDAT8...k.@...'$..P....PR...1...._.]Yy.r2r:1.....#0..D...P..h.i.../.........0.\'.!.=........&.y.+.Cc...5.PHDq3$....*..T.g!.E...q..B......i....eY.n.....9/u..........m.. ..:...g..q...n.\...`Q..6M#\|...&}].e...ns..Q....x..]fI.......0...Q.u[..L..7...}...EQ\|..;....%.t.....,..........IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\arrow-right[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 18 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	7.029622930176089
Encrypted:	false
SSDEEP:	6:6v/lhPzQynDi3URTCMkLPJsbjShtfGQHVxFX0o/A5VFnWMFd4+0hS+qz58OCox5Z:6v/7MM9CXJsbcf1xFXoWkOhSVNB7Z
MD5:	28A18EE67AF8D721211ED08164E72CB9
SHA1:	C643A55A18EF870B88FA1CAFED098A12F001384F
SHA-256:	78260D8829368E46D58D02B613EC0C0E19AEE5C159AA4BA255D032D283C30187
SHA-512:	FF21CE7DEE9E5B298BEFD0B67869A4E582097712B0A8D23E10050DFC60BD4B7BD26B0EA077865AA0D6FF57E204A74187874572B243584220C7B23FB0CC127F52
Malicious:	false
Reputation:	low
IE Cache URL:	https://page.adobespark-assets.com/runtime/1.22/images/arrow-right.png
Preview:	.PNG........IHDR.............<.~.....sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS6......tEXtCreation Time.9/11/13.9I.....IDAT8...!o.@.....d?.....#L...BW..\..\.YP....@T.\..>..{;...e.....I....q.dDrGr..#....w".].2k\|.. ..)......F..@.us!.=..........H..L.s).7..".]...Ug.u.W..;..,HD.EQ..2....!..1....<.X....9M.w.".</d..x.pk.......$.Uqw..&....VEdW8A..[...{4.UU.h ..._. ...^)u....b.Z....8..W..."..).&\....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\big-yellow-exclamation-point[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 110 x 102, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2410
Entropy (8bit):	7.569854461422992
Encrypted:	false
SSDEEP:	48:ukNNn2ktJ3PRre/eOxtZlfqY+rj1zXnUgO/GaCq7f:lf2OeeqlfF+ndXRO+Tqb
MD5:	0C48944C6F37B353D14892E8EB9862DE
SHA1:	8FED687740AED3F235F634A67203C61EB7F5FCAE
SHA-256:	8473E148A6C6B2199C07BD7DC0CEB54A5D943D0FEE634D56620763A42346813B
SHA-512:	BD455D36AE29735C9D737D11CDEC81A761A63203CB08B37C161D3ACAE61A542BB238C58137123224B469EE9BF7A4005E125B15DBA966A23AFCBA7BCB5737D628
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/big-yellow-exclamation-point.png
Preview:	.PNG........IHDR...n...f.....*.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:07CAF5790F2F11E6B83680AF73847A41" xmpMM:DocumentID="xmp.did:07CAF57A0F2F11E6B83680AF73847A41"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:07CAF5770F2F11E6B83680AF73847A41" stRef:documentID="xmp.did:07CAF5780F2F11E6B83680AF73847A41"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>F.Ep....IDATx..[l.E..- .....RA.F....(.......x..T.[@...Qh....../..}..._.._4!.Q../.....h..~.....=..3.3../....9=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\browser-icon-safari[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25115
Entropy (8bit):	7.984846894248758
Encrypted:	false
SSDEEP:	384:7jYMKpmdNqN0obP7YnB6pZj1MyPpC9/Hhw691Q/+3ryGjtx54ZNNlRiwnY1X:7MxqPoIMMyRcBw692jGjtKnlMwUX
MD5:	23B02AAF3435635E1E6C324D759B56CA
SHA1:	7DA557E711F8ADD60FE6493789ADCB97B6922A2B
SHA-256:	22B7C23F2DED34B2B0AF1B6D908A533130ABAB7EB32711052D0CAAB35D50BEBB
SHA-512:	7FF438AEEBB35FCC2F62C68E3EDD6C9914BF608BDDFC62B4AD20E91AF937A2395F882BF0CF85CFF2730B6BF4B145110E60FFF7F1F7AFE6FCDBE4A0C8885AC80F
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/browser-icon-safari.png
Preview:	.PNG........IHDR...\|...\|............tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:87E1179C0FF011E69AFE8E50F5F6CE89" xmpMM:DocumentID="xmp.did:87E1179D0FF011E69AFE8E50F5F6CE89"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5F7D657F0FF011E69AFE8E50F5F6CE89" stRef:documentID="xmp.did:5F7D65800FF011E69AFE8E50F5F6CE89"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.q+...^.IDATx..}...U...g...onz.i........*.......bC,X...../J.Ai..H.B.!..z{9........3..s.O.....)w.93..k.o...p].

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\chrome[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	192215
Entropy (8bit):	5.180324040916147
Encrypted:	false
SSDEEP:	3072:M0k0Ywhc7llWGQsRbiK7mPP67llWGQsRbiK7mPPz20VMqjwhF0MtkzWG82:M0k0Ywhc7lxQWbiK7mPP67lxQWbiK7mh
MD5:	DFDD3AA8B6F029403DC5DBB97F696EC6
SHA1:	05FF3F6C5F0B65C3C091E3B4D3CF69139CB46CAF
SHA-256:	AB889D6962A84FF0A8812667F14F1073E30D63E8023C96671E1A1BB17CDEF50B
SHA-512:	6100BA9798866FEB3D5C1A738E309EC99EB8B76139E581DA6AC3DA4F8E4D3EC4DB0A8835DB3513DF064EF65169F74EB40169432170955BE05DB8D4D64B8459F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://s3.amazonaws.com/adobe-luca-prod-ue1-assets/experiments/chrome/chrome.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){.var templates = require( '../../dist/chrome/templates' );.var Mustache = require( 'mustache' );..var topBar = function( trackingId, buttonText, linkToWelcome ) {. $( document.body ).on( 'luca-publication-viewer-ready', function(){.. var initialShowTime = 3000;. var backtrackDistance = 100;. var showClassName = 'show';. var aboveTheFoldClassName = 'above-the-fold';.. var $injectHTML = null;. var animator = $( '.article' ).data( 'animator' );. var

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\config[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2395
Entropy (8bit):	4.825863324551167
Encrypted:	false
SSDEEP:	48:au3PbMLQu3ou153GkPY3Dq3rmw30P3Xde43L1TR3zKHdNKSrbPKKcM7+HdN:aufyT9jvYzq7mwEPo4b1TRjorRbPKBj
MD5:	577E31582BF77A462491C62F7A7FB6F2
SHA1:	AEC5170FF7828F8C36A24B7AD35EC50E46A4D5A1
SHA-256:	D1B46EA416C17868C10C2775DA3BA2190094A70378502B11607A3FFA8F369F36
SHA-512:	42F44B510E911F0857182AECEC0703EE06D2D3D206734546E8DB86A2CC52DF3B7777BDFA215255828883798C28C1D05E9487367996894EA21903930D730D1165
Malicious:	false
Reputation:	low
IE Cache URL:	https://prod.adobeccstatic.com/appl/assets/config.json
Preview:	{. "apps": [. {. "name": "Spark",. "goUrl": "utilitynav-appmenu-sp-icon-link",. "imgKey": "assets/spark_2x-2xnya5n.png",. "url": "https://spark.adobe.com/sp/creativecloud/". },. {. "name": "Lightroom",. "goUrl": "utilitynav-appmenu-lr-icon-link",. "imgKey": "assets/lightroom_2x-1Bvte3Y.png",. "url": "https://lightroom.adobe.com/". },. {. "name": "Portfolio",. "goUrl": "utilitynav-appmenu-pf-icon-link",. "imgKey": "assets/portfolio_2x-1N1Dojs.png",. "url": "https://portfolio.adobe.com/". },. {. "name": "Behance",. "goUrl": "utilitynav-appmenu-be-icon-link",. "imgKey": "assets/behance_2x-2SU4BVj.png",. "url": "https://www.behance.net/". },. {. "name": "Stock",. "goUrl": "utilitynav-appmenu-st-icon-link",. "imgKey": "assets/stock_2x-3Tnxd6P.png",. "url": "https://stock.adobe.com/". },. {. "name": "Fonts",. "goUrl": "utilitynav-appmenu-tk-icon-link

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[10] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 23416, version 0.0
Category:	downloaded
Size (bytes):	23416
Entropy (8bit):	7.983586847834522
Encrypted:	false
SSDEEP:	384:F30DDcDU1FW+RedG9b7Tm16n2XMc3nS3YUQIfiRgeQvYAb0HsRUgBnQc:JOA+Redq61GYU7f/eQvnUgBQc
MD5:	334521D5C314F6265FCA189A2114006F
SHA1:	F35719EE30117ADF919939AD46A98C9D3C6EEE45
SHA-256:	B4D011E6CF7EBE571E4D0C9868CD972592987E13D5BE3DDBB69C67638323A237
SHA-512:	3F6163488D3814E3CEFF964DBA451B45DE22236EED0372A82BC713950CBD0FCC41D4553414095646842B2839F12EF7A95AC943329AC0293FCC9850ECEF6C67CB
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/d?primer=7a5a436c948772f5260024dfadc8f7cd849e1448f8bf41ba74a247e8e46f3aee&fvd=n5&v=3
Preview:	wOFFOTTO..[x................................CFF ......6V..A.....DYNA..:.........AOr.GDYN..:..........E(.GPOS..;x......G ....OS/2...$...[...`}.N.cmap..Z4...C....M.?gasp...0............head...8...2...6...khhea...........$....hmtx..X.........\|k .maxp..............P.name...l.........<.bpost..Z ....... ...2........x.c`d``.b....x~...../."..]......ka.g..r...@..k.....x...j.@.........U.e..4rV...p6..h..u.EdI......Q....D.}.>@w=....E[]....;sg.......{.=.8a.s.!>x>...=....=..._<.q...GH.`...'...@...........o.....\|.w....Q8.<.<ln.zk.....XM..T....X..Ju[..H....P..*#V.F...........F.%.uo..S.'L....U_.Q..9.u.i....W....8v.Z.r.-.u,M1.......$.A..[..Xb...3,x1..h.%iN...f(...lCg...i.-.q...C..i...........b.+M.WT..g4...;m.l...T.evv..ew').._!}.......2..m..}..v...:....M.....]....:V\....-Y.S$.`...7.....x.c`b\|.......i.S...C..f..`...(...........A?.A!...<.\.......1...........0.$.8.i..R``..1....x.c`d``..W.$.....d.g..............P.....x.{.X.W.....3.1.C`.1..I.5.........AQA.....e..4.(....Q@l.F.1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 30832, version 0.0
Category:	downloaded
Size (bytes):	30832
Entropy (8bit):	7.985448564079255
Encrypted:	false
SSDEEP:	384:ULnH4B904aGBOfBA5ruEox7PvHxsFq36CoGkqzyAL6cRHbHOkhBnKW8x+OBEiB:Uz+93akYVEcP/ig6Nh+me7HLBnK1Pa8
MD5:	A24BAB0217A940502655CB39824C4CA4
SHA1:	031E50C9EF47A17C4077EDB15693225AFC16044E
SHA-256:	1CFA3682C2D68F282C013C471044AE4AF711E990D13B0A4A9E1EF257BABFA238
SHA-512:	4BA826B52A7E3E91C26FAF1C5D5DE5AB5A2E57C0DC393653FBA676433873022918CEB6B3016657D93622BEF2AC41C7CE3929DC710AE44BE42A4F5C92CA1F4EE7
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n4&v=3
Preview:	wOFFOTTO..xp................................BASE...0...F...Fe$].CFF ......\...os5.Y=DYNA..`............3GDYN..a\|........s-.#GPOS..b`...u..$..~.sOS/2.......Y...`\Wv.cmap..w....V......3head...x...4...6..%uhhea....... ...$...Hhmtx..t....)...H.$.Imaxp..............P.name...............post..w........ ...2..............ideoromn..DFLT..cyrl..grek..latn...................\......x.c`d```5...3%...+.3........p..?.?/K... ....$..:...x.RKn.0..9N...Qt.5.v... .Wv..Y%...%....cH......g...g..:.X4M.."(.{ofH>..k\|.....l..W.Z...L.>.;.8.%'w..C..>..\|r..>>S.u_2..a.o....z....\|.>:.%....o...}g.p.Ig.(...b...-....7..U....b..b..S..nt.c.._.:.gz...u$.~4._O.#[..sWd.v2}"..u.U.hUws.H..(..w./...GE..Y.<K...h...1.K.7...dF.....7.z...0.W......8.Dc,Q!.&......W.J,X.......V.s..a....F._M..1.._Q..RZ....cr#..^w.....e...T..?S..[...J.v7.wY1...u...{!m7.3)Y.....y.....Z.qC.#g.lN...#;.....}.aW/.s..}...~.N.....7...#.C.;. .......x.c`f\|.8.......).....B3.1.1*.E.Y..XX..X......P..............6............1-.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 30980, version 0.0
Category:	downloaded
Size (bytes):	30980
Entropy (8bit):	7.987621377492639
Encrypted:	false
SSDEEP:	768:Nh0Jzz1kWYZQL4lNCzPhlKCdN7GgGAvOYHqycQ:Nh6WZQclQzJ5xbvHqnQ
MD5:	01BD649595C405E61BD162E40BFF7260
SHA1:	B03670659950A40A47F9658B71F69FF14F8DA4C2
SHA-256:	2FF95F05AA71F6FE45D80A3FC8585BDE66210ECBC83A1AC494BD679A5CAE28DE
SHA-512:	9C4A5AA9CCD44CDB780515532E79BD26C2F250DAFF67FAC3CDC2B9D7067AB664F1D1301183A928BCD950123652F44781B31EEF5A22B7AC939B261D242E92F4C0
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/d?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
Preview:	wOFFOTTO..y.................................BASE...0...F...Fe!].CFF ... ..]q..p.q...DYNA..a..........#.3GDYN..bL...........GPOS..c0...@..$..#..OS/2.......Y...`].y.cmap..w....V......3head...x...5...6..%ghhea....... ...$...Chmtx..up...%...H....maxp..............P.name............E@..post..w........ ...2..............ideoromn..DFLT..cyrl..grek..latn...................Y......x.c`d```5.:...]<..W.f..@....^0....~.).......@...).=...x.}..n.0...t..B.\q...s.D..UB.[.v...&..I.w...%.*....@....Ix..8....r.........+\|...9......:......w.f...C\|r\|..xp\|...0..?..w..^{..........s...C..7.Gx.{...Y.... ..\gJ...Qe#......N.......oW..3.zGc.?/TZMt..2....d:...8i=4^M...7.n..]..\.2...J...vb .y...t..Y.b..2..0..$^..=.}......}uW...<y.l.E.$.=..".HHc....s....K~......5...Z_.i.............S>.....,..&....c....}j.g.._1...j....V.2..c.k..=....hYQe.9+V-.k}.w7..d...%...f6>.sh....;.=<..a..-5.f2...\.pGu.}W.G....kJ.........x.c`f.........).....B3.1.1..E.9..XX..X......P.............6...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[3] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 30780, version 0.0
Category:	downloaded
Size (bytes):	30780
Entropy (8bit):	7.988535310328335
Encrypted:	false
SSDEEP:	768:B4GGbSq0CiAIlwymd1yf04b80qrqH7b7V8zXe1X7QjQlWunvdoO6:B4/SqQ5wymryflbhqrqf7C6NrWunvdo3
MD5:	41291B5CC7AE5A302D0FF767D801DC05
SHA1:	A6B8FA2252C9563DE7FABC7A6F068E5D7C42383E
SHA-256:	641E63A696D3E572B940226372365DDE29D2D581D614B5FCF66323ED46A5CBDD
SHA-512:	3F6F193E7B3F5E0743427577E129D5F21E9A0598F5444A930B53573A87A562861807ACAD2CD4065BBB8FFF7C70821DC500BDBBE431662EC9C04064E975AD5B28
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n3&v=3
Preview:	wOFFOTTO..x<................................BASE...0...F...Fe(].CFF ......\...o...C.DYNA..`............3GDYN..ah...........\|GPOS..bH..._..$.....OS/2.......W...`[.tJcmap..v....V......3head...x...4...6..%`hhea....... ...$...Lhmtx..t....%...H{e!.maxp..............P.name.............8..post..v........ ...2..............ideoromn..DFLT..cyrl..grek..latn...................`......x.c`d```5..?..N<..W.f..@.....0....6.;.c@.3..H......x.RMn.@.}&$U7.......-+.V. 5R$"...a... {.......r....^.G..y<mQ.....\|.g......Cs]q6..[....+\|p...0u.M...s.....f~u......_s.....{..-t.O..a.}q.M....Qz....h..w..>?._...-.X...2:..].(.]QFF/.....%..LW....oR....fz..Fe(.^8..'C+..K.`u:..g\|.e...h..s.K..pS.E..EOy...h....i..2..@....cv..9..61rQd].#U]....A.....!.Cq.FX.@.M<....q.... [....rKH.K9.fH..LeW.OM..)..o..L....j..O.".Bz\|..!...b..E.R.e\.e4.U..........B..i;.X.Pel.r.....$...l..-.j......v.l.......r.~..U[.).....u."V'F.....O.G......x.c`f.........................L,,LL,..L.@yF.(ptqr.R.....gc``...K..q>H...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[4] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 31340, version 0.0
Category:	downloaded
Size (bytes):	31340
Entropy (8bit):	7.9870881023883635
Encrypted:	false
SSDEEP:	768:8pXzzHNr6GY0k1BBwz8d1Ip1WbAy/iGGOYKzte6fcq:4XJ6LBa8dmib7/NGOYc5n
MD5:	588A4A92645A9E137308924C68778A29
SHA1:	99F03745B7B06DB4201A3B00C6D9BEDEA3F97E9A
SHA-256:	B3220E43420A21615A932915870167A21F7A34E64EBEF3323209E6A9553C1B11
SHA-512:	FCF13CD9528CB0CFE2AF66AEAD2D0029EB6B6514907DF318815C8F08F06E6F4D12299FDBB98B50E5DEA2A01144B43FAB062F880006E2BFF074BA3D2B4DBE7FCB
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/d?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n8&v=3
Preview:	wOFFOTTO..zl.......4........................BASE...0...F...Fe.].CFF ...0..^...rzyB..DYNA..b............3GDYN..c............^GPOS..d....G..$.....OS/2.......W...`].z.cmap..y....V......3head...x...4...6..%}hhea....... ...$...Ahmtx..v....!...H...emaxp...(..........P.name............a..(post..y........ ...2..............ideoromn..DFLT..cyrl..grek..latn...................W......x.c`d```5.z....o....P..\|rh0....e5.} ....$..g...x...j.@....'..L..~6.R.x,!b.+;."..`C..=...1.....u...,....!...h4MC14...f.Gw.d......u.Y...\....\|u\|.cL.7..s\|.......g..<1.k....9....9n..}w\|./...Mj~9>D.8v\|.O.o.[..?...TW.fy..dW....2...&/".gR..D.W..).X...r..':......0Ofc..M.".~'.......Y......h.....U....z"\|.../s3...H%O.~..un.2Y..e.Sj.s..l..m......i..5.+..+.{q0.Fx.....%.0C...<..%.9.]...........f.6/...c.....v.y..n...934]2.....C......n...C...4B..qA......^'{..+....nl.%O.[......o.vNqgI....xZA]...S....].....5....=....T.5\|.ghs.....kz..U5...{%Y.g.\|j.3`u]D..J-..x.c`fbeV``e``.b.```...q.F..@QnNf&..&&....v.<#..8.8..)..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[5] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 66508, version 0.0
Category:	downloaded
Size (bytes):	66508
Entropy (8bit):	7.994636853689064
Encrypted:	true
SSDEEP:	1536:4p7762bluKjsVQJU/x14nXWjvxpGeDKTeEPiBlnQcA+yWB:q362bluKjqQWr4nG7xpP2PiEz0
MD5:	49B061D6468547558176037211AA630C
SHA1:	B02FD5987ED77AF837699BB13C7E838018943423
SHA-256:	F89C62C68380B4BB548E4E24E284348FE9E98730F54F7E0C8942F6AA3BE9DA37
SHA-512:	406D0D0BF1A669E16B9CA101B2DA10C222BBB780DF7B2CB235E2C9F765351846F2A94044C55B0080B875E951FC87462A76B29BE8CD4605EB4D462D321347A490
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/eaf09c/000000000000000000017703/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
Preview:	wOFFOTTO....................................BASE...X...F...Fe!].CFF ...L.......dX.\\DYNA.............GG9GDYN.......1...a....GPOS...P..#...THAH.5GSUB.............0.OS/2.......Y...`].y.cmap...x...S.....lgasp................head.......5...6..%ghhea... ...!...$....hmtx...........xg.P.maxp...D.........^P.name............E..post...d....... ...2..............ideoromn..DFLT..cyrl..grek..latn...................Y..............x.c`d```5._.._<..W.f..@....^0....~.).......@.....N...x...n.@.....!.V,.@.cGV.FB$m..j.H..6N<i..`O#...@..X.$<......#g........x....^}.-.x.S..t1.\|......,=.b...............S.J\|...e..s.O......;.]j>z>D.\|.\|.W...1...R.b.....}muQ..ra...R.3)Fy......T..1...s..c.g...d8..O....'M......FW...-...X..+c...H....t..].\|=.e"..R........o.fm.......:T.^Q..z...c(.S..........a..w.KN{.l...M]..tu9...k.b.L.N...v...Y..R.[0....1...C*/..8.^...GM..r....jvfx..<.o..t.P.....=Kv-.kr..n.....5.%.9].>q......f:.3<C.e9.-5.:Yz4O....:e....+b.}.oS..1x.c`f.........).....B3.1.1..E.9..XX

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[6] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 66304, version 0.0
Category:	downloaded
Size (bytes):	66304
Entropy (8bit):	7.993959805787878
Encrypted:	true
SSDEEP:	1536:VeO6ShUivo8vaO8pnTzDOTXL/kxtcA+uDWB:p6DJWaO4iT7/4tzk
MD5:	9E6E819AE9D8993A2B10353EFF16497D
SHA1:	1410161D0CA8CA3966897CAB50E45A14B721C056
SHA-256:	81B4B3BC1EFD4F08F212308D9727BC21A40E38B5464B6B25EBDE1B2E24D13F05
SHA-512:	D9D88E8987EE2F45BFA0B211AAA7DFEB9C39718E9A037FAE625AF4E6806E04D4C8316B58363EEA93E9BA6C23B6F514925D4841C95CDFB103693688D5EFC71DAB
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
Preview:	wOFFOTTO...........D........................BASE...X...F...Fe(].CFF ...T........6...DYNA...P.........gG9GDYN...T.../...a... GPOS.....#...T.;..GSUB...0.........0.OS/2.......Y...`[.t.cmap.......S.....lgasp................head.......4...6..%`hhea...(...!...$....hmtx...........x..].maxp...L.........^P.name.............8I.post........... ...2..............ideoromn..DFLT..cyrl..grek..latn...................`..............x.c`d```5.{..9...+.3........P..?.?....1 ....$.._..!x..An.@....I..jo0.>...!..$H........`a{.=Ab.u.]...B..E..T..<...Y....3.{o....._.....k....x......c.Mj.......f~..B......9...s..A.V......g.Mj.{>F...\|..0.[.5>=.P..1X....}iuV..\|n..)b..R..TL...b.K].X.R...M..!..H...?....N...N...p..x..21...wS.J.T.m...;.Jv..Y....e..B.....kk....o.&.rn....z~u...%. .Bq\..X.`.M.b.....)p...Y-........r.L.`.5+..i>5.;.<..C3%'...U...X......D..{.!F.~...8=..c.~y.{w.s..{..U........._....~.j......)Sg.....R^:.u[v..m.....j.eJ.w.u.T.....Oy.s-..m.x..x.c`f......................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[7] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 67148, version 0.0
Category:	downloaded
Size (bytes):	67148
Entropy (8bit):	7.993959168595968
Encrypted:	true
SSDEEP:	1536:nxeF+rR7LkiELPhmOHVSAJTtSrsJBD7JVstEBSQm+aScA+tWB:wEkJzh7S2xysvPst2SQSSzR
MD5:	227960928668E1D655DBAAAE5FE23C11
SHA1:	128EF93AB71A18BA1DB0855C165D050ED8702037
SHA-256:	DFD5B4454E0BEF1EBBE0940DFA3BFB117BEE9E3DF150FA55BE633114816E7179
SHA-512:	BDB17CBB62E2C6B4AF737C7201214A563C27CDC38E1924B2C6EB351950F81A06A10E2DFDD783C82AB108D9758D77DA0A45BA82B08C210F4D8977A33AA6364B3B
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/4b3e87/000000000000000000017706/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3
Preview:	wOFFOTTO...L................................BASE...X...F...Fe.].CFF ...T...G...CP...DYNA............G9GDYN......1...e. .GPOS......#...S4...0GSUB...x.........0.OS/2.......Y...`^B{.cmap.......S.....lgasp................head.......4...6..%phhea...(...!...$....hmtx...........x.nD.maxp...L.........^P.name...............]post........... ...2..............ideoromn..DFLT..cyrl..grek..latn...................U..............x.c`d```5.2)1O........(.p>9..F.W.....5........;...x...n.0....'E..}..{hZ..8...@29.....~hH....;t.#.......y..@.(.5.!.!....RW.............[x...G....65[.......z~..A.?X...rU......s....#......<{>F...\|..2.;X..<.P..1Z....}eu^..bi.)c.WR..L...Vb.+]..l.W...1..e:...,.#.....z<.:.S.:.....E..........P*...c....T..6..T.. .d..HF.....X...v.~......G........9. .Bq\.FX.`.M.c....s..e....h.3v.....8.fH....4gM..+...X..R....Y..KD....D.......?..=N.<..._.........y......C...U....[.....~.lN.~.....W..{.\^;..?.._..a...T...t.....K.Y....}...2..x.c`f.`na`e``.b.```...q.F..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[8] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 24744, version 0.0
Category:	downloaded
Size (bytes):	24744
Entropy (8bit):	7.978627515034273
Encrypted:	false
SSDEEP:	384:EVkksCq/KOwmOt8IEOsyhgjzfwTJsPj6V9teCsx/Abr2k88CDW001VEKHUM7Ozip:qktXUt8he8UheCsx/AhKW0CUUV
MD5:	A14F6E1E3181DC10FDB66D2A7FB54CA7
SHA1:	605808488DD7FEC481400AA948F80E66189D25B5
SHA-256:	A4B8520DF89E973A968FCD3CF78F742E073EA9645D03ACCF360EB4AB5E6E1001
SHA-512:	E741918EF1EC6A3C0B87D996245945AEA9DB8C7D798352756F409A5E519BBF89EBF8F6AFA1E1A71D5C24C4E1C364F7C2EF38622C0897F852C6E9C7E6C27BBE29
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/1da05b/0000000000000000000132df/27/d?primer=7a5a436c948772f5260024dfadc8f7cd849e1448f8bf41ba74a247e8e46f3aee&fvd=n4&v=3
Preview:	wOFF......`........l........................DYNA...$.........D..GDYN............L.i.GPOS..........G..9..OS/2.......[...`\|.M.VDMX............l.tPcmap.._.........!k`Tcvt ...H...........tfpgm...`.......s.Y.7gasp...d............glyf..&...4...e..V .head...l...4...6..M.hhea...........$....hmtx..Z........(.G$nloca..\...........Jmaxp....... ... ...nname.............!.,post..^t...l.....moprep...T...2...2....x...S.X..D.s.X...Vc....jl5....m.m{:...3.....#..C.P..WB..!..K8}...'.>...6".l$"....b....F4}$.m4b...ic...$....866q..8.q.o.@o.OB..DzCB..D$..I..$!.MJr.;).d...I... .MI....zAj..4..s...#.MO&=#..mF..)..j3..f!.....6.9....c.... .....6..ln..!y(`.RP..G!....Et.....(f.S\.(B.[...K1J...RFw(AY[.r.M)...T.e..[...-Ge.<Ul...T..Q.V...BM].*.l5j...ckP.......m-....ih......S.&.>Mu..4..in..B.iLK.V.).u.f...i...mI{..:..t......mK...:C{...t.i:..v...L/....mW..n..I......N.....mo..8.0..a.......l...(..a.2..b..0..v.ct......g.3^....;..:.(&..L.c.....T;.i..8B.x.....>&2.Nb...l.e.s.T.j..oCX`..P...";...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\d[9] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 25284, version 0.0
Category:	downloaded
Size (bytes):	25284
Entropy (8bit):	7.98201537948979
Encrypted:	false
SSDEEP:	384:XVkwjUeZrzDGdbpwvwrcsOGkps3SNPnvNFbwW8yTqXCrfenp/W0BEpFc2N8F2cp:lkaOdbSo4zAYfV3jfE5Bfh2cp
MD5:	3A472B1A078B7B653C744CC55FAA5219
SHA1:	E9949514223E35D4A1E0515A312EC3664DEFDF33
SHA-256:	8812CEB05FB855A78850BB1907BC621FC487CD6D54760AC8D821D760D3BBB9E3
SHA-512:	DA09A18AED6A3C44F5009410D03623A8200ABF224AF33DDBFE34D3736AF96C6847D7A9A1CF0D94839C9ABB9546E1C7F5BCF6C305132B97BEFBD84A535F1399A7
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/d?primer=7a5a436c948772f5260024dfadc8f7cd849e1448f8bf41ba74a247e8e46f3aee&fvd=n7&v=3
Preview:	wOFF......b................................DYNA...X.........$..GDYN............h;.GPOS..........I.m2EBOS/2.......[...`}7P.VDMX............l.tPcmap..a.........!.`pcvt ...H... ... ...Kfpgm...h.......s.Y.7gasp...l............glyf..'D..5o..d.lN..head...t...4...6.RI.hhea...........$....hmtx..\....!...8....loca..^..........k..maxp...8... ... ...cname............~p.[post..`x........F..Jprep...d...U...z...%x...S.X..D.s.X...Vc....jl5....m.m{:...3.....#..C.P..WB..!..K8}...'.>...6".l$"....b....F4}$.m4b...ic...$....866q..8.q.o.@o.OB..DzCB..D$..I..$!.MJr.;).d...I... .MI....zAj..4..s...#.MO&=#..mF..)..j3..f!.....6.9....c.... .....6..ln..!y(`.RP..G!....Et.....(f.S\.(B.[...K1J...RFw(AY[.r.M)...T.e..[...-Ge.<Ul...T..Q.V...BM].*.l5j...ckP.......m-....ih......S.&.>Mu..4..in..B.iLK.V.).u.f...i...mI{..:..t......mK...:C{...t.i:..v...L/....mW..n..I......N.....mo..8.0..a.......l...(..a.2..b..0..v.ct......g.3^....;..:.(&..L.c.....T;.i..8B.x.....>&2.Nb...l.e.s.T.j..oCX`..P...";...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	1.952456287520738
Encrypted:	false
SSDEEP:	24:EslvlQNp0eCeAuyAwNtmUc3lKFWoX6UwjobtSl554VqQBzttYtlbd6e2u:FYfCzuyAacQWoWjobtc4VqUztQlbIeB
MD5:	DC94F1054A50B313EE14BBD3D4BC1C0A
SHA1:	B871EFBBD59E202329352C18B775F7C5743AA8DE
SHA-256:	8E263FEF3E738AC1882B97A05CAAF21BBFFC0BDABDF4A7E8338453C18E1E90EC
SHA-512:	A66B30C2E23F0D43F06B7C6889892AF0975C79037FB145FD01E84D4FA04234CDF8B32ECEE8FE29FA5FD13DB682485E4EFC7B2F3E8B9D23BDC12586CE417AA080
Malicious:	false
Reputation:	low
IE Cache URL:	https://ims-na1.adobelogin.com/favicon.ico?cache_bust=6438c1a0529c9c
Preview:	............ .h...&... .... .........(....... ..... ............................................................................................8...........................................................8...................................Q...........#......................................."...@...@.......................................x...............H...................M...............x...............................................................................X...............s...........v...............X.....................................................................................................................................................................5...5...............................................................................................................p...........................p.......................................................................................................H...................H..............................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fb_icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	721
Entropy (8bit):	5.455821757791953
Encrypted:	false
SSDEEP:	12:TMHdPhfMi/nzVJ/KYf3fNO6rHnO/8+e84qKVfpGLQpJlZaI:2dRMATLfPNOyu/8T84HfkkL
MD5:	CF3563A52BF1F58533D8648C4F4CA31B
SHA1:	F773CBD7E886E8FED5593EEDEDD4EC229C17FF5B
SHA-256:	EDB1AF2C2EB8815B531B3857F96ABC75AFD256CC4C1E092A4F48627ACD501BE0
SHA-512:	192DE5AEE9266DEA9FEB8AE7761833ADA5B855CC52A14273FB1C1B53150536F4AD699F8FBC70AA2E84B1D198948B9B49CAB045BD5B98278F827A129EFCB4C514
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/fb_icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="28px" height="28px" viewBox="0 0 28 28" style="enable-background:new 0 0 28 28;" xml:space="preserve">.<style type="text/css">...st0{fill:#82919B;}...st1{fill:#35414C;}.</style>.<g transform="translate(1996 66)">..<circle class="st0" cx="-1982" cy="-52" r="14"/>..<path class="st1" d="M-1978.9-52h-2.2v8h-3.3v-8h-1.6v-2.8h1.6v-1.8c-0.1-1.7,1.2-3.2,2.9-3.4c0.2,0,0.3,0,0.5,0h2.5v2.8h-1.8...c-0.4,0-0.7,0.3-0.7,0.6v0.1v1.7h2.5L-1978.9-52z"/>.</g>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\features[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	4.269194754448099
Encrypted:	false
SSDEEP:	3:0FzAngVUckrMhjXFFRn:0ugVUnAzFR
MD5:	3D7C680550C40CDB4031D476FE651C24
SHA1:	E0DA8AB8C1C1C0CB4326230A4244BC0B6C0377B8
SHA-256:	4979F8B9D5677E6EF3337106063EC1889988E1F1A6A8799C69BF06FEAB691629
SHA-512:	221CC59791796FE6CA3ABB47445BA2416D9BE5F09BC94246437153D392F13F7A1765DDD04416DD4DE34812077595D50464A9B2504C0786FA6647F827B3B65E81
Malicious:	false
Reputation:	low
IE Cache URL:	https://prod.adobeccstatic.com/common/features.json
Preview:	{. "appl": {. "temp_max_2018_typekit_font": true. }.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\feds[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19028
Entropy (8bit):	5.098210162103749
Encrypted:	false
SSDEEP:	384:88heJDYD+yQUAP/92Z6Rs/AQpol4+69503RYUSs8Ukz+OsUIKn:8pSkhKbolDPu
MD5:	C70C8BAC9D3D6A8EC2E8BC056758FA23
SHA1:	4A26ED16CCECB23D096A3FD7A64696B3597AD521
SHA-256:	8F9D83DD3407B16E0870E2E92165AFB66BBB14C7AF8BB80C2944B2C90210E52F
SHA-512:	ECED4942BFCC14D4A03E3FF05A03D1273BDFBA2724BBA4C6B7DCDEA56593AE4E9773B059E9E1EE284012E5FF67196946A79AAEC385B8C32504F226605C3B7719
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/etc.clientlibs/globalnav/clientlibs/base/feds.css
Preview:	/! feds v0.42.0 built on Thu, 03 Dec 2020 12:22:25 GMT /.[class=aem-AuthorLayer] #feds-subnav{position:relative}.Subnav-wrapper li{margin:0}#AdobeSecondaryNav{max-width:100vw}#AdobeSecondaryNav.Subnav-wrapper{position:absolute;top:100%;right:0;left:0;min-height:60px;display:flex;justify-content:center;font-family:inherit;box-sizing:border-box;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;transition:height .3s ease;z-index:1;opacity:0;transform:translateZ(0);overflow:hidden}#AdobeSecondaryNav.Subnav-wrapper--active{opacity:1;overflow:visible}#AdobeSecondaryNav.Subnav-wrapper ,#AdobeSecondaryNav.Subnav-wrapper :after,#AdobeSecondaryNav.Subnav-wrapper :before{box-sizing:border-box}.feds-header--rebranding #AdobeSecondaryNav.Subnav-wrapper{font-family:inherit}#AdobeSecondaryNav.Subnav-wrapper .Subnav-background{position:absolute;top:0;right:0;bottom:0;left:0;width:100%;height:100%;background-color:#f8f8f8;content:"";transition:opacity .3s ease;pointer-events:none

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\feds[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	106898
Entropy (8bit):	5.224620735236316
Encrypted:	false
SSDEEP:	1536:LKFGCROAkGCI5eHW1EE14Ifk75YRpYh1XcxfzTzkOFrCl+zasafXojdjmVL:LKTkC5eHWuuY1
MD5:	CB01D6CBCE3E3B1924A14913D9F2DF92
SHA1:	E29B94D5C4D5AE8EF7A636C684C62F7676B9F427
SHA-256:	F2D99E25631E043FC3D8928A5F446AF2B6E1F06C45020D07B74266587C487BC0
SHA-512:	7B1108681353C294EAB0CE774FD46593640DD14F86A9AB7FA9CD5E7022563CA754FCA1CE82546E22E95B45F2F0951A8C5A4DBE8B649E338E9927F4925E6AF41E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/etc.clientlibs/globalnav/clientlibs/base/feds.js
Preview:	window.__fedsSegmentation = '100';./! feds v0.42.0 built on Thu, 03 Dec 2020 12:22:25 GMT /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:r})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=167)}([,,,,function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};t.default=function(e){return"object"===(void 0===e?"undefined":r(e))&&!Array.isArray(e)&&null!==e}},function(e,t,n){"use strict";Object.defineProperty(t,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\free-v4-shims.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	26701
Entropy (8bit):	4.829785000026929
Encrypted:	false
SSDEEP:	192:bP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:Ohal4w0QK+PwK05eavpmgPPeXD7mycP
MD5:	2E4C3DA4EAE1C876A281D6CA5A7A5B4C
SHA1:	92AD084AAB53B7AA8C761CD66BDFB1F79B9CAED7
SHA-256:	CFFF9EA502195A7B96FE38DECA9188A59B758DEEECC2CD4E78AEA7D911E638C6
SHA-512:	F324F308649F47E3C25BF021C1776A4326750D04D9392B7F200331E806514B69E7579FB23D7B2107A3B30CB96926554C0DE13F45FD1397BDAE89938DD52A7EBF
Malicious:	false
Reputation:	low
IE Cache URL:	https://ka-f.fontawesome.com/releases/v5.15.1/css/free-v4-shims.min.css
Preview:	/!. Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa.fa-glass:before{content:"\f000"}.fa.fa-meetup{font-family:"Font Awesome 5 Brands";font-weight:400}.fa.fa-star-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-star-o:before{content:"\f005"}.fa.fa-close:before,.fa.fa-remove:before{content:"\f00d"}.fa.fa-gear:before{content:"\f013"}.fa.fa-trash-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-trash-o:before{content:"\f2ed"}.fa.fa-file-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-file-o:before{content:"\f15b"}.fa.fa-clock-o{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-clock-o:before{content:"\f017"}.fa.fa-arrow-circle-o-down{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arrow-circle-o-down:before{content:"\f358"}.fa.fa-arrow-circle-o-up{font-family:"Font Awesome 5 Free";font-weight:400}.fa.fa-arro

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\free.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	60351
Entropy (8bit):	4.728636008010348
Encrypted:	false
SSDEEP:	768:OUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSz8:OU0PxXE4YXJgndFTfy9lt5Q
MD5:	319D424BA89A84BBD230A3B5F7024193
SHA1:	1AE1807CDED8F2E41D2541BCCA8E0D7077FBA6F4
SHA-256:	4F02BD6F018D6F08C37C39F2D114101BEAC342C2C065046635E5ED0C42853590
SHA-512:	A68CAB17CCD1C4DDEAD9124B75CF0CF0C12C4E914902AECE79DCC4C42167B58B565467F20F72C48DFA85490F1895F89F074C85E825D548AD12410741A3302E54
Malicious:	false
Reputation:	low
IE Cache URL:	https://ka-f.fontawesome.com/releases/v5.15.1/css/free.min.css
Preview:	/!. Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pul

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\head.fp-d733b186bf3847fbed52f6547bfea70b[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with NEL line terminators
Category:	downloaded
Size (bytes):	124291
Entropy (8bit):	5.310559379343546
Encrypted:	false
SSDEEP:	1536:A52bb2xH+TkacuoGOHpZzMQqgQ9TLHSNsEzwW4VKKRJxJfwPf:IxH+mXr092sBBs
MD5:	D733B186BF3847FBED52F6547BFEA70B
SHA1:	5C9B4F821852EC8C404BDC27C869745FDA724DB5
SHA-256:	A6778AFE5F72258A3B2E2306F65E5EC8232E02865F25D222801A83837F5DBB5A
SHA-512:	428BE6F94609F89D90B8201D1B8B29E860E5975E2437E6D3009C9203D9220501D451061D3ACA0F9FFC0A090C37379EDA4DFC9529FA0B455B0617D57C3043CCF9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/etc.hawks.dexterlibs/dexter/clientlibs/base/head.fp-d733b186bf3847fbed52f6547bfea70b.js
Preview:	!function(e){var t=window.webpackJsonp;window.webpackJsonp=function(n,o,a){for(var s,u,c,l=0,d=[];l<n.length;l++)u=n[l],r[u]&&d.push(r[u][0]),r[u]=0;for(s in o)Object.prototype.hasOwnProperty.call(o,s)&&(e[s]=o[s]);for(t&&t(n,o,a);d.length;)d.shift()();if(a)for(l=0;l<a.length;l++)c=i(i.s=a[l]);return c};var n={},r={6:0};function i(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=n,i.d=function(e,t,n){i.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i.oe=function(e){throw console.error(e),e},i(i.s=507)}([,,function(e,t,n){var r=n(13),i=n(8),o=n(34),a=n(32),s=n(45),u=function(e,t,n){var c,l,d,f,h=e&u.F,g=e&u.G,p=e&u.S,v=e&u.P,m=e&u.B,b=g?r:p?r[t]\|\|(r[t]={}):(r[t]\|\|{}).prototype,y=g?i:i[t]\|\|(i[t]=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\icon_A[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	623
Entropy (8bit):	4.881419291901656
Encrypted:	false
SSDEEP:	12:t4NafJ47ZRaWUPHdcv7tvzj3LuftE/5M/RPRujBkm01DN+18KBEIKjHRkR:t4NafC7ZRwcvN3uO58DudkV1J4bEfxkR
MD5:	2BC6C6096FC57B8F9999407382901DB4
SHA1:	DDA7EE9A9AE534ADDC5F037939AE5CD136B3A72E
SHA-256:	DCC3FD9EB011AD26AE7AFC111D1BEED0882E74CBF6235CB229D4F303A4927744
SHA-512:	69E20CC5D221115B50BD2638F4741C2ED9CB12E88B03BF85915E9A2121D4C4558205A75A63428BB96BF5AE54353B7A701A08D7B26A79A9C1258AE4CFA5A4FAA3
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/icon_A.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="95.971" height="93.37" viewBox="0 0 95.971 93.37"><defs><style>.cls-1{fill:#fff;fill-rule:evenodd}</style></defs><path id="icon_A" class="cls-1" d="M1001.09 2213.33l1.61-8.59h-2.15c-3.357 0-7.519-.4-8.19-3.76l-11.814-81.04h-14.5s-24.433 44.14-45.375 79.7c-3.222 5.5-6.713 4.7-12.351 5.1l-1.611 8.59h34.233l1.611-8.59H940c-5.37 0-8.86-.27-8.86-4.03 0-.67.8-1.74 9.531-17.57h32.488c1.88 12.74 2.283 15.69 2.283 16.63 0 2.15-2.014 4.97-4.431 4.97h-8.457l-1.611 8.59h40.144zm-29.673-39.18h-25.238l18.392-34.35 3.221-6.98.135 6.84z" transform="translate(-906.719 -2119.94)"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\json[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	91
Entropy (8bit):	4.97748276144945
Encrypted:	false
SSDEEP:	3:GvxKU1cCTW5QofGC48F9qRwupfFtOkBn:GvxPBtCwbZfO8
MD5:	B2CC1EC0BE33CAAADB3BB5AD5293CC5F
SHA1:	8507A8A88337DCE21AE9DB84F2A6A09EEB258750
SHA-256:	109677BB3AEC3E45AB22C7A2BE18A4F1EC2284107BB53D78DAA2BD54665CDE12
SHA-512:	AEED8F7C6066A55C574F7F1B6860FC1DC17CC25DE876D18DB88390D9964D71F04FD85491A1AA4A9C9B219C18246D2DE2935F0943F00224A260FDFFF07DDB4641
Malicious:	false
Reputation:	low
IE Cache URL:	https://geo2.adobe.com/json/?callback=feds_location_16104170941963635
Preview:	feds_location_16104170941963635({"country":"CH","state": "ZH","Accept-Language" : "en-US"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\landing-animation-video[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 470 x 340, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	19468
Entropy (8bit):	7.966874592041773
Encrypted:	false
SSDEEP:	384:x5OgaJG9RVRdSACtWM6K+SD9KxuNjkECnDizOlLLLLLLLW:x5OTedUtWPDkMxYjkECDC4LLLLLLLW
MD5:	A73501E973CF2DB8F89820A7DEFA3675
SHA1:	43AF56595A9D4008085691E083D54E05F720B53A
SHA-256:	8179A36F70448CE537B697F3D266E57A61E65ACF34563E3878A1B3240FDFE22C
SHA-512:	E7316B973BC204CF45C5A22DE1A5E24692325EFD149B94522CA0F48273FC7F4E9B01123E0F8B40A646BD945F82C7CA77DE33B1C085EF2C417826161FEE22F6DB
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/landing-animation-video.png
Preview:	.PNG........IHDR.......T............PLTE.....!...... .... !.........0$'.......!.. .......,...#..+..$...,....&..z."(..}0$...0..,..H....-..2..v-"N'"m).8..z1&...A!.\-'r+ ~.!n3u1'O..C..f2,a-'p+!; .>..F".w3}2'......]!.3..5..v+.......8.....qqrf&.<..4.....556t4+...z5+J%!...i* ......Y!.......7.....$#%_&.3 .U..O/,j1)q0&+..p6./"#T&c&.A........X,&e"F.....\|.!...Q($Z&...._]_V("i'.Q .n0&T#.h.&....\|}..WUWb#.xst++-<<>^;8...NLML ....ECE...V0,%. kJF.;/..~....xr.YQ2/1....utdcdkjk.jb.........B(..\|eWXzLF.LB..PCBtba.\X.hb.........I.IDATx...........E.G...'Hk..$.IZ..&iM..5Ik..$.IZ..&iM..5Ik..$.IZ..&iM..5Ik..$.IZ..&iM..5Ik...k..m.0.$O..k....L.(.X......H....!~c}Iyc}Iyc}I.....S>.,..\|\|....;&e.b.`..k4..Ol.`...s]q3....R..8..8Fc$...r....h...X....r=...9g,'.~0....K.p.e...+..b]..,>.....)P.:.{.T.b.W..2..p..,...Y.F.+O.Q......9Vr........,..M...!...JD..<C.Bpc..#.dQ!.g..+bZ.Y.a.....P.V..4.F.2'R...K..>V.q..Xy.=V..u..%....En%V...X..]..u..:..U ....^&..$'.zV.^#.....m%B.....+..Vj....j~....Na.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\legal-localnav[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	29858
Entropy (8bit):	4.9533284244865765
Encrypted:	false
SSDEEP:	768:MqfVjD9my3ExlaZ9bY/MKOIoLmsLaTPoRhxfHHPJg7K6tTWlIWJal0J4WWn1l8T+:Hmy3Exn
MD5:	0864DF381527C65B104D152338757726
SHA1:	CA49A4A2E2576414B9580976B8E3FB47015E0A29
SHA-256:	226FFA639F1B18B3CF03BCC49AE3224040C6C1A80506391AD92AFAADDAA19325
SHA-512:	70B97B09D7A8F4688344B3AA8DFA1EC612F0A0B138871DEDF2E9C9D287A73E67B60C53A237E8573E83B560C52D867D64B2714B6477B0799E5A22D5BFE2A9DDBA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/services/feds.res_1.css/head/en/acom/corporate-mega-menu/legal-localnav.css
Preview:	/! applauncher v0.42.0 built on Thu, 03 Dec 2020 12:22:25 GMT /.#feds-header .applauncher-element{display:none}@media screen and (min-width:600px){#feds-header .applauncher-element{display:flex}}#feds-header .applauncher-element .app-launcher-container{display:flex;align-items:center}#feds-header .applauncher-element .app-launcher-container .react-spectrum-provider{position:static}html[dir=rtl] #feds-header .applauncher-element{display:none}#feds-header .feds-appLauncher .app-launcher-overlay-container{top:0!important;left:0!important;right:0;width:auto}#feds-header .feds-appLauncher .app-launcher-popover{border-top-left-radius:0;border-top-right-radius:0;border-bottom-left-radius:4px;border-bottom-right-radius:4px;overflow:hidden}#feds-header .feds-appLauncher .spectrum-Popover-tip{display:none}#feds-header .feds-appLauncher.feds-focus-ring .app-launcher-icon{outline:none}@media screen and (min-width:1200px){#feds-header .feds-appLauncher.feds-focus-ring .app-launcher-icon{outline:2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\login[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	39109
Entropy (8bit):	5.3930632613197576
Encrypted:	false
SSDEEP:	768:2l1lHt/JNVFGJIeNI9ReC0bG5woJhEZTvjgDMiB+22hy2D+LSpcFjgp:cFe0erbGYZTvjkM22hy2Dapjgp
MD5:	2467117109BED7652AAB785C050E535C
SHA1:	80F085CEE73A3985CB17E1BD775C42A67FAE85EA
SHA-256:	56165DAE7A3F7C97EBCAE25E27ADA193FCD70C5D9C8B49F222755247251D8F4B
SHA-512:	F5154F536DD6533B0E0AAE8A594EA871FD2E25C09CD56A151CE22FB03FA4494DE6E373783978630098DF093F15F4B050E8E9F1E1CD082C15C66CE8B2187AB32D
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/sp/login?r=reader_page_bumper_createyourown
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>. <script nomodule>document.location.href = '/unsupported';</script>. <title>Make Images, Videos and Web Stories for Free in Minutes \| Adobe Spark</title>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width,shrink-to-fit=no,user-scalable=no,initial-scale = 1.0,maximum-scale = 1.0">.<script type="text/javascript">.;window.NREUM\|\|(NREUM={});NREUM.init={privacy:{cookies_enabled:true}};.window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var i=e[n]={exports:{}};t[n][0].call(i.exports,function(e){var i=t[n][1][e];return r(i\|\|e)},i,i.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var i=0;i<n.length;i++)r(n[i]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var i,o=t("ee"),a=t(22),c={};try{i=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof con

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\login[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.569662935032595
Encrypted:	false
SSDEEP:	3:QIk4Xvwg3e/QgY1ALD6034UQZ6WVSy1ALD6034UQZ4n:QI5oPX7L33lAVwL33ltn
MD5:	73CA2C624770D1F40A24AECE58118E5C
SHA1:	FD8269E651875A5E4B534122C156FF710CB1AF0C
SHA-256:	5FEB6D12A4635F78024E5770685A05CA419A146721A40FBF24735508B79F1718
SHA-512:	BAFB1B056EF5FBC04EF70C4BB102D742FAF2A4284A78599CCAA79FC166FF6F63CC34CDEC7C4972DAF95E208BE27312DA99090AEDCEC681FF4FCBD8790D7D8F83
Malicious:	false
Reputation:	low
Preview:	<p>Moved Permanently. Redirecting to <a href="/sp/login?r=reader_page_topbar_createyourown">/sp/login?r=reader_page_topbar_createyourown</a></p>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\m-main-landing-page-script-d84daaa2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	139437
Entropy (8bit):	5.494921812638869
Encrypted:	false
SSDEEP:	3072:QcGHkrrBk9yOtRKhwUxbutjTtvUK4ONmPuj3:QgZOtUButjT9fNmPuj3
MD5:	96EF11100D6A0C1896DC072E6D8BC98B
SHA1:	8E9980A535B60ED7CD9ECE76386F6944E94F00F6
SHA-256:	1A71F5FB3121ED87108FBCD043E76FCAC72EB2469ADC6A19D739897035B12C39
SHA-512:	4F0F78F2EDA6CD3A95C30680277253AE171A3F303867A57A5E2C6966AA117EE8ECDA8C459ED748A8321361C48CA126D18CD5D7BD53E3150F1099A1BB67633BF5
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/static/m-main-landing-page-script-d84daaa2.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/static/",n(n.s=719)}({1:function(e,t,n){var r;void 0===(r=function(){"use strict";return window._prj

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main.no-promise.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	10741
Entropy (8bit):	5.442372384249071
Encrypted:	false
SSDEEP:	192:JtsMOjdwfVbwVhYeB8qfRiaAWfjIVHY7W35Qg6SF6gZhfRmlW1YDqs+qg:JtsMydwfVsVhYhqf0aAWfjIm70eVM6gH
MD5:	CCA018E06A68F94A49E79B2B87096FBC
SHA1:	1DC051BD56CA3E2B0ED6E95AE56FC449831062D3
SHA-256:	350A14AAA52348E4768E8146C3449D7789C92344C4537CE31CF137711E5A90E1
SHA-512:	A90B93282F61F721F40E8010D6B2F9D06017F622CA5CE21E370D55C4DB0EAEDDD8DAE114C79CB12223F2024E1BCED55903CC852DD36D42C14FA89D123DA1C448
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e=document,t=Object.defineProperty,n="replace",a=function(e){return e=e[n](/%2523access_token%253D.?%2526/gim,"%2526")[n](/%23access_token%3D.?%26/gim,"%26")[n](/#access_token=.*?&/gim,"&")[n](/information=[^\&]+/,"")[n](/puser=[^\&]+/,"")[n](/fnuser=[^\&]+/,"")[n](/lnuser=[^\&]+/,"")};try{var o="referrer",i=e[o],r=a(i);r!==i&&t(e,o,{configurable:!0,value:r})}catch(e){}var c=window,l=c.console.log;function d(e){throw Error(e)}var s,f,u,p,h,g,b,v,m,_=c.__satelliteEmbedCode,y=c.marketingtech,E="digitalData",O=E+".",C="object",D="array",N="function",k="sub-object not ",x=k+C,S=k+D,P=/^(.+?)((?:\[(?:n\|\d+)\])+?)$/,j=/n\|\d+/g,w=Array.isArray,T=0,I=y&&y.digitalData&&y.digitalData.debug;if(v=function(e){return typeof e},m=function(e,t){return e.hasOwnProperty(t)},(u=(f=function(e,n){var a,o=this;if(t(o,"_id",{value:++T}),I&&l(o._id+": CREATED"),t(o,"_pending",{value:{}}),t(o,"_listeners",{value:{}}),e&&o._set(E,e),n)for(a in n)m(n,a)&&o._set(a,n[a])}).prototype)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\marvel-landing-make-ecbefda6[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	88586
Entropy (8bit):	4.9429352848919414
Encrypted:	false
SSDEEP:	1536:r7Nl6XzknXfH3S0wx/tjhJzryVR8JyDDVbu5+griEff29+Z1NcJwLJ:r7NLnXfH34x/tntcQJ
MD5:	C51BFD573B61EB5E78D07F8D262BE0CD
SHA1:	6707635915134A5CAA892E3FE30B430AC017B4D0
SHA-256:	ECBEFDA6252C56EA65082E8BA6711AFF6A878AB640B9B05CBFB2BE94F7F16C96
SHA-512:	829C5A3BBF3C599536E380221C284891CB7A733088989A7C745891C4B785FFB327F193E7D37A4700E33891348FAF83D14223C6626F172D4E719D29E77A8C8DF9
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/sprout/css/marvel-landing-make-ecbefda6.css
Preview:	.glb-nav-menu{overflow:hidden}.glb-nav-overlay{position:fixed;top:0;height:0px;width:0px;z-index:-1;cursor:pointer}.glb-nav-overlay.menu-opening{transition:background-color .5s ease-in;background-color:rgba(255,255,255,0);height:100%;width:100%;z-index:200}.glb-nav-overlay.menu-opened{transition:background-color .5s ease-in;background-color:rgba(255,255,255,.75);height:100%;width:100%;z-index:200}.glb-nav{background:#35414c;position:fixed;overflow-x:hidden;overflow-y:auto;margin:0;padding:0;box-shadow:1px 0px 5px 0px rgba(50,50,50,.75);-ms-overflow-style:none}.glb-nav a:hover{color:#fff}.glb-nav::-webkit-scrollbar{display:none}.glb-nav-top{position:static;margin:0;padding:0;border:1px solid transparent;min-height:calc(100vh - 125px)}.glb-nav-btn{flex:1;display:block;background:none;outline:none;cursor:pointer;text-align:center}.glb-nav-circle{outline:none;border-radius:50%;width:48px;height:48px;margin:0px auto 10px auto;background-image:url(/images/plussign.svg);background-position:ce

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\oea2wtv[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	18099
Entropy (8bit):	5.584512782811729
Encrypted:	false
SSDEEP:	384:BpBRHbocz2tpIgIPs51iRm2lIew42noFeFsP9btiCtpIaCR:rBRHbocdq1iRm2XwMqsbbt6J
MD5:	026C32000BCF753D04904FE82B1DA103
SHA1:	97149751B32DF4EAB004D707B98268CAEF64FCCF
SHA-256:	4FDA26A98D79CB6E572D5F13AD88B4DC9DC9AB8B27A1BC575BD19CD42FA60677
SHA-512:	CEA496B81918C861E07964AAD32A009E067A37E6231D0900FBAB170C54B05536E96AC4FE655E7DCFAAA42649192FA215D90E6A41A1CC2D20FEB0BDB0E0AA7A4B
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/oea2wtv.js
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . lato:. * - http://typekit.com/eulas/00000000000000000001522d. * - http://typekit.com/eulas/000000000000000000015236. * - http://typekit.com/eulas/000000000000000000015231. * - http://typekit.com/eulas/00000000000000000001522c. * - http://typekit.com/eulas/00000000000000000001522a. . . 2009-2020 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typekit)window.Typekit={};window.Typekit.config={"a":"1655249","c":[".tk-lato","\"lato\",sans-serif"],"fi":[15701,15704,15705,15708,15709],"fc":[{"id":15701,"family":"lato","src":"https://use.typekit.net/af/bdde80/00000000000000000001522d/27/{format}{?primer,subset_id,fvd,v}","descriptors":{"weight":"400","style":"italic","display":"auto","primer":"7cdcb44be4a7db8877ffa5

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onz5gap[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	18234
Entropy (8bit):	5.586107998804451
Encrypted:	false
SSDEEP:	384:c2V02tpIgIPs51iRm2lIew42noFeFsP9btiCtpIaCR:FV6q1iRm2XwMqsbbt6J
MD5:	C0944B1E078945006A902E2BA31C3272
SHA1:	D94C6B38B4D0C4A56E90242005DC934192DB3012
SHA-256:	092E23755CBFFA1FE538835639AFCDB12915266E3C55C8C622D677C7BB5500F2
SHA-512:	A61D2E4ADA32604B558647C4FF8B20E46C5D2998B9A459EB7C440DE818D45538B46EE5F154E697BCAC364A5748D51D3C0974F30C48708CDB3EFAA04481E68A4B
Malicious:	false
Reputation:	low
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . adobe-clean:. * - http://typekit.com/eulas/00000000000000003b9b3f85. * - http://typekit.com/eulas/00000000000000003b9b3f88. * - http://typekit.com/eulas/00000000000000003b9b3f83. * - http://typekit.com/eulas/00000000000000003b9b3f8a. * proxima-nova:. * - http://typekit.com/eulas/00000000000000003b9b3068. . . 2009-2020 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typekit)window.Typekit={};window.Typekit.config={"a":"1655249","c":[".tk-proxima-nova","\"proxima-nova\",sans-serif",".tk-adobe-clean","\"adobe-clean\",sans-serif"],"fi":[139,7180,7182,7184,7185],"fc":[{"id":139,"family":"proxima-nova","src":"https://use.typekit.net/af/949f99/00000000000000003b9b3068/27/{format}{?primer,subset_id,fvd,v}","descript

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
IE Cache URL:	https://p.typekit.net/p.gif?s=1&k=oea2wtv&ht=tk&h=spark.adobe.com&f=15701.15704.15705.15708.15709&a=1655249&js=1.20.0&app=typekit&e=js&_=1610417072395
Preview:	GIF89a.............,..............;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\p[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
IE Cache URL:	https://p.typekit.net/p.gif?s=1&k=vtg4qoo&ht=tk&h=spark.adobe.com&f=7180.7182.7184.22474.10294.10296.10302&a=1655249&js=1.20.0&app=typekit&e=js&_=1610417090871
Preview:	GIF89a.............,..............;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\popper.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\post_v2[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	680
Entropy (8bit):	4.918914652895494
Encrypted:	false
SSDEEP:	12:t41szG/lfJ4jBbhYHEAhUYHm+1e8CzF6B7KTEhYHUMAZM/Ez9zYHPSWyCY:t412YJMLqEwUqYGB7KTYq/apzqPWj
MD5:	1A9AE61D17E8053F2A07BA9132510FD1
SHA1:	9894936F408BAB50F883AE8F5BB7D85BAB291DA4
SHA-256:	C0C090EFC40F2F4E81C30398052E7712CF2A70B3C547173AE675F60A81941FCE
SHA-512:	FC15E4FBDA4BB23341E245A275B9DCE42522CE16E9FD6D9DC5BC29CD7E59883DB64AF23402BB549A32F88B7647A7C7D9FC712E54B5AEE1DA2DF340B9EEEDE45C
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/post_v2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 56 54"><defs><style>.b{fill:#fabfbc}</style></defs><rect width="56" height="54" rx="9.914" fill="#370000"/><path class="b" d="M23.567 44.319L10.985 22.528l.8-.462 12.12 20.992 20.991-12.12.462.8-21.791 12.581z"/><path class="b" d="M11.785 32.2l-.8-.462L23.567 9.947l21.791 12.581-.462.8-20.991-12.12L11.785 32.2z"/><path d="M40.291 15.013H16.052v24.239h24.239zm-5.3 18.937H21.355V20.316h13.634z" fill="#fa0f00"/><path class="b" d="M32.777 44.319L10.985 31.738l.462-.8 20.991 12.12 12.12-20.992.8.462-12.581 21.791z"/><path class="b" d="M44.558 32.2l-12.12-20.992-20.991 12.12-.462-.8L32.777 9.947l12.581 21.791-.8.462z"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\privacy.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	20223
Entropy (8bit):	5.242286055522869
Encrypted:	false
SSDEEP:	384:G3gDf4hD0kswkP/TUyPydyCASyI2yWyOZyVVIKCXEdTvX6AyEn:G3mfuD0kswkP/TL68pyRFVyKQEl6AyEn
MD5:	7997F297B2476E9156A93EE5433CBB5A
SHA1:	DEA0CD133C2DF4392CD198350F54387425A7EF4D
SHA-256:	86F628996CD60C851A9B4A6A83C2F110D4CEC5C51A08F173844A3192EDD7FAC0
SHA-512:	C30398B9E8CEB2C71AC3338C78AF97653059B856C7BA8253E9E7994363E0BEA593F7D5422728F404429F0D50DB30D2CAFF99596FCB898BDD54FBC5A5A2AE330D
Malicious:	false
Reputation:	low
Preview:	/! privacy - v1.0.11 - 11-04-2020, 7:17:44 AM..ADOBE CONFIDENTIAL.==================.Copyright 2020 Adobe Systems Incorporated.All Rights Reserved...NOTICE: All information contained herein is, and remains.the property of Adobe Systems Incorporated and its suppliers,.if any. The intellectual and technical concepts contained.herein are proprietary to Adobe Systems Incorporated and its.suppliers and are protected by trade secret or copyright law..Dissemination of this information or reproduction of this material.is strictly forbidden unless prior written permission is obtained.from Adobe Systems Incorporated../..!function(){var e,t,n,o,i,s;e=function(){var e={};return e.isObject=function(e){return null!==e&&"object"==typeof e},e.isEmptyObject=function(e){var t;if(this.isObject(e))for(t in e)if(e.hasOwnProperty(t))return!1;return!0},e.isFunction=function(e){return"function"==typeof e},e.isArray=function(e){return this.isObject(e)&&e.constructor===Array},e.formatString=function(e,t){if("

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\privacy[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	242
Entropy (8bit):	5.112303491915906
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwol6hEr6VX16hu9nPjL2OJi+KqD:J0+ox0RJWWPmURT
MD5:	603135FFA99C99EBB6FFD7EF15DA8695
SHA1:	23A1A98130B2E61338488568BC33668B74D13760
SHA-256:	64162C4EB0A1C365FD77EF01458B6C7967AAE790E3E41ABE18ECBF7C7D210439
SHA-512:	FABF700B5CD145EA54862968220F841E107F0A871CFC9A34C100FDAB5B8761BE5B9C03CE425A849F0AEABFD2F72B675A2B617BF0698C55A8ED74F6CAC9887203
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="https://www.adobe.com/privacy.html">here</a>.</p>.</body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\s23062319308204[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 2 x 2
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0780023067505042
Encrypted:	false
SSDEEP:	3:CnwltxlHlrn:Xn
MD5:	AD480FD0732D0F6F1A8B06359E3A42BB
SHA1:	A544538683A2DFE574EEB2E358AC8FCC78289D50
SHA-256:	A1ECBAED793A1F564C49C671F2DD0CE36F858534EF6D26B55783A06B884CC506
SHA-512:	8717074DDF1198D27B9918132A550CB4BA343794CC3D304A793F9D78C9FF6C4929927B414141D40B6F6AD296725520F4C63EDEB660ED530267766C2AB74EE4A9
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,............Q.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\terms[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	108112
Entropy (8bit):	4.645837890945194
Encrypted:	false
SSDEEP:	1536:qNdN3IrPXnBo8y+i6Eb1BcythHKS9mxLpyATXtK5KIUvMwC:qTNGy+Pw1SyKhxlyAx0nUUwC
MD5:	53AB392AAA6822C5A434C53CFC1981C9
SHA1:	9F41CABA4B67549E2D73A9D24A9EA0800CA527A9
SHA-256:	97DEE2FA1A03A5DF00A8AB622384559583B64126545834D8DA877CD8F7F9D4D4
SHA-512:	E520E85B1AF0A72FDAB3D898DD4A5048BB7076BCDFA66DC00FB72D01135891154B32A017BCF38172764D656321D87C78687107D85144543AB8BAF8C6E1BBD18D
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML>.<html class="spectrum--medium" lang="en">. <head>. <title>Legal</title>. <link rel="canonical" href="https://www.adobe.com/legal/terms.html"/>. .. . . . <link rel="alternate" hreflang="en-IE" href="https://www.adobe.com/ie/legal/terms.html"/>. . <link rel="alternate" hreflang="de" href="https://www.adobe.com/de/legal/terms.html"/>. . <link rel="alternate" hreflang="uk-UA" href="https://www.adobe.com/ua/legal/terms.html"/>. . <link rel="alternate" hreflang="ar-kw" href="https://www.adobe.com/mena_ar/legal/terms.html"/>. . <link rel="alternate" hreflang="en-us" href="https://www.adobe.com/legal/terms.html"/>. . <link rel="alternate" hreflang="lv-LV" href="https://www.adobe.com/lv/legal/terms.html"/>. . <link rel="alternate" hreflang="en-IL" href="https://www.adobe.com/il_en/legal/terms.html"/>. . <link rel="

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\tw_icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1051
Entropy (8bit):	5.29113370354154
Encrypted:	false
SSDEEP:	24:2dRMATLfPNOyz/xe84rSirzMFzF4pq1MViX:cRMAvfsyzxYSGzGMw
MD5:	A9645E2FAB94BC08775B2DD5A1E8236E
SHA1:	AB10000C25CDBB71289F44DC32D74951641B934E
SHA-256:	E2465997C21F1565D371A097924D426F215BD9B12600F3FA750594CB3CEECBC1
SHA-512:	78456C6EC1930EE57A5319F7509F79DA3493B816019891131A5A577A558DB465755FAE5FE0CC475A7B4A8FB45962E659B57C905752D3C84893AD9BE77D8701ED
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/tw_icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="28px" height="28px" viewBox="0 0 28 28" style="enable-background:new 0 0 28 28;" xml:space="preserve">.<style type="text/css">...st0{fill:#82919B;}...st1{fill:#35414C;}.</style>.<g id="Group_2" transform="translate(1977 66)">..<circle id="Ellipse_2" class="st0" cx="-1963" cy="-52" r="14"/>..<path id="SocialTwitter2_32_1x" class="st1" d="M-1956.7-54.7v0.4c0,5.1-4.1,9.2-9.2,9.3h-0.1c-1.8,0-3.5-0.5-5-1.5...c0.3,0,0.5,0.1,0.8,0c1.5,0,2.9-0.5,4-1.4c-1.4,0-2.6-0.9-3-2.3c0.2,0,0.4,0.1,0.6,0c0.3,0,0.6,0,0.8-0.1c-1.5-0.3-2.6-1.6-2.6-3.2...l0,0c0.5,0.3,1,0.4,1.5,0.4c-1.5-1-1.9-2.9-1-4.4c1.7,2,4.1,3.3,6.7,3.4c-0.3-1.8,0.8-3.5,2.5-3.9c1.1-0.3,2.3,0.1,3.1,0.9...c0.7-0.1,1.4-0.4,2.1-0.8c-0.2,0.8-0.8,1.4-1.4,1.8c0.7-0.1,1.3-0.2,1.9-0.5C

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\unsupported[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	52715
Entropy (8bit):	3.854847894208248
Encrypted:	false
SSDEEP:	384:NQ12QZaWG3USpc9w0OIXqkU1nL/7dFs1HuChJ0GG98:N+2QZTLSpc9tqk4D7UM8
MD5:	21A2C82E326713E716FCB95995ADB449
SHA1:	ACD7A53CBC1230B9D7E4822FE88136FCE8D06C88
SHA-256:	F9EC51BDF066F8733796E888C6E1EA37A0E70F9BE1B5BEEDD077F63E850503F4
SHA-512:	36B5EDDF6508DF0F7E6D2659EB800F3FE7E848906F12AF638A904E88B5E6A6571562964CA7250D543D4759855375C544DC47372F6509F2CF3FBF12E433968272
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/unsupported
Preview:	<!DOCTYPE html>.<html lang="en-US">. <head>. <title>Adobe Spark</title>. <meta http-equiv="content-type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width,shrink-to-fit=no,initial-scale=1.0">..<link rel="shortcut icon" href="/images/sparkfavicon_v2.ico">.. <link rel="stylesheet" type="text/css" href="/marvel-core/css/marvel-ui-faf07216.css">. <link rel="stylesheet" type="text/css" href="/css/marvel-landing-unsupported-e2484d1a.css">.<link rel="canonical" href="https://spark.adobe.com/unsupported">.<link rel="alternate" hreflang="en" href="https://spark.adobe.com/unsupported" />.<link rel="alternate" hreflang="cy" href="https://spark.adobe.com/cy-GB/unsupported" />.<link rel="alternate" hreflang="de" href="https://spark.adobe.com/de-DE/unsupported" />.<link rel="alternate" hreflang="fr" href="https://spark.adobe.com/fr-FR/unsupported" />.<link rel="alternate" hreflang="es" href="https:/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\vtg4qoo[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	5382
Entropy (8bit):	5.186914243738021
Encrypted:	false
SSDEEP:	96:pbzQAnM0MYMRM+SN2M/h8hMt5wRa2rM8U:pnnM0MYMRM+SN2M/h8hMt5wRa2rM8U
MD5:	5FF8E08726757DBF23D94922406B15CC
SHA1:	62C2B380B6F8380242E39F45B111EF5267A579F6
SHA-256:	D615A7062DA0792AC7B8BFC84FE9F6EB6932510A5B58F04110BB845F9E4A0AF7
SHA-512:	E6CF30D99B785BCF2699907B7EA0D61DA0FC0C92C7CBD81993E535ADB090F6F4AC04B038F861E8BA2187CC0CBAF70C139C7B0071C81835456C92F29AF0C2999D
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/vtg4qoo.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . adobe-clean:. * - http://typekit.com/eulas/000000000000000000017701. * - http://typekit.com/eulas/000000000000000000017703. * - http://typekit.com/eulas/0000000000000000000176ff. * - http://typekit.com/eulas/000000000000000000017706. * brandon-grotesque:. * - http://typekit.com/eulas/0000000000000000000132df. * - http://typekit.com/eulas/0000000000000000000132e3. * - http://typekit.com/eulas/0000000000000000000132e1. . . 2009-2020 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2019-07-09 16:34:37 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=vtg4qoo&ht=tk&f=7180.7182.7184.22474.10294.10296.10302&a=1655249&app=typekit&e=css");..@font-face {.font-family:"adobe-clean";.src:url("https://

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\xfq6xbo[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	17129
Entropy (8bit):	5.5723956908054015
Encrypted:	false
SSDEEP:	384:v+8Ud2tpIgIPs51iRm2lIew42noFeFsP9btiCtpIaCR:G8UXq1iRm2XwMqsbbt6J
MD5:	BBF56AB2656AEEC8FE84C6E05DE2ECE5
SHA1:	24E5D81C8863673558B342CCE9C2824972C8474B
SHA-256:	504AE62F6C5935297097A8EB7D4309DE96A0EB6DA596AB36741B09E05987D592
SHA-512:	99AAEC92430EA3047ADC018164C0DDAA0E66DA44227CB124EFD108E3E58B8EC1A0F5387DB183A1A8E743204FA1EDD09AA42E8E2F2BFE80C2AF309ED2E5A09E69
Malicious:	false
Reputation:	low
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . pt-sans-narrow:. * - http://typekit.com/eulas/0000000000000000000124f3. * - http://typekit.com/eulas/0000000000000000000124f4. . . 2009-2020 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typekit)window.Typekit={};window.Typekit.config={"a":"1655249","c":[".tk-pt-sans-narrow","\"pt-sans-narrow\",sans-serif"],"fi":[6962,6963],"fc":[{"id":6962,"family":"pt-sans-narrow","src":"https://use.typekit.net/af/bb203d/0000000000000000000124f3/27/{format}{?primer,subset_id,fvd,v}","descriptors":{"weight":"400","style":"normal","display":"auto","primer":"7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191"}},{"id":6963,"family":"pt-sans-narrow","src":"https://use.typekit.net/af/841c9f/0000000000000000000124f4/27/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\xfq6xbo[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	17129
Entropy (8bit):	5.5723956908054015
Encrypted:	false
SSDEEP:	384:v+8Ud2tpIgIPs51iRm2lIew42noFeFsP9btiCtpIaCR:G8UXq1iRm2XwMqsbbt6J
MD5:	BBF56AB2656AEEC8FE84C6E05DE2ECE5
SHA1:	24E5D81C8863673558B342CCE9C2824972C8474B
SHA-256:	504AE62F6C5935297097A8EB7D4309DE96A0EB6DA596AB36741B09E05987D592
SHA-512:	99AAEC92430EA3047ADC018164C0DDAA0E66DA44227CB124EFD108E3E58B8EC1A0F5387DB183A1A8E743204FA1EDD09AA42E8E2F2BFE80C2AF309ED2E5A09E69
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/xfq6xbo.js
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . pt-sans-narrow:. * - http://typekit.com/eulas/0000000000000000000124f3. * - http://typekit.com/eulas/0000000000000000000124f4. . . 2009-2020 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typekit)window.Typekit={};window.Typekit.config={"a":"1655249","c":[".tk-pt-sans-narrow","\"pt-sans-narrow\",sans-serif"],"fi":[6962,6963],"fc":[{"id":6962,"family":"pt-sans-narrow","src":"https://use.typekit.net/af/bb203d/0000000000000000000124f3/27/{format}{?primer,subset_id,fvd,v}","descriptors":{"weight":"400","style":"normal","display":"auto","primer":"7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191"}},{"id":6963,"family":"pt-sans-narrow","src":"https://use.typekit.net/af/841c9f/0000000000000000000124f4/27/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\0135[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4003
Entropy (8bit):	5.557881535362419
Encrypted:	false
SSDEEP:	96:s/MkkLbbNvClIxQy4RciK7aNYHYDYAQtws0hj6:s/MF9vClISKuNYHYDYAQCV6
MD5:	8817809F3E17FD094EBD8A513F9ED572
SHA1:	5851619BAD361F8D93124FD4B8C394AC8FE0AF73
SHA-256:	88E1CE0610EA70EB75D61D470AB4D45F3E62ED4C80CCC5753D144D361F951B06
SHA-512:	C3DDBFE96591F061743B7853269C9D94C5C86FAC102CD9C160FC2CB59DEE6F8A1CCFE88C51716485C8A6F6CBD3E4D825AFA540DC94FD6B9B0EFB8DBE21E89DEC
Malicious:	false
Reputation:	low
IE Cache URL:	https://script.crazyegg.com/pages/scripts/0088/0135.js
Preview:	if("object"==typeof CE2&&(CE2.uid\|\|CE2.data))throw Error("CE: multiple userscripts installed");"undefined"==typeof CE2&&(CE2={}),CE2.userDataToJs=function(t){for(var e=[["uid","uid"],["snapshots","snapshots"],["status","status"],["flows","flows"],["pageEdits","page_edits"],["sites","sites"],["USER_SCRIPT_VERSION","updated_at"],["__CE_HOST__","ce_app_url"],["COMMON_SCRIPT","common_script_url"],["COMMON_SCRIPT_SECURE","common_script_url"],["TRACKING_SCRIPT","tracking_script_url"],["TRACKING_SCRIPT_SECURE","tracking_script_url"],["AUTH_KEY","hud_auth_key"],["HUD","hud"],["GLOBAL_IP_BLOCK_LIST","global_ip_block_list"],["IS_USING_IP_BLOCKING","is_using_ip_blocking"],["TRACKING_DEST_NEW","v6_tracking_dest"],["TRACKING_DEST_NEW_SECURE","v6_secure_tracking_dest"],["DEST_V11","v11_tracking_dest"],["FT_DEST","flow_tracking_dest"],["PAGE_VIEWS_LIMIT_REACHED","page_views_limit_reached"],["NUMBER_OF_RECORDINGS","recordings_number"],["RECORDINGS_ACTIVATION","recordings_activation"],["ALLOW_RECORDING

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\2805NDRA41U.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	39438
Entropy (8bit):	7.8000753018608435
Encrypted:	false
SSDEEP:	768:MOdTz0+SHdgN0SyP3nF3ym6sPkgRNeLBvvY+Qgq:fFEgN0H3nFCPwkgRNicJ
MD5:	154789A9E42E27E21CFA982F93EF2796
SHA1:	DE68528343DDCD6980D7A5A57636BBA24A4BA098
SHA-256:	FA5E6D94DA4FC3D58B2B76035313B24435F4C5DB175EE5FC8A1D4655734AD7C1
SHA-512:	698C27AF98009250A4DAF4BB55E4A578E5E9A97F2EA9569486DAEDB33763912E95FCF07FB6589F4D8DD92739183590AAF4AB909D81A66D43526FEE924B5F2B47
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/b1f9ba8a-445a-4db0-bd99-7b93436e2be6/artwork/c4e7de8d-0286-415e-beb6-2040f30beb58/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 16:10:27.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........226........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280YS8RRKZZ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	45682
Entropy (8bit):	7.831746673453925
Encrypted:	false
SSDEEP:	768:BBkMllllllll1ex2DAf7iDh2ifcWrEhmOdZGpHqSEl63guOcVXDYc99P8FEa1:ztW7iD8idrkmWMwkwuLqc958FEa1
MD5:	68FB5BC43C6652ED23D9C3618CBFB99D
SHA1:	8B0E3093C8E174503279557FDFE72F766952CEDF
SHA-256:	498837C2B04D45A622C4C0547C9B396FAAECB517EED35472E870A9BD49278A18
SHA-512:	E55C83CE8693DCCE52FFE64B2F742B4F4F8867A3D585FBB15FAA8F431B245D060F3B1E6BAE9C836C34F6886DFB7532F103403D8CC5FA47E5649944A11CBDDC4D
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/7dee5e45-a21b-4947-957d-3fac19fa9103/artwork/b0e2262e-754e-4cbc-a0bc-45e5710b6815/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:07:11 15:23:58.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	22410
Entropy (8bit):	7.576748057291345
Encrypted:	false
SSDEEP:	384:BcnBnfXiNtI144sOXKwii/wa/41xlb6QsskqhiY5aOwgB:BcVXX5X3i2/4Fb6Qso5IOwgB
MD5:	FEC3E988E57190143B4F194BCFC44660
SHA1:	083FCF67D25DE3A87262FCE39CC572AFD1C1440C
SHA-256:	565404DC4C28E4668FCEF7193374782AF3F1ED07914AD5FC1B6D24E38F363596
SHA-512:	7DA904C91BDC1FFEFC4E6A95712B3FE8EAD5B9CE12B46A463376170DA54899C4275147DCBDD78C6C64631C310D877EF7D416026CF4A614D36D4686E64D64FAAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/bdfd09bd-496b-4739-bc56-a3bc367018ca/artwork/86a044fa-1b9f-45d2-9bda-65271a3b4db0/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:11:22.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	29383
Entropy (8bit):	7.656911531233973
Encrypted:	false
SSDEEP:	768:MgbQhCBjlU/BKC8mOEfe+p6s4K3WnpUI+TmbgSrr6BUa:1rhB+scmhvW
MD5:	24460B54F548BC1E337F84CD6EC88B61
SHA1:	38CA20C1CADB0F717B81FE7C56407F7D77ACED97
SHA-256:	E2473075ACFCE9CC582D1226676C4FDB8570144122127A9DB8A210DC103B5BF2
SHA-512:	C1F03C5E295916B6D430F580B4A6EB1932E14ADE24470198B30F9A4B37507DB4BA2C5934CFC01FE33590D63F2819769C4F722F04E2CA09B2FFB7F36B6EEFC76A
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/3abae5e2-5c4e-4a78-b78f-6f7eb92a7ace/artwork/74e61518-72f4-4ba7-8fec-406b3eb9937f/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:25 08:15:25.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........964........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	25303
Entropy (8bit):	7.644950500253935
Encrypted:	false
SSDEEP:	384:BUn4lBfw0KQ67340UJtvVPpQsxCcpQ9oVVjEWq8M8KyGogKj9:BU8Zw0Kt34jpQsMuQCbETo
MD5:	53C5BCF6315D09E37AAF993DF4B9EAE2
SHA1:	197AA2EA01A888AC33163D224799FB34893FD1F0
SHA-256:	748BD0D1356AE78A161C20F14B7E79CACD6EAA24F66FDB121E5EF3CD60F3A6FA
SHA-512:	891E155C358EEACC5998101080DA0DE8B769F81A77DB216334AC4FF0B5B84A2255F0F494E4B205F1623A39B18C210B8C732DAA81FF818C20CBD9891FFE5863DF
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/4e709046-51e8-4a20-9fa7-feafbb2f9624/artwork/fdeb9296-7888-4be5-b481-62e02cf9b8ab/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:05:17 13:16:59.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	43458
Entropy (8bit):	7.835624186984617
Encrypted:	false
SSDEEP:	768:BgBN9BdgkkTUddaX79R2DxfAwcuYjjdAOKCCMWbh0wLNqr3CMVcYev:ajd5kQdd079u4wcrjbCMwqGYev
MD5:	0C3522798817BE19553B934AB4C4978B
SHA1:	A59170917E2F3BC639417E246BFDE2E702310B71
SHA-256:	F38F7A1D92673725F38D26FB952215B777FBF3CC46A9BC9A21F7E912DB39CA5E
SHA-512:	BC14EB336C0C7EAD38221FA0FB8A39B8D5A98F17BAE33E304E644EDBEECCC10C65427CD63E4C0164E67CC353DB4AF00AD092C50A3C91E189ABA61C0CB696EF33
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/57cca0c3-3643-4b36-b8fa-7269fa1711f2/artwork/3bafcce4-408e-4d9d-b0cc-f6ef8012f336/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:06:17 11:36:30.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	35702
Entropy (8bit):	7.784550162009496
Encrypted:	false
SSDEEP:	768:BDkRCr3xPLyIYcLgbL4ilwa86lBMSL5ufo5abgTKHFcTJVIC:lNLyvwgdZqhfkKlEfl
MD5:	ECA6C45437286D5729705F56709A63C7
SHA1:	3E9D4E7BEEBF1EC057CD06CC1B4AC361F0A280D2
SHA-256:	2C7209418906692CC1FB6D4CA9C084118172CB161DEBC98FF05159A061FC8CC8
SHA-512:	9E6DF44B1CA1AA24AF467393DBEBE1C55579C12ED189848B98A8CAA81E74A523C8FFB3311598E7A9274494A601355C5EF948209D9AC0F7FDDCE11B861A955F85
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/c45608b4-7b0e-424a-90f1-11290e2c635b/artwork/6e35bfa1-c3c1-42d5-85c6-6ecfdca2a4b8/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:06:17 12:02:17.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	38969
Entropy (8bit):	7.808695331786901
Encrypted:	false
SSDEEP:	768:BINGSPwKvPxTq4jRXm3lU3278E08AL4WbYaFUDdVQksIBkp:iNGOBOEW3lW278E07L9Q+
MD5:	2631C4491E281B74468C8F9DAF38C767
SHA1:	66D77E45225BFD68FE9C28762E01DD80022E78E4
SHA-256:	97F8393F51457EFDE2FC11C2A9F22F7083FA611C0C4EBBC1E9A07CB1AD329CF0
SHA-512:	1A70AD8709C232D29A2D25937F9FC5D0F1726BFC82F287D38DDC084D5ED983F1FDEEFA9BFA7870BB595E1CB4820A66AEC66B3A98B3A85E49D3FD85B01E48F4FB
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/e93e0177-fc63-4343-9dd7-02e7c831afda/artwork/8678144e-2242-458d-ac78-ecd8bc9f63d5/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:09 16:25:46.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	30038
Entropy (8bit):	7.717399469424896
Encrypted:	false
SSDEEP:	768:MX4wGg0hQfzBxx7nE/8CoCsagcyaxc85MhpeQdB101:G4wf0hQfzBxtnE1oCsagsWQv0BS1
MD5:	0DB040AA28B2306C03DA3444B565B1BC
SHA1:	BA6E4EFA28962029FAF0F56FAEC6C91C26ADDE81
SHA-256:	BBC3856AF9FB1EF1EFE1A4CE29B547D0EB3E4D72E065E9726141390E75371650
SHA-512:	69116656B105329175683F5C1EE8102A98FA56AB455736F4F99708E926C9B2F5FA1FDAC2217379D0303F94C9B24BF96BC9FAF7F6CE977B9502E3FFC5D97301DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/268905d0-088a-467f-9f9c-81f02fd02fca/artwork/e20b4060-da13-4789-a6fa-408b75ee0a38/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 16:08:53.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........66.........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	23131
Entropy (8bit):	7.565640001029585
Encrypted:	false
SSDEEP:	384:B5nalBDy/PcQ2FD4200CZnmxoSB3UGWffgd4mpzfXgR05qiOu7vo:B5Mxe7ZmxoSBEFffgdZfgR0I4c
MD5:	BF8124332F0AB61E29F3C76A848D3CC1
SHA1:	EA9C9AC219A6DA7C04837B1265B63DE79571BC32
SHA-256:	67E8A6FE9EC5D52DE12DC1F5D844153BF02FF15E6D0C1047F41E5B0909816A15
SHA-512:	2F47AD85F808441D46CE4A65863D1B47E452E2815072C29E50461588ADB5A2776BAA3F0404A688128632FF45D1D22D853DF1DAD9C5FD47DDCF2B846E3A939108
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/dba558aa-b5a6-4202-9b76-52c260fccccc/artwork/6e2c7ba7-e7a4-4b7e-9f59-cdeb82430354/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:16:33.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	36926
Entropy (8bit):	7.743682526253565
Encrypted:	false
SSDEEP:	768:BHzh24opZ+wW32ZRDYJ8O39iGVyJa7mBXHB5hf+:Fl7gAwOiRQ8O3oGV7m3c
MD5:	C08A9F64E06C1CC261DA886F5064819F
SHA1:	B9189FDE1895573626FC58F54B2DBE0C470BA084
SHA-256:	00FDDCBA66C2E83D0F04C9E57D736C7767698377DFF6558A66079CCF73036AA8
SHA-512:	ACACC4FE0A704D1AB1760874C7DF4F1DEC5FE0FB1BBFA8D7AAB96EFAE58F181D2E8A07147DEC85B38CBEA98114793F2FE7F5F448F0D50E06FF21CC28E188F7FD
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/b676b8eb-85d9-45ff-be65-93135aef5dbb/artwork/11414c7f-4f3b-4f9a-9a43-a37c4dada46b/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:09 16:48:46.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\280[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	35052
Entropy (8bit):	7.774787473232048
Encrypted:	false
SSDEEP:	384:BBnz7ZBkBkBkAbqLLhsLOxr5GvqJ9fCXSxz7Vb+edotNO+GN//llpDO5MT4auKTO:BBdb+y6F+Gf7R7vdmNO5/llmMT4skSE
MD5:	101839856405C9C86976243B432811CC
SHA1:	F526B2F4163D887CB5D416CAA48B1E8900B7F038
SHA-256:	10CED68E82AEBCC151E7DAE256FF421991B165FB312995CC185B142D80101DF3
SHA-512:	95C613714C30F16225EC2EB0535D6970B6F48A48C6474CA7A40500543406EE80FF35DC1D6023B40E9BB4D3EB593F70B9E5CE74415B639B8DDAB2A05366E4F488
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/3f45cf7c-7c51-4172-af05-06fbc37f3b97/artwork/72501883-e738-43c9-baf8-e3877cc90d1b/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:04:12 10:41:40.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\585b051251[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	9972
Entropy (8bit):	5.162816885495512
Encrypted:	false
SSDEEP:	192:VEH6KnRK9ZoshohwIQEEKIMTmlD0yZTwUEhA0jxRjhO3YXyl80YT1rxMn:rxDohl1OrfohwYXyl80YZm
MD5:	BA42298E76E6F714456BF30A3C080955
SHA1:	C4DA8F08824D48D16936871078DCDCEFF875137F
SHA-256:	704E83D712675EF5372B082BC11DCE00C8E498836B383C4514099BA5E0B9F833
SHA-512:	8B4664DCCA234CF61D3D72655252B73FF100E1EE96D2902B3F4E09099AAEC9DDF1AE538642366CC957FDAE5C489AFDECF756BF75A5F89A3D424ED65C139F813C
Malicious:	false
Reputation:	low
IE Cache URL:	https://kit.fontawesome.com/585b051251.js
Preview:	window.FontAwesomeKitConfig = {"asyncLoading":{"enabled":true},"autoA11y":{"enabled":true},"baseUrl":"https://ka-f.fontawesome.com","detectConflictsUntil":null,"iconUploads":{},"license":"free","method":"css","minify":{"enabled":true},"token":"585b051251","v4FontFaceShim":{"enabled":false},"v4shim":{"enabled":true},"version":"5.15.1"};.!function(t){"function"==typeof define&&define.amd?define(t):t()}((function(){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(e)}function e(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function n(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(t);e&&(o=o.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,o)}return n}

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2021 18:04:12.151696920 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.151870012 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.191675901 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.191775084 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.192462921 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.192558050 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.196491957 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.196667910 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.235281944 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.235955954 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.235999107 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.236099005 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.236143112 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.236365080 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.236777067 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.236816883 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.236886024 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.236934900 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.237797022 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.237927914 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.238991976 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.239095926 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.273114920 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.273188114 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.279481888 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.279566050 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.279807091 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.314150095 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.314194918 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.314219952 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.314394951 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.314737082 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.316072941 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.316365957 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.316395998 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.316524982 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.317606926 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.319639921 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.319673061 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.319785118 CET	49726	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.320755005 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.320782900 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.321878910 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.321984053 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.355308056 CET	443	49726	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.358236074 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.778593063 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.778647900 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.778687000 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.778723001 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.778738976 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.778817892 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.779669046 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.779711008 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.779797077 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.780855894 CET	443	49725	99.86.159.4	192.168.2.3
Jan 11, 2021 18:04:12.780953884 CET	49725	443	192.168.2.3	99.86.159.4
Jan 11, 2021 18:04:12.916938066 CET	49728	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.916996956 CET	49729	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.917495012 CET	49730	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.917536974 CET	49731	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.917823076 CET	49732	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.917905092 CET	49733	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.955573082 CET	443	49729	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.955615044 CET	443	49728	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.955666065 CET	49729	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.955712080 CET	49728	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.956161022 CET	443	49731	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.956188917 CET	443	49732	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.956214905 CET	443	49733	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.956242085 CET	49731	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.956300974 CET	49732	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.956665993 CET	49729	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.956676960 CET	49733	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.956805944 CET	49728	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.957232952 CET	443	49730	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.957395077 CET	49730	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.957428932 CET	49732	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.957597017 CET	49733	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.958045959 CET	49730	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.958223104 CET	49731	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.994975090 CET	443	49729	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995206118 CET	443	49728	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995246887 CET	443	49729	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995294094 CET	443	49729	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995306015 CET	49729	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.995348930 CET	49729	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.995776892 CET	443	49728	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995826006 CET	443	49728	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995856047 CET	443	49732	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995892048 CET	443	49733	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.995910883 CET	49728	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.995970964 CET	49728	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.996436119 CET	443	49733	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.996479988 CET	443	49733	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.996511936 CET	49733	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.996555090 CET	49733	443	192.168.2.3	143.204.2.115
Jan 11, 2021 18:04:12.996803999 CET	443	49731	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.997262955 CET	443	49731	143.204.2.115	192.168.2.3
Jan 11, 2021 18:04:12.997304916 CET	443	49731	143.204.2.115	192.168.2.3

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2021 18:04:07.150095940 CET	53195	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:07.198204041 CET	53	53195	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:07.953617096 CET	50141	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:08.006972075 CET	53	50141	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:09.012708902 CET	53023	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:09.069958925 CET	53	53023	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:09.881133080 CET	49563	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:09.929002047 CET	53	49563	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:10.773650885 CET	51352	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:10.824090958 CET	53	51352	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:11.041304111 CET	59349	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:11.099217892 CET	53	59349	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:12.077124119 CET	57084	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:12.135795116 CET	53	57084	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:12.186085939 CET	58823	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:12.243897915 CET	53	58823	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:12.852193117 CET	57568	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:12.911773920 CET	53	57568	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:13.065045118 CET	50540	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:13.127883911 CET	53	50540	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:14.212313890 CET	54366	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:14.260246992 CET	53	54366	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:14.423726082 CET	53034	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:14.481533051 CET	53	53034	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:15.063565016 CET	57762	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:15.111325979 CET	53	57762	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:16.197449923 CET	55435	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:16.245517969 CET	53	55435	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:17.453315020 CET	50713	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:17.504080057 CET	53	50713	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:18.739844084 CET	56132	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:18.790488958 CET	53	56132	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:19.602818966 CET	58987	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:19.650841951 CET	53	58987	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:20.418056011 CET	56579	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:20.466087103 CET	53	56579	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:28.646820068 CET	60633	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:28.706415892 CET	53	60633	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:34.339324951 CET	61292	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:34.397212982 CET	53	61292	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:34.888693094 CET	63619	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:34.895955086 CET	64938	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:34.902291059 CET	61946	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:34.908943892 CET	64910	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:34.941320896 CET	52123	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:34.943907976 CET	53	64938	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:34.953219891 CET	53	61946	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:34.965790033 CET	53	63619	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:34.972861052 CET	53	64910	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:34.992130995 CET	53	52123	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:35.039202929 CET	56130	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:35.089782000 CET	53	56130	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:35.392899036 CET	56338	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:35.441057920 CET	53	56338	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:39.341726065 CET	59420	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:39.372059107 CET	58784	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:39.399219036 CET	53	59420	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:39.432923079 CET	53	58784	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:39.648845911 CET	63978	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:39.665939093 CET	62938	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:39.707025051 CET	53	63978	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:39.716717958 CET	53	62938	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:40.311794996 CET	55708	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:40.370501041 CET	56803	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:40.370992899 CET	53	55708	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:40.418775082 CET	53	56803	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:41.114707947 CET	57145	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:41.148363113 CET	55359	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:41.174534082 CET	53	57145	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:41.197690964 CET	58306	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:41.209539890 CET	53	55359	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:41.258358002 CET	53	58306	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:41.499262094 CET	64124	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:41.550817966 CET	49361	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:41.555932999 CET	53	64124	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:41.599970102 CET	53	49361	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:41.622500896 CET	63150	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:41.671977997 CET	53	63150	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:41.954351902 CET	53279	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:42.005160093 CET	53	53279	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:42.491924047 CET	64124	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:42.540024996 CET	53	64124	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:42.853358984 CET	56881	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:42.911887884 CET	53	56881	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:43.042531013 CET	53279	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.086370945 CET	53642	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.094033003 CET	53	53279	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:43.145912886 CET	53	53642	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:43.490046978 CET	64124	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.506009102 CET	55667	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.537974119 CET	53	64124	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:43.539036036 CET	54833	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.567388058 CET	53	55667	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:43.597882986 CET	53	54833	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:43.918065071 CET	62476	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.929104090 CET	49705	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.940182924 CET	61477	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:43.966607094 CET	53	62476	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:43.991960049 CET	53	49705	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:44.002360106 CET	53	61477	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:45.749689102 CET	64124	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:45.805891037 CET	53	64124	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:45.826807976 CET	53279	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:45.886044979 CET	53	53279	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:46.327178001 CET	61633	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:46.383264065 CET	53	61633	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:47.826152086 CET	53279	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:47.876691103 CET	53	53279	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:47.921103954 CET	55949	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:47.971899033 CET	53	55949	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:49.756911039 CET	64124	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:49.804936886 CET	53	64124	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:51.835004091 CET	53279	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:51.885838985 CET	53	53279	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:54.121066093 CET	57601	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:54.182872057 CET	53	57601	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:54.368962049 CET	49342	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:54.426978111 CET	56253	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:54.429106951 CET	53	49342	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:54.487433910 CET	53	56253	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:56.887933969 CET	49667	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:56.936003923 CET	53	49667	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:57.360409021 CET	55439	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:57.369738102 CET	57069	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:04:57.408317089 CET	53	55439	8.8.8.8	192.168.2.3
Jan 11, 2021 18:04:57.441791058 CET	53	57069	8.8.8.8	192.168.2.3
Jan 11, 2021 18:05:10.626987934 CET	57659	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:05:10.685170889 CET	53	57659	8.8.8.8	192.168.2.3
Jan 11, 2021 18:05:12.403103113 CET	54717	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:05:12.451196909 CET	53	54717	8.8.8.8	192.168.2.3
Jan 11, 2021 18:05:19.226114035 CET	63975	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:05:19.286310911 CET	53	63975	8.8.8.8	192.168.2.3
Jan 11, 2021 18:05:32.737004042 CET	56639	53	192.168.2.3	8.8.8.8
Jan 11, 2021 18:05:32.811496019 CET	53	56639	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 11, 2021 18:04:12.852193117 CET	192.168.2.3	8.8.8.8	0x6ca6	Standard query (0)	page.adobespark-assets.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:13.065045118 CET	192.168.2.3	8.8.8.8	0x1ce3	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:14.212313890 CET	192.168.2.3	8.8.8.8	0x31ea	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:14.423726082 CET	192.168.2.3	8.8.8.8	0x88cd	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:28.646820068 CET	192.168.2.3	8.8.8.8	0xdda9	Standard query (0)	page.adobespark-assets.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:34.339324951 CET	192.168.2.3	8.8.8.8	0xef9d	Standard query (0)	politicalface.org	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:34.895955086 CET	192.168.2.3	8.8.8.8	0x8b62	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:34.902291059 CET	192.168.2.3	8.8.8.8	0xe403	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:34.941320896 CET	192.168.2.3	8.8.8.8	0xb930	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:35.039202929 CET	192.168.2.3	8.8.8.8	0x38f9	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:35.392899036 CET	192.168.2.3	8.8.8.8	0x44c	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:39.372059107 CET	192.168.2.3	8.8.8.8	0x7a9c	Standard query (0)	static.adobelogin.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:39.648845911 CET	192.168.2.3	8.8.8.8	0xebe6	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:39.665939093 CET	192.168.2.3	8.8.8.8	0x8fb2	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.370501041 CET	192.168.2.3	8.8.8.8	0xbca1	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.114707947 CET	192.168.2.3	8.8.8.8	0xe6ff	Standard query (0)	prod.adobeccstatic.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.197690964 CET	192.168.2.3	8.8.8.8	0xc567	Standard query (0)	api2.branch.io	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.550817966 CET	192.168.2.3	8.8.8.8	0x9089	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:42.853358984 CET	192.168.2.3	8.8.8.8	0x729b	Standard query (0)	ims-na1.adobelogin.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.506009102 CET	192.168.2.3	8.8.8.8	0x6384	Standard query (0)	api.demandbase.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.918065071 CET	192.168.2.3	8.8.8.8	0x2b7	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.929104090 CET	192.168.2.3	8.8.8.8	0xfa13	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:46.327178001 CET	192.168.2.3	8.8.8.8	0xc2b0	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:47.921103954 CET	192.168.2.3	8.8.8.8	0x6e3d	Standard query (0)	tracking.crazyegg.com	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.121066093 CET	192.168.2.3	8.8.8.8	0x9152	Standard query (0)	adobe.tt.omtrdc.net	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.426978111 CET	192.168.2.3	8.8.8.8	0x4cd6	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 11, 2021 18:04:12.135795116 CET	8.8.8.8	192.168.2.3	0x7cbd	No error (0)	spark.adobeprojectm.com		99.86.159.4	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:12.135795116 CET	8.8.8.8	192.168.2.3	0x7cbd	No error (0)	spark.adobeprojectm.com		99.86.159.86	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:12.135795116 CET	8.8.8.8	192.168.2.3	0x7cbd	No error (0)	spark.adobeprojectm.com		99.86.159.81	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:12.135795116 CET	8.8.8.8	192.168.2.3	0x7cbd	No error (0)	spark.adobeprojectm.com		99.86.159.12	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:12.911773920 CET	8.8.8.8	192.168.2.3	0x6ca6	No error (0)	page.adobespark-assets.com		143.204.2.115	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:12.911773920 CET	8.8.8.8	192.168.2.3	0x6ca6	No error (0)	page.adobespark-assets.com		143.204.2.113	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:12.911773920 CET	8.8.8.8	192.168.2.3	0x6ca6	No error (0)	page.adobespark-assets.com		143.204.2.81	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:12.911773920 CET	8.8.8.8	192.168.2.3	0x6ca6	No error (0)	page.adobespark-assets.com		143.204.2.76	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:13.127883911 CET	8.8.8.8	192.168.2.3	0x1ce3	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:14.260246992 CET	8.8.8.8	192.168.2.3	0x31ea	No error (0)	s3.amazonaws.com		52.216.113.221	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:14.481533051 CET	8.8.8.8	192.168.2.3	0x88cd	No error (0)	p.typekit.net	p.typekit.net-v3.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:28.706415892 CET	8.8.8.8	192.168.2.3	0xdda9	No error (0)	page.adobespark-assets.com		143.204.2.81	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:28.706415892 CET	8.8.8.8	192.168.2.3	0xdda9	No error (0)	page.adobespark-assets.com		143.204.2.115	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:28.706415892 CET	8.8.8.8	192.168.2.3	0xdda9	No error (0)	page.adobespark-assets.com		143.204.2.113	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:28.706415892 CET	8.8.8.8	192.168.2.3	0xdda9	No error (0)	page.adobespark-assets.com		143.204.2.76	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:34.397212982 CET	8.8.8.8	192.168.2.3	0xef9d	No error (0)	politicalface.org		199.250.201.182	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:34.943907976 CET	8.8.8.8	192.168.2.3	0x8b62	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:34.953219891 CET	8.8.8.8	192.168.2.3	0xe403	No error (0)	maxcdn.bootstrapcdn.com	cds.j3z9t3p6.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:34.992130995 CET	8.8.8.8	192.168.2.3	0xb930	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:35.089782000 CET	8.8.8.8	192.168.2.3	0x38f9	No error (0)	cdnjs.cloudflare.com		104.16.18.94	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:35.089782000 CET	8.8.8.8	192.168.2.3	0x38f9	No error (0)	cdnjs.cloudflare.com		104.16.19.94	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:35.441057920 CET	8.8.8.8	192.168.2.3	0x44c	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:39.432923079 CET	8.8.8.8	192.168.2.3	0x7a9c	No error (0)	static.adobelogin.com	adobelogin-static.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:39.432923079 CET	8.8.8.8	192.168.2.3	0x7a9c	No error (0)	adobelogin-static.prod.ims.adobejanus.com	dd20fzx9mj46f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:39.432923079 CET	8.8.8.8	192.168.2.3	0x7a9c	No error (0)	dd20fzx9mj46f.cloudfront.net		13.226.151.66	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:39.707025051 CET	8.8.8.8	192.168.2.3	0xebe6	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:39.716717958 CET	8.8.8.8	192.168.2.3	0x8fb2	No error (0)	cdn.cookielaw.org		104.16.149.64	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:39.716717958 CET	8.8.8.8	192.168.2.3	0x8fb2	No error (0)	cdn.cookielaw.org		104.16.148.64	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		63.32.152.233	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.212.154.51	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.18.91.199	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.17.73.77	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.19.92.244	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.92.20	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.208.225.81	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:40.418775082 CET	8.8.8.8	192.168.2.3	0xbca1	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.248.49.247	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.174534082 CET	8.8.8.8	192.168.2.3	0xe6ff	No error (0)	prod.adobeccstatic.com		13.226.169.90	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.174534082 CET	8.8.8.8	192.168.2.3	0xe6ff	No error (0)	prod.adobeccstatic.com		13.226.169.5	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.174534082 CET	8.8.8.8	192.168.2.3	0xe6ff	No error (0)	prod.adobeccstatic.com		13.226.169.30	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.174534082 CET	8.8.8.8	192.168.2.3	0xe6ff	No error (0)	prod.adobeccstatic.com		13.226.169.20	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.209539890 CET	8.8.8.8	192.168.2.3	0x43e9	No error (0)	services.prod.ims.adobejanus.com		52.213.176.171	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.209539890 CET	8.8.8.8	192.168.2.3	0x43e9	No error (0)	services.prod.ims.adobejanus.com		54.73.76.208	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.209539890 CET	8.8.8.8	192.168.2.3	0x43e9	No error (0)	services.prod.ims.adobejanus.com		52.16.185.223	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.209539890 CET	8.8.8.8	192.168.2.3	0x43e9	No error (0)	services.prod.ims.adobejanus.com		52.214.149.147	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.209539890 CET	8.8.8.8	192.168.2.3	0x43e9	No error (0)	services.prod.ims.adobejanus.com		52.48.170.34	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.209539890 CET	8.8.8.8	192.168.2.3	0x43e9	No error (0)	services.prod.ims.adobejanus.com		99.80.242.55	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.258358002 CET	8.8.8.8	192.168.2.3	0xc567	No error (0)	api2.branch.io		99.86.159.91	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.258358002 CET	8.8.8.8	192.168.2.3	0xc567	No error (0)	api2.branch.io		99.86.159.40	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.258358002 CET	8.8.8.8	192.168.2.3	0xc567	No error (0)	api2.branch.io		99.86.159.66	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.258358002 CET	8.8.8.8	192.168.2.3	0xc567	No error (0)	api2.branch.io		99.86.159.67	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.599970102 CET	8.8.8.8	192.168.2.3	0x9089	No error (0)	geolocation.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.599970102 CET	8.8.8.8	192.168.2.3	0x9089	No error (0)	geolocation.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.671977997 CET	8.8.8.8	192.168.2.3	0x82e4	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		15.237.136.106	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.671977997 CET	8.8.8.8	192.168.2.3	0x82e4	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		35.181.18.61	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:41.671977997 CET	8.8.8.8	192.168.2.3	0x82e4	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		15.237.76.117	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:42.911887884 CET	8.8.8.8	192.168.2.3	0x729b	No error (0)	ims-na1.adobelogin.com	adobelogin.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:42.911887884 CET	8.8.8.8	192.168.2.3	0x729b	No error (0)	adobelogin.prod.ims.adobejanus.com		52.48.170.34	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:42.911887884 CET	8.8.8.8	192.168.2.3	0x729b	No error (0)	adobelogin.prod.ims.adobejanus.com		52.213.176.171	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:42.911887884 CET	8.8.8.8	192.168.2.3	0x729b	No error (0)	adobelogin.prod.ims.adobejanus.com		52.16.185.223	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:42.911887884 CET	8.8.8.8	192.168.2.3	0x729b	No error (0)	adobelogin.prod.ims.adobejanus.com		54.73.76.208	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:42.911887884 CET	8.8.8.8	192.168.2.3	0x729b	No error (0)	adobelogin.prod.ims.adobejanus.com		52.214.149.147	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:42.911887884 CET	8.8.8.8	192.168.2.3	0x729b	No error (0)	adobelogin.prod.ims.adobejanus.com		99.80.242.55	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.567388058 CET	8.8.8.8	192.168.2.3	0x6384	No error (0)	api.demandbase.com		99.86.159.84	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.567388058 CET	8.8.8.8	192.168.2.3	0x6384	No error (0)	api.demandbase.com		99.86.159.27	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.567388058 CET	8.8.8.8	192.168.2.3	0x6384	No error (0)	api.demandbase.com		99.86.159.46	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.567388058 CET	8.8.8.8	192.168.2.3	0x6384	No error (0)	api.demandbase.com		99.86.159.126	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:43.966607094 CET	8.8.8.8	192.168.2.3	0x2b7	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:43.991960049 CET	8.8.8.8	192.168.2.3	0xfa13	No error (0)	cdn.jsdelivr.net	dualstack.f3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:46.383264065 CET	8.8.8.8	192.168.2.3	0xc2b0	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:04:46.383264065 CET	8.8.8.8	192.168.2.3	0xc2b0	No error (0)	scontent.xx.fbcdn.net		31.13.92.14	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:47.971899033 CET	8.8.8.8	192.168.2.3	0x6e3d	No error (0)	tracking.crazyegg.com		18.210.132.160	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:47.971899033 CET	8.8.8.8	192.168.2.3	0x6e3d	No error (0)	tracking.crazyegg.com		34.229.33.180	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:47.971899033 CET	8.8.8.8	192.168.2.3	0x6e3d	No error (0)	tracking.crazyegg.com		52.73.171.206	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:47.971899033 CET	8.8.8.8	192.168.2.3	0x6e3d	No error (0)	tracking.crazyegg.com		52.86.179.151	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:47.971899033 CET	8.8.8.8	192.168.2.3	0x6e3d	No error (0)	tracking.crazyegg.com		34.226.133.63	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:47.971899033 CET	8.8.8.8	192.168.2.3	0x6e3d	No error (0)	tracking.crazyegg.com		34.206.23.252	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		52.51.251.137	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		18.203.205.32	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		52.212.164.82	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		54.75.9.158	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		52.18.150.20	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		52.213.168.74	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		52.212.193.208	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.182872057 CET	8.8.8.8	192.168.2.3	0x9152	No error (0)	adobe.tt.omtrdc.net		52.19.133.54	A (IP address)	IN (0x0001)
Jan 11, 2021 18:04:54.487433910 CET	8.8.8.8	192.168.2.3	0x4cd6	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Jan 11, 2021 18:05:10.685170889 CET	8.8.8.8	192.168.2.3	0xab2c	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jan 11, 2021 18:04:12.237797022 CET	99.86.159.4	443	192.168.2.3	49726	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:12.237797022 CET	99.86.159.4	443	192.168.2.3	49726	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:12.238991976 CET	99.86.159.4	443	192.168.2.3	49725	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:12.238991976 CET	99.86.159.4	443	192.168.2.3	49725	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:12.997369051 CET	143.204.2.115	443	192.168.2.3	49729	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:12.997369051 CET	143.204.2.115	443	192.168.2.3	49729	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:12.998420954 CET	143.204.2.115	443	192.168.2.3	49733	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:12.998420954 CET	143.204.2.115	443	192.168.2.3	49733	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:12.998931885 CET	143.204.2.115	443	192.168.2.3	49728	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:12.998931885 CET	143.204.2.115	443	192.168.2.3	49728	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:12.999392986 CET	143.204.2.115	443	192.168.2.3	49731	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:12.999392986 CET	143.204.2.115	443	192.168.2.3	49731	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:13.000807047 CET	143.204.2.115	443	192.168.2.3	49730	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:13.000807047 CET	143.204.2.115	443	192.168.2.3	49730	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:13.003691912 CET	143.204.2.115	443	192.168.2.3	49732	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:13.003691912 CET	143.204.2.115	443	192.168.2.3	49732	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:14.552340984 CET	52.216.113.221	443	192.168.2.3	49736	CN=s3.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:14.552340984 CET	52.216.113.221	443	192.168.2.3	49736	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:14.552434921 CET	52.216.113.221	443	192.168.2.3	49737	CN=s3.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:14.552434921 CET	52.216.113.221	443	192.168.2.3	49737	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		3faf2df7ab96c36419c31725cb1fa7d6
Jan 11, 2021 18:04:34.661062002 CET	199.250.201.182	443	192.168.2.3	49748	CN=politicalface.org CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Dec 08 01:00:00 CET 2020 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Tue Mar 09 00:59:59 CET 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 11, 2021 18:04:34.662034035 CET	199.250.201.182	443	192.168.2.3	49747	CN=politicalface.org CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Dec 08 01:00:00 CET 2020 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Tue Mar 09 00:59:59 CET 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 11, 2021 18:04:35.196053982 CET	104.16.18.94	443	192.168.2.3	49763	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:35.196053982 CET	104.16.18.94	443	192.168.2.3	49763	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:35.214668989 CET	104.16.18.94	443	192.168.2.3	49764	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:35.214668989 CET	104.16.18.94	443	192.168.2.3	49764	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:39.516428947 CET	13.226.151.66	443	192.168.2.3	49772	CN=static.adobelogin.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 18 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Wed Sep 22 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 11, 2021 18:04:39.518136978 CET	13.226.151.66	443	192.168.2.3	49771	CN=static.adobelogin.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 18 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Wed Sep 22 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 11, 2021 18:04:39.800771952 CET	104.16.149.64	443	192.168.2.3	49775	CN=cookielaw.org, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:39.800771952 CET	104.16.149.64	443	192.168.2.3	49775	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:39.802671909 CET	104.16.149.64	443	192.168.2.3	49776	CN=cookielaw.org, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:39.802671909 CET	104.16.149.64	443	192.168.2.3	49776	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:40.560471058 CET	63.32.152.233	443	192.168.2.3	49778	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 09 01:00:00 CET 2018 Tue Oct 22 14:00:00 CEST 2013	Fri Feb 12 13:00:00 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:40.560471058 CET	63.32.152.233	443	192.168.2.3	49778	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:40.563903093 CET	63.32.152.233	443	192.168.2.3	49779	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Jan 09 01:00:00 CET 2018 Tue Oct 22 14:00:00 CEST 2013	Fri Feb 12 13:00:00 CET 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:40.563903093 CET	63.32.152.233	443	192.168.2.3	49779	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:41.272550106 CET	13.226.169.90	443	192.168.2.3	49781	CN=*.adobeccstatic.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 17 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013	Thu Oct 21 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:41.272550106 CET	13.226.169.90	443	192.168.2.3	49781	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:41.274101019 CET	13.226.169.90	443	192.168.2.3	49780	CN=*.adobeccstatic.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 17 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013	Thu Oct 21 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 11, 2021 18:04:41.274101019 CET	13.226.169.90	443	192.168.2.3	49780	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 1112 Parent PID: 792

General

Start time:	18:04:10
Start date:	11/01/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff6fa690000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 5980 Parent PID: 1112

General

Start time:	18:04:11
Start date:	11/01/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1112 CREDAT:17410 /prefetch:2
Imagebase:	0xd40000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://spark.adobe.com/page/T6EbJMut5FyGq/

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Dropped Files

Sigma Overview

Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Malware Analysis System Evasion:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 1112 Parent PID: 792

General

Analysis Process: iexplore.exe PID: 5980 Parent PID: 1112

General

Disassembly