Play interactive tour

Edit tour

Analysis Report https://spark.adobe.com/page/AHixiR8ASDsYE/

Overview

General Information

Sample URL:	https://spark.adobe.com/page/AHixiR8ASDsYE/
Analysis ID:	345103
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish_10

Yara detected HtmlPhish_7

HTML body contains low number of good links

HTML title does not match URL

Classification

Startup

System is w10x64

iexplore.exe (PID: 5936 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 2892 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5936 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\index[1].htm	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\index[1].htm	JoeSecurity_HtmlPhish_7	Yara detected HtmlPhish_7	Joe Security

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus detection for URL or domain

Show sources

Source: https://dougmagnon.com/rfp/index.php

SlashNext: Label: Fake Login Page type: Phishing & Social Engineering

Phishing:

Yara detected HtmlPhish_10

Show sources

Source: Yara match	File source: 701188.1.links.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\index[1].htm, type: DROPPED

Yara detected HtmlPhish_7

Show sources

Source: Yara match	File source: 701188.1.links.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\index[1].htm, type: DROPPED

Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: Number of links: 0
Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: Number of links: 0

Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: Title: PROPOSAL INVITATION does not match URL
Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: Title: Share Point Online does not match URL
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: Title: PROPOSAL INVITATION does not match URL
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: Title: PROPOSAL INVITATION does not match URL
Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: Title: Share Point Online does not match URL
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: Title: PROPOSAL INVITATION does not match URL

Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="author".. found
Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: No <meta name="author".. found
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="author".. found
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="author".. found
Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: No <meta name="author".. found
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="author".. found

Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="copyright".. found
Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: No <meta name="copyright".. found
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="copyright".. found
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="copyright".. found
Source: https://dougmagnon.com/rfp/index.php	HTTP Parser: No <meta name="copyright".. found
Source: https://spark.adobe.com/page/AHixiR8ASDsYE/	HTTP Parser: No <meta name="copyright".. found

Compliance:

Uses new MSVCR Dlls

Show sources

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Uses secure TLS version for HTTPS connections

Show sources

Source: unknown	HTTPS traffic detected: 99.86.154.122:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.122:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.230.165:443 -> 192.168.2.7:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.230.165:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.219.251.215:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.219.251.215:443 -> 192.168.2.7:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.7:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.7:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.7:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.7:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.7:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.7:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.171.45.51:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.171.45.51:443 -> 192.168.2.7:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.30:443 -> 192.168.2.7:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.30:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.185.223:443 -> 192.168.2.7:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.59:443 -> 192.168.2.7:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.7:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.7:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.7:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.7:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.7:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.7:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.27:443 -> 192.168.2.7:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.27:443 -> 192.168.2.7:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.7:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.7:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.226.133.63:443 -> 192.168.2.7:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.226.133.63:443 -> 192.168.2.7:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.193.208:443 -> 192.168.2.7:49814 version: TLS 1.2

Networking:

Source: unsupported[1].htm.2.dr	String found in binary or memory: <a href="https://www.facebook.com/AdobeSpark" target="_blank" data-analytics-context="footer" data-type="facebook" equals www.facebook.com (Facebook)
Source: about[1].htm.2.dr	String found in binary or memory: <div class="glb-nav-social-icons"><h3 class="drop-by-text">Drop by, say hi!</h3><a href="https://www.facebook.com/AdobeSpark" data-auto="glb-nav-social-facebook" data-context="global-nav" data-type="facebook" class="social-button glb-nav-social-icon glb-nav-fb" target="_blank"></a><a href="https://twitter.com/AdobeSpark" data-auto="glb-nav-social-twitter" data-context="global-nav" data-type="twitter" class="social-button glb-nav-social-icon glb-nav-tw" target="_blank"></a><a href="https://www.instagram.com/AdobeSpark" data-auto="glb-nav-social-instagram" data-context="global-nav" data-type="instagram" class="social-button glb-nav-social-icon glb-nav-in" target="_blank"></a></div> equals www.facebook.com (Facebook)
Source: about[1].htm.2.dr	String found in binary or memory: <div class="glb-nav-social-icons"><h3 class="drop-by-text">Drop by, say hi!</h3><a href="https://www.facebook.com/AdobeSpark" data-auto="glb-nav-social-facebook" data-context="global-nav" data-type="facebook" class="social-button glb-nav-social-icon glb-nav-fb" target="_blank"></a><a href="https://twitter.com/AdobeSpark" data-auto="glb-nav-social-twitter" data-context="global-nav" data-type="twitter" class="social-button glb-nav-social-icon glb-nav-tw" target="_blank"></a><a href="https://www.instagram.com/AdobeSpark" data-auto="glb-nav-social-instagram" data-context="global-nav" data-type="instagram" class="social-button glb-nav-social-icon glb-nav-in" target="_blank"></a></div> equals www.twitter.com (Twitter)
Source: resumes[1].htm.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=1772359959706965&ev=PageView&noscript=1"/> equals www.facebook.com (Facebook)
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: <a id="gnav_831" href="http://www.facebook.com/adobe" class="feds-navLink" target="_blank" data-feds-action="none" data-feds-element="link" daa-ll="Facebook-1"> equals www.facebook.com (Facebook)
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: <a id="gnav_841" href="https://www.linkedin.com/company/adobe" class="feds-navLink" target="_blank" data-feds-action="none" data-feds-element="link" daa-ll="LinkedIn-3"> equals www.linkedin.com (Linkedin)
Source: about[1].htm.2.dr	String found in binary or memory: <iframe class="youtube-frame" data-src="https://www.youtube.com/embed/ZWEVOghjkaw?showinfo=0&rel=0&enablejsapi=1"></iframe> equals www.youtube.com (Youtube)
Source: 1772359959706965[1].js.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("signalsFBEventsGetTier");e.exports=function(b,c){c=a(c);c=c==null?"www.facebook.com":"www."+c+".facebook.com";return"https://"+c+"/signals/iwl.js?pixel_id="+b}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}};e.exports=new h(function(d,e){function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=function(){n.removeItem(m),a.close()};e.src=i(c,g.ENDPOINT);b.body&&b.body.appendChild(e)}var o=!1,p=function(a){return!!(e&&e.pixelsByID&&Object.prototype.hasOwnProperty.call(e.pixelsByID,a))};function q(){if(o)return;var b=n.getItem(m);if(!b)return;b=JSON.parse(b);var c=b.pixelID,d=b.graphToken,e=b.sessionStartTime;o=!0;h(c,function(){var b=p(c)?c:null;a.FacebookIWL.init(b,d,e)})}function r(b){if(o)return;h(b,func

Source: unknown

DNS traffic detected: queries for: page.adobespark-assets.com

Source: 280[5].jpg.2.dr	String found in binary or memory: http://creativecommons.org/lice8BIM
Source: 280[5].jpg.2.dr, 280[2].jpg.2.dr, 280[8].jpg0.2.dr, 2803A42Z6U8.jpg.2.dr, 280DFYDLQ3K.jpg.2.dr, 280[7].jpg2.2.dr, 280[1].jpg.2.dr, 280[1].jpg1.2.dr, 300[1].jpg1.2.dr, 280[3].jpg2.2.dr, 280[7].jpg.2.dr, 280SE1KU2SC.jpg.2.dr, 280[3].jpg1.2.dr, 280[2].jpg2.2.dr, 280[5].jpg1.2.dr, 280[3].jpg0.2.dr, 280[8].jpg1.2.dr, 280[7].jpg0.2.dr, 280[2].jpg0.2.dr, 280[10].jpg2.2.dr, 280[6].jpg.2.dr, 280B8WPI3RE.jpg.2.dr, 300[1].jpg2.2.dr, 280[8].jpg.2.dr, 280[5].jpg0.2.dr, 280[4].jpg.2.dr, 280[6].jpg2.2.dr, 280[9].jpg2.2.dr, 280[3].jpg.2.dr, 300[4].jpg.2.dr, 280WBG375P0.jpg.2.dr, 280YV2965GJ.jpg.2.dr, 300[1].jpg.2.dr, 280[4].jpg2.2.dr, 280[9].jpg1.2.dr, 280[6].jpg0.2.dr, 300[3].jpg.2.dr, 280[10].jpg0.2.dr, 280[4].jpg1.2.dr, 280[10].jpg.2.dr, 280[8].jpg2.2.dr, 300[2].jpg0.2.dr, 280GRMGSGH3.jpg.2.dr, 2804F5A58ZL.jpg.2.dr, 300[1].jpg0.2.dr, 300[2].jpg.2.dr, 280[4].jpg0.2.dr, 280[2].jpg1.2.dr, 280[9].jpg0.2.dr, 280[5].jpg2.2.dr, 280[7].jpg1.2.dr, 280GXCL78WK.jpg.2.dr, 280[10].jpg1.2.dr, 280MRG3V1Z6.jpg.2.dr, 280[1].jpg0.2.dr, 280[6].jpg1.2.dr, 280[1].jpg2.2.dr, 280[9].jpg.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by-nc/4.0/
Source: m-unsupported-ef410450[1].js.2.dr	String found in binary or memory: http://feross.org
Source: adobe-profile.min[1].js.2.dr	String found in binary or memory: http://github.com/janl/mustache.js
Source: hover[1].css.2.dr	String found in binary or memory: http://ianlunn.co.uk/
Source: hover[1].css.2.dr	String found in binary or memory: http://ianlunn.github.io/Hover/)
Source: publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chrome[1].js.2.dr	String found in binary or memory: http://mathiasbynens.be/demo/url-regex
Source: m-unsupported-ef410450[1].js.2.dr	String found in binary or memory: http://medialize.github.io/URI.js/
Source: popper.min[1].js.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: logo-maker[1].htm.2.dr	String found in binary or memory: http://schema.org
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000000ffd9
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132df
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132e1
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000132e3
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000158d3
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000158d4
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000158d6
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000158d7
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000158d8
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000158d9
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001705b
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: rbi5aua[1].js.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017709
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9aee45
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9aee47
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3068
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f83
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f84
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f85
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f86
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f88
Source: onz5gap[1].js0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f8a
Source: pps7abe[1].css0.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9b3f8c
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: utilitynav[1].js.2.dr, marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chrome[1].js.2.dr	String found in binary or memory: http://www.iport.it)
Source: m-unsupported-ef410450[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: ~DF88CADA8F55840693.TMP.1.dr	String found in binary or memory: https://adobe.demdex.net/dest5.html?d_nsid=0
Source: RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	String found in binary or memory: https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/ecids.json?ecid=
Source: RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	String found in binary or memory: https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/sids.json?demandbase_sid=
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://adobesearch.adobe.io/autocomplete/completions
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://adobespark.uservoice.com
Source: resumes[1].htm.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-US/categories/202688167-Adobe-Spark
Source: resumes[1].htm.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-US/requests/new
Source: en-US_bundle-c8e4f528[1].js.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/218956027
Source: en-US_bundle-c8e4f528[1].js.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/219243657
Source: en-US_bundle-c8e4f528[1].js.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/articles/219243657-Can-students-use-Adobe-Spark-
Source: about[1].htm.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/categories/202688167-Adobe-Spark
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://adobespark.zendesk.com/hc/en-us/requests/new
Source: logo-maker[1].htm.2.dr	String found in binary or memory: https://adobesparkpost.app.link/D3pjXtHPicb
Source: ~DF88CADA8F55840693.TMP.1.dr	String found in binary or memory: https://adobesparkpost.app.link/T7xZzbx0tZicon_v2.ico?v=1
Source: resumes[1].htm.2.dr	String found in binary or memory: https://adobesparkpost.app.link/g8sk4xb8AV
Source: index[1].htm.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 0135[1].json.2.dr	String found in binary or memory: https://app.crazyegg.com
Source: login[2].htm.2.dr	String found in binary or memory: https://assets.adobedtm.com
Source: RC1bc70f0c17a44296971da4381a721bda-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC1bc70f0c17a44296971da4381a721bd
Source: RC252f840aaf624dd8a3342f251aa80827-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC252f840aaf624dd8a3342f251aa8082
Source: RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC2a643f872978403daaac6c6eb27b1c2
Source: RC508044d39da1421eb31de2476af8ac1e-source.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC508044d39da1421eb31de2476af8ac1
Source: RC6171a193c5f749b6901942c8c5ed07c3-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC6171a193c5f749b6901942c8c5ed07c
Source: RC6e74d481191548f1ab0614710465b88a-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC6e74d481191548f1ab0614710465b88
Source: RC6f46e43fa6d44dbeb45cc5801ffded0e-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC6f46e43fa6d44dbeb45cc5801ffded0
Source: RCbbd93c1920fd422b84787f67ddbfbe55-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RCbbd93c1920fd422b84787f67ddbfbe5
Source: RCe26b98274fee43abbdb260d3b3d8fefc-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RCe26b98274fee43abbdb260d3b3d8fef
Source: RCe603adad0e60478b927c5da4f78b4f0e-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RCe603adad0e60478b927c5da4f78b4f0
Source: RCfbd58215d7e94835b68ade2bedc29ed2-file.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RCfbd58215d7e94835b68ade2bedc29ed
Source: launch-EN919758db9a654a17bac7d184b99c4820.min[1].js.2.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN919758db9a654a17bac7d184b99c4820.js
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://cc-collab.adobe.io/profile
Source: login[2].htm.2.dr	String found in binary or memory: https://cdn.cookielaw.org
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: resumes[1].htm.2.dr, logo-maker[1].htm.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/loading-attribute-polyfill
Source: index[1].htm.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: index[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: index[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.2.1.slim.min.js
Source: index[1].htm.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: RC1bc70f0c17a44296971da4381a721bda-file.min[1].js.2.dr, resumes[1].htm.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: headIE.fp-99254388ab2bb00e43cbc5fbabe0e392[1].js.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/NodeList/forEach
Source: {2BA78F80-6109-11EB-90E6-ECF4BB82F7E0}.dat.1.dr	String found in binary or memory: https://dougmagnon.com
Source: ~DF88CADA8F55840693.TMP.1.dr, AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://dougmagnon.com/rfp/index.php
Source: ~DF88CADA8F55840693.TMP.1.dr	String found in binary or memory: https://dougmagnon.com/rfp/index.php$Share
Source: ~DF88CADA8F55840693.TMP.1.dr	String found in binary or memory: https://dougmagnon.com/rfp/index.phpDsYE/?page-mode=static
Source: ~DF88CADA8F55840693.TMP.1.dr	String found in binary or memory: https://dougmagnon.com/rfp/index.phpDsYE/?page-mode=staticj
Source: publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: m-unsupported-ef410450[1].js.2.dr	String found in binary or memory: https://feross.org
Source: free.min[1].css.2.dr	String found in binary or memory: https://fontawesome.com
Source: free.min[1].css.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: index[1].htm.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Yellowtail&display=swap
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/yellowtail/v11/OZpGg_pnoDtINPfRIlLohlvHxw.woff)
Source: 7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: hover[1].css.2.dr	String found in binary or memory: https://github.com/IanLunn/Hover
Source: chrome[1].js.2.dr	String found in binary or memory: https://github.com/janl/mustache.js/issues/186
Source: chrome[1].js.2.dr	String found in binary or memory: https://github.com/janl/mustache.js/issues/189
Source: chrome[1].js.2.dr	String found in binary or memory: https://github.com/janl/mustache.js/issues/244
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://github.com/kriskowal/q/blob/v1/LICENSE
Source: loading-attribute-polyfill.min[1].js.2.dr	String found in binary or memory: https://github.com/mfranzke/loading-attribute-polyfill
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: bootstrap.min[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chrome[1].js.2.dr	String found in binary or memory: https://issues.apache.org/jira/browse/COUCHDB-577
Source: 585b051251[1].js.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: 585b051251[1].js.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: index[1].htm.2.dr	String found in binary or memory: https://kit.fontawesome.com/585b051251.js
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://lodash.com/
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://lodash.com/license
Source: index[1].htm.2.dr	String found in binary or memory: https://login.microsoftonline.com/common/login
Source: index[1].htm.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Source: index[1].htm.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: marvelcommon-152d9848[1].js.2.dr	String found in binary or memory: https://openjsf.org/
Source: en-US_bundle-c8e4f528[1].js.2.dr	String found in binary or memory: https://opsparc.gsfc.nasa.gov/?sdid=MC95SNMJ&mv=social
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=vtg4qoo&ht=tk&f=7180.7182.7184.22474.10294.10296.10302&a=1655249&a
Source: onz5gap[1].js0.2.dr, rbi5aua[1].js.2.dr, vtg4qoo[1].js.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: RCbbd93c1920fd422b84787f67ddbfbe55-file.min[1].js.2.dr	String found in binary or memory: https://p13n-stage.adobe.io/psdk/v2/content
Source: RCbbd93c1920fd422b84787f67ddbfbe55-file.min[1].js.2.dr	String found in binary or memory: https://p13n.adobe.io/psdk/v2/content
Source: AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/base-fonts.gz.js
Source: imagestore.dat.2.dr, AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico
Source: AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/noscript.gz.css
Source: AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js
Source: AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/runtime.gz.css
Source: AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/themes/crisp-fonts.gz.js
Source: AHixiR8ASDsYE[1].htm.2.dr	String found in binary or memory: https://page.adobespark-assets.com/runtime/1.22/typekit-load.gz.js
Source: about[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.adobe.spark.post&referrer=utm_source%3DSpark%2520A
Source: about[1].htm.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.adobe.spark.post&referrer=utm_source%3DSpark%2520H
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://prod.adobeccstatic.com/appl/latest/AppLauncher.css
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://prod.adobeccstatic.com/appl/latest/AppLauncher.js
Source: publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: 0135[1].json.2.dr	String found in binary or memory: https://recording.crazyegg.com
Source: 0135[1].json.2.dr	String found in binary or memory: https://sample-api-v2.crazyegg.com
Source: 0135[1].json.2.dr	String found in binary or memory: https://sampling-ratio.crazyegg.com/ratio/v2
Source: 0135[1].json.2.dr, 0135[1].js.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/data-scripts/0088/0135.json
Source: 0135[1].json.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/common-scripts/11.1.209.js
Source: 0135[1].json.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/tracking-scripts/11.1.209.js
Source: 0135[1].json.2.dr	String found in binary or memory: https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/11.1.209.js
Source: ~DF88CADA8F55840693.TMP.1.dr	String found in binary or memory: https://servedby.flashtalking.com/container/13539;99030;10307;iframe/?ftXRef=&ftXValue=&ftXType=&ftX
Source: {2BA78F80-6109-11EB-90E6-ECF4BB82F7E0}.dat.1.dr	String found in binary or memory: https://spark.ado
Source: {2BA78F80-6109-11EB-90E6-ECF4BB82F7E0}.dat.1.dr	String found in binary or memory: https://spark.adobe.co
Source: {2BA78F80-6109-11EB-90E6-ECF4BB82F7E0}.dat.1.dr	String found in binary or memory: https://spark.adoh
Source: login[2].htm.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: privacy[1].htm0.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://support.apple.com/downloads/safari
Source: 0135[1].json.2.dr	String found in binary or memory: https://tracking.crazyegg.com/clock
Source: 0135[1].json.2.dr	String found in binary or memory: https://tracking.crazyegg.com/v11
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://twitter.com/Adobe
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://twitter.com/AdobeSpark
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/a?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/d?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/1da05b/0000000000000000000132df/27/l?primer=7a5a436c948772f5260024dfadc8f
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/3d913c/000000000000000000017709/26/
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/6c57c4/0000000000000000000158d6/26/
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/74fc30/0000000000000000000158d4/26/
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/a?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/d?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/l?primer=7a5a436c948772f5260024dfadc8f
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/949f99/00000000000000003b9b3068/27/
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/97fbd1/00000000000000003b9b3f88/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/9951d2/0000000000000000000158d7/26/
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/9d1933/00000000000000000001705b/26/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/a0c22f/00000000000000003b9b3f84/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/a0c22f/00000000000000003b9b3f84/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/a0c22f/00000000000000003b9b3f84/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/aa41d0/00000000000000003b9b3f86/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: onz5gap[1].js0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/d5d9b2/00000000000000000000ffd9/26/
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/a?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/d?primer=7a5a436c948772f5260024dfadc8f
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/l?primer=7a5a436c948772f5260024dfadc8f
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/e030d3/0000000000000000000158d3/26/
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/a?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/d?primer=388f68b35a7cbf1ee3543172445c2
Source: pps7abe[1].css0.2.dr	String found in binary or memory: https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/l?primer=388f68b35a7cbf1ee3543172445c2
Source: vtg4qoo[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: vtg4qoo[1].css.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/edcf1e/0000000000000000000158d9/26/
Source: rbi5aua[1].js.2.dr	String found in binary or memory: https://use.typekit.net/af/fe9c8e/0000000000000000000158d8/26/
Source: privacy[1].htm0.2.dr	String found in binary or memory: https://use.typekit.net/pps7abe.css
Source: about[1].htm.2.dr	String found in binary or memory: https://use.typekit.net/vtg4qoo.css
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://use.typekit.net/vtg4qoo.js
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.adobe.io/?promoid=1SQHD8GY&mv=other
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.adobeexchange.com/?promoid=6S3T78GQ&mv=other
Source: config[1].json.2.dr	String found in binary or memory: https://www.behance.net/
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.behance.net/?promoid=ZXL8F4M6&mv=other
Source: RCfbd58215d7e94835b68ade2bedc29ed2-file.min[1].js.2.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://www.google.com/chrome/browser/desktop/index.html
Source: chrome[1].js.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://www.instagram.com/AdobeSpark
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.instagram.com/adobe/
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.linkedin.com/company/adobe
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.marketo.com/
Source: unsupported[1].htm.2.dr	String found in binary or memory: https://www.mozilla.org/firefox
Source: www.adobe.com[1].htm.2.dr	String found in binary or memory: https://www.workfront.com/
Source: about[1].htm.2.dr	String found in binary or memory: https://www.youtube.com/embed/ZWEVOghjkaw?showinfo=0&rel=0&enablejsapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 99.86.154.122:443 -> 192.168.2.7:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.122:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.230.165:443 -> 192.168.2.7:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.216.230.165:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.6:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.219.251.215:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.219.251.215:443 -> 192.168.2.7:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.7:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.7:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.7:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.151.66:443 -> 192.168.2.7:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.7:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.148.64:443 -> 192.168.2.7:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.171.45.51:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.171.45.51:443 -> 192.168.2.7:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.30:443 -> 192.168.2.7:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.30:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.185.223:443 -> 192.168.2.7:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.59:443 -> 192.168.2.7:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.7:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.181.18.61:443 -> 192.168.2.7:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.7:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.185.68:443 -> 192.168.2.7:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.7:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.48.170.34:443 -> 192.168.2.7:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.27:443 -> 192.168.2.7:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.154.27:443 -> 192.168.2.7:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.7:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.92.14:443 -> 192.168.2.7:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.226.133.63:443 -> 192.168.2.7:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.226.133.63:443 -> 192.168.2.7:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.212.193.208:443 -> 192.168.2.7:49814 version: TLS 1.2

System Summary:

Source: classification engine

Classification label: mal64.phis.win@3/330@25/19

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2BA78F7E-6109-11EB-90E6-ECF4BB82F7E0}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user~1\AppData\Local\Temp\~DFCC6F5E39D59808A6.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5936 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5936 CREDAT:17410 /prefetch:2

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Malware Analysis System Evasion:

Source: Contact_72px_lt-gray[1].svg.2.dr	Binary or memory string: NEIBESjjzwKWaQEmuhbGgACFWDKdB5OZZSX+agjjkcZegD1y0h+ELA7oCf9h2TzH5Lk87RNpJWUz
Source: LawEnforcement_72px_lt-gray[1].svg.2.dr	Binary or memory string: 4RfwbOThACGyTEZ5moRPrV2QweL6BvvMQAZIZXEdT2O5NEPgUsRJGSwFUuYlgyhgfSp3NY2hgKUv
Source: Policies_72px_lt-gray[1].svg.2.dr	Binary or memory string: 4tB1EVplopO2rztHQjrQqeMUbUqdlUYbWkVkAS0rzSFGk5qfcFFaK8X2oKw7N1FayNdH7BQ+Tst9

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	Security Software Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	File and Directory Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://spark.adobe.com/page/AHixiR8ASDsYE/	0%	Virustotal		Browse
https://spark.adobe.com/page/AHixiR8ASDsYE/	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
dougmagnon.com	1%	Virustotal	Browse
services.prod.ims.adobejanus.com	0%	Virustotal	Browse
spark.adobeprojectm.com	0%	Virustotal	Browse
adobelogin.prod.ims.adobejanus.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://dougmagnon.com/rfp/index.php	100%	SlashNext	Fake Login Page type: Phishing & Social Engineering
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/ecids.json?ecid=	0%	Avira URL Cloud	safe
https://page.adobespark-assets.com/runtime/1.22/typekit-load.gz.js	0%	Avira URL Cloud	safe
https://openjsf.org/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://dougmagnon.com/rfp/index.phpDsYE/?page-mode=static	0%	Avira URL Cloud	safe
http://ianlunn.co.uk/	0%	URL Reputation	safe
http://ianlunn.co.uk/	0%	URL Reputation	safe
http://ianlunn.co.uk/	0%	URL Reputation	safe
https://dougmagnon.com/rfp/index.phpDsYE/?page-mode=staticj	0%	Avira URL Cloud	safe
https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico	0%	Avira URL Cloud	safe
http://www.iport.it)	0%	Avira URL Cloud	safe
https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js	0%	Avira URL Cloud	safe
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/sids.json?demandbase_sid=	0%	Avira URL Cloud	safe
https://prod.adobeccstatic.com/appl/latest/AppLauncher.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dd20fzx9mj46f.cloudfront.net	13.226.151.66	true	false		high
dougmagnon.com	162.219.251.215	true	false	1%, Virustotal, Browse	unknown
services.prod.ims.adobejanus.com	52.16.185.223	true	false	0%, Virustotal, Browse	unknown
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	54.171.45.51	true	false		high
spark.adobeprojectm.com	99.86.154.122	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	31.13.92.14	true	false		high
s3.amazonaws.com	52.216.230.165	true	false		high
adobelogin.prod.ims.adobejanus.com	52.48.170.34	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.16.19.94	true	false		high
adobe.com.ssl.d1.sc.omtrdc.net	35.181.18.61	true	false		unknown
api.demandbase.com	99.86.154.27	true	false		high
adobe.tt.omtrdc.net	52.212.193.208	true	false		unknown
prod.adobeccstatic.com	13.226.169.30	true	false		unknown
page.adobespark-assets.com	143.204.11.6	true	false		unknown
cdn.cookielaw.org	104.16.148.64	true	false		high
geolocation.onetrust.com	104.20.185.68	true	false		high
tracking.crazyegg.com	34.226.133.63	true	false		high
api2.branch.io	99.86.154.59	true	false		high
use.typekit.net	unknown	unknown	false		high
ka-f.fontawesome.com	unknown	unknown	false		high
ims-na1.adobelogin.com	unknown	unknown	false		high
cdn.jsdelivr.net	unknown	unknown	false		high
kit.fontawesome.com	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
maxcdn.bootstrapcdn.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
script.crazyegg.com	unknown	unknown	false		high
p.typekit.net	unknown	unknown	false		high
code.jquery.com	unknown	unknown	false		high
dpm.demdex.net	unknown	unknown	false		high
static.adobelogin.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://dougmagnon.com/rfp/index.php	true	SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC252f840aaf624dd8a3342f251aa8082	RC252f840aaf624dd8a3342f251aa80827-file.min[1].js.2.dr	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	index[1].htm.2.dr	false		high
https://use.typekit.net/af/1da05b/0000000000000000000132df/27/l?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC2a643f872978403daaac6c6eb27b1c2	RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	false		high
https://adobespark.zendesk.com/hc/en-US/categories/202688167-Adobe-Spark	resumes[1].htm.2.dr	false		high
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/ecids.json?ecid=	RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://page.adobespark-assets.com/runtime/1.22/typekit-load.gz.js	AHixiR8ASDsYE[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://assets.adobedtm.com	login[2].htm.2.dr	false		high
https://fontawesome.com	free.min[1].css.2.dr	false		high
https://static.adobelogin.com/imslib/imslib.min.js	privacy[1].htm0.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	bootstrap.min[1].js.2.dr	false		high
https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/d?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/	vtg4qoo[1].js.2.dr	false		high
https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://dougmagnon.com/rfp/index.php	~DF88CADA8F55840693.TMP.1.dr, AHixiR8ASDsYE[1].htm.2.dr	true	SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown
https://kit.fontawesome.com/585b051251.js	index[1].htm.2.dr	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	index[1].htm.2.dr	false		high
https://use.typekit.net/af/b0c5f5/00000000000000003b9b3f85/27/d?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://openjsf.org/	marvelcommon-152d9848[1].js.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://use.typekit.net/af/3d913c/000000000000000000017709/26/	rbi5aua[1].js.2.dr	false		high
https://adobespark.uservoice.com	unsupported[1].htm.2.dr	false		high
https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/a?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://github.com/mfranzke/loading-attribute-polyfill	loading-attribute-polyfill.min[1].js.2.dr	false		high
https://use.typekit.net/af/1da05b/0000000000000000000132df/27/a?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/af/e09494/00000000000000003b9aee45/27/a?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://use.typekit.net/af/edcf1e/0000000000000000000158d9/26/	rbi5aua[1].js.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/d?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
http://creativecommons.org/licenses/by-nc/4.0/	280[5].jpg.2.dr, 280[2].jpg.2.dr, 280[8].jpg0.2.dr, 2803A42Z6U8.jpg.2.dr, 280DFYDLQ3K.jpg.2.dr, 280[7].jpg2.2.dr, 280[1].jpg.2.dr, 280[1].jpg1.2.dr, 300[1].jpg1.2.dr, 280[3].jpg2.2.dr, 280[7].jpg.2.dr, 280SE1KU2SC.jpg.2.dr, 280[3].jpg1.2.dr, 280[2].jpg2.2.dr, 280[5].jpg1.2.dr, 280[3].jpg0.2.dr, 280[8].jpg1.2.dr, 280[7].jpg0.2.dr, 280[2].jpg0.2.dr, 280[10].jpg2.2.dr, 280[6].jpg.2.dr, 280B8WPI3RE.jpg.2.dr, 300[1].jpg2.2.dr, 280[8].jpg.2.dr, 280[5].jpg0.2.dr, 280[4].jpg.2.dr, 280[6].jpg2.2.dr, 280[9].jpg2.2.dr, 280[3].jpg.2.dr, 300[4].jpg.2.dr, 280WBG375P0.jpg.2.dr, 280YV2965GJ.jpg.2.dr, 300[1].jpg.2.dr, 280[4].jpg2.2.dr, 280[9].jpg1.2.dr, 280[6].jpg0.2.dr, 300[3].jpg.2.dr, 280[10].jpg0.2.dr, 280[4].jpg1.2.dr, 280[10].jpg.2.dr, 280[8].jpg2.2.dr, 300[2].jpg0.2.dr, 280GRMGSGH3.jpg.2.dr, 2804F5A58ZL.jpg.2.dr, 300[1].jpg0.2.dr, 300[2].jpg.2.dr, 280[4].jpg0.2.dr, 280[2].jpg1.2.dr, 280[9].jpg0.2.dr, 280[5].jpg2.2.dr, 280[7].jpg1.2.dr, 280GXCL78WK.jpg.2.dr, 280[10].jpg1.2.dr, 280MRG3V1Z6.jpg.2.dr, 280[1].jpg0.2.dr, 280[6].jpg1.2.dr, 280[1].jpg2.2.dr, 280[9].jpg.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RCfbd58215d7e94835b68ade2bedc29ed	RCfbd58215d7e94835b68ade2bedc29ed2-file.min[1].js.2.dr	false		high
https://tracking.crazyegg.com/clock	0135[1].json.2.dr	false		high
https://github.com/kriskowal/q/blob/v1/LICENSE	marvelcommon-152d9848[1].js.2.dr	false		high
http://underscorejs.org/LICENSE	marvelcommon-152d9848[1].js.2.dr	false		high
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://adobesparkpost.app.link/T7xZzbx0tZicon_v2.ico?v=1	~DF88CADA8F55840693.TMP.1.dr	false		high
https://adobespark.zendesk.com/hc/en-US/requests/new	resumes[1].htm.2.dr	false		high
https://app.crazyegg.com	0135[1].json.2.dr	false		high
https://dougmagnon.com/rfp/index.phpDsYE/?page-mode=static	~DF88CADA8F55840693.TMP.1.dr	true	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/l?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
http://ianlunn.co.uk/	hover[1].css.2.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://adobespark.zendesk.com/hc/en-us/articles/219243657	en-US_bundle-c8e4f528[1].js.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC6171a193c5f749b6901942c8c5ed07c	RC6171a193c5f749b6901942c8c5ed07c3-file.min[1].js.2.dr	false		high
https://github.com/IanLunn/Hover	hover[1].css.2.dr	false		high
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/vtg4qoo.css	about[1].htm.2.dr	false		high
https://dougmagnon.com/rfp/index.phpDsYE/?page-mode=staticj	~DF88CADA8F55840693.TMP.1.dr	true	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/9951d2/0000000000000000000158d7/26/	rbi5aua[1].js.2.dr	false		high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	www.adobe.com[1].htm.2.dr	false		high
https://adobespark.zendesk.com/hc/en-us/articles/218956027	en-US_bundle-c8e4f528[1].js.2.dr	false		high
https://npms.io/search?q=ponyfill.	marvelcommon-152d9848[1].js.2.dr	false		high
https://ka-f.fontawesome.com	585b051251[1].js.2.dr	false		high
https://use.typekit.net/af/9d1933/00000000000000000001705b/26/	rbi5aua[1].js.2.dr	false		high
https://www.linkedin.com/company/adobe	www.adobe.com[1].htm.2.dr	false		high
https://cdn.cookielaw.org	login[2].htm.2.dr	false		high
https://twitter.com/Adobe	www.adobe.com[1].htm.2.dr	false		high
https://adobesparkpost.app.link/D3pjXtHPicb	logo-maker[1].htm.2.dr	false		high
https://use.typekit.net/af/1da05b/0000000000000000000132df/27/d?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://fontawesome.com/license/free	free.min[1].css.2.dr	false		high
https://page.adobespark-assets.com/runtime/1.22/images/favicon.ico	imagestore.dat.2.dr, AHixiR8ASDsYE[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
http://www.iport.it)	chrome[1].js.2.dr	false	Avira URL Cloud: safe	low
http://schema.org	logo-maker[1].htm.2.dr	false		high
http://www.opensource.org/licenses/mit-license.html	marvelcommon-152d9848[1].js.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/googleData.json	7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	false		high
https://use.typekit.net/af/180c9d/00000000000000003b9b3f8a/27/	onz5gap[1].js0.2.dr	false		high
https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/d?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
http://www.opensource.org/licenses/mit-license	m-unsupported-ef410450[1].js.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f8a	onz5gap[1].js0.2.dr	false		high
http://typekit.com/eulas/00000000000000003b9b3f8c	pps7abe[1].css0.2.dr	false		high
http://typekit.com/eulas/0000000000000000000176ff	vtg4qoo[1].css.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/iab2Data.json	7a5eb705-95ed-4cc4-a11d-0cc5760e93db[1].js.2.dr	false		high
https://use.typekit.net/af/74fc30/0000000000000000000158d4/26/	rbi5aua[1].js.2.dr	false		high
https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js	AHixiR8ASDsYE[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/c8f445/00000000000000003b9aee47/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://adobeioruntime.net/api/v1/web/14257_51772/abx-connector-0.0.1/sids.json?demandbase_sid=	RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js.2.dr	false	Avira URL Cloud: safe	unknown
https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/11.1.209.js	0135[1].json.2.dr	false		high
https://prod.adobeccstatic.com/appl/latest/AppLauncher.css	www.adobe.com[1].htm.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/d5d9b2/00000000000000000000ffd9/26/	rbi5aua[1].js.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8	vtg4qoo[1].css.2.dr	false		high
https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/a?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
https://twitter.com/AdobeSpark	unsupported[1].htm.2.dr	false		high
https://use.typekit.net/af/ad2a79/00000000000000003b9b3f8c/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://code.jquery.com/jquery-3.1.1.min.js	index[1].htm.2.dr	false		high
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	vtg4qoo[1].js.2.dr	false		high
https://reactjs.org/docs/error-decoder.html?invariant=	publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js.2.dr	false		high
https://adobesparkpost.app.link/g8sk4xb8AV	resumes[1].htm.2.dr	false		high
https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/a?primer=7a5a436c948772f5260024dfadc8f	vtg4qoo[1].css.2.dr	false		high
http://typekit.com/eulas/0000000000000000000158d4	rbi5aua[1].js.2.dr	false		high
http://typekit.com/eulas/0000000000000000000158d3	rbi5aua[1].js.2.dr	false		high
http://mathiasbynens.be/demo/url-regex	chrome[1].js.2.dr	false		high
https://use.typekit.net/af/37eaae/00000000000000003b9b3f83/27/l?primer=388f68b35a7cbf1ee3543172445c2	pps7abe[1].css0.2.dr	false		high
https://use.typekit.net/pps7abe.css	privacy[1].htm0.2.dr	false		high
https://www.marketo.com/	www.adobe.com[1].htm.2.dr	false		high
https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC508044d39da1421eb31de2476af8ac1	RC508044d39da1421eb31de2476af8ac1e-source.min[1].js.2.dr	false		high
http://typekit.com/eulas/0000000000000000000158d9	rbi5aua[1].js.2.dr	false		high
https://code.jquery.com/jquery-3.3.1.js	index[1].htm.2.dr	false		high
http://typekit.com/eulas/0000000000000000000158d8	rbi5aua[1].js.2.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
34.226.133.63	unknown	United States	14618	AMAZON-AESUS	false
162.219.251.215	unknown	United States	33494	IHNETUS	false
13.226.151.66	unknown	United States	16509	AMAZON-02US	false
99.86.154.59	unknown	United States	16509	AMAZON-02US	false
31.13.92.14	unknown	Ireland	32934	FACEBOOKUS	false
99.86.154.122	unknown	United States	16509	AMAZON-02US	false
13.226.169.30	unknown	United States	16509	AMAZON-02US	false
104.16.148.64	unknown	United States	13335	CLOUDFLARENETUS	false
54.171.45.51	unknown	United States	16509	AMAZON-02US	false
52.16.185.223	unknown	United States	16509	AMAZON-02US	false
52.212.193.208	unknown	United States	16509	AMAZON-02US	false
99.86.154.27	unknown	United States	16509	AMAZON-02US	false
52.216.230.165	unknown	United States	16509	AMAZON-02US	false
104.20.185.68	unknown	United States	13335	CLOUDFLARENETUS	false
35.181.18.61	unknown	United States	16509	AMAZON-02US	false
52.48.170.34	unknown	United States	16509	AMAZON-02US	false
143.204.11.6	unknown	United States	16509	AMAZON-02US	false
104.16.19.94	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	345103
Start date:	27.01.2021
Start time:	17:35:09
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 51s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://spark.adobe.com/page/AHixiR8ASDsYE/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	25
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@3/330@25/19
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://spark.adobe.com/page/AHixiR8ASDsYE/?page-mode=static Browsing link: https://dougmagnon.com/rfp/index.php Browsing link: https://spark.adobe.com/page/AHixiR8ASDsYE/images/4cabe5f9-8388-4c86-b35d-0baa0ae8e68c.jpg?asset_id=370a9509-1a2e-420e-ad99-e0d16c123bc5&img_etag=%220x8D8C2CF76356BD1%22&size=1024 Browsing link: https://spark.adobe.com/page/AHixiR8ASDsYE Browsing link: https://spark.adobe.com/about?r=reader_page_logo Browsing link: https://spark.adobe.com/make/logo-maker?r=reader_page_learnmore Browsing link: https://spark.adobe.com/login?r=reader_page_bumper_createyourown Browsing link: http://www.adobe.com/legal/terms.html Browsing link: http://www.adobe.com/go/privacy Browsing link: https://spark.adobe.com/login?r=reader_page_topbar_createyourown Browsing link: https://spark.adobe.com/templates/resumes/
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 104.43.193.48, 104.108.39.131, 2.23.155.240, 2.23.155.210, 104.108.48.251, 13.88.21.125, 23.210.248.85, 209.197.3.24, 209.197.3.15, 172.217.23.74, 104.18.22.52, 104.18.23.52, 172.64.202.28, 172.64.203.28, 51.104.144.132, 95.101.22.195, 95.101.22.203, 23.210.248.45, 152.199.19.161, 23.210.248.158, 54.154.149.98, 34.250.98.150, 34.250.221.12, 34.248.20.37, 54.76.255.66, 52.215.116.242, 52.18.121.139, 52.210.113.188, 151.101.2.109, 151.101.66.109, 151.101.130.109, 151.101.194.109, 104.19.148.8, 104.19.147.8, 99.86.154.50, 99.86.154.115, 99.86.154.69, 99.86.154.12, 23.210.248.251, 93.184.221.240, 51.103.5.186, 92.123.180.27, 92.123.180.41, 52.155.217.156, 20.54.26.129, 51.104.139.180 Excluded domains from analysis (whitelisted): e6653.dscf.akamaiedge.net, cds.s5x3j6q5.hwcdn.net, arc.msn.com.nsatc.net, ka-f.fontawesome.com.cdn.cloudflare.net, cn-assets.adobedtm.com.edgekey.net, spark.adobe.com, fs-wildcard.microsoft.com.edgekey.net, wns.notify.windows.com.akadns.net, e11290.dspg.akamaiedge.net, script.crazyegg.com.cdn.cloudflare.net, use-stls.adobe.com.edgesuite.net, ssl-delivery.adobe.com.edgekey.net, audownload.windowsupdate.nsatc.net, hlb.apr-52dd2-0.edgecastdns.net, watson.telemetry.microsoft.com, au-bg-shim.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, stls.adobe.com-cn.edgesuite.net.globalredir.akadns.net, ajax.googleapis.com, db3p-ris-pf-prod-atm.trafficmanager.net, displaycatalog.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, e7933.dscg.akamaiedge.net, skypedataprdcolcus15.cloudapp.net, ris.api.iris.microsoft.com, blobcollector.events.data.trafficmanager.net, a1815.dscr.akamai.net, geo2.adobe.com, par02p.wns.notify.trafficmanager.net, cs9.wpc.v0cdn.net, e4578.dscg.akamaiedge.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, wu.azureedge.net, wwwimages2.adobe.com, iecvlist.microsoft.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, china-wildcard.adobe.com.edgekey.net.globalredir.akadns.net, go.microsoft.com, emea1.notify.windows.com.akadns.net, cs11.wpc.v0cdn.net, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, wu.wpc.apr-52dd2.edgecastdns.net, china-wildcard.adobe.com.edgekey.net, dualstack.f3.shared.global.fastly.net, kit.fontawesome.com.cdn.cloudflare.net, sstats.adobe.com, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, client.wns.windows.com, p.typekit.net-v3.edgekey.net, ie9comview.vo.msecnd.net, wu.ec.azureedge.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, cc-api-data.adobe.io, stls.adobe.com-cn.edgesuite.net, adobeid-na1.services.adobe.com, e7808.dscg.akamaiedge.net, go.microsoft.com.edgekey.net, cdn.cp.adobe.io, cds.j3z9t3p6.hwcdn.net, skypedataprdcolwus15.cloudapp.net, a1988.dscg1.akamai.net, www.adobe.com Report size exceeded maximum capacity and may have missing behavior information. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\IUHEMSR9\www.adobe[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	826
Entropy (8bit):	4.7845656476762075
Encrypted:	false
SSDEEP:	24:WU1mKm6DHYb0U1mKm6DHYb0U1mKm6DHYb0U1mKm6DHYb0U1mKm6DHYb102Yb0U1b:LsKHYRsKHYRsKHYRsKHYRsKHYjYRsKHN
MD5:	EC79FCACABE39C678D0B04106289D3D9
SHA1:	1B8DF9A55C4DA518AAEF0729818E86D613642A01
SHA-256:	6E0C51643D3646CAA4457E96CD08C40E323E5CA5AEAF720820C62C6097D32D4B
SHA-512:	5AF22436873DBA5BDBFE1D410FF77A7EB8E1972C8E12A0AE9C8DA62FAAFBCA0CE9D7021E8F45D3D9929AD90F1499C8EC5FD4BA70FC9A42365002BB03171A8C67
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="120196048" htime="30864662" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="120196048" htime="30864662" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="120196048" htime="30864662" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="120196048" htime="30864662" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="120196048" htime="30864662" /><item name="isStoragePolyfillNeeded" value="true" ltime="173886048" htime="30864662" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="120196048" htime="30864662" /></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\T8DRMTJ1\spark.adobe[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2624
Entropy (8bit):	5.0122591870001285
Encrypted:	false
SSDEEP:	48:LsKT/sKT/sKToYRsKToYgYRsKToYgYRsKToYgYRsKToYgYUZYRsKToYgYUZYLWYO:3TDTDToYTorYTorYTorYTortZYTortZZ
MD5:	314A0804A1C5B605BA2262C7B9A0F7B7
SHA1:	5B347C77E5155EB3F45D3BA62A7EA4F13DD2B657
SHA-256:	E2EB5AA0DD80355D6051B9326A0129E5036A5FAC2661C036B911E9A66A79DF02
SHA-512:	BB1BE4E6948B1C8449848EB1D243A38B349DFF28FD8315551D335B118E5B24483F908EDA80FF67BDB764C82794372E40CBAF73972893F56607F794975E1C926B
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="4293093344" htime="30864661" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="4293093344" htime="30864661" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="4293093344" htime="30864661" /><item name="branch_session_first" value="{}" ltime="8966048" htime="30864662" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="4293093344" htime="30864661" /><item name="branch_session_first" value="{}" ltime="8966048" htime="30864662" /><item name="mar_aud" value="Bot" ltime="32686048" htime="30864662" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="4293093344" htime="30864661" /><item name="branch_session_first" value="{}" ltime="8966048" htime="30864662" /><item name="mar_aud" value="Bot" ltime="32686048" htime="30864662" /></root

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2BA78F7E-6109-11EB-90E6-ECF4BB82F7E0}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.852143998651625
Encrypted:	false
SSDEEP:	192:rwZnZ7259Wyt/ifdM+zM0GBiuADZsfmM/jX:rgZS5UKYA3McT
MD5:	48DAC2F3F8BE5D47E12459A4720386AC
SHA1:	E835E878EAEF5F6D17863247C7B156CC9E04B16E
SHA-256:	2F5A648FDF84A3FA009DE0C5535C1EAB34CC51AA3E6A93A64A89F4A4EBA6CF90
SHA-512:	2C5851DB4DB1BC8AEA74AFF8E6BAC40DF77CF61C90C0C2CD2E9F9665BA46088D423461691CB75791BAE0DDD84C4564817C847A56AB00F58FA82667299F6687A9
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2BA78F80-6109-11EB-90E6-ECF4BB82F7E0}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	209126
Entropy (8bit):	2.6675065609543047
Encrypted:	false
SSDEEP:	384:rFlSeEhUI9TZHw9x99aN7X1XzPZN0KV81FOZ9pHUW82mOI5Q39W3I59+wcIPxeyw:QnYg6ym4hXUTVb2vd5FLeGCaysfY8W3
MD5:	DA9228938E9E1CC3EEF78ABE39498563
SHA1:	60E4D7C902B49ECB0D8B2B351CA2910745677858
SHA-256:	CC5DB9EE1378927F503A129DA56B1A8B6AD683DD04DB04B751460AA1D5CE73DF
SHA-512:	6DA08E4351F5F13E60AF9DC9E78B289B6590329EDDFA1FC5D61056B90CB4A1F2BB17A973583F6B70C8773A1205C76E270B369FBA4C90D2B1CF9534D4762FE055
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{31E788A5-6109-11EB-90E6-ECF4BB82F7E0}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5664358905350095
Encrypted:	false
SSDEEP:	48:Iw/GcpruGwpaed7G4pQcTGrapbSTrGQpKDG7HpRRsTGIpG:rVZGQe6oBSTFASTR4A
MD5:	F9CB099B217989861A792C99214EBD34
SHA1:	E27A7DA5AC795DF7FE6B9E9B431A5026AFC70F51
SHA-256:	14212AF4FA3BC662511DA8D0DE3D39D1A1F21AE5F225E35AD26C55FF7B6A5073
SHA-512:	870D456377033615DC1FAD6D626A7B297A814C0A678C274979C47FDCB42C0EEF6CEC19D9FC5A28CAAB4F184B2AC3CFC43986B4DAB266108D9A8FB75E101B8FF0
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\po60zt0\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	23120
Entropy (8bit):	2.2725619230385483
Encrypted:	false
SSDEEP:	48:R6fVgizzxxEKzOQBbcpS5WT//zVt8X+gizzxxEKzOQBbcpS5WT//zViX7gizzxxH:MdydZSfj70sI2NmU3Gj
MD5:	0B2E71A6A70D25F930CA478CAAD590C8
SHA1:	EA4135FF54149616CA1593137C80CED7CB648A81
SHA-256:	357FEA7B15B119E9A4435A92330B2FE6A1DBF7DF11EA0BBB0AC13B22B25EAC2B
SHA-512:	5B2B80F9F63FB3952BCBC72660F9D6783A26FD4788918AE3698E25047CF804809FBE2D02F631BAC18F882629224CF181DBF3648CE355D5984AC18D58BE74616D
Malicious:	false
Reputation:	low
Preview:	B.h.t.t.p.s.:././.p.a.g.e...a.d.o.b.e.s.p.a.r.k.-.a.s.s.e.t.s...c.o.m./.r.u.n.t.i.m.e./.1...2.2./.i.m.a.g.e.s./.f.a.v.i.c.o.n...i.c.o........... .... .........(... ...@..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................70..7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...70..............................7`..7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7`......................70..7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...7...70..................7...7...7...7...7...7.

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\EYA4E99D\landing-animation-page[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	7.745119809574094
Encrypted:	false
SSDEEP:	24576:fjcATpwWtCD6c7+ZIHi00BJqNuruZu3kJkQYN+1RssHp2xe6xc/6u3a/6V0MW1Xi:L5JttHd11Ikml0Bu3N8XkaRn
MD5:	6DF6D0AC7B1C7686A2EF91701EBAEDDC
SHA1:	F0003421CA4A3DC9A9B944F46549FEF602136CB9
SHA-256:	C9BDBB35E5E6F21ED4950530487D0D05D737B2C973B49836DFFCEDA94C0A5F03
SHA-512:	ACBC84AB64B181A85DA9FAADFEA4141ABED7A4B52712FA20F8A7163EDD640084B63B0AE5127DB9016C85D6ECED645B062B33E0520C605AD6D01632AA1521ACE1
Malicious:	false
Reputation:	low
Preview:	....ftypmp42....mp42mp41....moov...lmvhd.......E...E.._....0................................................@...................................trak...\tkhd.......E...E...........0................................................@........X.....$edts....elst...........0...........smdia... mdhd.......E...E...`... .......@hdlr........vide.............Mainconcept Video Media Handler....minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ........stbl....stsd............avc1...........................X.H...H.........AVC Coding............................JavcC.d.)....gd.).,...M......R...........<q0.lB..?..pv..E....h..5%........stts...................<stss...............=...y...........-...i...............Y....sdtp.....................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\EYA4E99D\landing-animation-post[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	2097152
Entropy (8bit):	6.721351059321856
Encrypted:	false
SSDEEP:	24576:1In8GtWHKbVXGfHQckbwxtzel08u40a4Zg+Xch2VIzR/pq8pv/dFBqcU:en8GtFJScm8u9ghhxbF/qcU
MD5:	D4B152DE8B4FB6252BFF7DE39CE4F91E
SHA1:	3776C14E678E1B83E5AC56008E1775A7ABB72F98
SHA-256:	555145A179A541F5E1ADD50B1F15409926A9F1C6AAD47C0D8E36D1F83208D605
SHA-512:	0AB3918BD76671AB58E1CCCF19F3D03D91FE87F3A5CC49F1047D7DCED6F635C62D4CB3D8B4A43D7FDE9B21047F1D9AC4FD877038EDDA6C184A717B36B99AB6B9
Malicious:	false
Reputation:	low
Preview:	............................................................................................................................................................o..........................................................................................................................................................................................................................................................................................................!...................................................................................................................................................................................................................................................................................7............................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\EYA4E99D\landing-animation-video[1].dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	dropped
Size (bytes):	1376256
Entropy (8bit):	7.436843327981342
Encrypted:	false
SSDEEP:	24576:UaxOIZ7zTdsM7SBvvWk8lTq5EZ3WzK/mIJOIJwi8C5WdJQ:Hx5JzyZB8l283iO14IUXJ
MD5:	C5C1F3256D1485514613EE4CA8C9E54E
SHA1:	87CCF5EF965A32A3452BE60808414CB5EE5C8D8F
SHA-256:	C708B0CD1BBFEF03FB1C3649806062DD585B426EA25BFCE8D8356857F446FD5C
SHA-512:	014D6F766D6ED027277E75CA452FE0DE4FDF983B3B5622FDD17DB0BCD5C49C4365B21C6F1B42B8BBA0D479D1B6391C96CE1A427C58D49BC97F439E99DA82E641
Malicious:	false
Reputation:	low
Preview:	....ftypmp42....mp42mp41....moov...lmvhd.....R.o.R.o.._....$................................................@...................................trak...\tkhd.....R.o.R.o...........$................................................@........T.....$edts....elst...........$...........^mdia... mdhd.....R.o.R.o..]....p.......@hdlr........vide.............Mainconcept Video Media Handler....minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ........stbl....stsd............avc1...........................T.H...H.........AVC Coding............................IavcC.d.)...-gd.).,....i...... ......H........ .-..pv..D....h.sRP........stts...................<stss.................../...F...]...t........................sdtp......................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\10d6e4da-bb02-4037-ae70-a8e3379ce1eb[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1920 x 370, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	262552
Entropy (8bit):	7.942936391264873
Encrypted:	false
SSDEEP:	6144:R36utRYpJ+/vNPogmsP5F2BG2tdvM5JQMl5GYi+EdiY2wO:R36uY36lAgmW4BGlt0Bdyz
MD5:	72EC9BA142BBB72E8A74F6ABD2D1EBA2
SHA1:	F14FAF1EF7F3E7439EDFA8E3211E1A6FC0C56EF3
SHA-256:	ED8258A3EF36A8F0A2D59B1C1B811F3E4EFF65E394217EF4D7D5824AAF3CB435
SHA-512:	02D730DD6B67ABB1832BC14C6C4A1434523C91A398AD6490B5C221DE574BC1D613B7C145FFB52E3A5506912598279B05C64418B49552A56BFD7C63E0C62C18F6
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/sprout/api/images/10d6e4da-bb02-4037-ae70-a8e3379ce1eb
Preview:	.PNG........IHDR.......r......(......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME...............IDATx.....8.-.......s.s.\|:...u.........I..t'1...$#3{K.....`0[6.0.......ZX..Xk.c.....=..0.,.cc......9....p....-..;.).\....u..>...O....p..g.9..'.......;..Z.e.,..r....m......;._.{...<...WU.x~Yc.?.. ^...u.d.L.wh..o..C..>.v3.....mF.p...Q.p.w\.HW.w-].c..l2.v....Q......{.,..=<og...........=..4.i......H.~..\|...kvz.....:.X>.r...w..(..J?z.;..ro..<.juF......f+.+}.\,quu....Z.....c..........(..c......[L&...uY...w........L..www=.)...d..+...7Eo?=......%...A..W....3K..DEQ`1.yz2.<er.\|.....a.x....I.(..!....~~.......:........+.k..a.~EUW.8......B^.._F.;I..t:~....Fo#.@...h..%..e..-....'..4.:T.Z.3.>.}...0{.?.M...\......]....pwyy..r....k<~.lx...+.U.S..K.w}.....\|............w.U-........4Qc..JhyJ.?)..Mg......IFc.k.'5..y.......]..i..4j.......Q..X..aA....x......`.i2..}....'.r.WO......9$....j.d........k....g@8'.F.F\..0.N....7...=..8...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\1772359959706965[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	247136
Entropy (8bit):	5.471451975182391
Encrypted:	false
SSDEEP:	6144:Rk1HWCSntDV/H4K3V/H486EPjQHWuH3HpnX:f6Em
MD5:	F593EBC8F4550AC90D0C643339A9BECA
SHA1:	57892047D792F2DE0365F726F755F0614BC2E51A
SHA-256:	C846EDE61871D1A848E284F2AE7C3D3745427F5649D99F463C98EC40FF53D284
SHA-512:	00A98C28F07A3A875E35CB2A7187C9B3313DA9C9A659DBE20CFB8DAE5D5E53C383C521472D8F37A4392441CD47080E5E3A0A25DDF77796CA6531D78EC3A9309F
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/signals/config/1772359959706965?v=2.9.33&r=stable
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\2804F5A58ZL.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	31889
Entropy (8bit):	7.718651885149354
Encrypted:	false
SSDEEP:	768:MaqLE+dMt1VzqJfxOx4QL5fDuUYhhzbo8ah/xgLCaHCEl2yjboJmOxS:7qLDMPP4wJyhzk8aRSVl2yGbS
MD5:	783EB60C9875289740354C0423826C6B
SHA1:	30140AF67591D99BB3A686EB13FBD2478F808597
SHA-256:	180D29C2C5BE74CD94FD6120916750178F985265FF77CFFB18FF24A5442D6DAC
SHA-512:	258FCF6921177E8E952A00F249384472484896E7B8EE8212C8B393026B75D349DE21FD2A99698C5B56AB41CC3559513A1C5F9B9E1F57614F42A7E62C42F4D908
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/9db56f9b-c2a0-4525-841a-5c02f58881b9/artwork/0719d666-3064-49eb-b993-e3961a2f4453/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 15:55:52.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........943........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280GRMGSGH3.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	43274
Entropy (8bit):	7.7981020590253625
Encrypted:	false
SSDEEP:	768:BTRnlnWWq5y1kCzOUN6b/4TDXJXV8ljqnjbPewxxpekmgWyFp4L:9RnlWWq5w6b/4TD5FCufeoxpigU
MD5:	A4A5B4C915D09F7C2A160239A0EFD0CD
SHA1:	5512E430BAFDE3BC601B914E7AEF50CCFAA1D2AD
SHA-256:	C1C18341B0F28F67C629A710DAC0E8B4B06FED008197E73EAD19EAC48982A86F
SHA-512:	C2E92C47B1918D44BA26C5E497FE7F7563CFF158D06F6158F09DB0D31B7B03E829C6CAA573E8E657EF2BA940BF70CFD24BAEECF1613321DA37F8EE913AD92C12
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/c7574c05-17fd-4afc-9a49-7f2349953cde/artwork/d147ce13-24c6-47a0-be63-bc6233930290/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:09 16:12:34.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	33721
Entropy (8bit):	7.759480124395635
Encrypted:	false
SSDEEP:	768:BZu2kwVz8Yy00FEu5zEJS4ooxzOQShjkvWRHa+u:DKu87Miz20oxUkv6G
MD5:	ACD20D54CB75A378AB7E2B1822495326
SHA1:	21447C5840EEBCE79677BE73E2C4FA0821FE5E4C
SHA-256:	51C00B924750E50C7C89F6E0C76F039F3625DE277EE7F0D985CC0ACAEE71F7C8
SHA-512:	A121C6DBAB1B403AE2D0AE75B1767A668B8C3CE0E7D2002E89C76C49657B6E26F8D5ECE8D49D33E2C1A7364E307D2B73A0B722760429FD7A6CE0272DF8EB1801
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/d641b2bd-a838-46d9-9df2-4017ff7297cf/artwork/4e8ebbab-2a3b-4e2a-9a1e-1f0a941686ef/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:09 16:07:38.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	35563
Entropy (8bit):	7.710289452236433
Encrypted:	false
SSDEEP:	768:BssqhEGjg1Sk6R0Y3D7FFIAsahIp+SMUz9:2ByGs1SDPz7IAkp+k
MD5:	F01143C910C0D70B46D8A06CF8D12114
SHA1:	140D501973AE299E9FFDBAD8567C7F3C0BFDE29B
SHA-256:	81122FEC9CF2FF74646F92F7D376146E73FDDEBDD043C8E773967F4FED0B57BE
SHA-512:	5D211EFA8AA6FDA47A5A86340DD888315698D8959737900ABA85EAC4012B4F22C5ECFD11AB7C7774C9144878AD285F55E995E59F54FC6CE7C32B2AB4BCCA453B
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/55c57898-ee8e-4d95-b9d1-d5fc1e4809d2/artwork/f9bd7292-283d-4e2d-804b-e850adb2e56b/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:03:24 21:33:44.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	38415
Entropy (8bit):	7.784982263533204
Encrypted:	false
SSDEEP:	768:MlKYQ4BziJMKEGHzCk0V3qMQYg+yZo1YkFJkF+VCzHmAwfOC3:0KYhzDKEGHzCkJpEHJaOCzHm71
MD5:	82BE91CA97B86BDC1C713247E60D69DC
SHA1:	B8B1C2EA37CFF706C7721758226717FD4449C3BE
SHA-256:	7D07C18616D72684FFADDBCC20F3311E1EBCE16A3B56CD2E960695122BE1AC88
SHA-512:	FA34873AB6DB2B43A4417FD7B38F6110127C33D0F8B26DB4AD7F9F11789B610723B0A2C3859E9AF641B06F519F591D0540D602C869BC96F5B635294AC1914225
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/d67f8baa-0485-4fe3-9729-5553b557cc39/artwork/0e2fde18-76b2-415b-9a9b-258ad8d70085/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:16 10:38:53.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........393........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	38569
Entropy (8bit):	7.777807393603364
Encrypted:	false
SSDEEP:	768:BPojpdtR2Om//beBgeuROGO9ORsNfmHrCOU5BSj5Skj:BypZ2OojeJuROGO9OWuWOU5Byf
MD5:	06E9CBDA0F429A919665D7D8C977DDD7
SHA1:	D9E3709A9D1E89174E396557E0D8FDE1A797059F
SHA-256:	CC97B8D946571F4D044BD5EAFD612A285ECEE14CA3213A56073542268E12C1EA
SHA-512:	AC60FD293E9A9C2F4926B077B9710062F1EF58533C52C17C7C2455E4288C9EF4A03013C4E444A25E8E477C7C1351E7EFE9BFB8F8BE8B2BEBDAC79F3179F054D2
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/9d61ad0d-ecbc-4a2e-b1ad-4fa82567c6dc/artwork/bfe8b349-32ab-4168-af4d-4404d2ea5fa6/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:02:12 13:38:25.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	26272
Entropy (8bit):	7.613076553684946
Encrypted:	false
SSDEEP:	768:BsdQJWyRCftza5xhXOIQ8+iZowYSPCncl:y6lRXOI0iZowrj
MD5:	297A92D839862C836808784D9DA8C74F
SHA1:	F2D12905FC5AC6BD8C99ADBCD2FC1812E7A8C277
SHA-256:	91B6E006EA1F14EF308EDFA964B135B29E525156F7FB414F2AC1B8702589A1A6
SHA-512:	AEA33AD7158C00E113B32C8314D52610F458F0646575147A066B85F9444E76DD5BE84942617AECA5A9371350552FBBFBD3FF64F922AB329099B8C90FCBB17C34
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/2e06e219-bb88-4dcc-adde-0d514fbec019/artwork/0f973481-4587-4a50-9b8a-9884b40ec0f7/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:07:21.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	33196
Entropy (8bit):	7.768267464922346
Encrypted:	false
SSDEEP:	768:BRIAP8KQcq90xKb+z7m52MPetI1rUI2Nx6/jpm+YA+/fHDa55Vi0nx:jfP8Kvq9qKb+WcMWtYrUnNY/s+FqHGvv
MD5:	DBE868CD508FA9D7B7998AFC430813BC
SHA1:	50471CD13AA55BEF5D5AD9D964D1B087E117A369
SHA-256:	8D46D6B99742165E5208116A22C2DB6FFB9999585D8362F479B32600E1723DD2
SHA-512:	E24F2E4EEB86C3C683067C15CDB009AE3778E13F68C6FF5B5148923AA44E6DB2E7B8A2CB79B1DB37C45A5F22FB6C3BA1989D4DF9D79DDBC285B6CE48BD37BEF2
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/ab931960-27f8-4109-b889-82c7c79a9ee4/artwork/deef5048-f075-4940-a5ff-ac0b5027cc14/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:06:17 11:27:39.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x433, frames 3
Category:	downloaded
Size (bytes):	42016
Entropy (8bit):	7.81553804366335
Encrypted:	false
SSDEEP:	768:dRho6bsose91+M4ZJH8Au9wFo5Hr1p1aGick8Q46ED6FD4VqtLmPado:zhNYp01+Me3oZ1Vk8z6ED+IIo
MD5:	67197987CF8A2EEC0A0C2E3F532EE041
SHA1:	13EBB3BC192BC7EF013C7A05CD341D27B36CA570
SHA-256:	78694FBA6C7C124A6491E52BF04E9ECEEA70DB731B6FD14801400A6336CB1D11
SHA-512:	7116273E47991835C2E692CAF7ECC45A79F1CCC273CEB6D2E191D188B6591A8D94B5035100EB45EB83367D4D937861FEC98E36FB14720E28E633DD7FE7081069
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/2fb5b5db-5545-47c9-81c7-a44bf764157e/artwork/4e61b943-7f1b-49c1-9cf4-5725478b4938/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:08:05 12:54:56.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	35767
Entropy (8bit):	7.756735371882125
Encrypted:	false
SSDEEP:	768:BKeDpHNBtAxs26dVpnAoXZRTg93xkq2QSNw1C+W13MoAgefzlSNgO1qK:gktN0xozRJ0RxnWqmsBK
MD5:	5F15C952D896EDEF8EBAEDA15F30BFBE
SHA1:	CCB523BFB14075339327C6D63E3B5A64847C5061
SHA-256:	31003F8B49492806205918CD5A78041D11E5785082AF1791B378F8CDAB2F6FD7
SHA-512:	9E891F05DC0B4435D68E7482CD85714FDC9A85A28004B3768EBB022280C9651615FF02E94A2C197BD00456BAF907BFB4CA5E9BE4A47F124074BEEF132B3B821A
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/d0cfdb2b-e0b8-427f-946c-4789ec46ab05/artwork/7fcc1326-1d76-42d1-bbc4-72f27685376f/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:08:02 15:47:10.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	36923
Entropy (8bit):	7.7730159817240665
Encrypted:	false
SSDEEP:	768:M00uuY48AIKJ2RrMajSqulml/8TLv9YPMqmrQ:Z01YxVKJ0Dj9uUkLuPMqcQ
MD5:	E742C4E5BFBE34FA27B5E64AC2FDA906
SHA1:	9AC5519ED0193972FCEA0596F86DDCE1F3BE7A22
SHA-256:	F4EDF4CE9E0BAE0FCD3B12093B08DA1D1A4DE1D2B33798D7338BE9521F966CA6
SHA-512:	943E88CFEB388B59535684785E3FCE86C10570EB5DECFB758785B307B9BD0367E996C30ACEB81FFE952FCC7E321691BC52728A554C9DE9130A6C87F8AB363A01
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/82d8b9c9-3f21-4f38-87fd-601cd198b485/artwork/70b89f55-1e48-4633-a047-15de43b76fd7/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 12:51:19.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........116........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\280[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	38969
Entropy (8bit):	7.808695331786901
Encrypted:	false
SSDEEP:	768:BINGSPwKvPxTq4jRXm3lU3278E08AL4WbYaFUDdVQksIBkp:iNGOBOEW3lW278E07L9Q+
MD5:	2631C4491E281B74468C8F9DAF38C767
SHA1:	66D77E45225BFD68FE9C28762E01DD80022E78E4
SHA-256:	97F8393F51457EFDE2FC11C2A9F22F7083FA611C0C4EBBC1E9A07CB1AD329CF0
SHA-512:	1A70AD8709C232D29A2D25937F9FC5D0F1726BFC82F287D38DDC084D5ED983F1FDEEFA9BFA7870BB595E1CB4820A66AEC66B3A98B3A85E49D3FD85B01E48F4FB
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/e93e0177-fc63-4343-9dd7-02e7c831afda/artwork/8678144e-2242-458d-ac78-ecd8bc9f63d5/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:09 16:25:46.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\300[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	23009
Entropy (8bit):	7.5426557223798
Encrypted:	false
SSDEEP:	384:Gjn6SQKkGNX5PoDFIZqSf5Yt9HriZXm7g03ruJYKqmWkUF6ZbygPt/lXC:GjfQApKqrCt9Hrig7XrEYY5ygPFlXC
MD5:	F712DE852511371CE449AE80A554AF0D
SHA1:	3A69CF6523AC80563625C3F9C11319051356CC30
SHA-256:	070C49EAC06064D77D8983FC69FBE1D5A629576D5C103EDB02317EB077F48485
SHA-512:	95CBCD4B6B2222798BF23D800BEC282E4ADC5AF893125AAE953806455AD6698859554C2BD866618C38B120A25E96EF0CFDFA0A94800A25991AD1482ACDDF4425
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/22509c0e-f5cb-4dcd-9642-854900226383/artwork/c1239ca6-25bd-46cc-a70c-27577230a385/version/2/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:06:07 21:28:15.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\300[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	18830
Entropy (8bit):	7.449463821054749
Encrypted:	false
SSDEEP:	192:GNwknPZfc/HsctYZQq+IwRxI45Gan+uMlABMGW0KtVOTVhPwZwslBOSHrqHGZ3bs:G1nNgtQQyKnGUi0VTsraOGudA3x
MD5:	0F12FD8ED31E09A5513C713BCE211EC6
SHA1:	CD26C6B80060541FBCCDA3FBA3949EC73DB78222
SHA-256:	29774F5176D5E5548BACCE22C86F6169428801A9B1F830AD140EA546BD7847D8
SHA-512:	4E3B4DDAF9D4755C870E4AD14D3C2C16363D7D523D976AB73011BFED90B99BC42CC8FA5646FB09ED9C843B67610AA4C98388F4583788D41351E53AC53F61A167
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/6af401d5-dd8f-4971-90c4-f6794f0ca390/artwork/692605f8-b4f0-4d09-9028-675503c57d4a/version/1/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:06:03 11:54:15.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\300[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	9022
Entropy (8bit):	6.2567810194159525
Encrypted:	false
SSDEEP:	96:X2NSBjEknSSXkKIOngv8cZk+pAd9hlKfGmc12yMXIrKl1JQKvRrxeSt8JQmfFV:GNpknPX1ncGu64FSwTl3Vxes8Jhn
MD5:	46686090AFD58AEA38524F4DC78E4A0A
SHA1:	5EC6FE42B8DA0476EA21FC6DF4181D2362A570D2
SHA-256:	7525187AC7EBB1F651101C8197A17CE8EF32C1A4E3668386F8211CE3B2119050
SHA-512:	FE1FC169835945AB5D2BB5B04A4E4A0EEECF83F148C09B0B0BEF8CC7665830D3516CD003601A411A66211C193A7B3C8B60E0EAC70E30A5D1D69DC7FBCE1B7959
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/da8d5184-2dfa-4b76-ab43-3e04a4bbb679/artwork/b5293faf-1e58-4ddc-9261-84021769ce34/version/0/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2018:11:28 14:21:40.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\300[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	14181
Entropy (8bit):	7.144922895566679
Encrypted:	false
SSDEEP:	384:Gnn1zgHejS5oxyssRcWCNeVo/wsbLr2C3P:GnLjqTd6WC8fsbLCC3P
MD5:	FF257E21B51E562694214DE17EEA0E79
SHA1:	4C22160F1964510B80CE67BB9E9A10885B2C1EA0
SHA-256:	B04E7FA9F7724D3BAE1FEF55E927F8255CCCA9EA7B1A2577BB7E9D08D698A7A9
SHA-512:	67A4FC32823C1AECB37B0E32C18D28F14FD47D424BE77E75FC41494E4EFD0F7DDFD6CEFB410699E3CDFAFAE55F6B892F0299158E9EEC97DBE0ED25D6DA1AE7BE
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/49698782-dd1f-4f51-ae22-2fc06ac351a7/artwork/01868395-ce4d-41bc-940c-af34ec76d822/version/1/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:06:07 21:39:44.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\5koYB-73181-minimized[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 260x195, frames 3
Category:	downloaded
Size (bytes):	18102
Entropy (8bit):	7.963507714247377
Encrypted:	false
SSDEEP:	384:P6Fn9BihMEsweNlLNpesoMXsBfabzRiQEoB4bfKs903c4T+4V8xYj:P60M/lLN87M8uQTv2s9064+Yj
MD5:	9BD2715D2038A3FDF760EA14DD67DD77
SHA1:	2406804553EB02D2ADBA535997BBE06F24ECD583
SHA-256:	DB3019971B0AA7D1A5A7BEA7F579D7A8BFF5ADB5131D112158EB786143EF1D99
SHA-512:	AA661EA64E380C7FBA1FA1A9B6342B8D97E64D7CB67130B6DB7A2351AA5FE80B5363534CA38086CFFD8675DB60C8C9031D8A42F64A873D260BB39D036888582C
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/carousel/5koYB-73181-minimized.jpg
Preview:	......JFIF.............C....................................................................C............................................................................................................................................................I....O...".3i..(.j ..a..#2^kP.5I..M....B.T.v...=n.....f..0.E...1.$..dg...I&.YL.....oj#..`..!t...).....y....).5I..S..(V.J). J.wZ..........S(3Jd.....&.F.Vi&Sk...1..N]...,..66..'...%.q.va..)..a..#..%W.&3."$...Nm....3.+....b....6w..`..a..:..^Qt..s.........E0.8)S...5Ta..v.o.T....2$....RE.\..6.Z...N.A!.T.'...=..p..;.6.Q.a..S-...."K.P..d.R......;.J.9T.b 7n..L[....0AL!.<.Z..6;j.]........chD.'.T.R2.d....6_m.a..S.h.....-6.h....<f......p....w.. -...9..t&v]..5...P...HL...h].h.....F.(.8..T.7.y7..D....0..@.l...l.-...7dh..%6"5........P.....\..=....BC2.L..o...z.e.\L.$..^d..".[m....8X..*.&`V8Y....b...4...v)..2i#...#......(...-......9+!../.xP...h.kn..&%...'L\...CR.7......&....40....aR.B1.......py9.2~F7c..Hi.@........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\Contact_72px_lt-gray[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	28341
Entropy (8bit):	6.120769466888277
Encrypted:	false
SSDEEP:	768:37iSZiRcO9jD+7ZBNq+2owtRXhhMEnWLbljThoIJ5q:cRzGZBk+2owPleZX5q
MD5:	901C088DD283B59F4A43F74D798EDC60
SHA1:	959EA9066F892F103A3DDA229D67619150F7DD7B
SHA-256:	C45E2555412C2D5EC5E521ED5851B3D3665F90DD1DC645D6D59DEEFD71BC2ECB
SHA-512:	DAE5CFA3F362280B2D903FC35C6290AB28CCF5E5E5EA6C081B2EFFDBC20AA34301085DFAB35A0EFF5B6ECC7ED6C049668D95274DDF8A06314D60FD612A004555
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/content/dam/cc1/en/privacy/images/Contact_72px_lt-gray.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="adobeNews_x5F_72_x5F_lt-ou" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="72px" height="72px".. viewBox="-359 271 72 72" style="enab

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\PrivacyChoices_72px_lt-gray[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	28419
Entropy (8bit):	6.117998475478093
Encrypted:	false
SSDEEP:	768:37S2WvPzXeJfwU2ihjrx8Ks+a/4TLpCknorFPBHCJ93BvxHtc6:0HzONH2ihRLM/4H8korVBiH3jZ
MD5:	775D2556523FF33568DCF0EE25C3249B
SHA1:	8575AF9EDFEB7E1A2D1B7A36DA34F13594CFD7F1
SHA-256:	241B307DFAB1F3CA3C626DF06C32F5472777A4316013981A121B951911B311FE
SHA-512:	5ED60101D06A32FDA1D8A979FFC701641577DD694987ABAE741B7B154AFDAAFBDE1A294EDB66AC14B1B8C3D82BB184B5BEE9E1F92000FF8669F8D99626645E34
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/content/dam/cc1/en/privacy/images/PrivacyChoices_72px_lt-gray.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="adobeNews_x5F_72_x5F_lt-ou" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="72px" height="72px".. viewBox="-359 271 72 72" style="enab

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RC2a643f872978403daaac6c6eb27b1c26-file.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3362
Entropy (8bit):	5.059807312496106
Encrypted:	false
SSDEEP:	96:1k4cYnmWmkSmWmt8vTLU1mWmfD/YPMCcfMCJFCfYPMCcDMCJFCS:y4cYv8vfUG/YPMCcfMCfCfYPMCcDMCfT
MD5:	12D2FA658D6024175264AB8138EFB65D
SHA1:	E932068DCC9A84A93526CECDFCE6743A4F85BE60
SHA-256:	37E69258B0C2DE7C07F3DD7FC88D9216C92E5CF85C95EFAE40ACBA3056E2FB0C
SHA-512:	DE15E724C71A9A49E87CEF315EAF64CA5755F6B737595D44F907148254E291B02D58172D65CF4AC60B9FFB126E5E2619985388BF209E45DABF049183D8828671
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC2a643f872978403daaac6c6eb27b1c26-file.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC2a643f872978403daaac6c6eb27b1c26-file.js`..!function(){var l=window;_satellite.cookie;new Promise(function(e){_satellite._poll(function(){var a;digitalData&&(l.dexter&&l.dexter.Analytics&&l.dexter.Analytics.geoRegion?a=l.dexter.Analytics.geoRegion:digitalData.organization&&digitalData.organization.demandbase&&digitalData.organization.demandbase.demandbaseInfo&&digitalData.organization.demandbase.demandbaseInfo.Country&&(a=digitalData.organization.demandbase.demandbaseInfo.Country)),e(a)},[function(){return!!(l.dexter&&l.dexter.Analytics&&l.dexter.Analytics.geoRegion\|\|digitalData.organization&&digitalData.organization.demandbase&&digitalData.organization.demandbase.demandbaseInfo&&digitalData.organization.demandbase.demandbaseInfo.Country\|\|digitalData&&digitalData.page&&digitalData.page.pageInfo&&digitalData.page.pageInfo.geoRegion)}],{timeout:2e3,interval:250,callOnTimeout:!0})}).then(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RC508044d39da1421eb31de2476af8ac1e-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	830
Entropy (8bit):	5.115427617124349
Encrypted:	false
SSDEEP:	24:15CcGct/Bw5Cc8Jj2lBfJKnKD8cQcj+D+NplHln:15Cclt/Bw5Cc852lBfi63Kqzpt
MD5:	9A968D4CA38EED060CACB691DA397405
SHA1:	B801277D708955FEC796A9F37ECF042EE5A69E10
SHA-256:	6697B31601FCE26C0BDBB05B4DF0946A2665DC5FD7D8CA01A4A7FD5BAACAC69F
SHA-512:	0E3947C6A25FFB12C4B70086C34F2C729A418CA97CC389B90697FFD1F7C6FCE2A6FD346780BFA75EE80738C0BECCBFD28A8ACB327DFBD626577FC291FFE65199
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC508044d39da1421eb31de2476af8ac1e-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC508044d39da1421eb31de2476af8ac1e-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RC508044d39da1421eb31de2476af8ac1e-source.min.js', "_satellite.getVar(\"digitalData.organization.demandbase\").then(function(e){_satellite.setVar(\"aep_demandbase\",e),_satellite.getVar(\"digitalData.primaryUser.primaryProfile.profileInfo\").then(function(){_satellite._promises&&_satellite._promises[\"digitalData.primaryEvent.eventInfo.interaction.impression\"]?_satellite._promises[\"digitalData.primaryEvent.eventInfo.interaction.impression\"].then(function(e){digitalData._set(\"digitalData.aep.impression\",e),_satellite.track(\"pageview\")}):_satellite.track(\"pageview\")})});");

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\RCfbd58215d7e94835b68ade2bedc29ed2-file.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	458
Entropy (8bit):	5.176461690812657
Encrypted:	false
SSDEEP:	12:jvgeASPRHNDU5U2jA0ZPZPSwhLGGK+K4Jo70WJkwvCRBu:15tDUi2jlxJSGLGUJQJkQCvu
MD5:	C997C788E27F09D01A7EBBCBAC09F8BC
SHA1:	11EEEB7A853A7314E02D42FBACB8BF7BB9478BD2
SHA-256:	E436EF7530ACB3CD96ADB3172852DCFF220E15899CBA44B3C5171AA5C1274865
SHA-512:	3736D192EE5E0D1E8231EB1A181C0058AC3E19FF682C3F4DCD38AB0054D8823A3400C63342779A171447220FB3F068AC7B8F39D666A3C84FEC528FAD359A3B74
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RCfbd58215d7e94835b68ade2bedc29ed2-file.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/d4d114c60e50/f3fbfbe0e7ca/5e7a5832baab/RCfbd58215d7e94835b68ade2bedc29ed2-file.js`..(0,_satellite.oneTrustIsHostEnabled)("everesttech.net")&&_satellite._loadScript("https://www.everestjs.net/static/le/last-event-tag-latest.min.js",function(){"undefined"!=typeof AdCloudEvent&&AdCloudEvent(_satellite.getVar("marketingCloudOrganizationID"),_satellite.getVar("analytics_account_adbadobenonacdc"))});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\Security_72px_lt-gray-01[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	28075
Entropy (8bit):	6.122713193021488
Encrypted:	false
SSDEEP:	384:3jYU3YROQayWcpEepYNGWS8f7Bau7MfYR9/sH53ABwPJ5anlMelCeZpCZRhA6pDh:3B3elubSc7EusYi+9XlC/hAiDthP3eJy
MD5:	82139CDA626B6F7046B190923E4E1678
SHA1:	CBEF7F51F834C6EF8197ECB1AF9F7C1C1693A44D
SHA-256:	12E03ED2EEE83C341A3DE969B11CEED1849891C2775434A06438EABFC66CCA3C
SHA-512:	90ABCE4D99B32DFF9F951F5213E45C123F4F7C106991D9574530657D0BC63419BD19444055E39868B82929C1D6FA7BA9B0B3E740F52E01B87DF2A482CF17D675
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/content/dam/cc1/en/privacy/images/Security_72px_lt-gray-01.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd" [..<!ENTITY ns_extend "http://ns.adobe.com/Extensibility/1.0/">..<!ENTITY ns_ai "http://ns.adobe.com/AdobeIllustrator/10.0/">..<!ENTITY ns_graphs "http://ns.adobe.com/Graphs/1.0/">..<!ENTITY ns_vars "http://ns.adobe.com/Variables/1.0/">..<!ENTITY ns_imrep "http://ns.adobe.com/ImageReplacement/1.0/">..<!ENTITY ns_sfw "http://ns.adobe.com/SaveForWeb/1.0/">..<!ENTITY ns_custom "http://ns.adobe.com/GenericCustomNamespace/1.0/">..<!ENTITY ns_adobe_xpath "http://ns.adobe.com/XPath/1.0/">.]>.<svg version="1.1" id="adobeNews_x5F_72_x5F_lt-ou" xmlns:x="&ns_extend;" xmlns:i="&ns_ai;" xmlns:graph="&ns_graphs;".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="72px" height="72px".. viewBox="-359 271 72 72" style="enab

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\afdf1a38-2220-4948-a9e0-1fc10d5420a9[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1], baseline, precision 8, 850x315, frames 3
Category:	downloaded
Size (bytes):	20600
Entropy (8bit):	6.897596683370385
Encrypted:	false
SSDEEP:	384:+JMaSj2WPuBgOVCGisIiMtxhpAHbcSfRWkB1FliPYWab:+JtIuBv8Ghr7cqRWIliZk
MD5:	E667DD5A1B13AA4043073B92B1C0FA58
SHA1:	E6CC9C1F10D74545EDDB760E2ED8B7EAF6B9CC50
SHA-256:	1E38070AA50CBD2A3EF8671B7918B4E836D5A2E676F176E2F5AA0F30A1608FFF
SHA-512:	531C3EFD474B444BEE193EBC881904BE7BD1E6B7FDABD0C5808B3F0DAC5C0DEAE6E60F0F90A2C01A82890396FE78F2D6F5299D52D13AA9D3A4CEB582776DF6BC
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/page/AHixiR8ASDsYE/images/afdf1a38-2220-4948-a9e0-1fc10d5420a9.jpg?asset_id=40f2022c-d75e-4ad2-90e2-7b323c8bda86&img_etag=%220x8D8C2CEE1B48A63%22&size=2560
Preview:	.....LExif..MM.*.......i.......................................R...........;........http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/"> <xmpMM:DerivedFrom rdf:parseType="Resource"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\announcement-minimized[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 260x260, frames 3
Category:	downloaded
Size (bytes):	31243
Entropy (8bit):	7.984321173643479
Encrypted:	false
SSDEEP:	768:+1LW0xgTlpg5Z0u+IKVHbfUg7eYSY1nXor5uKiCMX38c8pl7p44Ipz6sx:Zfpg5Z0uXKVH7T7rhXoduJ15441p2w
MD5:	5756837CFFE67A5C685DBC2C03D289D5
SHA1:	9F798B11FA34C70D96C564FF778024A000062BEA
SHA-256:	556AF451326FF452F4564506C94681BE30C3592941FD9DD9BEACC3E2CE5D68DA
SHA-512:	F4169718F1AA25504E02A35AED64C64B278D99709005B7E77D424567770459B8F68A10C33E6A603D5AD742A77937BD5A3264C866B85296F7629858EB4191EB34
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/carousel/announcement-minimized.jpg
Preview:	......JFIF.............C....................................................................C.....................................................................................................................................................................[.Gh...x...Y.>....G+B.M-..,H.8+.iK...KyT1....l.38.l.P..1.q.L.....-q.g..V..V+GWnm........ZH.m..K`X............vC..."..Md...J.........H..i}..:...7....:n.Y{gmY.,... xV...fIp...`m....0.V...\_......m.s.L9.e.8..u.mT...k}g+.....yZb....,.Gp..j18...~...p. Q........g.<.u.T.+Fn..ov.1Fl..Lr0.8a.:..m.......z..c.......!I...w....T.[...i...).....Uu.4.ny.J..(.>.o=j.....tG.wD..........u.G...Ya.8...r."f.Dp3..A.IN.7T.`...<.G..J<,.[>.l.e.W.(..H..b.[Px)...e..3W.J..q..%...m..&C`.G....NC...y.CM.r......i.l_X.<R.8..c..(...GMZ...5.ZI..u...{....<.P.tT^.....Z...t.......,J..EzZ..M0....a..pF..\|O...i..4T.l)6.nk<.?..o.:.~...qU:....U>..[..'..+..a%R..L0b.F`..%.W.....9v..<u.w.;..6.V.}..z..'m+_s.w...Q.EF...g..'Qn.f.x.AiKzH.A..+s.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\apple-app-store-download-button[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7240
Entropy (8bit):	4.06566880153408
Encrypted:	false
SSDEEP:	192:IJdhvo2wCh0gWmBdx2Mv5Z62A17deo0O1Kf9:IJjjWExM17Io0OU
MD5:	038C40676297A1CC80035C219D4EC92D
SHA1:	732280B1201093CE627180B201CDC21C564F59E2
SHA-256:	2318CA4468301DF4BB65E657C8C838C16CCCFBFFFAC5CC525B6CE556566B0A5D
SHA-512:	87E1CD569F5D759DD8E887AEBBBD46E48797984E75234CCBED518DBCF63D830E616E8FC92D461D67A66B71A545F1B4B872A6F5F0DDEADFBD2803E94B879D9033
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/en-US/apple-app-store-download-button.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="119.664" height="40"><path d="M110.135 0H9.535c-.367 0-.73 0-1.095.002-.306.002-.61.008-.919.013A13.215 13.215 0 005.517.19a6.665 6.665 0 00-1.9.627 6.438 6.438 0 00-1.62 1.18A6.258 6.258 0 00.82 3.617a6.601 6.601 0 00-.625 1.903 12.993 12.993 0 00-.179 2.002c-.01.307-.01.615-.015.921V31.56c.005.31.006.61.015.921a12.992 12.992 0 00.18 2.002 6.588 6.588 0 00.624 1.905A6.208 6.208 0 001.998 38a6.274 6.274 0 001.618 1.179 6.7 6.7 0 001.901.63 13.455 13.455 0 002.004.177c.31.007.613.011.919.011.366.002.728.002 1.095.002h100.6c.36 0 .724 0 1.084-.002.304 0 .617-.004.922-.01a13.279 13.279 0 002-.178 6.804 6.804 0 001.908-.63A6.277 6.277 0 00117.666 38a6.395 6.395 0 001.182-1.614 6.604 6.604 0 00.619-1.905 13.506 13.506 0 00.185-2.002c.004-.31.004-.61.004-.921.008-.364.008-.725.008-1.094V9.536c0-.366 0-.73-.008-1.092 0-.306 0-.614-.004-.92a13.507 13.507 0 00-.185-2.003 6.618 6.618 0 00-.62-1.903 6.466 6.466 0 00-2.798-2.8 6.768 6.768 0 00-1.908-.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\arrow-down-on[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	5.1518579608527695
Encrypted:	false
SSDEEP:	6:tvKIiad4mc4slzqnlGWN8Hagu1cPBNbzxdFW7eGrUvdGoQaK/:tvGMnlGW+wa/zxdaFaK/
MD5:	1FDCAA5F4543724D506ACB85E93881B6
SHA1:	6DE23126CBFC6E51998118AA35D6ABE53A9A0354
SHA-256:	C47DE6F7CBE52B6614E87536ECD6CCA333A55E47562B1D011DBB060073D4FAEE
SHA-512:	2F6687836F43AFBA8B496A69562053452BE747F749BA53E183F2269E73BEC49AC8CDB651CAC706E873C5482F8781DCE8B4DAB8221AE00F06E2011D16FC3D4247
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/arrow-down-on.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="32" height="22" viewBox="0 0 32 22"><defs><style>.cls-1{fill:#82919b}</style></defs><title>Down_32_on</title><path class="cls-1" d="M6 5l-6 6 16 16 16-16-6-6-10 10z" transform="translate(0 -5)"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\bootstrap.min[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:	1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
IE Cache URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\bootstrap.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
IE Cache URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\browser-icon-edge[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3016
Entropy (8bit):	7.891883408525801
Encrypted:	false
SSDEEP:	48:cCzs80SVhdoz+n+UHXol0c61Ga6ovj4mrikoPmzz3I4NrT6xvO:cT80CAK+UHY9gGa6or4sZ3I4Nr2BO
MD5:	096DBF8523D015FB4295051DF53A52C1
SHA1:	7BB34828A6AB6CB2E6E418ADFBEACF189D07AE3E
SHA-256:	0E95127D87D4498950215D4AD1BAA56BDE661E9DC7BCE84F8249594FBCECC727
SHA-512:	DF694A7FE2BE219DE857DCBC1D9F708960D74B1BFE45AF5F2EC15974C22C15EC2D48DAA6BBA6234BF54185103A00E8EDE486C9320F6A9A8631EE9A7E93D7F501
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/browser-icon-edge.png
Preview:	.PNG........IHDR...\|...\|............IDATx.....E...@.B.D...-.....K.d.P.Q.....E.* ...U......`!.`!.....D...... ..$.R&..aK..9/y..wf.......z.......}...D"..f..W.....Z..`1...^...AzKpm.....l.l.l.l......W...g....G....0.E..t!..\|w..f...........p...a.....1j.wT..}.k..0.....g.......]..f.....\[..4p...g...5p-p.F=...[I...v[`p.0.7.....7b..M..f...D`.ph..3....\.Q.y.h.......>.C3.7...p5F-......N...........).5..._pm....6.l....31jq.wW.......Y...<...Q.U}.....$.:`K.6..0.3....z..=...E..i.'0.NV...)..S=[..sh.?C?.j.OW.~.\|.E.X.<..n..D....:.M..=[d .'>..n.,%.V.t~.[...-2...W.Q..b.p..b....E..V.&c./....0...4w..y.HV......S.Ol......bw...h........t.d.=R.uE......}.k.F..\|s.Uf..c.N.<a...\.......R..\N.O.i....l..x.\..2.%...E.8..p..&.ID.;.r.p..~....1m.^..^...{......y#L.]....Y.D......ex.D...D.t...3..Gz..Y....o..<;.Y..%.U'..M..5...t&....]...."q.^..Q..<.O..}...g..W.d...(r.N_....{..d.'q....{.+X...[...X.;.ZF./.aE.Z....".%..,\o.n"t.3;..B<.u&@...p...6t2.:.D..I...uNc.x....@G#.(.=^..k..$.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\crisp-fonts.gz[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	4.811599389940217
Encrypted:	false
SSDEEP:	3:yLRmcpZBLvG/tLAJ2qW7RmMjuRmcszgcukrQLJkgfw0zRjf:yL/pZtvG1M2JRmMju/0gcu/LugfwmRr
MD5:	361FE227C22294543FE0FD29B8D28C0A
SHA1:	1D32C0DC6F27CA2A6C67E5C79DFC08DD39511B03
SHA-256:	17D7DDB7C7C94BA00A4F60835AC14512B6574E5D6B81E99542D44BDA414AACD0
SHA-512:	85C7DA240B8283EF24F91AFCB472AF9E9E2E91A5B6F4E7370E774A50F1BAA0F6DF47E7173854B6593FB4EC8673BF682B7122C3877902AE414F0FDD0334C937B0
Malicious:	false
Reputation:	low
IE Cache URL:	https://page.adobespark-assets.com/runtime/1.22/themes/crisp-fonts.gz.js
Preview:	document.write('<script src="//use.typekit.net/rbi5aua.js"><\/script>'),document.write("<script>try{Typekit.load();}catch(e){}<\/script>");

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\dGPNYJ2MR Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 23416, version 0.0
Category:	downloaded
Size (bytes):	23416
Entropy (8bit):	7.983586847834522
Encrypted:	false
SSDEEP:	384:F30DDcDU1FW+RedG9b7Tm16n2XMc3nS3YUQIfiRgeQvYAb0HsRUgBnQc:JOA+Redq61GYU7f/eQvnUgBQc
MD5:	334521D5C314F6265FCA189A2114006F
SHA1:	F35719EE30117ADF919939AD46A98C9D3C6EEE45
SHA-256:	B4D011E6CF7EBE571E4D0C9868CD972592987E13D5BE3DDBB69C67638323A237
SHA-512:	3F6163488D3814E3CEFF964DBA451B45DE22236EED0372A82BC713950CBD0FCC41D4553414095646842B2839F12EF7A95AC943329AC0293FCC9850ECEF6C67CB
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/d8f71f/0000000000000000000132e1/27/d?primer=7a5a436c948772f5260024dfadc8f7cd849e1448f8bf41ba74a247e8e46f3aee&fvd=n5&v=3
Preview:	wOFFOTTO..[x................................CFF ......6V..A.....DYNA..:.........AOr.GDYN..:..........E(.GPOS..;x......G ....OS/2...$...[...`}.N.cmap..Z4...C....M.?gasp...0............head...8...2...6...khhea...........$....hmtx..X.........\|k .maxp..............P.name...l.........<.bpost..Z ....... ...2........x.c`d``.b....x~...../."..]......ka.g..r...@..k.....x...j.@.........U.e..4rV...p6..h..u.EdI......Q....D.}.>@w=....E[]....;sg.......{.=.8a.s.!>x>...=....=..._<.q...GH.`...'...@...........o.....\|.w....Q8.<.<ln.zk.....XM..T....X..Ju[..H....P..*#V.F...........F.%.uo..S.'L....U_.Q..9.u.i....W....8v.Z.r.-.u,M1.......$.A..[..Xb...3,x1..h.%iN...f(...lCg...i.-.q...C..i...........b.+M.WT..g4...;m.l...T.evv..ew').._!}.......2..m..}..v...:....M.....]....:V\....-Y.S$.`...7.....x.c`b\|.......i.S...C..f..`...(...........A?.A!...<.\.......1...........0.$.8.i..R``..1....x.c`d``..W.$.....d.g..............P.....x.{.X.W.....3.1.C`.1..I.5.........AQA.....e..4.(....Q@l.F.1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\dKNJ3EUN4 Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 24744, version 0.0
Category:	downloaded
Size (bytes):	24744
Entropy (8bit):	7.978627515034273
Encrypted:	false
SSDEEP:	384:EVkksCq/KOwmOt8IEOsyhgjzfwTJsPj6V9teCsx/Abr2k88CDW001VEKHUM7Ozip:qktXUt8he8UheCsx/AhKW0CUUV
MD5:	A14F6E1E3181DC10FDB66D2A7FB54CA7
SHA1:	605808488DD7FEC481400AA948F80E66189D25B5
SHA-256:	A4B8520DF89E973A968FCD3CF78F742E073EA9645D03ACCF360EB4AB5E6E1001
SHA-512:	E741918EF1EC6A3C0B87D996245945AEA9DB8C7D798352756F409A5E519BBF89EBF8F6AFA1E1A71D5C24C4E1C364F7C2EF38622C0897F852C6E9C7E6C27BBE29
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/1da05b/0000000000000000000132df/27/d?primer=7a5a436c948772f5260024dfadc8f7cd849e1448f8bf41ba74a247e8e46f3aee&fvd=n4&v=3
Preview:	wOFF......`........l........................DYNA...$.........D..GDYN............L.i.GPOS..........G..9..OS/2.......[...`\|.M.VDMX............l.tPcmap.._.........!k`Tcvt ...H...........tfpgm...`.......s.Y.7gasp...d............glyf..&...4...e..V .head...l...4...6..M.hhea...........$....hmtx..Z........(.G$nloca..\...........Jmaxp....... ... ...nname.............!.,post..^t...l.....moprep...T...2...2....x...S.X..D.s.X...Vc....jl5....m.m{:...3.....#..C.P..WB..!..K8}...'.>...6".l$"....b....F4}$.m4b...ic...$....866q..8.q.o.@o.OB..DzCB..D$..I..$!.MJr.;).d...I... .MI....zAj..4..s...#.MO&=#..mF..)..j3..f!.....6.9....c.... .....6..ln..!y(`.RP..G!....Et.....(f.S\.(B.[...K1J...RFw(AY[.r.M)...T.e..[...-Ge.<Ul...T..Q.V...BM].*.l5j...ckP.......m-....ih......S.&.>Mu..4..in..B.iLK.V.).u.f...i...mI{..:..t......mK...:C{...t.i:..v...L/....mW..n..I......N.....mo..8.0..a.......l...(..a.2..b..0..v.ct......g.3^....;..:.(&..L.c.....T;.i..8B.x.....>&2.Nb...l.e.s.T.j..oCX`..P...";...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\dSY60KKQH Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 25284, version 0.0
Category:	downloaded
Size (bytes):	25284
Entropy (8bit):	7.98201537948979
Encrypted:	false
SSDEEP:	384:XVkwjUeZrzDGdbpwvwrcsOGkps3SNPnvNFbwW8yTqXCrfenp/W0BEpFc2N8F2cp:lkaOdbSo4zAYfV3jfE5Bfh2cp
MD5:	3A472B1A078B7B653C744CC55FAA5219
SHA1:	E9949514223E35D4A1E0515A312EC3664DEFDF33
SHA-256:	8812CEB05FB855A78850BB1907BC621FC487CD6D54760AC8D821D760D3BBB9E3
SHA-512:	DA09A18AED6A3C44F5009410D03623A8200ABF224AF33DDBFE34D3736AF96C6847D7A9A1CF0D94839C9ABB9546E1C7F5BCF6C305132B97BEFBD84A535F1399A7
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/8f4e31/0000000000000000000132e3/27/d?primer=7a5a436c948772f5260024dfadc8f7cd849e1448f8bf41ba74a247e8e46f3aee&fvd=n7&v=3
Preview:	wOFF......b................................DYNA...X.........$..GDYN............h;.GPOS..........I.m2EBOS/2.......[...`}7P.VDMX............l.tPcmap..a.........!.`pcvt ...H... ... ...Kfpgm...h.......s.Y.7gasp...l............glyf..'D..5o..d.lN..head...t...4...6.RI.hhea...........$....hmtx..\....!...8....loca..^..........k..maxp...8... ... ...cname............~p.[post..`x........F..Jprep...d...U...z...%x...S.X..D.s.X...Vc....jl5....m.m{:...3.....#..C.P..WB..!..K8}...'.>...6".l$"....b....F4}$.m4b...ic...$....866q..8.q.o.@o.OB..DzCB..D$..I..$!.MJr.;).d...I... .MI....zAj..4..s...#.MO&=#..mF..)..j3..f!.....6.9....c.... .....6..ln..!y(`.RP..G!....Et.....(f.S\.(B.[...K1J...RFw(AY[.r.M)...T.e..[...-Ge.<Ul...T..Q.V...BM].*.l5j...ckP.......m-....ih......S.&.>Mu..4..in..B.iLK.V.).u.f...i...mI{..:..t......mK...:C{...t.i:..v...L/....mW..n..I......N.....mo..8.0..a.......l...(..a.2..b..0..v.ct......g.3^....;..:.(&..L.c.....T;.i..8B.x.....>&2.Nb...l.e.s.T.j..oCX`..P...";...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[10] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 66740, version 0.0
Category:	downloaded
Size (bytes):	66740
Entropy (8bit):	7.99411972026963
Encrypted:	true
SSDEEP:	1536:J4lzR3d/ZD6MCYkk+e5Hj9EgKWB/uS7wcA+vVWB:ql9NZ/CYFjjKgKU/uLzh
MD5:	02BDAC466185E4E1161BBFAB2C066327
SHA1:	5C0C5E8BDB41694C8AD5605D5C1FFF7EB0702EBA
SHA-256:	AC44BE8F65384DEF37D9091D668E54A4B79AB6A3156C5D8CFBD3268BEC558971
SHA-512:	01C761222E6DB3A3F81DAD88191BAA8A020536C4F8EF8692796B94C68AB1FDD4EF672D8DB24336E12BA32F0F96079E9D388EFD93433E9FF62BB8976596F65CD9
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/cb695f/000000000000000000017701/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOFFOTTO....................................BASE...X...F...Fe$].CFF ...H...a.....w..DYNA............$G9GDYN......-...a./..GPOS......#...T<"9.`GSUB.............0.OS/2.......Y...`\Wv.cmap...`...S.....lgasp................head.......4...6..%uhhea.......!...$....hmtx...h.......x7wW.maxp...@.........^P.name................post...L....... ...2..............ideoromn..DFLT..cyrl..grek..latn...................\..............x.c`d```5.z...1...+.3........p..?.?/K... ....$...A.!x.RKn.0..9N...Qt.5.v..R 8.Wv..Y%...%..........0...]t.S...@G...M..!q.{3C.Q....<t.o.=.a...^a...>...>9....a.........J.....O.=..b.{.x{......p.......~8\|......$.....:..U.h.84F...e].ul.J.I...f..F.u......2.q1..,.#...xr5..m..N]......N..,D..].P..ii.e...Trx6.....6I(#...z..S]..9Tz.1rY.f....'..U.G..P..D..P".&^....8.,x].....7.....e..sl.F.Jc#.Y..s...Th............aL.....E...t..(;..U...;....,......^H...LJ..g.x.A^[....X.._.g6.kb..}G..%.n.e......}.X....]?g^;~C.^4..t...<...x.c`f\|.8.......).....B3.1.1.E.Y..XX..X.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19972, version 0.0
Category:	downloaded
Size (bytes):	19972
Entropy (8bit):	7.973644639018193
Encrypted:	false
SSDEEP:	384:Cf5Fav9bGgUEYSX1onww9sud9sYpihw+yncXRmtwE1YHoVEY:CDajJOnqucYMhW+mtMoVEY
MD5:	8A4B72CBF267D80FA1AA077748D6F386
SHA1:	BFCBD9749829EC32F8E92EDB67B2103A2B693FCB
SHA-256:	25847A66D07866EDDEA20934F252A9D9FBA7CE24FA9EB0A60FA3F3056182B93A
SHA-512:	3672D408F2B48E5986B43C90B9140325DBF9EE74A12A6E08FB893964A7E49505D5B36D87F5DDE9185C0819F913321E38EF30A9BA43745B21E35C3DDA56181913
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/e030d3/0000000000000000000158d3/26/d?subset_id=2&fvd=n1&v=3
Preview:	wOFF......N........\........................DYNA...`........4.(.FFTM............]..,GDEF.......8...B...<GDYN...P............GPOS...0.........f.'OS/2.......W...`~wz#cmap..Ml........+..wcvt .............R..fpgm...........e#./.gasp................glyf...$..=b..b00...head.......4...6..<.hhea... ... ...$....hmtx..I........lGZO.loca..K..........Y.Vmaxp...@... ... ....name...........H?..post..MX....... ...(prep...x...O...O...4.........o1.......H......x........6.<.<.B.:.>.5.@..x.]Q.N[A.......c..hS.fB...$.W...vc9B.\.b\..P Q..k.h().A..R>.O@bfM.(....s..r..]Z.y..R......v...t}...v.@..^.n...`3.rG....-.!.i'P....6...>.d..AK3MO....B`...0....../X....C.i..s..Ks....k..vp&"?..hj..@._:.z>.b.r.0...S.d".f2].T-3.up...;X.Js....U.......-.2KC...1B.$.BN9w.?)P>..1....a..q.50.....fS.{.0~.G..o..>..6F..X.`...QU...s/.....3.%`y.._'..;6..em.C.....2....U.......tJ......p.X...R.v....`H.F..h-;....d/.*..........x.c`d```b8.....x~......."..~Ul...V........r.........x..AN.@......EQ..j....v.E..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 36068, version 0.0
Category:	downloaded
Size (bytes):	36068
Entropy (8bit):	7.989619253709987
Encrypted:	false
SSDEEP:	768:IyDwGKhjOoERY0ubYt8VzsS62LZB+iADpLaBAWrO5wL0q6qMxIkk:IycpjAUY6VKKTPADpkdrPBZlkk
MD5:	35870FDA65BBD420FEDAC45D4CB0F5C9
SHA1:	A9F5393402174551A2FF00C9C20739B82E138C53
SHA-256:	8792852FC7DE9DE854131ACAD09CB7867193BF1F175E83D7EE55CF0CE9E35EC2
SHA-512:	853C6F0F7605214784A792F9E192279A68F4846C9CFE7DCC6C5599EF74077E9E5CF0413DC93284155D20537F0DE9C27AFB1312CCBF8FCE2D0DCBD2B1562421E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/949f99/00000000000000003b9b3068/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
Preview:	wOFFOTTO....................................BASE...X...F...Fe!].CFF ...@..a...{..E^.DYNA..f.........z...GDEF..g....r........GDYN..g....6...q.j=.GPOS..h....I..+.Q..GSUB..{.......!.f...OS/2.......W...`.f..cmap...(.......>..head.......6...6...thhea.......!...$....hmtx............iT3.maxp...8..........P.name............fS..post........... ...X..............ideoromn..DFLT..cyrl..grek..latn...................Y...............v._.<..........X.......X.........7............x...j.@....'.PB..nf.@2..Xv.BI..*.`.tU${.............>L_.G.8.......3Gw...5..Cw.yw...W.....=....}j...x....=.8>.......O...x.......x...u...}l.... z...".}...m.>..8Z......<-tity".A0..2.E+1.RFU.Z.Y.7i..[].W:_.2.L.En....i.......\|6.A..J..k1....(...2O.....l<.=.]Y...}.].,.r.._=..gW..'a.M.!4..B...`!p...9. f<#.-.,a...cC..#H.%r...b..8.\|....56.[L.-W5.sNEHM.O<.........{N.....].n.xS.x.>.D{...J..7...A...u...j5...tN...v!....1...6.....\|....Qo...`\....m...!.8...#L~.....x.c`frb.................."......l. .E....(..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[3] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 21964, version 0.0
Category:	downloaded
Size (bytes):	21964
Entropy (8bit):	7.9725559995125685
Encrypted:	false
SSDEEP:	384:ANBtlENfUp59YhNFBz4TpgYHLgvE/vvkacO8syS9taWGsSwBytxwhuAd/tDW:sN8Up8hNf4lJHLgvE/0Pbsr9tXSOytxv
MD5:	25704A0DEF6040D9ED167F36D3F28242
SHA1:	FBB0D647FC706FC8867EF28DE3A03BD42FA7BDF0
SHA-256:	246BA9C4AB21AC5BB04019666F63AA321BD893478FC4DFF77B25C86FBB5BF36F
SHA-512:	39F31749C8008B106539FB4C249280E25A8FFD9771AB8FF3C45FDF5663C7F8BFDB8CF58766AB12263DE1C7F59DCA51B1691299390975C70556E46EA289868F2D
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/74fc30/0000000000000000000158d4/26/d?subset_id=2&fvd=i1&v=3
Preview:	wOFF......U.................................DYNA..............t.FFTM............]..<GDEF...D...8...B...<GDYN...\|.........j..GPOS...`...K.....L..OS/2.......Y...`~wz+cmap..U4........+..wcvt .......$...$....fpgm...........e#./.gasp................glyf......Dy..v8.3.head.......4...6.i;.hhea...H... ...$.k.4hmtx..Q(...?...lJVC.loca..Sh.........:-Tmaxp...h... ... ....name...........~v..?post..U ....... ...(prep.......R...R].oc.........o1.......T......x........6.<.D.D.@.>.:.1.5.8.3.,.F.B..x.]Q.N[A.......c..hS.fB...$.W...vc9B.\.b\..P Q..k.h().A..R>.O@bfM.(....s..r..]Z.y..R......v...t}...v.@..^.n...`3.rG....-.!.i'P....6...>.d..AK3MO....B`...0....../X....C.i..s..Ks....k..vp&"?..hj..@._:.z>.b.r.0...S.d".f2].T-3.up...;X.Js....U.......-.2KC...1B.$.BN9w.?)P>..1....a..q.50.....fS.{.0~.G..o..>..6F..X.`...QU...s/.....3.%`y.._'..;6..em.C.....2....U.......tJ......p.X...R.v....`H.F..h-;....d/...........x.c`d```b8Z.2.c<..W.y..@..S.....v.88.....q.1.......x..AN.@....@..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[4] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 22376, version 0.0
Category:	downloaded
Size (bytes):	22376
Entropy (8bit):	7.9745730846169725
Encrypted:	false
SSDEEP:	384:nAizO59XJQcmATaTY6S0r89SmOrPuaDuXo0J22vNYckNcL5VjWV3ncNHFb:1AQcmATaTYn0g9Wiaso0wqKNM5pmcfb
MD5:	74B4BA34F532FC0C6C7C557A65B733B6
SHA1:	CA3CF7110DF3502935D79F055BFFE00A55087C3A
SHA-256:	58C894C70D7848BD09B94AF1754E5532DCAC4189ED48F9AA3AB5E1ACEF4376C1
SHA-512:	29A5BA44B73F6AD9F3AFA09ACA3326E1BD8FD0C79C681D91A03E12B46D09A198E2CD5A1B6AFAE7F59F2E4DFC4AC64480F0F96E22FE8879C22C3A8F52A2B98B5B
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/6c57c4/0000000000000000000158d6/26/d?subset_id=2&fvd=i6&v=3
Preview:	wOFF......Wh.......\|........................DYNA..............t.FFTM............]...GDEF.......8...B...<GDYN.............j..GPOS...........J.w..OS/2...T...Y...`..zvcmap..V.........+..wcvt .......^...^.C..fpgm...$.......e#./.gasp................glyf......E...s..r.Ahead.......5...6.V;.hhea....... ...$.W.phmtx..R....N...l{k,Lloca..U.............maxp....... ... ....name............#.g?post..V........ ...(prep.......t....i.D..........o1.......=......x........6...\|.........................................@.k...........u.e.....R.7.9.;.F............x.]Q.N[A.......c..hS.fB...$.W...vc9B.\.b\..P Q..k.h().A..R>.O@bfM.(....s..r..]Z.y..R......v...t}...v.@..^.n...`3.rG....-.!.i'P....6...>.d..AK3MO....B`...0....../X....C.i..s..Ks....k..vp&"?..hj..@._:.z>.b.r.0...S.d".f2].T-3.up...;X.Js....U.......-.2KC...1B.$.BN9w.?)P>..1....a..q.50.....fS.{.0~.G..o..>..6F..X.`...QU...s/.....3.%`y.._'..;6..em.C.....2....U.......tJ......p.X...R.v....`H.F..h-;....d/.*..........x.c`d```

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[5] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20540, version 0.0
Category:	downloaded
Size (bytes):	20540
Entropy (8bit):	7.970560806372044
Encrypted:	false
SSDEEP:	384:Fo1SMQ+uypEPZJnq9tVxtO0TKJOOr4ohDCR/Iowk+hkFo31JAM7/Se:FoQ9+u7nSBM0+4ohDiQhkS3cMDSe
MD5:	F7DFBBC4491156A7123A80DD7F9A1AA7
SHA1:	643F976CF7504CBF212657C25BE954A73F7F3F04
SHA-256:	6778F1BCD6798ADE72372490A2BC16AD9BE3A23996E86878AF0C8F429B429CB9
SHA-512:	D9689A58CA5C421105B1846BD35C51C0AAA7B3D928F2EE04BF00D3679FFCE90FBA5C12829626F090CED0ECDE1158D5A7068AB7EC401B2ACDC25DB4324940F804
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/3d913c/000000000000000000017709/26/d?subset_id=2&fvd=n6&v=3
Preview:	wOFF......P<................................DYNA............4.(.FFTM............]...GDEF...d...8...B...<GDYN................GPOS...\|...x...@.z..OS/2.......Y...`..zpcmap..O.........+..wcvt .......0...0...Jfpgm...........e#./.gasp................glyf......>...b...`.head.......5...6..;.hhea...l... ...$...hmtx..K....-...lx.8.loca..M..........U.Rmaxp....... ... ...Tname...........u....post..O........ ...(prep.......s....^`...........o1.......2......x........6...\|.....n.....................u........x.]Q.N[A.......c..hS.fB...$.W...vc9B.\.b\..P Q..k.h().A..R>.O@bfM.(....s..r..]Z.y..R......v...t}...v.@..^.n...`3.rG....-.!.i'P....6...>.d..AK3MO....B`...0....../X....C.i..s..Ks....k..vp&"?..hj..@._:.z>.b.r.0...S.d".f2].T-3.up...;X.Js....U.......-.2KC...1B.$.BN9w.?)P>..1....a..q.50.....fS.{.0~.G..o..>..6F..X.`...QU...s/.....3.%`y.._'..;6..em.C.....2....U.......tJ......p.X...R.v....`H.F..h-;....d/...........x.c`d```b8z.;.h<..W.y..@..S.*V...+...........T..........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[6] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 20720, version 0.0
Category:	downloaded
Size (bytes):	20720
Entropy (8bit):	7.971274872077512
Encrypted:	false
SSDEEP:	384:ep0ld6FR9PFBI+qyX9W69gNqcJddRjJpyZc+2HC9j2SDGDYfLrDYSzJgIY:K0ld6VtBI+qy069gAa1Jx+G6zDGDYfH0
MD5:	185A2AFC0935C94FBB5683112A905CE2
SHA1:	4EB450182B9C658C6916CDDED80D3922E90DDCD8
SHA-256:	F81CA8209A0526BEF58A70CF4288A1B1F8A02D8B1F7F8E3BC4B8A179323A1DFD
SHA-512:	A8C1BCA226F757C2BC8A096E31D2E05B2F8C184A531D93CDE6A26974A10B96005F4F341D52A80404919CE050BE8F89EE91EFC7D996936B37879DFD85CAA36E9A
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/9951d2/0000000000000000000158d7/26/d?subset_id=2&fvd=n4&v=3
Preview:	wOFF......P........`........................DYNA............4.(.FFTM............]...GDEF...p...8...B...<GDYN................GPOS...........@.J.OS/2.......Y...`~.z~cmap..PX........+..wcvt .......2...2.A.0fpgm...........e#./.gasp................glyf...L..?...bT.@..head.......4...6.E;.hhea...x... ...$.I..hmtx..L`...,...le.BVloca..N.............maxp....... ... ....name...........iZ.[.post..PD....... ...(prep...............>.........o1..............x........6...`.n.\|.....Z.................O...t.c......x.]Q.N[A.......c..hS.fB...$.W...vc9B.\.b\..P Q..k.h().A..R>.O@bfM.(....s..r..]Z.y..R......v...t}...v.@..^.n...`3.rG....-.!.i'P....6...>.d..AK3MO....B`...0....../X....C.i..s..Ks....k..vp&"?..hj..@._:.z>.b.r.0...S.d".f2].T-3.up...;X.Js....U.......-.2KC...1B.$.BN9w.?)P>..1....a..q.50.....fS.{.0~.G..o..>..6F..X.`...QU...s/.....3.%`y.._'..;6..em.C.....2....U.......tJ......p.X...R.v....`H.F..h-;....d/.*..........x.c`d```b8Z.9.?...+.<....._.K`.....p......@.@......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[7] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 22492, version 0.0
Category:	downloaded
Size (bytes):	22492
Entropy (8bit):	7.974382432382698
Encrypted:	false
SSDEEP:	384:yDLC8fp6SXkpD0a74PboHnd4VZK1Jnn3J0YjWkPpSjYmRja+eUZ5EJSyT7MYLQ:iW8h6rD0ak8nyZ2ysrpeYmRcdfE
MD5:	A2CAF0BD8F7084A90E2053AD61157C78
SHA1:	9E35E2810DCCB3C791CEB2818B16EFA9328C307E
SHA-256:	6537EEA8561F3D0903E4CAABB123C0AF961A09218290C678285B7C27ED335E54
SHA-512:	1FAE0E3EC674A092FAD4813182C77144F698AEA5715BD94540CF4AB8CF865165CD1BC57A56E56254B3F8C0E9F10227FCFCE33FA2020D616CB0D7ADA1CBBB89DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/fe9c8e/0000000000000000000158d8/26/d?subset_id=2&fvd=i4&v=3
Preview:	wOFF......W........P........................DYNA..............t.FFTM............]...GDEF.......8...B...<GDYN.............j..GPOS.......-...J.E..OS/2...X...Y...`~.zEcmap..WD........+..wcvt .......\...\...Xfpgm... .......e#./.gasp................glyf......E1..s.C..head.......4...6.W;.hhea....... ...$.Y.4hmtx..S0...E...lg.5.loca..Ux...........maxp....... ... ....name................post..W0....... ...(prep...............:.........o1.......'......x........6...`.n.\|.....x.....u.............q.......k.>.W.......~.^.N.s...H.7.9.;.c.J.L.F...P..x.]Q.N[A.......c..hS.fB...$.W...vc9B.\.b\..P Q..k.h().A..R>.O@bfM.(....s..r..]Z.y..R......v...t}...v.@..^.n...`3.rG....-.!.i'P....6...>.d..AK3MO....B`...0....../X....C.i..s..Ks....k..vp&"?..hj..@._:.z>.b.r.0...S.d".f2].T-3.up...;X.Js....U.......-.2KC...1B.$.BN9w.?)P>..1....a..q.50.....fS.{.0~.G..o..>..6F..X.`...QU...s/.....3.%`y.._'..;6..em.C.....2....U.......tJ......p.X...R.v....`H.F..h-;....d/.*..........x.c`d```b8./

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[8] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 24436, version 0.0
Category:	downloaded
Size (bytes):	24436
Entropy (8bit):	7.978037120154255
Encrypted:	false
SSDEEP:	384:b2q7Hwg9s0WrCWQYOL4VhwnhHa63bzKnWhF52DHilk+9y5yS6P8N:KqrsYL4vwh663fKW/50iZ9IyZPs
MD5:	6D26AE32705F04BD2CCC4DC335F15809
SHA1:	6F67C23951FB9426FA426436CCC1CE1E6FDDF220
SHA-256:	6E52D4DF448460F8B6C6C8DC776745BE4C85A9D18981772A89C9876B4E19FB37
SHA-512:	687973BC1D027B36AC99E2B7AA9928B35148E7AA742B13FCF2A20B0947B7ED27EA470E770856711C584221E88F3FBEA5AA3A93A58DC59DB7794320E9B11F019A
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/9d1933/00000000000000000001705b/26/d?subset_id=2&fvd=i3&v=3
Preview:	wOFF......_t................................BASE.......F...Fe!].DYNA...............bGDYN.......#...Q.4.xGPOS...........dG...OS/2...X...\...`.}..cmap..]........8..}.cvt .......R....6...fpgm...0.......p...Ygasp................glyf......BX..w....Mhead.......6...6....hhea......."...$....hmtx..WX...+...z....loca..Y...._.....4..maxp....... ... .B..name............yJ..post..[........Q..$uprep............R.>...............ideoromn..DFLT..cyrl..grek..latn...................Y......x.c` .X..>.>.l.......=.g...............0.FU.........I...,o......4.=H..1...BX8a..x.Viw.F..yI..,%.-ja..i.F&l...A.c ]......;...._.d.s.7~Z../$...p...w.....e.Z...../...&..<..M.Q\|(;{!e....Q......DD"P...D...Y.d\|.QF..WM.-=..[.A.U.~.:.;..f3th=.%U.U.H.=R.e..+I+....W.P.N"i....H..g..h5..(.l..(R$..A.y....................V.K..../y.w9?)..[.-9...#;8;]....V.7.d;.U.....[6;.......L/4#X*_!..O(..HV..S....l.D.z....O..8bJ\3F.twtB.u....=.....w.......Q.'.DJ..M.6..XI.Jj.+&Ny..._.v..3.8....C.VNTr<..i&S.vR.hJ.(%......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\d[9] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, CFF, length 66304, version 0.0
Category:	downloaded
Size (bytes):	66304
Entropy (8bit):	7.993959805787878
Encrypted:	true
SSDEEP:	1536:VeO6ShUivo8vaO8pnTzDOTXL/kxtcA+uDWB:p6DJWaO4iT7/4tzk
MD5:	9E6E819AE9D8993A2B10353EFF16497D
SHA1:	1410161D0CA8CA3966897CAB50E45A14B721C056
SHA-256:	81B4B3BC1EFD4F08F212308D9727BC21A40E38B5464B6B25EBDE1B2E24D13F05
SHA-512:	D9D88E8987EE2F45BFA0B211AAA7DFEB9C39718E9A037FAE625AF4E6806E04D4C8316B58363EEA93E9BA6C23B6F514925D4841C95CDFB103693688D5EFC71DAB
Malicious:	false
Reputation:	low
IE Cache URL:	https://use.typekit.net/af/40207f/0000000000000000000176ff/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n3&v=3
Preview:	wOFFOTTO...........D........................BASE...X...F...Fe(].CFF ...T........6...DYNA...P.........gG9GDYN...T.../...a... GPOS.....#...T.;..GSUB...0.........0.OS/2.......Y...`[.t.cmap.......S.....lgasp................head.......4...6..%`hhea...(...!...$....hmtx...........x..].maxp...L.........^P.name.............8I.post........... ...2..............ideoromn..DFLT..cyrl..grek..latn...................`..............x.c`d```5.{..9...+.3........P..?.?....1 ....$.._..!x..An.@....I..jo0.>...!..$H........`a{.=Ab.u.]...B..E..T..<...Y....3.{o....._.....k....x......c.Mj.......f~..B......9...s..A.V......g.Mj.{>F...\|..0.[.5>=.P..1X....}iuV..\|n..)b..R..TL...b.K].X.R...M..!..H...?....N...N...p..x..21...wS.J.T.m...;.Jv..Y....e..B.....kk....o.&.rn....z~u...%. .Bq\..X.`.M.b.....)p...Y-........r.L.`.5+..i>5.;.<..C3%'...U...X......D..{.!F.~...8=..c.~y.{w.s..{..U........._....~.j......)Sg.....R^:.u[v..m.....j.eJ.w.u.T.....Oy.s-..m.x..x.c`f......................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2997
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8Rra:vIlJ6G7Ao8Ra
MD5:	2DC61EB461DA1436F5D22BCE51425660
SHA1:	E1B79BCAB0F073868079D807FAEC669596DC46C1
SHA-256:	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
SHA-512:	A88BECB4FBDDC5AFC55E4DC0135AF714A3EEC4A63810AE5A989F2CECB824A686165D3CEDB8CBD8F35C7E5B9F4136C29DEA32736AABB451FE8088B978B493AC6D
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/dnserror.htm
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/errorPageStrings.js
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	1.952456287520738
Encrypted:	false
SSDEEP:	24:EslvlQNp0eCeAuyAwNtmUc3lKFWoX6UwjobtSl554VqQBzttYtlbd6e2u:FYfCzuyAacQWoWjobtc4VqUztQlbIeB
MD5:	DC94F1054A50B313EE14BBD3D4BC1C0A
SHA1:	B871EFBBD59E202329352C18B775F7C5743AA8DE
SHA-256:	8E263FEF3E738AC1882B97A05CAAF21BBFFC0BDABDF4A7E8338453C18E1E90EC
SHA-512:	A66B30C2E23F0D43F06B7C6889892AF0975C79037FB145FD01E84D4FA04234CDF8B32ECEE8FE29FA5FD13DB682485E4EFC7B2F3E8B9D23BDC12586CE417AA080
Malicious:	false
Reputation:	low
IE Cache URL:	https://ims-na1.adobelogin.com/favicon.ico?cache_bust=b5ce9bc64f47
Preview:	............ .h...&... .... .........(....... ..... ............................................................................................8...........................................................8...................................Q...........#......................................."...@...@.......................................x...............H...................M...............x...............................................................................X...............s...........v...............X.....................................................................................................................................................................5...5...............................................................................................................p...........................p.......................................................................................................H...................H..............................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\fb_icon_selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.494922349362111
Encrypted:	false
SSDEEP:	12:TMHdPhfMi/nzVJ/KYf3fNO6rHc/hxsXeRN3e846ZCgKVfpXy9aHbpJl5aI:2dRMATLfPNOyrXeRE84QCgofsqbvn
MD5:	9D3FD06B1D65DCED6D16C9B61E4A3E51
SHA1:	D83BA5FA8D3D5004565C9117013F628084585995
SHA-256:	2FBF1FB6BBC76E55FFA974E0A4A775A06228CF84E17954E3B87A3D6DC83C4B4A
SHA-512:	16124109131FD5EB5ACA033114EDC36100648A8516B973538C068C9EB72AEF3BE48F5A506CFDD2DCC01C33C11C478BCCBC310B98740940EF698443316BE18556
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/fb_icon_selected.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="28px" height="28px" viewBox="0 0 28 28" style="enable-background:new 0 0 28 28;" xml:space="preserve">.<style type="text/css">...st0{fill:#F2F4F5;}...st1{fill:#35414C;}.</style>.<g id="Group_4_2_" transform="translate(2351 66)">..<circle id="Ellipse_4_2_" class="st0" cx="-2337" cy="-52" r="14"/>..<path id="SocialFacebook3_32_1x_2_" class="st1" d="M-2333.9-52h-2.2v8h-3.3v-8h-1.6v-2.8h1.6v-1.8c-0.1-1.7,1.2-3.2,2.9-3.4...c0.2,0,0.3,0,0.5,0h2.5v2.8h-1.8c-0.4,0-0.7,0.3-0.7,0.6v0.1v1.7h2.5L-2333.9-52z"/>.</g>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\fbevents[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	93376
Entropy (8bit):	5.3917536957896575
Encrypted:	false
SSDEEP:	1536:5M+OWt6w6aic9MeoJ2my8LuThe7KFv0a9sIOC1jaMu5Qm2B+QNSMngUSZYSlIUiZ:5OQRj1SVBYDG2
MD5:	1DE516A5B6B1C6033B92EE5F5D50C140
SHA1:	9E37DA5D5D789074D1DADD60977A9575A6332DD5
SHA-256:	9E7EA2B4BA8E2BCC4A964D6192E4671DC5F6863A1C7E35B52B229A3C1E67A68D
SHA-512:	99EF8E73A5D560CB3504B6BF1BC237957687280AFC99FCFF7A4B882FD2AE423B19721D6444FBD63D3ABCCFF8BD0A5CED79899CE02A2116D7710D2A89BEE370E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\feds[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	107052
Entropy (8bit):	5.224659685297504
Encrypted:	false
SSDEEP:	1536:hKFGCROAkGCI5eHW1Enc04Ifk75YRpYh1XcxfzTzkOFrCl+zasafXojdjmVL:hKTkC5eHWupY1
MD5:	74B616840F833A8A5CFC9F23CA5242D2
SHA1:	83231E50CB9EA7EFC7E3862EAC08D439BAD2A66D
SHA-256:	CC667F6F1135D7BDF69B93F01276062CFBEEC4CFE6E62C4602ED7E1E957F4AA3
SHA-512:	D9A0A60DC825910F352AFFA0CC16A30C53886B0DDBC81E372354F8B1099E0AE6665514CBE675D167A005FC35C8D448642332AE0DE9ED8D07A673DA00B7254497
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/etc.clientlibs/globalnav/clientlibs/base/feds.js
Preview:	window.__fedsSegmentation = '100';./! feds v0.42.0 built on Wed, 27 Jan 2021 06:37:14 GMT /.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:r})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=167)}([,,,,function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e};t.default=function(e){return"object"===(void 0===e?"undefined":r(e))&&!Array.isArray(e)&&null!==e}},function(e,t,n){"use strict";Object.defineProperty(t,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\icon-footer-facebook-hover[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	337
Entropy (8bit):	5.009600427711019
Encrypted:	false
SSDEEP:	6:tvKqmc4slzq5n4i/aY9IyOnWQFWNHEoT/Yn/oIBUlavrsQVC7wWq:tvveD/lIzWDEGcdWlaVC8n
MD5:	971E224B1CD444FB90F432D788DC7150
SHA1:	8A708A0DBAAA3C4CFE3550BD57BCDDDB6DDE678B
SHA-256:	B04DB4F0A40DA5E6753522EFB5DFE42F6E38E26E9536DDF16D423E63B6AA070F
SHA-512:	01AA1CACA77491FFA40A59632714A99CE399B3484C1CBE147C226246BDAD51EF1BEFB9B67E13C18F0070A46005E5ABE5F14BAAAA05926C5D0CAE0B41DE55D3C5
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/icon-footer-facebook-hover.svg
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" width="67" height="67" viewBox="0 0 67 67"><style>.st0{fill:#fff}</style><path class="st0" d="M29.8 50.3h6.7V34H41l.6-5.6h-5.1v-2.8c0-1.5.1-2.3 2.2-2.3h2.8v-5.6H37c-5.4 0-7.3 2.7-7.3 7.3v3.4h-3.4V34h3.4v16.3zM34 64C17.4 64 4 50.6 4 34S17.4 4 34 4s30 13.4 30 30-13.4 30-30 30z"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\icon-footer-instagram-white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1970
Entropy (8bit):	4.769295287823956
Encrypted:	false
SSDEEP:	48:cOAvf3vCH7QZRYaHYZ/wPtI6Z0/YJCnAwuHm6:Evf/gyRYagYPf0/km0
MD5:	BDA76BC5D4EB889764BD875185177CF5
SHA1:	32D0936AB440E846C0016701DEEE3B0595751FD5
SHA-256:	90391DE2BA2A3516B19BCB2175CF6BF084BA8DE2075BA467C0DBAB08F6C7CDB2
SHA-512:	59DC23E4B7B783B2F6C9C58AF4CD7E778CEAFD55C8EE7E8E97E826598F07989E6FF96A7A6C11D83827DF5BCF1C79BDEC76B59CD7A8DC1DB699098A3EDA16354A
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/icon-footer-instagram-white.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 67 67" style="enable-background:new 0 0 67 67;" width="67" height="67" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<title>icon-footer-twitter</title>.<g>..<path class="st0" d="M34.5,4.1c-16.6,0-30,13.4-30,30s13.4,30,30,30c16.6,0,30-13.4,30-30S51,4.1,34.5,4.1z M51,40.9...c0,1.4-0.3,2.8-0.8,4c-0.9,2.2-2.6,4-4.9,4.9c-1.3,0.5-2.7,0.7-4,0.8c-1.8,0.1-2.3,0.1-6.9,0.1c-4.5,0-5.1,0-6.9-0.1...c-1.4,0-2.8-0.3-4-0.8c-2.2-0.9-4-2.6-4.9-4.9c-0.5-1.3-0.7-2.7-0.8-4c-0.1-1.8-0.1-2.3-0.1-6.9c0-4.5,0-5.1,0.1-6.9...c0-1.4,0.3-2.8,0.8-4c0.9-2.2,2.6-4,4.9-4.9c1.3-0.5,2.7-0.7,4-0.8c1.8-0.1,2.3-0.1,6.9-0.1c4.5,0,5.1,0,6.9,0.1...c1.4,0,2.8,0.3,4,0.8c2.2,0.9,4,2.6,4.9,4.9c0.5,1.3,0.7,2.7,0.8,4c0.1,1.8,0.1,2.3,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\icon-footer-twitter-hover[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	4.2934848994992905
Encrypted:	false
SSDEEP:	12:tvveD/lIzWWNZHvr3t8bYDnNAxLgeZLU9YtxYMPWzG4BsVrvl5JiqC8n:tXeD/ez/p8QnNCLgQbbJMG4er1iqC8n
MD5:	C0C27EEFB8CA81E38C121394E7CB33E3
SHA1:	39C8F2E72CCF6DCB154C43A6EF1A80A0D4EFAF8F
SHA-256:	9B34C8D3C9D5FA99106C7C0A03518B85B99F61DEA1BDF767C8027B001E6C4AF3
SHA-512:	8F413899575A2A2B2DF36D3ECEA457F4A5E7E6C8F02AFF4A1D7F4E666200EF5F051A7212618606F27CA0B79F8579F3FA82B480A117408357F2BF4D03D668B3C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/icon-footer-twitter-hover.svg
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" width="67" height="67" viewBox="0 0 67 67"><style>.st0{fill:#fff}</style><path class="st0" d="M38.2 22.3c-2.6 1-4.3 3.4-4.1 6.1l.1 1-1-.1c-3.8-.5-7.1-2.1-10-4.9L21.7 23l-.4 1c-.8 2.3-.3 4.7 1.3 6.3.8.9.6 1-.8.5-.5-.2-.9-.3-1-.2-.1.1.4 2.1.8 2.8.5 1.1 1.7 2.1 2.9 2.7l1 .5h-1.2c-1.2 0-1.2 0-1.1.5.4 1.4 2.1 2.8 3.9 3.5l1.3.4-1.1.7c-1.7 1-3.6 1.5-5.6 1.6-.9 0-1.7.1-1.7.2 0 .2 2.6 1.4 4 1.9 4.5 1.4 9.8.8 13.7-1.6 2.8-1.7 5.7-5 7-8.2.7-1.7 1.4-4.9 1.4-6.4 0-1 .1-1.1 1.2-2.3.7-.7 1.3-1.4 1.5-1.6.2-.4.2-.4-.9 0-1.8.6-2 .6-1.2-.4.6-.7 1.4-1.9 1.4-2.3 0-.1-.3 0-.7.2-.4.2-1.2.5-1.8.7l-1.1.4-1-.7c-.6-.4-1.4-.8-1.8-.9-.9-.4-2.6-.4-3.5 0zM34 64C17.4 64 4 50.6 4 34S17.4 4 34 4s30 13.4 30 30-13.4 30-30 30z"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\ig_icon[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1893
Entropy (8bit):	4.755600005797628
Encrypted:	false
SSDEEP:	48:cOAvf3txipZqMNV/D/XIKJyYF0bPPMJKyBz:EvfdxiDqC/D/IKMYF0bP0Zz
MD5:	4DC19F66A1E3286359C6A6D0EB019C51
SHA1:	4B4C114738DE06170D53F0845E665ADF9F7CA76C
SHA-256:	5E28F226B034E83781C98655311E5B0C4F6679D1F431DD516B3451BC9CCA5267
SHA-512:	B7AB0C01D225B02F8E427F451378B332DB157F9A215F9FDEF15C7A30F628CC9B2E2D600B17EC895E24D0E985A067C2345AB0D35E3A859F7F1693D14D08BB08EF
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/ig_icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 28 28" style="enable-background:new 0 0 28 28;" width="28" height="28" xml:space="preserve">.<style type="text/css">...st0{fill:#82919B;}...st1{fill:#35414C;}.</style>.<g>..<circle class="st0" cx="14" cy="14" r="14"/>..<g>...<path class="st1" d="M14,7.6c2.1,0,2.3,0,3.1,0c0.8,0,1.2,0.2,1.4,0.3c0.4,0.1,0.6,0.3,0.9,0.6c0.3,0.3,0.4,0.5,0.6,0.9....c0.1,0.3,0.2,0.7,0.3,1.4c0,0.8,0,1.1,0,3.1s0,2.3,0,3.1c0,0.8-0.2,1.2-0.3,1.4c-0.1,0.4-0.3,0.6-0.6,0.9....c-0.3,0.3-0.5,0.4-0.9,0.6c-0.3,0.1-0.7,0.2-1.4,0.3c-0.8,0-1.1,0-3.1,0s-2.3,0-3.1,0c-0.8,0-1.2-0.2-1.4-0.3....c-0.4-0.1-0.6-0.3-0.9-0.6c-0.3-0.3-0.4-0.5-0.6-0.9c-0.1-0.3-0.2-0.7-0.3-1.4c0-0.8,0-1.1,0-3.1s0-2.3,0-3.1....c0-0.8,0.2-1.2,0.3-1.4c0.1-0.4,0.3-0.6,0.6-0.9C8.8,8.3,9,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\ig_icon_selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1893
Entropy (8bit):	4.762631062417839
Encrypted:	false
SSDEEP:	48:cOAvf3tx6pZqMNV/D/XIKJyYF0bPPMJKyBz:Evfdx6DqC/D/IKMYF0bP0Zz
MD5:	E3D8EF74F3267E7D66B12F438A2726F4
SHA1:	5C3437DA233A4928F04AB947B7E304227D97D1ED
SHA-256:	7F2BB39F6089F22961F16F50C2EB0CC79F19C1F98A56E2E588A82BA251E5258E
SHA-512:	1A6D451EE0BD296E7FA8A30F06BCCE5ED8F730F3DF190815071ACDC0FE1066A5FB8BDF15E5D6CE1342228DCA7F796E694A72CFB8EAA41808B4D42DE6699A47A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/ig_icon_selected.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 28 28" style="enable-background:new 0 0 28 28;" width="28" height="28" xml:space="preserve">.<style type="text/css">...st0{fill:#F2F4F5;}...st1{fill:#35414C;}.</style>.<g>..<circle class="st0" cx="14" cy="14" r="14"/>..<g>...<path class="st1" d="M14,7.6c2.1,0,2.3,0,3.1,0c0.8,0,1.2,0.2,1.4,0.3c0.4,0.1,0.6,0.3,0.9,0.6c0.3,0.3,0.4,0.5,0.6,0.9....c0.1,0.3,0.2,0.7,0.3,1.4c0,0.8,0,1.1,0,3.1s0,2.3,0,3.1c0,0.8-0.2,1.2-0.3,1.4c-0.1,0.4-0.3,0.6-0.6,0.9....c-0.3,0.3-0.5,0.4-0.9,0.6c-0.3,0.1-0.7,0.2-1.4,0.3c-0.8,0-1.1,0-3.1,0s-2.3,0-3.1,0c-0.8,0-1.2-0.2-1.4-0.3....c-0.4-0.1-0.6-0.3-0.9-0.6c-0.3-0.3-0.4-0.5-0.6-0.9c-0.1-0.3-0.2-0.7-0.3-1.4c0-0.8,0-1.1,0-3.1s0-2.3,0-3.1....c0-0.8,0.2-1.2,0.3-1.4c0.1-0.4,0.3-0.6,0.6-0.9C8.8,8.3,9,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\info_48[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4113
Entropy (8bit):	7.9370830126943375
Encrypted:	false
SSDEEP:	96:WNTJL8szf79M8FUjE39KJoUUuJPnvmKacs6Uq7qDMj1XPL:WNrzFoQSJPnvzs6rL
MD5:	5565250FCC163AA3A79F0B746416CE69
SHA1:	B97CC66471FCDEE07D0EE36C7FB03F342C231F8F
SHA-256:	51129C6C98A82EA491F89857C31146ECEC14C4AF184517450A7A20C699C84859
SHA-512:	E60EA153B0FECE4D311769391D3B763B14B9A140105A36A13DAD23C2906735EAAB9092236DEB8C68EF078E8864D6E288BEF7EF1731C1E9F1AD9B0170B95AC134
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/info_48.png
Preview:	.PNG........IHDR.../...0.......#.....IDATx^...pUU..{....KB........!....F......jp.Q.......Vg.F..m.Q....{...,m.@.56D...&$d!.<..}....s..K9.....{............[./<..T..I.I..JR)).9.k.N.%.E.W^}....Po..............X..;.=.P......./...+...9./..s.....9..\|........7v.`..V.....-^.$S[[[......K..z......3..3....5 ...0.."/n/.c...&.{.ht..?....A..I{.n.....\|....t......N}..%.v...:.E..i....`....a.k.mg.LX..fcFU.fO-..YEfd.}...~."......}l$....^.re..'^X..}.?.^U.G..... .30...X......f[.l0.P`..KC...[..[..6....~..i..Q.\|;x..T ..........s.5...n+.0..;...H#.2..#.M..m[^3x&E.Ya..\K..{[..M..g...yf0..~....M.]7..ZZZ:..a.O.G64]....9..l[..a....N,,.h......5...f.y...}...BX{.G^...?.c.......s^..P.(..G...t.0.:.X.DCs.....]vf...py).........x..>-..Be.a...G...Y!...z...g.{....d.s.o.....%.x......R.W.....Z.b,....!..6Ub....U.qY(/v..m.a...4.`Qr\.E.G..a)..t..e.j.W........C<.1.....c..l1w....]3%....tR;.,..3..-.NW.5...t..H..h..D..b......M....)B..2J...)..o..m..M.t....wn./....+Wv....xkg....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
IE Cache URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\landing-animation-page[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 900 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	222736
Entropy (8bit):	7.988946987459983
Encrypted:	false
SSDEEP:	6144:j54qoibFIzIkVBo0ZuLvhrmT1bVtcRZiKxeP8DIAfYWRCw:UHhYRLvkxeiktJCw
MD5:	2B0BC9A3BC4480F297E5BDC0DAD9403A
SHA1:	D9A81F56FCAB83A1FB52CBAB9E6B63CA9704E649
SHA-256:	DD2DCE7E3E8B8E9FED798144AFDB36A86B896F9F6E7D33004114D82A8156AD2B
SHA-512:	D88A4BC2027F501D1ECD985FB688A13FB2191C75437EAE5F60DC4855A272E98CA9EB1681C27942B5C0BD68E615FF49573F8A67C39BF77CAF2F6F8262AD4F96A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/landing-animation-page.png
Preview:	.PNG........IHDR.......X.............PLTE....Rn....Vt.i..l..e..y.....p.....q.._..Hh........%.z..v.....\x..........[........s.tz.....Z}Xo}.Ko.\|.....Bb......hou.4P.\|.....{.....m..;Z...%....3......c.....Ox.T.......^...."....o...H>......y.....Z..O...&=.....?..[im.u....0..o.....U...i.5...........:..,........I..#..&v.au....i..Gewj.._..PjxH..u..{..)..:m.f}.-..^..<...Zw...n..Q..&o.N.....6.....1}....l..Iv.y..Hm.Sdg$.-9g~h....#..w..<..L.....G..`5.%......e.V..&..~.....w..i..g./ax.`....8...a~...>~.O-.:..(..G..."/{..7t.-.:......a.....Zv.o..: .W~.$[r_..J^^.....U..L..:.-....Ql=_q[...0>SJpL.6...J.....I>d...2(H.9Pj'........9)!>RTml.;3X&E^L&F_J2BHYQ.m+-vw....pGk6Tid:Zz..d_~...J:2...{Szf.......e..?0.5.vIE9O}...Z^.......XY...bt..N.u{....t....c.IDATx.\|..k.F...b%..Wk.\........'.v...j\BH.18.M..n.t).....B.Up..w{9...v..C.....+}o.......H3.2...L...:..vv../...)..P..#..?.....g.....T.r..}....?.~...\|~.l....<.............=O..,{..]..U...SW.....Q...+..k.....}t&......m....'O~.\|~...O~.....%...'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\landing-animation-post-background[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	5.014166592749673
Encrypted:	false
SSDEEP:	6:tI9mc4slzdgwomekB3RM/wUTHuLu8EL/oAI+DK8:t45omekB3zUTUEEAS8
MD5:	02CF1851546CAD896D37FF253E83FCF2
SHA1:	9407339FC131401FE68B9D22820C37C15683DE70
SHA-256:	571992ED86E5D29FD15D16579B82736A852421D3C342B2DA5BF9F628987E6C77
SHA-512:	976933049DFD9783F839C4A0C46178F91F7791335C34DAE23D0F30DCBF618BA46B258CB3E9FCAF6B34C8B9E6164497FD1FA6049D32583690F17540305C9F5329
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/landing-animation-post-background.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="629.8" height="875" viewBox="0 0 629.8 875"><path fill="#35414C" d="M629.8 875H0V85.1C0 38.1 38.1 0 85.1 0h459.6c47 0 85.1 38.1 85.1 85.1V875z"/><path fill="#9AA6AF" d="M250.8 47.1h132.9v20.4H250.8z"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\location[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	4.685293041881485
Encrypted:	false
SSDEEP:	6:nCf4R5ElWpKWjvRMmhLP2saVeCf4R5ElWpKWjvRMmhLP2saVO:CfiElshTRMmtP2saVLfiElshTRMmtP2G
MD5:	45B8989A12409A131F63D5637C4651B4
SHA1:	52C957EB44111AA617E2067318B597731312A991
SHA-256:	05A04EE0EF0039F54C28F5949C4A889EE16DDFAC1DA76A0E3D5D306C52190D17
SHA-512:	292D433B57DB741ECA8F37BD1BC62F1CA2CF0E9ACAE82C2B0966EB71A646C654207DD2962022AA10050464C92BB0C072F73E73A6242DC7BCA76A9BD6E283313A
Malicious:	false
Reputation:	low
IE Cache URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	jsonFeed({"country":"CH","state":"ZH","stateName":"Zurich","zipcode":"8152","timezone":"Europe/Zurich","latitude":"47.43000","longitude":"8.57180","city":"Zurich","continent":"EU"});jsonFeed({"country":"CH","state":"ZH","stateName":"Zurich","zipcode":"8152","timezone":"Europe/Zurich","latitude":"47.43000","longitude":"8.57180","city":"Zurich","continent":"EU"});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\login-bg-thumb-1[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x33, frames 3
Category:	downloaded
Size (bytes):	3432
Entropy (8bit):	7.7553083669138845
Encrypted:	false
SSDEEP:	48:RyB4jSX1qpy+R4M+5PFgeNaF8qygsP8CtIWZ+4uadJkY3lco/yIgBWzXx5Lc7XSI:RpUyyCu9mOn8CiokY1co/rgs7xSjS34
MD5:	A7B1798CC2647C575129083BA0B44B17
SHA1:	ADB860A1E675C0FBEFB38A955A5DC4AF9A025B01
SHA-256:	08F9AB3D41530F3E9D8F0780EF1A92F35ED821B5428E6B3C29DDB162F04818FA
SHA-512:	B8828CE68F5C980A9FB880997E5EBAF1533C320820ADC208AABD01B1430FE88DEB7715A900B70951A1F27081E5F6B0FC19A629F14C19552376034CEE1CAA2FF9
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/login-bg-thumb-1.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................!.2..................................................................................h...q.@..;#.P......(.Y...k.....e@F....P.V9.....3wz....X..u....r.!.U..(...Ki...1..y.}h..\..u..m..z.....K.`..0.W....(...........................6..7uv.48tw...........pQ.ab....j...3......B..$.g....>..1.........p..!L..T8.^..8u..P.W.{Z.....?......=....?..r..y.B......"...09...4.U.;...(w.~....a+.E=.;..?H..5.f..i...8.n.-a....#E......K..\..4.]'.O.%....h....I.......:?J.......r.!...!.-$.%FdD.%u......v.T.N.6t.25..[.X.C:/.z..&....E.E.6r.;]N...8BA5..b..k.U.+...nU.y2.!..EU.....6#.X(....``.....L.FwK..ua.I...i?&.\....l.=..t..!.........bI}s)..M..I:s.X.EH.}.NIX!<.4."t.;.p5..ir...u!,Jai..K`.6._.u....O.j5w[2"...a.S.....p;.@....C6CF.b+.zi.S...iG...\|}.............i......o..\|....3./..).9/.....).........................."..!1A...2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\m-main-landing-page-script-d84daaa2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	139437
Entropy (8bit):	5.494921812638869
Encrypted:	false
SSDEEP:	3072:QcGHkrrBk9yOtRKhwUxbutjTtvUK4ONmPuj3:QgZOtUButjT9fNmPuj3
MD5:	96EF11100D6A0C1896DC072E6D8BC98B
SHA1:	8E9980A535B60ED7CD9ECE76386F6944E94F00F6
SHA-256:	1A71F5FB3121ED87108FBCD043E76FCAC72EB2469ADC6A19D739897035B12C39
SHA-512:	4F0F78F2EDA6CD3A95C30680277253AE171A3F303867A57A5E2C6966AA117EE8ECDA8C459ED748A8321361C48CA126D18CD5D7BD53E3150F1099A1BB67633BF5
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/static/m-main-landing-page-script-d84daaa2.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,n),a.l=!0,a.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/static/",n(n.s=719)}({1:function(e,t,n){var r;void 0===(r=function(){"use strict";return window._prj

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\marvel-ui-faf07216[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1787
Entropy (8bit):	4.813025886465329
Encrypted:	false
SSDEEP:	24:/ewdsJs+PkYbe3wgKTPJLw2bAvAEUQs1ZC7q8hDNNKkZOENYTnQ5l1egaKQKUL:kCBYbe3apyUQWGDNNKwNYT41dajV
MD5:	9B374CB80282B92896CA0F5BFAF07216
SHA1:	B31941ED10E9E8F193F5DC53A82038176576B2A1
SHA-256:	D80D62755CC96593980D61D32B743B30834D3DEF42E152168000841F143ED8A5
SHA-512:	892A94C95403380DCF02759F5AEABEFC2B9FD99CFF6899F830B3C166B9DD78520C763EFBA6989DB207D872526A2568CC3273B85120F2E4D74997E27CCF90436D
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/marvel-core/css/marvel-ui-faf07216.css
Preview:	a,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,button,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,em,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,input,ins,kbd,label,legend,li,mark,menu,nav,object,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{box-sizing:border-box;margin:0;padding:0;border:0;font-size:100%;font:inherit;font-family:sans-serif;font-weight:300;text-rendering:optimizeLegibility;vertical-align:top}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{line-height:1;font-size:13px}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}table{border-collapse:collapse;border-spacing:0}body,html{height:100%}body{background-color:#555;position:relative;-webkit-font-smoothing:antialiased;-moz-os

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\otBannerSdk[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	349017
Entropy (8bit):	5.31760027140353
Encrypted:	false
SSDEEP:	3072:z9i74sroLe3xdPsKiaDj2HKzd5oYEJFsEv8D66:ql3xdPsKiaOHKzd5bEJFpv8O6
MD5:	09842127B6FE7CD7FED7BE501A5E0EE8
SHA1:	41A188777AC1C69C98DD0E11F6C30C2F21E02510
SHA-256:	6A13B93C05AF6EC6255B737032AA3F5D1F4823ED2D57D12C0735BD2C4ADC8EFC
SHA-512:	C4B869C46015D0D85AA5CA5202836D08F7B82DD063D836066407755D02B8E985538B294CCD473370B2969BE2A750AC90CAE49507DE1B6C7CF893B722B26F4F36
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cookielaw.org/scripttemplates/6.9.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v6.9.0. * by OneTrust LLC. * Copyright 2020 . */.!function(){"use strict";var o=function(e,t){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var o in t)t.hasOwnProperty(o)&&(e[o]=t[o])})(e,t)};var s=function(){return(s=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var s in t=arguments[o])Object.prototype.hasOwnProperty.call(t,s)&&(e[s]=t[s]);return e}).apply(this,arguments)};function a(r,i,l,a){return new(l=l\|\|Promise)(function(e,t){function o(e){try{s(a.next(e))}catch(e){t(e)}}function n(e){try{s(a.throw(e))}catch(e){t(e)}}function s(t){t.done?e(t.value):new l(function(e){e(t.value)}).then(o,n)}s((a=a.apply(r,i\|\|[])).next())})}function d(o,n){var s,r,i,e,l={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return e={next:t(0),throw:t(1),return:t(2)},"function"==typeof Symbol&&(e[Symbol.iterator]=function(){return this}),e;function t(t){retur

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\p[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
IE Cache URL:	https://p.typekit.net/p.css?s=1&k=vtg4qoo&ht=tk&f=7180.7182.7184.22474.10294.10296.10302&a=1655249&app=typekit&e=css
Preview:	/**/.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
IE Cache URL:	https://p.typekit.net/p.gif?s=1&k=vtg4qoo&ht=tk&h=spark.adobe.com&f=7180.7182.7184.22474.10294.10296.10302&a=1655249&js=1.20.0&app=typekit&e=js&_=1611797798818
Preview:	GIF89a.............,..............;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	705263
Entropy (8bit):	5.322214545570622
Encrypted:	false
SSDEEP:	12288:iMIcPeLcaRiZf8RLKzTzt1zTztWzTztDzTztAy2JR+MzTztXzTzt6zTztJzTztZy:iMILLjRiZf8RLKzTzt1zTztWzTztDzTa
MD5:	5CD83F36738A9BF5D3A3015340DA71B4
SHA1:	EDCCBDEE2737B5D48CA170A9E8E2EA8B4AFC7F9F
SHA-256:	AB22AAFCA3F1B9C012C826988BEB79F11D764E558BA0EE16C6C59653175E6ADB
SHA-512:	56F1CD3AFF26E161612535751C937D159605EAC8361CD05F0E1D41702178CE3C95BB22E07301F09F9EF2628036C5BC8C606F017294796515DC5FAF7FDC6DBB8A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/etc.hawks.dexterlibs/hawks/clientlibs/publish.combined.fp-5cd83f36738a9bf5d3a3015340da71b4.js
Preview:	webpackJsonp([1],{104:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var i=n(20),r=n(23),a=n(50),o=n(417),u=n(5),s=n(185),l=n(101);t.default={analytics:i,environment:r,observers:a,testingSuite:o,Debug:u.default,lang:s,string:l}},167:function(e,t,n){"use strict";t.a=function(e){if("object"!==(void 0===e?"undefined":r(e))\|\|Object(i.default)(e))return!0;if("object"===(void 0===e?"undefined":r(e))&&!Array.isArray(e))return Object.keys(e).length<=0;if("object"===(void 0===e?"undefined":r(e))&&Array.isArray(e))return e.length<=0;return!1};var i=n(52),r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e}},168:function(e,t,n){"use strict";t.a=function(e){return"[object Object]"===Object.prototype.toString.call(e)}},185:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var i=n(419),r=n(10)

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\publish.combined.fp-de290740e39e03f8afcaebf447a4d5b4[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	635876
Entropy (8bit):	5.273189775319719
Encrypted:	false
SSDEEP:	6144:GyoxsBeUZPvp2nr33eLxtQtJ1afxcHIVM:teUZPvp2nr33eLxtQtJ1afwIVM
MD5:	DE290740E39E03F8AFCAEBF447A4D5B4
SHA1:	C2F64841D8E39BA47405CD37E54A8808DF978647
SHA-256:	E4D8F630AA33BE9DC1C6390899893005EDD4F607F75F9E59D1A3FD4F16A22F5E
SHA-512:	88DE217F0D455D75D6878347463F02DCAEE0827F405FCD445BAF1A079A6F526DC4D0EEE5153C5BC631980A1A47E9AA29A7EC43D73050508684BEFAA1E13E0246
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/etc.hawks.dexterlibs/hawks/clientlibs/publish.combined.fp-de290740e39e03f8afcaebf447a4d5b4.css
Preview:	/* The OOTB AEM 6.4 grid system.. . This has been modified slightly to support Dexter's. * custom breakpoints and remove fixed left / right padding.. /./. * ADOBE CONFIDENTIAL. . Copyright 2015 Adobe Systems Incorporated. * All Rights Reserved.. . NOTICE: All information contained herein is, and remains. * the property of Adobe Systems Incorporated and its suppliers,. * if any. The intellectual and technical concepts contained. * herein are proprietary to Adobe Systems Incorporated and its. * suppliers and may be covered by U.S. and Foreign Patents,. * patents in process, and are protected by trade secret or copyright law.. * Dissemination of this information or reproduction of this material. * is strictly forbidden unless prior written permission is obtained. * from Adobe Systems Incorporated.. /./ grid component */..aem-Grid {. display: block;. width: 100%;.}..aem-Grid::before,..aem-Grid::after {. display: table;. content: " ";.}..aem-Grid::after {. clear: both;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\runtime-prod.gz[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	342968
Entropy (8bit):	5.371093003938434
Encrypted:	false
SSDEEP:	6144:ECIBkfxBva98Hrj4SRZxFzb7jvSvguFyLllmEuKP:/IABl+vSP
MD5:	B0F0C32B9B49DD909CF36FDF4ABA491C
SHA1:	4DD35EEAA3B72879BBADED3E25109983EC736214
SHA-256:	FAF1701455C322D60D4B5B27832D2430EE3B9C3D6B52D7771B4BB6F224784540
SHA-512:	8481D9DAC37657EA7B97E639282332524BAD837F8BDFC004B9885A10FCC145B0BA9A65C0F6CEEE30BFD2A37D03575A04AE2352080300FD96AA71C34E4111157F
Malicious:	false
Reputation:	low
IE Cache URL:	https://page.adobespark-assets.com/runtime/1.22/runtime-prod.gz.js
Preview:	!function(a){function b(d){if(c[d])return c[d].exports;var e=c[d]={exports:{},id:d,loaded:!1};return a[d].call(e.exports,e,e.exports,b),e.loaded=!0,e.exports}var c={};b.m=a,b.c=c,b.p="",b(0)}([function(a,b,c){var d,e;d=[c(1),c(72),c(73),c(74),c(76),c(78)],void 0!==(e=function(a){return a.Experiments&&(a.Bootstrap.disable(),a.Bootstrap.run()),a}.apply(b,d))&&(a.exports=e)},function(a,b,c){var d,e;d=[c(33),c(40),c(39),c(35),c(34),c(41),c(43),c(44),c(45),c(46),c(48),c(49),c(47),c(53),c(50),c(51),c(2),c(52),c(54),c(55),c(56),c(57),c(58),c(59),c(63),c(64),c(67),c(68),c(69),c(70),c(71),c(66)],void 0!==(e=function(a){return window.Luca=a,a}.apply(b,d))&&(a.exports=e)},function(a,b,c){var d,e;d=[c(3),c(4),c(33),c(34)],void 0!==(e=function(a,b,c,d){var e=c.getSectionsArticleHandler("default");c.registerSectionsArticleHandler("split-layout-base",a.extend({},e,{_initialize:function(b,c){var d=a(b),f=d.data("timeline"),g=d.find(".section-background"),h=d.find(".section-content");this._resetElement

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\s08491451354531[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 2 x 2
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0780023067505042
Encrypted:	false
SSDEEP:	3:CnwltxlHlrn:Xn
MD5:	AD480FD0732D0F6F1A8B06359E3A42BB
SHA1:	A544538683A2DFE574EEB2E358AC8FCC78289D50
SHA-256:	A1ECBAED793A1F564C49C671F2DD0CE36F858534EF6D26B55783A06B884CC506
SHA-512:	8717074DDF1198D27B9918132A550CB4BA343794CC3D304A793F9D78C9FF6C4929927B414141D40B6F6AD296725520F4C63EDEB660ED530267766C2AB74EE4A9
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,............Q.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\terms[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	246
Entropy (8bit):	5.090739464450231
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwol6hEr6VX16hu9nPjL9H4b3Ji+KqD:J0+ox0RJWWPc5RT
MD5:	3C6612A6E35E727277198EE94CD6926F
SHA1:	796123EB7D1CC2E77F5573B8E2DEA6DB8D5FACBB
SHA-256:	2F0BEBFD307531BBF0D45B5852B243253CE2EF4A60022EE138916D1BD54D0C40
SHA-512:	E97782566C6291591567530EB665FB98F05F9E6137668EE1A7064ACD206886D856BC9501FCF4F018044211D186E010284338408E4A90571B07FF751FC648B99A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="https://www.adobe.com/legal/terms.html">here</a>.</p>.</body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\themetwo.fp-725133d19805469f9b8d12884d182e67[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	288433
Entropy (8bit):	4.9952899470925285
Encrypted:	false
SSDEEP:	384:LreqQVUz4G0X5AgD6zicPvT67qm032cRHO9y/SbOfKa8E8UoGofHo+zwcKLGYc7U:OzW6xPcgy/8rf+Lq7Tn4Wy19
MD5:	725133D19805469F9B8D12884D182E67
SHA1:	6B5F7A4DA1028483F2B344A5433237F57FCC76D5
SHA-256:	13D4908BB6A47239E7043BCE1613320A3F3E3D2A1BA712349A89C9FDB6F06498
SHA-512:	93AEA29FF0E7AAD702333DF37CD4708224E36F6B1DC1E62D8D9969A6DDFA4A916392E4E5863AF2BF4D2A62D14E7D6860A4B9F5B5C39068C934186FB0CD95736B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.adobe.com/etc.hawks.dexterlibs/dexter/clientlibs/base/themetwo.fp-725133d19805469f9b8d12884d182e67.css
Preview:	.spectrum-Icon{display:inline-block;color:inherit;fill:currentColor}.spectrum-Icon.is-animated{transition:color .15s ease-in-out,fill .15s ease-in-out}.spectrum-Icon--sizeXXS,.spectrum-Icon--sizeXXS img,.spectrum-Icon--sizeXXS svg{height:.5625rem;width:.5625rem}.spectrum-Icon--sizeXS,.spectrum-Icon--sizeXS img,.spectrum-Icon--sizeXS svg{height:.75rem;width:.75rem}.spectrum-Icon--sizeS,.spectrum-Icon--sizeS img,.spectrum-Icon--sizeS svg{height:1.125rem;width:1.125rem}.spectrum-Icon--sizeM,.spectrum-Icon--sizeM img,.spectrum-Icon--sizeM svg{height:1.5rem;width:1.5rem}.spectrum-Icon--sizeL,.spectrum-Icon--sizeL img,.spectrum-Icon--sizeL svg{height:2.25rem;width:2.25rem}.spectrum-Icon--sizeXL,.spectrum-Icon--sizeXL img,.spectrum-Icon--sizeXL svg{height:3rem;width:3rem}.spectrum-Icon--sizeXXL,.spectrum-Icon--sizeXXL img,.spectrum-Icon--sizeXXL svg{height:4.5rem;width:4.5rem}.spectrum-Icon,.spectrum-UIIcon{display:inline-block;color:inherit;fill:currentColor;pointer-events:none}.spectrum-Ico

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\tw_icon_selected[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1051
Entropy (8bit):	5.289237611390222
Encrypted:	false
SSDEEP:	24:2dRMATLfPNOyM02B84rqrzMFzF4pq1c/X:cRMAvfsyMJp+zGCf
MD5:	42F7023E94DB4D25E051049A7B8E278C
SHA1:	B99502F91912B88F7EB928014B7C0DDE5FFCD406
SHA-256:	C394C2CFC902F587A120220AE4B0B090024AE94E1857F35923F3B5F4103EAADC
SHA-512:	D069D766A5A709009D4074733A9BE75188E3791A8A877734F34193AB91E37B1B7652E49EFEB403862B6299411FB0DA3CEE4F302CFD77206C07343A8590D6D518
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/tw_icon_selected.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="28px" height="28px" viewBox="0 0 28 28" style="enable-background:new 0 0 28 28;" xml:space="preserve">.<style type="text/css">...st0{fill:#F2F4F5;}...st1{fill:#35414C;}.</style>.<g id="Group_5" transform="translate(2335 66)">..<circle id="Ellipse_5" class="st0" cx="-2321" cy="-52" r="14"/>..<path id="SocialTwitter2_32_1x" class="st1" d="M-2314.7-54.7v0.4c0,5.1-4.1,9.2-9.2,9.3h-0.1c-1.8,0-3.5-0.5-5-1.5...c0.3,0,0.5,0.1,0.8,0c1.5,0,2.9-0.5,4-1.4c-1.4,0-2.6-0.9-3-2.3c0.2,0,0.4,0.1,0.6,0c0.3,0,0.6,0,0.8-0.1c-1.5-0.3-2.6-1.6-2.6-3.2...l0,0c0.5,0.3,1,0.4,1.5,0.4c-1.5-1-1.9-2.9-1-4.4c1.7,2,4.1,3.3,6.7,3.4c-0.3-1.8,0.8-3.5,2.5-3.9c1.1-0.3,2.3,0.1,3.1,0.9...c0.7-0.1,1.4-0.4,2.1-0.8c-0.2,0.8-0.8,1.4-1.4,1.8c0.7-0.1,1.3-0.2,1.9-0.5C

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\voice_v2[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2021
Entropy (8bit):	4.183249660133574
Encrypted:	false
SSDEEP:	24:t41vJMW+oOemMNUzLI8eF8oCWkVPjoFeFVjT6AMfWUmAs61KHFFF0BK/E+g8CBYX:C5OenX70xoafQ92HFFVI8CHzqQtZggi/
MD5:	EB80AC155C367A633F9438C8E48B6495
SHA1:	F959253DF6DF815CB3C54E9C2E072F07819A1F63
SHA-256:	C074AF6EB762D8FE9290ECEC4E028FD38D8FF14E6B93DA5836E3EBFAF662A27F
SHA-512:	18B1224BC62CF268082B81D3247EF5DE38C360651A10DB5A422D910921DD06EA36D05A87C077A4B88B06C635C33D433496B5DF20BC2057BECCA901DC1B3B485F
Malicious:	false
Reputation:	low
IE Cache URL:	https://spark.adobe.com/images/landing/voice_v2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 56 54"><rect width="56" height="54" rx="9.914" fill="#370000"/><path d="M39.125 32.812c-.007.28.051 1.1.051 1.235 0 2.262-.878 3.515-2.955 3.827v2.694a6.68 6.68 0 003.668-1.037 3.581 3.581 0 001.63-2.325 15.889 15.889 0 00.423-4.2l-.054-5.877-5.667.021v5.67zm-7-.062c.006.278-.009 1.11-.008 1.249.009 2.314-.975 3.588-3.053 3.9v2.7a6.164 6.164 0 003.754-1.062 4.5 4.5 0 001.872-2.553 17.651 17.651 0 00.2-4.19l-.021-5.642-5.836.021.005 5.585zm-15.187-11.5c-.016-.276.04-1.173.04-1.311 0-2.262 1-3.6 3.083-3.913v-2.693a5.715 5.715 0 00-3.605 1.05 4.7 4.7 0 00-1.919 2.551 16.864 16.864 0 00-.478 4.38v5.45h5.881l.012-5.52zm9.935-.15v5.774h-5.719l-.009-5.462a19.027 19.027 0 01.3-4.451 4.345 4.345 0 011.763-2.561 6.3 6.3 0 013.735-1.09l.012 2.69c-2.071.31-3.082 1.688-3.082 3.951v1.115z" fill="#fa0f00" fill-rule="evenodd"/><path d="M26.074 33.386a6.664 6.664 0 01-4.018-3.411 2.818 2.818 0 01-.1-.216l-.967.159c.03.071.056.145.088.216a7.6 7.6 0 00

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\0135[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3387
Entropy (8bit):	5.000186136185067
Encrypted:	false
SSDEEP:	48:YZ2ucjzCWc/N6jIgNdYTZXSXBIQErUP65ArNbYBrUFKxWRdhG:RuezCWiNSIgNdYTkB6rUC5ArNMBrUFRG
MD5:	2CC94876CBBE5EFBC8CFFFEA49EC4D42
SHA1:	AC46951215326C759674014FC0CFA399ACFB5BE7
SHA-256:	90ABEE478FEB727964D507794E2B04D06692753DB85E5B324DD0DCBB4BA6E2DA
SHA-512:	A15F123600D4775EA51752FE9DA27EC5AB16B82AA5E8AF2DCD78D5333587B42C4C8FAE18ACA34D0ADA414AA82A1690F23AB1209D842ADF657FDAD64F06693D5A
Malicious:	false
Reputation:	low
IE Cache URL:	https://script.crazyegg.com/pages/data-scripts/0088/0135.json?t=5372659
Preview:	{"uid":880135,"updated_at":1611739516,"ce_app_url":"https://app.crazyegg.com","version":"11.1.209","clock_url":"https://tracking.crazyegg.com/clock","data_url":"https://script.crazyegg.com/pages/data-scripts/0088/0135.json","common_script_url":"https://script.crazyegg.com/pages/versioned/common-scripts/11.1.209.js","tracking_script_url":"https://script.crazyegg.com/pages/versioned/tracking-scripts/11.1.209.js","trackingpagestate_script_url":"https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/11.1.209.js","status":"ok","sites":"%8&4!}%\|%]!}$<$4$4$5$9$;$4$,!}&%%?&$%^!}$<!}%?%]&&%@%^$.%[&&&$!}$,!}&+%^&+&+%\|&&&%%.%^%[&&&%]%\|&%%`!}$<&,&&-%^$,!}&%^%[&&&%]%\|&%%`%0%^&,&,%\|&%%`&+!}$<&4!}&(%?%`%^%1%?&%`%^&,%\|&%%`$\|&%%?%@&!%^%]!}$<&,&&-%^$,!}&(%?%`%^%1%?&%`%^&,%\|&%%`%2&&!&+!}$<%8!}%{&,&,&(&+$<$0$0&+&(%?&%~$.%?%]&&%@%^$.%[&&&$$0%^&1$0&(&%\|%[%\|&%%`$0!}%;$,!}&&-&!%^&+!}$<%8&4!}&-!}$<&4!}&(&&&&,&&%[&&&!!}$<!}%{&,&,&(&+!}$,!}%{&&&+&,!}$<!}&+&(%?&*%~$.%?%]&&%@%^$.%[&&&$!}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280B8WPI3RE.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	22410
Entropy (8bit):	7.576748057291345
Encrypted:	false
SSDEEP:	384:BcnBnfXiNtI144sOXKwii/wa/41xlb6QsskqhiY5aOwgB:BcVXX5X3i2/4Fb6Qso5IOwgB
MD5:	FEC3E988E57190143B4F194BCFC44660
SHA1:	083FCF67D25DE3A87262FCE39CC572AFD1C1440C
SHA-256:	565404DC4C28E4668FCEF7193374782AF3F1ED07914AD5FC1B6D24E38F363596
SHA-512:	7DA904C91BDC1FFEFC4E6A95712B3FE8EAD5B9CE12B46A463376170DA54899C4275147DCBDD78C6C64631C310D877EF7D416026CF4A614D36D4686E64D64FAAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/bdfd09bd-496b-4739-bc56-a3bc367018ca/artwork/86a044fa-1b9f-45d2-9bda-65271a3b4db0/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:11:22.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280SE1KU2SC.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	42472
Entropy (8bit):	7.789285046087798
Encrypted:	false
SSDEEP:	768:M1SInU2nGJU5LC+IqJNPSDpbHUZoT7mdwh3ss8bvzIZlwc/JImV+vGzv:s82GJU5LC+IqJNGTUZOEAdRzwc/JImVz
MD5:	6ABF18356800603C2480069D473D5952
SHA1:	AFA0B7CC7E942B70D85D13946F8DB3D6C7BCCC57
SHA-256:	F680A47B90D6271A5EE63D64D614446CE3A3C122BC16357C845E06F17E272AED
SHA-512:	696340EEEF0A3AE64C41BF666431B9B941376E65DF15EC51C244949C1939A4B729BD583343F17CF2B6DDE038A7C5D2249574EB5E6A25411D3907504B0AC1BACA
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/40ad8e7d-45f6-41af-bca4-7c8f71975c27/artwork/f8fce08c-bd8c-450d-baa6-2ad7172a8ca1/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 14:44:23.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........07.........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	24387
Entropy (8bit):	7.608884880458332
Encrypted:	false
SSDEEP:	384:Bdn/ST3l/L1BrpoZDwa1jGE5TCuCacGXPQfX+taAkyn5VUnUemcciGUIMhmM2NAX:BdeVL3S+CGEkLGofutaAkyneURFEn2Bm
MD5:	DAB5D95885C1ACC0923ABC4419352E80
SHA1:	FA8C0BC66FD977DDD85C70D1CBE33DCC9C0ED204
SHA-256:	C31C171436CBFC97BE054DE4118A343B9DD5724B503FC9DBE5563FC6BE55E709
SHA-512:	B2B642E6481F3080130CFFF42B529F3A7DD242F8F77EB878D341DC6563284E87BB1BDD5E80671AD69DFFCDFBE7A100AA7CEDC7C6AA425E1CCDEEA36CA4AC6E59
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/835aac0d-c8aa-493c-91b6-0c68f2fb5879/artwork/e276e004-6f25-4ba4-b75f-d62e6b29f3aa/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:17:16.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	29383
Entropy (8bit):	7.656911531233973
Encrypted:	false
SSDEEP:	768:MgbQhCBjlU/BKC8mOEfe+p6s4K3WnpUI+TmbgSrr6BUa:1rhB+scmhvW
MD5:	24460B54F548BC1E337F84CD6EC88B61
SHA1:	38CA20C1CADB0F717B81FE7C56407F7D77ACED97
SHA-256:	E2473075ACFCE9CC582D1226676C4FDB8570144122127A9DB8A210DC103B5BF2
SHA-512:	C1F03C5E295916B6D430F580B4A6EB1932E14ADE24470198B30F9A4B37507DB4BA2C5934CFC01FE33590D63F2819769C4F722F04E2CA09B2FFB7F36B6EEFC76A
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/3abae5e2-5c4e-4a78-b78f-6f7eb92a7ace/artwork/74e61518-72f4-4ba7-8fec-406b3eb9937f/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:25 08:15:25.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........964........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	43221
Entropy (8bit):	7.8115422627670705
Encrypted:	false
SSDEEP:	768:Bzz0+P6s/PGHirvPQkjiS1qUbnvu1LWZBmCp45XL3rGL3WCa:5lSx8vPdt1HbvUCp4lGLo
MD5:	C6EC35466A376081E049AFF9B822D931
SHA1:	051B78D45BA8F99FB86425F3E6754C59FC07CC36
SHA-256:	FFEA83CAEDBAD58566BE3D268B57BAB13311807E5ECB65C189F81EAABCED7C7B
SHA-512:	52ED06D80C6D82CF395EEC2286F0C8CBEC2B16BDFD24248D2A9998FE8B848E8DBD1D46944D91092A9F8FA07CE0BBBC8088C8555A35BFD7C6B748A7428F8E3672
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/a71bd6ff-84cf-4781-b1ae-e778e5c72c93/artwork/ae444326-ed96-4d56-8ae3-4f292c283b51/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:07:16 10:45:01.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	37041
Entropy (8bit):	7.789353822302624
Encrypted:	false
SSDEEP:	768:M4tF0SP5DCtMEP7W1GDgPUxzpXToMgR0hwft0evDW133ZjQwsn:h70Y7EPOmJzpXToMNktE33ZjHsn
MD5:	93FB7B6C7AD092D2095DD24243AEEF50
SHA1:	4E53DFA7E03FB65EDCDEE2ED6B043E2D896F53AC
SHA-256:	28124AA660032403F6526C7E6A53488AAA3853A1873D9396B8B29DEF19367DC5
SHA-512:	AEB2D1EC269B58EA4DCE5376FD0E061D0BDAC8E3A730A2FEE5B849AD081984F2F9A5F44A3B022B96C93D6B5479429185765D1508AEF185E2B6A2F157560623C7
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/e135e568-a10a-4591-acca-01a704bf4c83/artwork/3bf29c35-1d53-42b4-8ad7-396e4b1f6d05/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 15:51:09.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........325........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	31192
Entropy (8bit):	7.737854579516732
Encrypted:	false
SSDEEP:	768:B8kSUIe9zhadjd+lxYnHYiNrVzExEM+v3YxdNqtkl:WLm9qdkx8YwhzGsYxdNqtg
MD5:	65A90695846AB4B7941F1FDF54809DA8
SHA1:	F622DF08B534C2EC8CB7C510383B43B860426F6D
SHA-256:	A8062B437A573B59D897D8EA96587B11FBEEB91EF4C387B0AEE0B4565B49852D
SHA-512:	A7323A08071F9686FB8CA482DBB5A1677B40D0F727643E421688C582C69CE04A6AB8D5FD7111B154CB20D9094AB511838B8977FCF7EEB9B4162AA63CE5364259
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/9840c8a9-cb9d-44dc-890b-698a0167fcc2/artwork/e38ee388-d608-408d-979a-50a13eb871ad/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:02:12 13:37:32.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	42148
Entropy (8bit):	7.810074724638672
Encrypted:	false
SSDEEP:	768:MOa97+mxvhUCtZ31ewRGi+/LSXnBGSJJ4N7FMP74SqN/r50vHu:Di7bvAhDsGI4lF04fr4u
MD5:	0BED2963BE5D3DBB036EF8122F5DEC48
SHA1:	1A761A72719D5824383D7378D678526F07E4C4E0
SHA-256:	462FE30D40C9D9EF5AEDEDBD7F1F30F13696710921D257A0DE52CEA9A213798C
SHA-512:	E5A4B0A548832097E5AA1F0F4B66F8C21137F4ACB6A95781D174396691F935C8E17616D3EE51F446A8CC77F98179105C5C16E7AE6CBA187F948FB0626D90FD63
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/bca25fa4-1458-4955-aa0a-61042ce02b59/artwork/076b9858-a3cd-4471-b600-aaca1e73bee4/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:25 08:10:01.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........534........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	39799
Entropy (8bit):	7.8128816507819865
Encrypted:	false
SSDEEP:	768:B91GMxsj6Sc6boNeXw/L7oiEmkUNJUf+gvKv2IuqvGfqqNMg5lUY:jZU6SV1XwwioUN6fK+I05ln
MD5:	55DBB32FFBEDE7C3DEFF3FEEF39CD69C
SHA1:	9DA9D86BF8BC0A930605CD4503C736E1C60E32AF
SHA-256:	8E85AED129977B0E23B438615728EF879DA82B78BCD00BAB9F9F8B2DD1CCD95D
SHA-512:	0B9D4383F2FC37D7478D0762B4E36F93B555B9AD04F92AF1C7BD66BFD8E2DF91CCB84CCFD682119358C660A1F2357BD64589547676F247BDDA3458A1EB41C69C
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/b9de03e4-8e63-4747-be41-24d5adeb35b8/artwork/eab529fc-60b7-488b-847d-1cc7db3ca01c/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:06:17 12:12:10.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=1, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	30038
Entropy (8bit):	7.717399469424896
Encrypted:	false
SSDEEP:	768:MX4wGg0hQfzBxx7nE/8CoCsagcyaxc85MhpeQdB101:G4wf0hQfzBxtnE1oCsagsWQv0BS1
MD5:	0DB040AA28B2306C03DA3444B565B1BC
SHA1:	BA6E4EFA28962029FAF0F56FAEC6C91C26ADDE81
SHA-256:	BBC3856AF9FB1EF1EFE1A4CE29B547D0EB3E4D72E065E9726141390E75371650
SHA-512:	69116656B105329175683F5C1EE8102A98FA56AB455736F4F99708E926C9B2F5FA1FDAC2217379D0303F94C9B24BF96BC9FAF7F6CE977B9502E3FFC5D97301DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/268905d0-088a-467f-9f9c-81f02fd02fca/artwork/e20b4060-da13-4789-a6fa-408b75ee0a38/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*.................^...........J...........^.i..............Spark Post..2019:07:15 16:08:53.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/...........66.........6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/</rdf:li> </rdf

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	23131
Entropy (8bit):	7.565640001029585
Encrypted:	false
SSDEEP:	384:B5nalBDy/PcQ2FD4200CZnmxoSB3UGWffgd4mpzfXgR05qiOu7vo:B5Mxe7ZmxoSBEFffgdZfgR0I4c
MD5:	BF8124332F0AB61E29F3C76A848D3CC1
SHA1:	EA9C9AC219A6DA7C04837B1265B63DE79571BC32
SHA-256:	67E8A6FE9EC5D52DE12DC1F5D844153BF02FF15E6D0C1047F41E5B0909816A15
SHA-512:	2F47AD85F808441D46CE4A65863D1B47E452E2815072C29E50461588ADB5A2776BAA3F0404A688128632FF45D1D22D853DF1DAD9C5FD47DDCF2B846E3A939108
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/dba558aa-b5a6-4202-9b76-52c260fccccc/artwork/6e2c7ba7-e7a4-4b7e-9f59-cdeb82430354/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:18 15:16:33.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\280[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 280x363, frames 3
Category:	downloaded
Size (bytes):	36926
Entropy (8bit):	7.743682526253565
Encrypted:	false
SSDEEP:	768:BHzh24opZ+wW32ZRDYJ8O39iGVyJa7mBXHB5hf+:Fl7gAwOiRQ8O3oGV7m3c
MD5:	C08A9F64E06C1CC261DA886F5064819F
SHA1:	B9189FDE1895573626FC58F54B2DBE0C470BA084
SHA-256:	00FDDCBA66C2E83D0F04C9E57D736C7767698377DFF6558A66079CCF73036AA8
SHA-512:	ACACC4FE0A704D1AB1760874C7DF4F1DEC5FE0FB1BBFA8D7AAB96EFAE58F181D2E8A07147DEC85B38CBEA98114793F2FE7F5F448F0D50E06FF21CC28E188F7FD
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/b676b8eb-85d9-45ff-be65-93135aef5dbb/artwork/11414c7f-4f3b-4f9a-9a43-a37c4dada46b/version/0/format/jpg/dimension/width/size/280
Preview:	......Exif..MM.*...P...............i.........&.............................j........... ...............................i.........B.............i.........B....Spark Post..2019:01:09 16:48:46.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................j........... ........... .......6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\300[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	17893
Entropy (8bit):	7.341239737283081
Encrypted:	false
SSDEEP:	384:GynveG7lgv1m1fX25dH0Y2FT7Q9EHCMRkr:GyjlgvcOS1FAFMRkr
MD5:	1E8CFA11277913B4F3F48E19F58E6455
SHA1:	C4DD9228B869FCE1B3D26D7A99C9088A03D35148
SHA-256:	C93A406CDC94477237DF4DE1C47CC8B1CC2032EA3CB01950AD74FB4E841AB741
SHA-512:	1EA718139BFE3EF8E719C2E12AE7D569573583FAE733D866FD78BAB9ADB9E39AAA3722FEDE27A69956EB0882DFA57448E3694C6367624F1BF02E514DE7FE7128
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/5f316077-48c9-4813-8eef-de38055127c5/artwork/4ce1043b-d94e-4165-88e0-67a5e1c9a849/version/1/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2019:06:03 11:50:18.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\300[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=3, orientation=upper-left, copyright=This work is licensed to the public under the Creative Commons Attribution-NonCommercial licens], baseline, precision 8, 300x300, frames 3
Category:	downloaded
Size (bytes):	11182
Entropy (8bit):	6.654259691717572
Encrypted:	false
SSDEEP:	192:GNUknP6jXtnLUUXClUD6JBJ7pb56UXPrNd503wg1ui:GhnsR7CGcRps6rNd5sN
MD5:	319C5BF35F63B0BB8A200C045D6E9541
SHA1:	B5160EA376EAFDAA8DC0CCADB3BF1AC563FD3E94
SHA-256:	19EB530236DD0F78CC64CBFA3B98BFD5EA1C48EDB667EE1F0DD4B294CEC7BBB1
SHA-512:	21E9ED7F7A895CAAF0DDD9EEBABB60312B07F772E8ABC8BF9225591DDD63A18E2B4395A5A60F1957A6BB6430D521A2856E7FB3F606365211065D601EDE9E77D1
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.cp.adobe.io/content/2/rendition/0170d81a-bb5b-4399-b3fc-d3fa0f2efc49/artwork/ae08db34-85ab-4492-a18f-f235f736538c/version/0/format/jpg/dimension/width/size/300
Preview:	......Exif..MM.*...P...............i.........&.........................................................................i.........B.............i.........B....Spark Post..2018:11:28 14:14:03.This work is licensed to the public under the Creative Commons Attribution-NonCommercial license http://creativecommons.org/licenses/by-nc/4.0/..........................................................6http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163567, 2018/09/12-17:37:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmpRights:Marked="True"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">This work is licensed to the public un

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 27, 2021 17:36:00.997581005 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:00.998613119 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.041610956 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.041713953 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.043807983 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.043898106 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.048007011 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.049057961 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.092036963 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.092616081 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.092708111 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.092955112 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.093014956 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.094134092 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.094202042 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.095318079 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.095760107 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.095804930 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.095825911 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.095896006 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.098105907 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.098189116 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.133930922 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.139664888 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.139890909 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.139961004 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.140311956 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.179701090 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.179934025 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.180057049 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.180056095 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.180124998 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.181277037 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.184184074 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.184222937 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.184439898 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.184519053 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.184556961 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.184607029 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.185189009 CET	49722	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.186378002 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.186393023 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.186400890 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.186520100 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.226749897 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.230833054 CET	443	49722	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.837320089 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.837357044 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.837377071 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.837528944 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.837630987 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.838809967 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.838963032 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.927421093 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.927495003 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.927522898 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.927593946 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.927917957 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.927984953 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.929445028 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.929547071 CET	443	49723	99.86.154.122	192.168.2.7
Jan 27, 2021 17:36:01.929548025 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.929738045 CET	49723	443	192.168.2.7	99.86.154.122
Jan 27, 2021 17:36:01.965456963 CET	49725	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:01.965504885 CET	49726	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:01.965713978 CET	49727	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:01.965760946 CET	49728	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.009331942 CET	443	49726	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.009485006 CET	49726	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.009532928 CET	443	49725	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.009618998 CET	443	49727	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.009624004 CET	49725	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.009648085 CET	443	49728	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.009702921 CET	49727	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.009726048 CET	49728	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.010709047 CET	49726	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.011071920 CET	49727	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.011171103 CET	49728	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.011377096 CET	49725	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.054327011 CET	443	49726	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.054559946 CET	443	49726	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.054611921 CET	443	49726	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.054653883 CET	49726	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.054689884 CET	49726	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.055016041 CET	443	49727	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055047035 CET	443	49728	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055356979 CET	443	49725	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055393934 CET	443	49728	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055434942 CET	443	49728	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055469036 CET	49728	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.055514097 CET	49728	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.055670023 CET	443	49727	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055711985 CET	443	49727	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055757999 CET	49727	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.055759907 CET	443	49725	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055773973 CET	49727	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.055805922 CET	443	49725	143.204.11.6	192.168.2.7
Jan 27, 2021 17:36:02.055824995 CET	49725	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.055891037 CET	49725	443	192.168.2.7	143.204.11.6
Jan 27, 2021 17:36:02.056976080 CET	443	49726	143.204.11.6	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 27, 2021 17:35:55.769192934 CET	54008	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:35:55.817255974 CET	53	54008	8.8.8.8	192.168.2.7
Jan 27, 2021 17:35:56.808664083 CET	59451	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:35:56.856578112 CET	53	59451	8.8.8.8	192.168.2.7
Jan 27, 2021 17:35:57.928628922 CET	52914	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:35:57.976533890 CET	53	52914	8.8.8.8	192.168.2.7
Jan 27, 2021 17:35:58.928267002 CET	64569	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:35:58.987534046 CET	53	64569	8.8.8.8	192.168.2.7
Jan 27, 2021 17:35:59.852153063 CET	52816	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:35:59.910290956 CET	53	52816	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:00.112605095 CET	50781	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:00.160492897 CET	53	50781	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:00.918420076 CET	54230	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:00.979186058 CET	53	54230	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:01.229177952 CET	54911	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:01.281493902 CET	53	54911	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:01.892016888 CET	49958	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:01.955081940 CET	53	49958	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:02.236083031 CET	50860	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:02.294059992 CET	53	50860	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:02.589782000 CET	50452	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:02.640669107 CET	53	50452	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:03.133508921 CET	59730	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:03.192682981 CET	53	59730	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:03.304507017 CET	59310	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:03.367383957 CET	53	59310	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:04.043642044 CET	51919	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:04.094408035 CET	53	51919	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:05.064227104 CET	64296	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:05.115130901 CET	53	64296	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:06.467719078 CET	56680	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:06.515631914 CET	53	56680	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:11.405524015 CET	58820	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:11.456368923 CET	53	58820	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:15.026737928 CET	60983	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:15.074883938 CET	53	60983	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:17.282972097 CET	49247	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:17.327636003 CET	52286	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:17.339478970 CET	53	49247	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:17.385514021 CET	53	52286	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:17.420043945 CET	56064	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:17.470870018 CET	53	56064	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:22.051351070 CET	63744	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:22.275062084 CET	53	63744	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:22.927968025 CET	61457	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:22.932666063 CET	58367	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:22.934506893 CET	60599	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:22.938447952 CET	59571	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:22.972363949 CET	52689	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:22.980457067 CET	53	58367	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:22.982264042 CET	53	60599	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:22.987030029 CET	53	61457	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:23.002604961 CET	53	59571	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:23.020303011 CET	53	52689	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:23.155616999 CET	50290	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:23.204356909 CET	53	50290	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:23.338716984 CET	60427	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:23.386480093 CET	53	60427	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:26.693445921 CET	56209	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:26.744450092 CET	53	56209	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:28.761390924 CET	59582	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:28.786406040 CET	60949	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:28.819864035 CET	53	59582	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:28.848920107 CET	53	60949	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:29.090912104 CET	58542	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:29.151643991 CET	53	58542	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:29.702452898 CET	59179	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:29.750585079 CET	53	59179	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:29.991059065 CET	60927	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:30.058234930 CET	53	60927	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:30.244637012 CET	57854	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:30.295531988 CET	53	57854	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:30.541829109 CET	62026	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:30.590193033 CET	53	62026	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:30.805625916 CET	59453	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:30.815329075 CET	62468	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:30.845174074 CET	52563	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:30.865250111 CET	53	59453	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:30.879604101 CET	53	62468	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:30.907712936 CET	54721	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:30.930499077 CET	53	52563	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:30.957911015 CET	53	54721	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:31.137653112 CET	62826	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:31.191709995 CET	53	62826	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:31.310617924 CET	57854	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:31.361421108 CET	53	57854	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:31.549078941 CET	62026	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:31.597074986 CET	53	62026	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:32.263051033 CET	62046	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:32.323718071 CET	53	62046	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:32.353066921 CET	57854	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:32.389291048 CET	51223	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:32.403934956 CET	53	57854	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:32.447149992 CET	53	51223	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:32.622119904 CET	62026	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:32.670243979 CET	53	62026	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:32.880518913 CET	63908	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:32.893611908 CET	49226	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:32.941266060 CET	53	63908	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:32.954093933 CET	53	49226	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:34.395189047 CET	57854	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:34.445950031 CET	53	57854	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:34.509941101 CET	58867	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:34.517187119 CET	60212	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:34.568022013 CET	53	58867	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:34.568049908 CET	53	60212	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:34.625463009 CET	62026	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:34.675065994 CET	53	62026	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:35.265425920 CET	50864	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:35.326742887 CET	53	50864	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:35.464790106 CET	61504	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:35.545736074 CET	53	61504	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:36.001292944 CET	60231	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:36.049228907 CET	53	60231	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:38.452735901 CET	57854	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:38.505177975 CET	53	57854	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:38.642890930 CET	62026	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:38.693272114 CET	53	62026	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:42.085098028 CET	50095	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:42.143407106 CET	53	50095	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:42.173089027 CET	59654	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:42.230978966 CET	53	59654	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:44.822873116 CET	58233	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:44.881360054 CET	53	58233	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:45.916493893 CET	56822	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:45.977811098 CET	53	56822	8.8.8.8	192.168.2.7
Jan 27, 2021 17:36:48.359977961 CET	62572	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:36:48.417916059 CET	53	62572	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:02.256900072 CET	57179	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:02.313443899 CET	53	57179	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:21.591265917 CET	56124	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:21.639328957 CET	53	56124	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:22.203567028 CET	62287	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:22.251518965 CET	53	62287	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:22.772784948 CET	54644	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:22.834033966 CET	53	54644	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:23.039537907 CET	59159	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:23.087480068 CET	53	59159	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:23.330912113 CET	57924	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:23.381609917 CET	53	57924	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:25.742280006 CET	51712	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:26.743052959 CET	51712	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:27.733465910 CET	53	51712	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:28.260159016 CET	58865	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:28.321696043 CET	53	58865	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:28.935736895 CET	64337	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:28.983614922 CET	53	64337	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:29.733496904 CET	50407	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:29.781359911 CET	53	50407	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:30.860883951 CET	61075	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:30.919040918 CET	53	61075	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:31.577100039 CET	54952	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:31.625015974 CET	53	54952	8.8.8.8	192.168.2.7
Jan 27, 2021 17:37:49.342892885 CET	59186	53	192.168.2.7	8.8.8.8
Jan 27, 2021 17:37:49.393677950 CET	53	59186	8.8.8.8	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jan 27, 2021 17:36:01.892016888 CET	192.168.2.7	8.8.8.8	0xe03	Standard query (0)	page.adobespark-assets.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:02.236083031 CET	192.168.2.7	8.8.8.8	0xbcf6	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:03.133508921 CET	192.168.2.7	8.8.8.8	0xd46d	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:03.304507017 CET	192.168.2.7	8.8.8.8	0x927	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:17.282972097 CET	192.168.2.7	8.8.8.8	0x6f46	Standard query (0)	page.adobespark-assets.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:22.051351070 CET	192.168.2.7	8.8.8.8	0x8600	Standard query (0)	dougmagnon.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:22.932666063 CET	192.168.2.7	8.8.8.8	0xb904	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:22.934506893 CET	192.168.2.7	8.8.8.8	0x1bc0	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:22.972363949 CET	192.168.2.7	8.8.8.8	0xa373	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:23.155616999 CET	192.168.2.7	8.8.8.8	0xd5d8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:23.338716984 CET	192.168.2.7	8.8.8.8	0xc8a3	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:28.786406040 CET	192.168.2.7	8.8.8.8	0x7601	Standard query (0)	static.adobelogin.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:29.090912104 CET	192.168.2.7	8.8.8.8	0xd825	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:29.702452898 CET	192.168.2.7	8.8.8.8	0x7ab7	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:29.991059065 CET	192.168.2.7	8.8.8.8	0x1117	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.805625916 CET	192.168.2.7	8.8.8.8	0xb277	Standard query (0)	prod.adobeccstatic.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.845174074 CET	192.168.2.7	8.8.8.8	0xc6b8	Standard query (0)	api2.branch.io	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:31.137653112 CET	192.168.2.7	8.8.8.8	0x1476	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.263051033 CET	192.168.2.7	8.8.8.8	0x26cc	Standard query (0)	ims-na1.adobelogin.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.880518913 CET	192.168.2.7	8.8.8.8	0x5ab7	Standard query (0)	api.demandbase.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:34.509941101 CET	192.168.2.7	8.8.8.8	0xcc0a	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:34.517187119 CET	192.168.2.7	8.8.8.8	0x902a	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:35.265425920 CET	192.168.2.7	8.8.8.8	0x650e	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:36.001292944 CET	192.168.2.7	8.8.8.8	0xd859	Standard query (0)	tracking.crazyegg.com	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.085098028 CET	192.168.2.7	8.8.8.8	0xd363	Standard query (0)	adobe.tt.omtrdc.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jan 27, 2021 17:36:00.979186058 CET	8.8.8.8	192.168.2.7	0x7c61	No error (0)	spark.adobeprojectm.com		99.86.154.122	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:00.979186058 CET	8.8.8.8	192.168.2.7	0x7c61	No error (0)	spark.adobeprojectm.com		99.86.154.83	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:00.979186058 CET	8.8.8.8	192.168.2.7	0x7c61	No error (0)	spark.adobeprojectm.com		99.86.154.99	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:00.979186058 CET	8.8.8.8	192.168.2.7	0x7c61	No error (0)	spark.adobeprojectm.com		99.86.154.70	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:01.955081940 CET	8.8.8.8	192.168.2.7	0xe03	No error (0)	page.adobespark-assets.com		143.204.11.6	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:01.955081940 CET	8.8.8.8	192.168.2.7	0xe03	No error (0)	page.adobespark-assets.com		143.204.11.48	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:01.955081940 CET	8.8.8.8	192.168.2.7	0xe03	No error (0)	page.adobespark-assets.com		143.204.11.37	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:01.955081940 CET	8.8.8.8	192.168.2.7	0xe03	No error (0)	page.adobespark-assets.com		143.204.11.121	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:02.294059992 CET	8.8.8.8	192.168.2.7	0xbcf6	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:03.192682981 CET	8.8.8.8	192.168.2.7	0xd46d	No error (0)	s3.amazonaws.com		52.216.230.165	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:03.367383957 CET	8.8.8.8	192.168.2.7	0x927	No error (0)	p.typekit.net	p.typekit.net-v3.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:17.339478970 CET	8.8.8.8	192.168.2.7	0x6f46	No error (0)	page.adobespark-assets.com		143.204.11.6	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:17.339478970 CET	8.8.8.8	192.168.2.7	0x6f46	No error (0)	page.adobespark-assets.com		143.204.11.48	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:17.339478970 CET	8.8.8.8	192.168.2.7	0x6f46	No error (0)	page.adobespark-assets.com		143.204.11.37	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:17.339478970 CET	8.8.8.8	192.168.2.7	0x6f46	No error (0)	page.adobespark-assets.com		143.204.11.121	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:22.275062084 CET	8.8.8.8	192.168.2.7	0x8600	No error (0)	dougmagnon.com		162.219.251.215	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:22.980457067 CET	8.8.8.8	192.168.2.7	0xb904	No error (0)	code.jquery.com	cds.s5x3j6q5.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:22.982264042 CET	8.8.8.8	192.168.2.7	0x1bc0	No error (0)	maxcdn.bootstrapcdn.com	cds.j3z9t3p6.hwcdn.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:23.020303011 CET	8.8.8.8	192.168.2.7	0xa373	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:23.204356909 CET	8.8.8.8	192.168.2.7	0xd5d8	No error (0)	cdnjs.cloudflare.com		104.16.19.94	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:23.204356909 CET	8.8.8.8	192.168.2.7	0xd5d8	No error (0)	cdnjs.cloudflare.com		104.16.18.94	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:23.386480093 CET	8.8.8.8	192.168.2.7	0xc8a3	No error (0)	ka-f.fontawesome.com	ka-f.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:28.848920107 CET	8.8.8.8	192.168.2.7	0x7601	No error (0)	static.adobelogin.com	adobelogin-static.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:28.848920107 CET	8.8.8.8	192.168.2.7	0x7601	No error (0)	adobelogin-static.prod.ims.adobejanus.com	dd20fzx9mj46f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:28.848920107 CET	8.8.8.8	192.168.2.7	0x7601	No error (0)	dd20fzx9mj46f.cloudfront.net		13.226.151.66	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:29.151643991 CET	8.8.8.8	192.168.2.7	0xd825	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:29.750585079 CET	8.8.8.8	192.168.2.7	0x7ab7	No error (0)	cdn.cookielaw.org		104.16.148.64	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:29.750585079 CET	8.8.8.8	192.168.2.7	0x7ab7	No error (0)	cdn.cookielaw.org		104.16.149.64	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.171.45.51	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.208.225.81	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.246.39.225	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		108.128.254.60	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.17.73.77	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.228.162.206	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.49.47.228	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.058234930 CET	8.8.8.8	192.168.2.7	0x1117	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.251.60.147	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.865250111 CET	8.8.8.8	192.168.2.7	0xb277	No error (0)	prod.adobeccstatic.com		13.226.169.30	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.865250111 CET	8.8.8.8	192.168.2.7	0xb277	No error (0)	prod.adobeccstatic.com		13.226.169.5	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.865250111 CET	8.8.8.8	192.168.2.7	0xb277	No error (0)	prod.adobeccstatic.com		13.226.169.20	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.865250111 CET	8.8.8.8	192.168.2.7	0xb277	No error (0)	prod.adobeccstatic.com		13.226.169.90	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.879604101 CET	8.8.8.8	192.168.2.7	0x57ad	No error (0)	services.prod.ims.adobejanus.com		52.16.185.223	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.879604101 CET	8.8.8.8	192.168.2.7	0x57ad	No error (0)	services.prod.ims.adobejanus.com		52.48.170.34	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.879604101 CET	8.8.8.8	192.168.2.7	0x57ad	No error (0)	services.prod.ims.adobejanus.com		99.80.242.55	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.879604101 CET	8.8.8.8	192.168.2.7	0x57ad	No error (0)	services.prod.ims.adobejanus.com		52.213.176.171	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.879604101 CET	8.8.8.8	192.168.2.7	0x57ad	No error (0)	services.prod.ims.adobejanus.com		54.76.80.163	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.879604101 CET	8.8.8.8	192.168.2.7	0x57ad	No error (0)	services.prod.ims.adobejanus.com		54.73.76.208	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.930499077 CET	8.8.8.8	192.168.2.7	0xc6b8	No error (0)	api2.branch.io		99.86.154.59	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.930499077 CET	8.8.8.8	192.168.2.7	0xc6b8	No error (0)	api2.branch.io		99.86.154.45	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.930499077 CET	8.8.8.8	192.168.2.7	0xc6b8	No error (0)	api2.branch.io		99.86.154.72	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.930499077 CET	8.8.8.8	192.168.2.7	0xc6b8	No error (0)	api2.branch.io		99.86.154.13	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.957911015 CET	8.8.8.8	192.168.2.7	0xa5db	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		35.181.18.61	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.957911015 CET	8.8.8.8	192.168.2.7	0xa5db	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		15.237.136.106	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:30.957911015 CET	8.8.8.8	192.168.2.7	0xa5db	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		15.237.76.117	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:31.191709995 CET	8.8.8.8	192.168.2.7	0x1476	No error (0)	geolocation.onetrust.com		104.20.185.68	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:31.191709995 CET	8.8.8.8	192.168.2.7	0x1476	No error (0)	geolocation.onetrust.com		104.20.184.68	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.323718071 CET	8.8.8.8	192.168.2.7	0x26cc	No error (0)	ims-na1.adobelogin.com	adobelogin.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:32.323718071 CET	8.8.8.8	192.168.2.7	0x26cc	No error (0)	adobelogin.prod.ims.adobejanus.com		52.48.170.34	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.323718071 CET	8.8.8.8	192.168.2.7	0x26cc	No error (0)	adobelogin.prod.ims.adobejanus.com		99.80.242.55	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.323718071 CET	8.8.8.8	192.168.2.7	0x26cc	No error (0)	adobelogin.prod.ims.adobejanus.com		52.16.185.223	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.323718071 CET	8.8.8.8	192.168.2.7	0x26cc	No error (0)	adobelogin.prod.ims.adobejanus.com		54.76.80.163	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.323718071 CET	8.8.8.8	192.168.2.7	0x26cc	No error (0)	adobelogin.prod.ims.adobejanus.com		52.213.176.171	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.323718071 CET	8.8.8.8	192.168.2.7	0x26cc	No error (0)	adobelogin.prod.ims.adobejanus.com		54.73.76.208	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.941266060 CET	8.8.8.8	192.168.2.7	0x5ab7	No error (0)	api.demandbase.com		99.86.154.27	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.941266060 CET	8.8.8.8	192.168.2.7	0x5ab7	No error (0)	api.demandbase.com		99.86.154.38	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.941266060 CET	8.8.8.8	192.168.2.7	0x5ab7	No error (0)	api.demandbase.com		99.86.154.20	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:32.941266060 CET	8.8.8.8	192.168.2.7	0x5ab7	No error (0)	api.demandbase.com		99.86.154.116	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:34.568022013 CET	8.8.8.8	192.168.2.7	0xcc0a	No error (0)	cdn.jsdelivr.net	dualstack.f3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:34.568049908 CET	8.8.8.8	192.168.2.7	0x902a	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:35.326742887 CET	8.8.8.8	192.168.2.7	0x650e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Jan 27, 2021 17:36:35.326742887 CET	8.8.8.8	192.168.2.7	0x650e	No error (0)	scontent.xx.fbcdn.net		31.13.92.14	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:36.049228907 CET	8.8.8.8	192.168.2.7	0xd859	No error (0)	tracking.crazyegg.com		34.226.133.63	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:36.049228907 CET	8.8.8.8	192.168.2.7	0xd859	No error (0)	tracking.crazyegg.com		52.86.179.151	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:36.049228907 CET	8.8.8.8	192.168.2.7	0xd859	No error (0)	tracking.crazyegg.com		52.73.171.206	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:36.049228907 CET	8.8.8.8	192.168.2.7	0xd859	No error (0)	tracking.crazyegg.com		34.206.23.252	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:36.049228907 CET	8.8.8.8	192.168.2.7	0xd859	No error (0)	tracking.crazyegg.com		34.229.33.180	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:36.049228907 CET	8.8.8.8	192.168.2.7	0xd859	No error (0)	tracking.crazyegg.com		18.210.132.160	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		52.212.193.208	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		52.213.168.74	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		34.252.156.174	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		52.51.251.137	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		52.212.164.82	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		34.252.166.160	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		52.19.133.54	A (IP address)	IN (0x0001)
Jan 27, 2021 17:36:42.143407106 CET	8.8.8.8	192.168.2.7	0xd363	No error (0)	adobe.tt.omtrdc.net		18.203.205.32	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jan 27, 2021 17:36:01.094134092 CET	99.86.154.122	443	192.168.2.7	49722	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:01.094134092 CET	99.86.154.122	443	192.168.2.7	49722	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:01.098105907 CET	99.86.154.122	443	192.168.2.7	49723	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:01.098105907 CET	99.86.154.122	443	192.168.2.7	49723	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:02.056976080 CET	143.204.11.6	443	192.168.2.7	49726	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:02.056976080 CET	143.204.11.6	443	192.168.2.7	49726	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:02.057630062 CET	143.204.11.6	443	192.168.2.7	49728	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:02.057630062 CET	143.204.11.6	443	192.168.2.7	49728	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:02.057667971 CET	143.204.11.6	443	192.168.2.7	49725	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:02.057667971 CET	143.204.11.6	443	192.168.2.7	49725	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:02.057816982 CET	143.204.11.6	443	192.168.2.7	49727	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:02.057816982 CET	143.204.11.6	443	192.168.2.7	49727	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:03.542932034 CET	52.216.230.165	443	192.168.2.7	49733	CN=s3.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:03.542932034 CET	52.216.230.165	443	192.168.2.7	49733	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:03.546248913 CET	52.216.230.165	443	192.168.2.7	49732	CN=s3.amazonaws.com, O="Amazon.com, Inc.", L=Seattle, ST=Washington, C=US CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Aug 04 02:00:00 CEST 2020 Tue Dec 08 13:05:07 CET 2015	Mon Aug 09 14:00:00 CEST 2021 Sat May 10 14:00:00 CEST 2025	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:03.546248913 CET	52.216.230.165	443	192.168.2.7	49732	CN=DigiCert Baltimore CA-2 G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Dec 08 13:05:07 CET 2015	Sat May 10 14:00:00 CEST 2025		3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:17.443326950 CET	143.204.11.6	443	192.168.2.7	49743	CN=spark.adobe.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Jun 05 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Jun 10 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Jan 27, 2021 17:36:17.443326950 CET	143.204.11.6	443	192.168.2.7	49743	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		37f463bf4616ecd445d4a1937da06e19
Jan 27, 2021 17:36:22.666614056 CET	162.219.251.215	443	192.168.2.7	49747	CN=dougmagnon.com CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Nov 20 01:00:00 CET 2020 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Fri Feb 19 00:59:59 CET 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 27, 2021 17:36:22.667164087 CET	162.219.251.215	443	192.168.2.7	49746	CN=dougmagnon.com CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Fri Nov 20 01:00:00 CET 2020 Mon May 18 02:00:00 CEST 2015 Thu Jan 01 01:00:00 CET 2004	Fri Feb 19 00:59:59 CET 2021 Sun May 18 01:59:59 CEST 2025 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, ST=TX, C=US	CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	Mon May 18 02:00:00 CEST 2015	Sun May 18 01:59:59 CEST 2025
					CN=COMODO RSA Certification Authority, O=COMODO CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Jan 27, 2021 17:36:23.294401884 CET	104.16.19.94	443	192.168.2.7	49763	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:23.294401884 CET	104.16.19.94	443	192.168.2.7	49763	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:23.295748949 CET	104.16.19.94	443	192.168.2.7	49764	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:23.295748949 CET	104.16.19.94	443	192.168.2.7	49764	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:28.962579012 CET	13.226.151.66	443	192.168.2.7	49772	CN=static.adobelogin.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 18 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Wed Sep 22 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 27, 2021 17:36:28.963064909 CET	13.226.151.66	443	192.168.2.7	49771	CN=static.adobelogin.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 18 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Wed Sep 22 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 27, 2021 17:36:29.958107948 CET	104.16.148.64	443	192.168.2.7	49775	CN=cookielaw.org, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:29.958107948 CET	104.16.148.64	443	192.168.2.7	49775	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:29.959450960 CET	104.16.148.64	443	192.168.2.7	49776	CN=cookielaw.org, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Jul 01 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Jul 01 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:29.959450960 CET	104.16.148.64	443	192.168.2.7	49776	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:30.187443018 CET	54.171.45.51	443	192.168.2.7	49777	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 27, 2021 17:36:30.188671112 CET	54.171.45.51	443	192.168.2.7	49778	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 27, 2021 17:36:31.097654104 CET	13.226.169.30	443	192.168.2.7	49779	CN=*.adobeccstatic.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 17 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013	Thu Oct 21 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:31.097654104 CET	13.226.169.30	443	192.168.2.7	49779	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:31.099431992 CET	13.226.169.30	443	192.168.2.7	49780	CN=*.adobeccstatic.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Oct 17 02:00:00 CEST 2019 Fri Mar 08 13:00:00 CET 2013	Thu Oct 21 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:31.099431992 CET	13.226.169.30	443	192.168.2.7	49780	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:31.114387989 CET	52.16.185.223	443	192.168.2.7	49781	CN=ims-na1.adobelogin.com, OU=IT, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Apr 30 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013 Fri Nov 10 01:00:00 CET 2006	Wed May 11 14:00:00 CEST 2022 Wed Mar 08 13:00:00 CET 2023 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Jan 27, 2021 17:36:31.153064966 CET	99.86.154.59	443	192.168.2.7	49783	CN=*.branch.io, O="Branch Metrics, Inc.", L=Redwood City, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Nov 25 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Sun Dec 26 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:31.153064966 CET	99.86.154.59	443	192.168.2.7	49783	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Jan 27, 2021 17:36:31.164849043 CET	35.181.18.61	443	192.168.2.7	49784	CN=sstats.adobe.com, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon May 18 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 14:00:00 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:31.164849043 CET	35.181.18.61	443	192.168.2.7	49784	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:31.171931028 CET	35.181.18.61	443	192.168.2.7	49782	CN=sstats.adobe.com, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon May 18 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Wed Aug 25 14:00:00 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Jan 27, 2021 17:36:31.171931028 CET	35.181.18.61	443	192.168.2.7	49782	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		3faf2df7ab96c36419c31725cb1fa7d6

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 5936 Parent PID: 792

General

Start time:	17:35:58
Start date:	27/01/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff7a0950000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: iexplore.exe PID: 2892 Parent PID: 5936

General

Start time:	17:35:59
Start date:	27/01/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5936 CREDAT:17410 /prefetch:2
Imagebase:	0xfe0000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://spark.adobe.com/page/AHixiR8ASDsYE/

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Dropped Files

Sigma Overview

Signature Overview

AV Detection:

Phishing:

Compliance:

Networking:

System Summary:

Malware Analysis System Evasion:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 5936 Parent PID: 792

General

Analysis Process: iexplore.exe PID: 2892 Parent PID: 5936

General

Disassembly