Edit tour

Windows Analysis Report
https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6Ikxza3JpcEBoYWlncm91cC5jb20iLCJyZXF1ZXN0SWQiOiIwYjZhYWRmNS0wZjFhLTQ2YmUtNThkMC01MWJiYjc0MGI1N2UiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmN

Overview

General Information

Sample URL:	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6Ikxza3JpcEBoYWlncm91cC5jb20iLCJyZXF1ZXN
Analysis ID:	1546699
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Drops files with a non-matching file extension (content does not match file extension)

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1980,i,2551042674039323830,8865722587685304842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6Ikxza3JpcEBoYWlncm91cC5jb20iLCJyZXF1ZXN0SWQiOiIwYjZhYWRmNS0wZjFhLTQ2YmUtNThkMC01MWJiYjc0MGI1N2UiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjoyOGMzZjVjYS00ZWQzLTRhNTEtYWZiMC1hZjIxOTM0OTdlNTkiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ._8FMpgIlJaL8t_oFi82d6XGNnzc2WfW_TfYxKziFaR71h8ZGtJ7PBv8KBam5pa7ud8u9KZnD4KW90UZjwVvtBg" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T13:47:54.628909+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.16	49769	TCP
2024-11-01T13:48:32.459032+0100	2022930	1	A Network Trojan was detected	20.12.23.50	443	192.168.2.16	50034	TCP

HTTP traffic detected: POST /api/4507022599913472/envelope/?sentry_key=a70bff58cd4048f9e05163230edfd1bd&sentry_version=7 HTTP/1.1Host: o4505393339695104.ingest.us.sentry.ioConnection: keep-aliveContent-Length: 578sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:50034 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.16:49769
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.12.23.50:443 -> 192.168.2.16:50034

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EgY9vGRlLKyDDLm&MD=nfZtzGw3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=1;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=1;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4507022599913472/envelope/?sentry_key=a70bff58cd4048f9e05163230edfd1bd&sentry_version=7 HTTP/1.1Host: o4505393339695104.ingest.us.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzA="
Source: global traffic	HTTP traffic detected: GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzA="
Source: global traffic	HTTP traffic detected: GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=2;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1Host: cdn-sharing.adobecc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.css HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.js HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/discovery HTTP/1.1Host: pgc.adobe.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: application/jsonsec-ch-ua-mobile: ?0Authorization: undefinedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-API-Key: dc-prod-virgowebsec-ch-ua-platform: "Windows"Accept: /Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.js HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EgY9vGRlLKyDDLm&MD=nfZtzGw3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /6gNXXegDB6rtHARrNKRF8w.js HTTP/1.1Host: widget.uservoice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /users/ai/limits HTTP/1.1Host: dc-genai-access-provisioning-api.adobe.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Authorization: eyJhbGciOiJSUzI1NiIsIng1dSI6Imltc19uYTEta2V5LWd0LTEuY2VyIiwia2lkIjoiaW1zX25hMS1rZXktZ3QtMSIsInR5cCI6ImF0K2p3dCIsImNyaXQiOlsiZW52Il0sImVudiI6Imltcy1uYTEifQ.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.TNIwgzRZQv_oixtJ1pA91ex5sRhlETqLdQG6eq9f8oktMPPX-gN1KUuO5iYA6ckPlcaiyeEXuo5tQ6z7EuGvoiWI2nhQbi__o-3yOPiY24pq1EOrkCoxMT6N0wMbOsZDj1FcsKmxUQPat0a3-NnbySMCEVUsAvuLnbvwi1KxQtGjkNuV-QJAqNZF6X99pQxG6Dczf7-PB9nuso7WzoNpXsEGGShmxO1XTVh4cLCGfKb6bfmmaVrwdp8YkWXK0l4jeWoKdoiqKE7QA69ZZg4R41V5u5JOlM1lGKE6uCMFiMJKyg6EvErGUKkrVqucZqzB_9pbdtyheVhgnNJS4gdRkwUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/vnd.adobe.dc+json; profile="https://dc-genai-access-provisioning-api.adobe.io/schemas/limits_v2.json"x-api-client-id: api_browserx-api-app-info: dc-web-appx-api-key: dc-prod-virgowebsec-ch-ua-platform: "Windows"Origin: https://acrobat.adobe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /users/ai/limits HTTP/1.1Host: dc-genai-access-provisioning-api.adobe.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: adobe.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: api.echosign.com
Source: global traffic	DNS traffic detected: DNS query: dc-api.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: widget.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: static.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: prod.adobeccstatic.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: l.betrad.com
Source: global traffic	DNS traffic detected: DNS query: ims-na1.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: files-download2.acrocomcontent.com
Source: global traffic	DNS traffic detected: DNS query: dc-api-v2.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: c.evidon.com
Source: global traffic	DNS traffic detected: DNS query: by2.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: cdn-sharing.adobecc.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: o4505393339695104.ingest.us.sentry.io
Source: global traffic	DNS traffic detected: DNS query: detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _19292._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _39691._https.detect.adobedccdn.com
Source: global traffic	DNS traffic detected: DNS query: _49100._https.detect.adobedccdn.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 64access-control-allow-headers: authorization,x-api-key,x-request-id,if-match,accept,cache-control,uncommitted-revision,rendition-live,if-none-match,x-access-token,Uber-Trace-Id,priority,Content-Dispositionaccess-control-allow-methods: OPTIONS,GETaccess-control-allow-origin: *access-control-expose-headers: asset-id,connection,content-length,content-type,etag,link,location,repository-id,x-breadcrumb-trail,x-request-id,version,video-rendition-available,retry-after,vary,content-location,video-rendition-duration,Total-Count,Content-Dispositionbuild: adea17a6content-type: application/problem+jsonserver: adobex-breadcrumb-trail: INV_F4X1MPBUKG-RENS_G4RE4strict-transport-security: max-age=86400; includeSubDomainstiming-allow-origin: https://stage.acrobat.adobe.com, https://acrobat.adobe.comx-request-id: 6d2bffdc-ac6f-43bc-bf38-7231eb400490Accept-Ranges: bytesDate: Fri, 01 Nov 2024 12:48:12 GMTVia: 1.1 varnishX-Served-By: cache-dfw-kdal2120134-DFWX-Cache: MISSX-Cache-Hits: 0X-Timer: S1730465292.541924,VS0,VE1044Vary: origin,priority,Accept,rendition-live
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-request-id: 4b5686d5-2906-4505-b56d-3310c3958139content-type: application/jsoncontent-length: 92date: Fri, 01 Nov 2024 12:48:50 GMTserver: adobeconnection: close

Source: chromecache_505.1.dr, chromecache_431.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_453.1.dr, chromecache_576.1.dr	String found in binary or memory: http://github.com/janl/mustache.js
Source: chromecache_587.1.dr, chromecache_492.1.dr	String found in binary or memory: http://iso.org/pdf/ssn
Source: chromecache_587.1.dr, chromecache_492.1.dr	String found in binary or memory: http://iso.org/pdf2/ssn
Source: chromecache_500.1.dr, chromecache_496.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017702
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017704
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: chromecache_333.1.dr, chromecache_572.1.dr, chromecache_344.1.dr, chromecache_500.1.dr, chromecache_496.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_351.1.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_642.1.dr, chromecache_606.1.dr	String found in binary or memory: https://adobereview.uservoice.com/forums/598411-document-review
Source: chromecache_642.1.dr, chromecache_606.1.dr	String found in binary or memory: https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160
Source: chromecache_542.1.dr	String found in binary or memory: https://ims-na1.adobelogin.com/
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: https://use.typekit.net/af/a2527e/000000000000000000017704/27/
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: chromecache_611.1.dr, chromecache_335.1.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1980,i,2551042674039323830,8865722587685304842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6Ikxza3JpcEBoYWlncm91cC5jb20iLCJyZXF1ZXN0SWQiOiIwYjZhYWRmNS0wZjFhLTQ2YmUtNThkMC01MWJiYjc0MGI1N2UiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjoyOGMzZjVjYS00ZWQzLTRhNTEtYWZiMC1hZjIxOTM0OTdlNTkiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ._8FMpgIlJaL8t_oFi82d6XGNnzc2WfW_TfYxKziFaR71h8ZGtJ7PBv8KBam5pa7ud8u9KZnD4KW90UZjwVvtBg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1980,i,2551042674039323830,8865722587685304842,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 348
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 380	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 348	Jump to dropped file

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://p.typekit.net/p.gif	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.138	cdn-sharing.adobecc.map.fastly.net	United States	54113	FASTLYUS	false
34.254.217.29	ethos503-prod-irl1-k8s-p2-0-44a754a51c58d666.elb.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
66.235.152.221	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
54.175.249.133	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.239.18.104	unknown	United States	16509	AMAZON-02US	false
63.140.62.17	adobe.com.ssl.d1.sc.omtrdc.net	United States	15224	OMNITUREUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
67.202.29.163	unknown	United States	14618	AMAZON-AESUS	false
52.222.214.49	dd20fzx9mj46f.cloudfront.net	United States	16509	AMAZON-02US	false
3.236.206.93	api.echosign.com	United States	14618	AMAZON-AESUS	false
18.239.18.116	prod.adobeccstatic.com	United States	16509	AMAZON-02US	false
104.18.20.58	widget.uservoice.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
34.120.195.249	o4505393339695104.ingest.us.sentry.io	United States	15169	GOOGLEUS	false

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
dd20fzx9mj46f.cloudfront.net	52.222.214.49	true	false	unknown
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	52.21.182.225	true	false	unknown
widget.uservoice.com	104.18.20.58	true	false	unknown
api.echosign.com	3.236.206.93	true	false	unknown
detect.adobedccdn.com	127.0.0.1	true	false	unknown
ethos503-prod-irl1-k8s-p2-0-44a754a51c58d666.elb.eu-west-1.amazonaws.com	34.254.217.29	true	false	unknown
cdn-sharing.adobecc.map.fastly.net	151.101.1.138	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.221	true	false	unknown
o4505393339695104.ingest.us.sentry.io	34.120.195.249	true	false	unknown
adobe.com.ssl.d1.sc.omtrdc.net	63.140.62.17	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
by2.uservoice.com	104.18.21.58	true	false	unknown
prod.adobeccstatic.com	18.239.18.116	true	false	unknown
ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com	54.175.249.133	true	false	unknown
_49100._https.detect.adobedccdn.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
c.evidon.com	unknown	unknown	false	unknown
ims-na1.adobelogin.com	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
_39691._https.detect.adobedccdn.com	unknown	unknown	false	unknown
l.betrad.com	unknown	unknown	false	unknown
dc-api-v2.adobecontent.io	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
_19292._https.detect.adobedccdn.com	unknown	unknown	false	unknown
dc-api.adobecontent.io	unknown	unknown	false	unknown
adobe.tt.omtrdc.net	unknown	unknown	false	unknown
cdn-sharing.adobecc.com	unknown	unknown	false	unknown
static.adobelogin.com	unknown	unknown	false	unknown
files-download2.acrocomcontent.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack	false	unknown
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	false	unknown
https://o4505393339695104.ingest.us.sentry.io/api/4507022599913472/envelope/?sentry_key=a70bff58cd4048f9e05163230edfd1bd&sentry_version=7	false	unknown
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	false	unknown
https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=1;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack	false	unknown
https://widget.uservoice.com/6gNXXegDB6rtHARrNKRF8w.js	false	unknown
https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=2;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_333.1.dr, chromecache_572.1.dr, chromecache_344.1.dr, chromecache_500.1.dr, chromecache_496.1.dr	false		unknown
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
https://use.typekit.net/af/a2527e/000000000000000000017704/27/	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
https://adobereview.uservoice.com/forums/598411-document-review	chromecache_642.1.dr, chromecache_606.1.dr	false		unknown
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
https://use.typekit.net/af/cb695f/000000000000000000017701/27/	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
http://typekit.com/eulas/000000000000000000017704	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
http://typekit.com/eulas/000000000000000000017706	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
https://p.typekit.net/p.gif	chromecache_611.1.dr, chromecache_335.1.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/0000000000000000000176ff	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
https://download.adobeprerelease.com/public/resource/1482219688/PreReleaseAgmt%20License-en_US-20160	chromecache_642.1.dr, chromecache_606.1.dr	false		unknown
http://typekit.com/eulas/000000000000000000017701	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
http://www.videolan.org/x264.html	chromecache_351.1.dr	false		unknown
http://typekit.com/eulas/000000000000000000017702	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
http://typekit.com/eulas/000000000000000000017703	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
http://github.com/janl/mustache.js	chromecache_453.1.dr, chromecache_576.1.dr	false		unknown
http://feross.org	chromecache_505.1.dr, chromecache_431.1.dr	false	URL Reputation: safe	unknown
http://iso.org/pdf2/ssn	chromecache_587.1.dr, chromecache_492.1.dr	false		unknown
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	chromecache_611.1.dr, chromecache_335.1.dr	false		unknown
https://ims-na1.adobelogin.com/	chromecache_542.1.dr	false		unknown
http://jedwatson.github.io/classnames	chromecache_500.1.dr, chromecache_496.1.dr	false	URL Reputation: safe	unknown
http://iso.org/pdf/ssn	chromecache_587.1.dr, chromecache_492.1.dr	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546699
Start date and time:	2024-11-01 13:47:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6Ikxza3JpcEBoYWlncm91cC5jb20iLCJyZXF1ZXN0SWQiOiIwYjZhYWRmNS0wZjFhLTQ2YmUtNThkMC01MWJiYjc0MGI1N2UiLCJsaW5rIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9pZC91cm46YWFpZDpzYzpWQTZDMjoyOGMzZjVjYS00ZWQzLTRhNTEtYWZiMC1hZjIxOTM0OTdlNTkiLCJsYWJlbCI6IjEyIiwibG9jYWxlIjoiZW5fVVMifQ._8FMpgIlJaL8t_oFi82d6XGNnzc2WfW_TfYxKziFaR71h8ZGtJ7PBv8KBam5pa7ud8u9KZnD4KW90UZjwVvtBg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/540@50/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 1 11:47:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9708732649518943
Encrypted:	false
SSDEEP:	48:8phQdjTLjvHzidAKZdA1FehwiZUklqehey+3:8pWbFty
MD5:	7371BA6E93C7902CB5388E200539CACF
SHA1:	2CF6C73BF65DFCA8A543323B7888A52F46F78E95
SHA-256:	87D2347127B4006C5B44F5E8AB949FE495C34EE45B8893671A28A80D29541DB7
SHA-512:	EEE7E99B0F3B2FF6FE7438E09F5C27D618FEA307940C5B02FDF991AE37C84698F969CCBC8CE49E4F387D9EA43BD5AEF2233DBF4034C4479C25C8388FD393DF50
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s!c?\,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IaY.e....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VaY.e....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VaY.e....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VaY.e..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VaY.e...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........x........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 13:47:43.520536900 CET	53	50818	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:43.623884916 CET	53	55291	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:44.390227079 CET	53	49552	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:44.864419937 CET	53	60901	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.122159004 CET	51336	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.122334003 CET	55032	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.129507065 CET	53	51336	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.129518032 CET	53	55032	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.132328033 CET	61002	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.132555008 CET	60556	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.133497953 CET	50808	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.133703947 CET	65003	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.143270016 CET	59196	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.143388987 CET	61053	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.148231983 CET	53	61002	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.148879051 CET	51490	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.148989916 CET	63497	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.149473906 CET	53	60556	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.150235891 CET	53	61053	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.150434017 CET	53	59196	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.150937080 CET	56612	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.151074886 CET	54475	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.151758909 CET	53	65003	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.156667948 CET	63835	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.156780958 CET	61606	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.159609079 CET	53	54475	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.163341045 CET	53	63835	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.163733006 CET	53	61606	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.164429903 CET	51431	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.164554119 CET	55107	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.168203115 CET	53	52237	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.177089930 CET	53	61842	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.177838087 CET	62222	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.177961111 CET	50474	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.181205988 CET	53	63358	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.181838989 CET	50785	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.181953907 CET	60635	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.184796095 CET	53	56612	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.185540915 CET	60249	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.185672045 CET	54156	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.196178913 CET	53	62222	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.196615934 CET	53	50474	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.197046995 CET	50705	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.197232008 CET	57891	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.204302073 CET	53	57891	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.206839085 CET	53	64366	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.214632034 CET	53	56003	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.214795113 CET	53	51676	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.215395927 CET	49280	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.215532064 CET	49870	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.216016054 CET	57200	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.216135979 CET	55044	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.216281891 CET	63779	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.216394901 CET	65072	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.223855019 CET	53	57200	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.225605965 CET	57683	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.225739002 CET	50478	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:47.225905895 CET	53	55044	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.232745886 CET	53	50478	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.234378099 CET	53	57683	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:47.245682001 CET	53	50893	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:48.298083067 CET	60907	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:48.298331022 CET	51184	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:48.304922104 CET	53	60907	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:48.305000067 CET	53	51184	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:53.224282026 CET	53	62833	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:54.471497059 CET	53	52327	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:56.297996044 CET	61990	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:56.298291922 CET	57065	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:47:56.305565119 CET	53	61990	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:56.305913925 CET	53	57065	1.1.1.1	192.168.2.16
Nov 1, 2024 13:47:57.446098089 CET	53	53700	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:01.790579081 CET	53	50539	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:02.037996054 CET	49607	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:02.038270950 CET	56133	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:02.047625065 CET	53	49607	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:02.062709093 CET	53	56133	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:02.866751909 CET	61489	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:02.866894007 CET	65096	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:02.875159025 CET	53	65096	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:02.875241995 CET	53	61489	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:03.169866085 CET	55848	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:03.170016050 CET	63894	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:07.688194036 CET	53	58670	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:20.806329966 CET	53	63799	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:24.125704050 CET	53	64670	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:26.184869051 CET	62309	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:26.185220957 CET	56601	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:26.192141056 CET	53	62309	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:26.192220926 CET	53	56601	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:26.946722984 CET	53	61672	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:27.654613972 CET	53891	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:27.654802084 CET	65442	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:27.661601067 CET	53	53891	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:27.661614895 CET	53	65442	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:28.795819044 CET	53	56154	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:29.719297886 CET	55051	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:29.719485044 CET	56727	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:29.726538897 CET	53	55051	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:29.742908955 CET	53	56727	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:31.801254988 CET	49995	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:31.801414967 CET	62068	53	192.168.2.16	1.1.1.1
Nov 1, 2024 13:48:31.818237066 CET	53	49995	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:31.818453074 CET	53	62068	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:35.169945955 CET	53	60905	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:39.874511957 CET	53	65050	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:41.868662119 CET	53	52256	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:41.870990992 CET	53	51104	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:42.402410984 CET	53	60541	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:43.443414927 CET	53	55843	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:44.243032932 CET	53	55770	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:45.612118959 CET	53	57762	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:47.812242031 CET	53	62008	1.1.1.1	192.168.2.16
Nov 1, 2024 13:48:48.271816015 CET	138	138	192.168.2.16	192.168.2.255
Nov 1, 2024 13:48:49.539294004 CET	53	58672	1.1.1.1	192.168.2.16
Nov 1, 2024 13:49:08.789448977 CET	53	63995	1.1.1.1	192.168.2.16
Nov 1, 2024 13:49:24.145147085 CET	53	62087	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 1, 2024 13:47:47.151834011 CET	192.168.2.16	1.1.1.1	c277	(Port unreachable)	Destination Unreachable
Nov 1, 2024 13:47:50.044791937 CET	192.168.2.16	1.1.1.1	c295	(Port unreachable)	Destination Unreachable
Nov 1, 2024 13:48:02.062791109 CET	192.168.2.16	1.1.1.1	c264	(Port unreachable)	Destination Unreachable
Nov 1, 2024 13:48:22.606455088 CET	192.168.2.16	1.1.1.1	c2e4	(Port unreachable)	Destination Unreachable
Nov 1, 2024 13:48:29.742989063 CET	192.168.2.16	1.1.1.1	c256	(Port unreachable)	Destination Unreachable
Nov 1, 2024 13:48:41.871053934 CET	192.168.2.16	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Nov 1, 2024 13:48:49.569813013 CET	192.168.2.16	1.1.1.1	c2ed	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 13:47:47.128124952 CET	1.1.1.1	192.168.2.16	0x225a	No error (0)	services-weighted.prod.ims.adobejanus.com	adobeid-na1.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.128815889 CET	1.1.1.1	192.168.2.16	0xea9d	No error (0)	services-weighted.prod.ims.adobejanus.com	adobeid-na1.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.129507065 CET	1.1.1.1	192.168.2.16	0x7a9b	No error (0)	adobe.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.129507065 CET	1.1.1.1	192.168.2.16	0x7a9b	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.129507065 CET	1.1.1.1	192.168.2.16	0x7a9b	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.129507065 CET	1.1.1.1	192.168.2.16	0x7a9b	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.129518032 CET	1.1.1.1	192.168.2.16	0xbbfb	No error (0)	adobe.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.142621040 CET	1.1.1.1	192.168.2.16	0x976c	No error (0)	dc-api.adobecontent.io	dc-api-prod-bh-facade.adobe.io		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.148231983 CET	1.1.1.1	192.168.2.16	0x5b74	No error (0)	api.echosign.com		3.236.206.93	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.148231983 CET	1.1.1.1	192.168.2.16	0x5b74	No error (0)	api.echosign.com		3.236.206.94	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.148231983 CET	1.1.1.1	192.168.2.16	0x5b74	No error (0)	api.echosign.com		3.236.206.95	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.150235891 CET	1.1.1.1	192.168.2.16	0xeb2a	No error (0)	widget.uservoice.com			65	IN (0x0001)	false
Nov 1, 2024 13:47:47.150434017 CET	1.1.1.1	192.168.2.16	0x2f2f	No error (0)	widget.uservoice.com		104.18.20.58	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.150434017 CET	1.1.1.1	192.168.2.16	0x2f2f	No error (0)	widget.uservoice.com		104.18.21.58	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.151758909 CET	1.1.1.1	192.168.2.16	0xc5cc	No error (0)	dc-api.adobecontent.io	dc-api-prod-bh-facade.adobe.io		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.155570984 CET	1.1.1.1	192.168.2.16	0xad13	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.155883074 CET	1.1.1.1	192.168.2.16	0x47be	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.158241034 CET	1.1.1.1	192.168.2.16	0x3cf0	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.158241034 CET	1.1.1.1	192.168.2.16	0x3cf0	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.158241034 CET	1.1.1.1	192.168.2.16	0x3cf0	No error (0)	adobe.com.ssl.d1.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.159609079 CET	1.1.1.1	192.168.2.16	0x8f98	No error (0)	static.adobelogin.com	adobelogin-static.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.159609079 CET	1.1.1.1	192.168.2.16	0x8f98	No error (0)	adobelogin-static.prod.ims.adobejanus.com	dd20fzx9mj46f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.163341045 CET	1.1.1.1	192.168.2.16	0x614a	No error (0)	prod.adobeccstatic.com		18.239.18.116	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.163341045 CET	1.1.1.1	192.168.2.16	0x614a	No error (0)	prod.adobeccstatic.com		18.239.18.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.163341045 CET	1.1.1.1	192.168.2.16	0x614a	No error (0)	prod.adobeccstatic.com		18.239.18.104	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.163341045 CET	1.1.1.1	192.168.2.16	0x614a	No error (0)	prod.adobeccstatic.com		18.239.18.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.171873093 CET	1.1.1.1	192.168.2.16	0x1506	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.171976089 CET	1.1.1.1	192.168.2.16	0xdbe1	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.184796095 CET	1.1.1.1	192.168.2.16	0xb028	No error (0)	static.adobelogin.com	adobelogin-static.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.184796095 CET	1.1.1.1	192.168.2.16	0xb028	No error (0)	adobelogin-static.prod.ims.adobejanus.com	dd20fzx9mj46f.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.184796095 CET	1.1.1.1	192.168.2.16	0xb028	No error (0)	dd20fzx9mj46f.cloudfront.net		52.222.214.49	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.184796095 CET	1.1.1.1	192.168.2.16	0xb028	No error (0)	dd20fzx9mj46f.cloudfront.net		52.222.214.61	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.184796095 CET	1.1.1.1	192.168.2.16	0xb028	No error (0)	dd20fzx9mj46f.cloudfront.net		52.222.214.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.184796095 CET	1.1.1.1	192.168.2.16	0xb028	No error (0)	dd20fzx9mj46f.cloudfront.net		52.222.214.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.188910961 CET	1.1.1.1	192.168.2.16	0x48f7	No error (0)	ims-na1.adobelogin.com	adobelogin-weighted.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.188910961 CET	1.1.1.1	192.168.2.16	0x48f7	No error (0)	adobelogin-weighted.prod.ims.adobejanus.com	ims-na1.adobelogin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.196178913 CET	1.1.1.1	192.168.2.16	0x7e62	No error (0)	l.betrad.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.196178913 CET	1.1.1.1	192.168.2.16	0x7e62	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		52.21.182.225	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.196178913 CET	1.1.1.1	192.168.2.16	0x7e62	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		34.237.81.82	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.196178913 CET	1.1.1.1	192.168.2.16	0x7e62	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		3.216.226.106	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.196615934 CET	1.1.1.1	192.168.2.16	0x5a2e	No error (0)	l.betrad.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.201045990 CET	1.1.1.1	192.168.2.16	0x871c	No error (0)	ims-na1.adobelogin.com	adobelogin-weighted.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.201045990 CET	1.1.1.1	192.168.2.16	0x871c	No error (0)	adobelogin-weighted.prod.ims.adobejanus.com	ims-na1.adobelogin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.203969002 CET	1.1.1.1	192.168.2.16	0xcadc	No error (0)	dc-api-v2.adobecontent.io	dc-api-v2-prod-bh-facade.adobe.io		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.204302073 CET	1.1.1.1	192.168.2.16	0xc8f9	No error (0)	dc-api-v2.adobecontent.io	dc-api-v2-prod-bh-facade.adobe.io		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.205401897 CET	1.1.1.1	192.168.2.16	0x2dd4	No error (0)	files-download2.acrocomcontent.com	download2-migrate.r53.acrobat.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.223396063 CET	1.1.1.1	192.168.2.16	0x2569	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.223824024 CET	1.1.1.1	192.168.2.16	0xcced	No error (0)	c.evidon.com	newwildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.223834991 CET	1.1.1.1	192.168.2.16	0xdadf	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.223845005 CET	1.1.1.1	192.168.2.16	0xa810	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.223855019 CET	1.1.1.1	192.168.2.16	0xf942	No error (0)	by2.uservoice.com		104.18.21.58	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.223855019 CET	1.1.1.1	192.168.2.16	0xf942	No error (0)	by2.uservoice.com		104.18.20.58	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.225905895 CET	1.1.1.1	192.168.2.16	0x92d4	No error (0)	by2.uservoice.com			65	IN (0x0001)	false
Nov 1, 2024 13:47:47.232745886 CET	1.1.1.1	192.168.2.16	0xf3cd	No error (0)	cdn-sharing.adobecc.com	cdn-sharing.adobecc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.234378099 CET	1.1.1.1	192.168.2.16	0xb8ea	No error (0)	cdn-sharing.adobecc.com	cdn-sharing.adobecc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.234378099 CET	1.1.1.1	192.168.2.16	0xb8ea	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.1.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.234378099 CET	1.1.1.1	192.168.2.16	0xb8ea	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.65.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.234378099 CET	1.1.1.1	192.168.2.16	0xb8ea	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.129.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.234378099 CET	1.1.1.1	192.168.2.16	0xb8ea	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.193.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:47.715318918 CET	1.1.1.1	192.168.2.16	0x5106	No error (0)	files-download2.acrocomcontent.com	download2-migrate.r53.acrobat.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.727752924 CET	1.1.1.1	192.168.2.16	0x126a	No error (0)	auth.prod.ims.adobejanus.com	auth-weighted.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.727752924 CET	1.1.1.1	192.168.2.16	0x126a	No error (0)	auth-weighted.prod.ims.adobejanus.com	auth.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.736109972 CET	1.1.1.1	192.168.2.16	0x4e75	No error (0)	auth.prod.ims.adobejanus.com	auth-weighted.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:47.736109972 CET	1.1.1.1	192.168.2.16	0x4e75	No error (0)	auth-weighted.prod.ims.adobejanus.com	auth.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:48.304922104 CET	1.1.1.1	192.168.2.16	0x260e	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:48.305000067 CET	1.1.1.1	192.168.2.16	0xcff2	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 13:47:48.968360901 CET	1.1.1.1	192.168.2.16	0x2f03	No error (0)	auth.prod.ims.adobejanus.com	auth-weighted.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:48.968360901 CET	1.1.1.1	192.168.2.16	0x2f03	No error (0)	auth-weighted.prod.ims.adobejanus.com	auth.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:48.968456030 CET	1.1.1.1	192.168.2.16	0x8a15	No error (0)	auth.prod.ims.adobejanus.com	auth-weighted.prod.ims.adobejanus.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:48.968456030 CET	1.1.1.1	192.168.2.16	0x8a15	No error (0)	auth-weighted.prod.ims.adobejanus.com	auth.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:50.035938025 CET	1.1.1.1	192.168.2.16	0x2331	No error (0)	services-weighted.prod.ims.adobejanus.com	adobeid-na1.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:50.044728041 CET	1.1.1.1	192.168.2.16	0xaf1f	No error (0)	services-weighted.prod.ims.adobejanus.com	adobeid-na1.services.adobe.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:56.305565119 CET	1.1.1.1	192.168.2.16	0x17db	No error (0)	cdn-sharing.adobecc.com	cdn-sharing.adobecc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:47:56.305565119 CET	1.1.1.1	192.168.2.16	0x17db	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.1.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:56.305565119 CET	1.1.1.1	192.168.2.16	0x17db	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.193.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:56.305565119 CET	1.1.1.1	192.168.2.16	0x17db	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.129.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:56.305565119 CET	1.1.1.1	192.168.2.16	0x17db	No error (0)	cdn-sharing.adobecc.map.fastly.net		151.101.65.138	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:47:56.305913925 CET	1.1.1.1	192.168.2.16	0xf8f2	No error (0)	cdn-sharing.adobecc.com	cdn-sharing.adobecc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:02.047625065 CET	1.1.1.1	192.168.2.16	0x6085	No error (0)	o4505393339695104.ingest.us.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:02.875241995 CET	1.1.1.1	192.168.2.16	0xeca1	No error (0)	o4505393339695104.ingest.us.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:03.177524090 CET	1.1.1.1	192.168.2.16	0x49ff	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:03.180869102 CET	1.1.1.1	192.168.2.16	0x8439	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:22.567678928 CET	1.1.1.1	192.168.2.16	0x7b6	No error (0)	ethos.ethos503-prod-irl1.ethos.adobe.net	ethos503-prod-irl1-k8s-p2-0-44a754a51c58d666.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:22.567678928 CET	1.1.1.1	192.168.2.16	0x7b6	No error (0)	ethos503-prod-irl1-k8s-p2-0-44a754a51c58d666.elb.eu-west-1.amazonaws.com		34.254.217.29	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:22.567678928 CET	1.1.1.1	192.168.2.16	0x7b6	No error (0)	ethos503-prod-irl1-k8s-p2-0-44a754a51c58d666.elb.eu-west-1.amazonaws.com		54.154.242.122	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:22.567678928 CET	1.1.1.1	192.168.2.16	0x7b6	No error (0)	ethos503-prod-irl1-k8s-p2-0-44a754a51c58d666.elb.eu-west-1.amazonaws.com		54.217.252.227	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:22.606355906 CET	1.1.1.1	192.168.2.16	0x9333	No error (0)	ethos.ethos503-prod-irl1.ethos.adobe.net	ethos503-prod-irl1-k8s-p2-0-44a754a51c58d666.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:26.192141056 CET	1.1.1.1	192.168.2.16	0xabac	No error (0)	prod.adobeccstatic.com		18.239.18.104	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:26.192141056 CET	1.1.1.1	192.168.2.16	0xabac	No error (0)	prod.adobeccstatic.com		18.239.18.63	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:26.192141056 CET	1.1.1.1	192.168.2.16	0xabac	No error (0)	prod.adobeccstatic.com		18.239.18.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:26.192141056 CET	1.1.1.1	192.168.2.16	0xabac	No error (0)	prod.adobeccstatic.com		18.239.18.116	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:27.661601067 CET	1.1.1.1	192.168.2.16	0x5b67	No error (0)	detect.adobedccdn.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:27.661614895 CET	1.1.1.1	192.168.2.16	0xddfc	Name error (3)	_19292._https.detect.adobedccdn.com	none	none	65	IN (0x0001)	false
Nov 1, 2024 13:48:29.726538897 CET	1.1.1.1	192.168.2.16	0x2f61	No error (0)	detect.adobedccdn.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:29.742908955 CET	1.1.1.1	192.168.2.16	0x700f	Name error (3)	_39691._https.detect.adobedccdn.com	none	none	65	IN (0x0001)	false
Nov 1, 2024 13:48:31.818237066 CET	1.1.1.1	192.168.2.16	0x8043	No error (0)	detect.adobedccdn.com		127.0.0.1	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:31.818453074 CET	1.1.1.1	192.168.2.16	0xdbd9	Name error (3)	_49100._https.detect.adobedccdn.com	none	none	65	IN (0x0001)	false
Nov 1, 2024 13:48:47.815722942 CET	1.1.1.1	192.168.2.16	0x4476	No error (0)	ethos.pub.ethos551-prod-va6.ethos.adobe.net	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:47.815722942 CET	1.1.1.1	192.168.2.16	0x4476	No error (0)	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		54.175.249.133	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:47.815722942 CET	1.1.1.1	192.168.2.16	0x4476	No error (0)	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		35.170.167.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:47.815722942 CET	1.1.1.1	192.168.2.16	0x4476	No error (0)	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		67.202.29.163	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:47.815735102 CET	1.1.1.1	192.168.2.16	0x35fa	No error (0)	ethos.pub.ethos551-prod-va6.ethos.adobe.net	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:49.541716099 CET	1.1.1.1	192.168.2.16	0x52d0	No error (0)	ethos.pub.ethos551-prod-va6.ethos.adobe.net	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:48:49.541716099 CET	1.1.1.1	192.168.2.16	0x52d0	No error (0)	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		67.202.29.163	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:49.541716099 CET	1.1.1.1	192.168.2.16	0x52d0	No error (0)	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		35.170.167.46	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:49.541716099 CET	1.1.1.1	192.168.2.16	0x52d0	No error (0)	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		54.175.249.133	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:48:49.569664955 CET	1.1.1.1	192.168.2.16	0x155	No error (0)	ethos.pub.ethos551-prod-va6.ethos.adobe.net	ethos551-prod-va6-k8s-p2-0-ae4ec75f18def055.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:47:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 12:47:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=100671 Date: Fri, 01 Nov 2024 12:47:51 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Cryptography

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:47:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 12:47:52 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=100727 Date: Fri, 01 Nov 2024 12:47:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-01 12:47:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:47:54 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EgY9vGRlLKyDDLm&MD=nfZtzGw3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-01 12:47:54 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ae2a0e3e-6afe-497f-be8c-054c1d101b48 MS-RequestId: 7a85feac-83be-4cc2-94d0-d3ee9ffc5b75 MS-CV: iYIVvUfamUKF8JzT.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 01 Nov 2024 12:47:53 GMT Connection: close Content-Length: 24490
2024-11-01 12:47:54 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-01 12:47:54 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:47:55 UTC	844	OUT	GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:47:55 UTC	1235	IN	HTTP/1.1 200 OK Connection: close Content-Length: 122596 access-control-allow-headers: authorization,x-api-key,x-request-id,if-match,accept,cache-control,uncommitted-revision,rendition-live,if-none-match,x-access-token,Uber-Trace-Id,priority,Content-Disposition access-control-allow-methods: OPTIONS,GET access-control-allow-origin: * access-control-expose-headers: asset-id,connection,content-length,content-type,etag,link,location,repository-id,x-breadcrumb-trail,x-request-id,version,video-rendition-available,retry-after,vary,content-location,video-rendition-duration,Total-Count,Content-Disposition access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59 build: adea17a6 content-location: https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?api_key=dc_sendtrack content-type: image/jpeg etag: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzA=" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true"
2024-11-01 12:47:55 UTC	1477	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 65 66 66 65 63 74 69 76 65 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 61 63 2f 65 66 66 65 63 74 69 76 65 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 70 6f 6c 69 63 79 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a Data Ascii: link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective"link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:
2024-11-01 12:47:55 UTC	1255	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 2f 3a 64 69 73 63 61 72 64 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 64 69 73 63 61 72 64 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59/:discard>; rel="http://ns.adobe.com/adobecloud/rel/discard"link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f
2024-11-01 12:47:55 UTC	2015	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 2f 72 65 73 6f 75 72 63 65 3a 7b 72 65 73 6f 75 72 63 65 7d 2f 3a 70 61 67 65 7b 3f 6f 72 64 65 72 42 79 2c 73 74 61 72 74 2c 6c 69 6d 69 74 2c 70 72 6f 70 65 72 74 79 2c 76 65 72 73 69 6f 6e 7d 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 70 61 67 65 22 3b 20 74 65 6d 70 6c 61 74 65 64 3d 22 74 72 75 65 22 3b 20 74 79 70 65 3d 22 61 70 70 6c Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59/resource:{resource}/:page{?orderBy,start,limit,property,version}>; rel="http://ns.adobe.com/adobecloud/rel/page"; templated="true"; type="appl
2024-11-01 12:47:55 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 64 30 32 37 31 35 2c 20 32 30 32 34 2f 30 35 2f 32 32 2d 30 34 3a 31 32 3a 33 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.fd02715, 2024/05/22-04:12:37 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-11-01 12:47:55 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-11-01 12:47:55 UTC	1371	IN	Data Raw: 07 08 04 05 06 03 02 01 09 0a 0b 01 01 00 02 03 01 00 02 03 00 00 00 00 00 00 00 00 00 04 05 01 02 03 06 07 08 09 0a 0b 10 00 01 04 01 02 03 03 02 0e 08 05 06 0e 63 00 00 01 00 02 03 04 05 06 11 07 12 13 15 21 31 14 22 08 16 17 18 32 41 51 55 56 91 93 94 d4 d5 23 52 53 57 61 92 d2 d3 24 54 71 a4 d1 33 42 62 95 a1 a3 09 25 26 34 37 44 65 81 84 b1 b4 c1 c3 c4 0a 19 1a 27 28 29 2a 35 36 38 39 3a 43 45 46 47 48 49 4a 58 59 5a 63 64 66 67 68 69 6a 72 73 74 75 76 77 78 79 7a 82 83 85 86 87 88 89 8a 96 97 98 99 9a a2 a5 a6 a7 a8 a9 aa b2 b3 b5 b6 b7 b8 b9 ba c2 c5 c6 c7 c8 c9 ca d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 01 02 02 06 03 05 07 05 01 81 00 00 00 00 00 01 02 11 21 31 03 12 14 41 51 61 04 22 a1 13 71 81 91 Data Ascii: c!1"2AQUV#RSWa$Tq3Bb%&47De'()*5689:CEFGHIJXYZcdfghijrstuvwxyz!1AQa"q
2024-11-01 12:47:55 UTC	1371	IN	Data Raw: cb 67 20 8f 4c d8 1a b3 14 d1 59 d5 de ce d8 ad 18 e5 8e d5 57 38 35 fc cc 1d dd 58 c3 ba 91 c8 07 30 d8 83 cc 0e cb 8d 5d 49 d6 8c 2d e7 a3 75 54 ef c3 8c 67 12 d7 2c 7c 7c e1 29 29 ee e2 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 0f ff d1 b5 28 08 08 08 08 08 39 2e 21 fb 0d 3b fd e7 29 7f bd a8 fd 23 77 b7 47 b9 69 5e ee fc 3a 02 b7 6c fc 46 1f 85 01 07 e2 c0 fc 41 f8 50 7e 23 0f 94 02 83 f1 07 e2 0f c5 81 f8 51 87 e2 0f c4 1f 85 07 e2 c0 fc 41 f8 50 7e 14 1f 88 c0 83 f0 ac Data Ascii: g LYW85X0]I-uTg,\|\|))(9.!;)#wGi^:lFAP~#QAP~
2024-11-01 12:47:55 UTC	1371	IN	Data Raw: 52 ea ef d2 f2 87 d8 8b 9b 97 6e 6e 5e 72 37 db 71 be db ed b8 df c5 46 aa 6b 8c f5 a3 bf 78 f5 da 4d e3 8b d6 93 b8 89 7a 01 62 91 cb da ae e2 43 66 87 ca 64 61 23 b8 80 e6 ee 37 07 c7 bf b9 23 ba 4e 5a d3 de bc 91 7e 6e ec 59 d4 38 5e 10 df 9b 25 2d b8 32 b7 2d 86 42 eb 2e 91 b3 b1 a5 cc 1b 0e 7d 9e d0 59 1c 84 0e ef 64 4f 81 52 6f 55 3a 29 bd e2 66 77 de fb bc 3b a5 be 31 4f 37 07 8b 9b 5f 65 44 8e c6 cf 92 b8 d8 76 12 98 64 99 e1 a5 db ed be c7 bb 7d 8e df a8 a3 53 35 d5 95 e7 bd 76 91 79 e2 dc e2 30 9c 4d 97 2d 4a 2b 2d ca c5 5d f3 c4 d9 a4 91 f3 86 35 85 e0 39 ce 3b f7 00 dd c9 fc 0b a5 34 69 2f 1e 7a d7 e6 cc 45 5c dd 7f 1b f5 0e 47 1e cc 5d 3a 16 e6 aa e9 ba b2 ce 60 91 d1 97 35 bc ad 68 3c a4 12 09 2f ee 3d db 8f 6f da ef d2 eb 98 b4 46 19 de d8 Data Ascii: Rnn^r7qFkxMzbCfda#7#NZ~nY8^%-2-B.}YdORoU:)fw;1O7_eDvd}S5vy0M-J+-]59;4i/zE\G]:`5h</=oF
2024-11-01 12:47:55 UTC	1371	IN	Data Raw: ff 00 1e ab 7a 64 f5 a2 38 47 ae e1 a5 9c 52 6f 0d 28 f9 16 85 c4 44 46 c6 48 7a e7 f0 f5 dc 65 07 e2 78 db f0 6c a6 68 22 d4 47 8f c7 8b ad 11 83 93 e3 e5 ee 4c 36 2e 8e fd f3 d8 7c c4 7e 08 59 cb fc cb fa 9f 10 5c 3a 64 e1 11 c6 6f e2 f7 ad 34 b3 83 41 c2 cd 75 a6 34 d6 1e dc 39 17 ca db 96 6c 73 fd 8e 32 f1 d3 6b 1a 1b df ee f3 73 ff 00 1c 42 e7 d1 f4 d4 d1 18 e7 33 d9 ec bb 5a 2a 88 84 97 a6 b8 81 a7 b5 25 d9 29 e3 1d 2b a6 8a 33 33 fa 91 96 34 34 38 37 c4 fb 7b b8 6c 3d cd fd c5 2f 47 a6 a6 a9 b4 77 dd 62 a8 94 4d c6 db de 51 ac 9b 5c 1e ea 75 a3 8c 8f dc 9e 5d 21 f8 c3 db f1 05 0b a5 cd eb ef 47 bb f7 2e 3a 49 c5 2e e8 3a 3e 45 a3 70 f0 6d b1 f2 66 48 e1 ee 3a 51 d4 3f c7 ee f3 bf e1 53 74 31 6a 23 bd eb e2 ed 4c 60 8e 78 f1 8c ad 1d ac 5e 4a 36 06 Data Ascii: zd8GRo(DFHzexlh"GL6.\|~Y\:do4Au49ls2ksB3Z*%)+334487{l=/GwbMQ\u]!G.:I.:>EpmfH:Q?St1j#L`x^J6
2024-11-01 12:47:55 UTC	1371	IN	Data Raw: a4 e8 b4 11 47 3b b7 a6 8b 21 4d 6b 34 99 7d 7d 92 11 f9 cf 9a e7 93 47 ed ef d3 22 16 ed f8 0f 28 db f0 2a fd 2c eb 57 3d fb 78 b0 71 ab 19 59 38 62 64 30 b2 18 c6 cc 8d a1 8d 1f 81 a3 61 fb c0 ad 62 12 10 7f 1b b3 b0 dd cf 56 c6 40 e0 f6 e3 63 77 58 8f 6a 59 b6 2e 6f e1 e5 6b 59 bf b8 4b 87 88 2a bf a5 d7 7a ad c3 d7 9f 64 38 e9 27 1e f3 ba e0 fe 2e 4a 1a 2e 19 24 6f 2b ef 4a fb 5b 1f 1e 57 6c c6 9f d4 73 63 0e 1f 81 c0 a9 1d 1a 9b 51 df c7 dc 7b 86 fa 38 c1 b3 e2 27 f4 84 e6 3f bb 73 fc 98 5b e9 fc e4 f7 99 af 24 9c a7 a4 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 Data Ascii: G;!Mk4}}G"(,W=xqY8bd0abV@cwXjY.okYKzd8'.J.$o+J[WlscQ{8'?s[$

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:47:57 UTC	844	OUT	GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=1;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:47:57 UTC	1234	IN	HTTP/1.1 200 OK Connection: close Content-Length: 79803 access-control-allow-headers: authorization,x-api-key,x-request-id,if-match,accept,cache-control,uncommitted-revision,rendition-live,if-none-match,x-access-token,Uber-Trace-Id,priority,Content-Disposition access-control-allow-methods: OPTIONS,GET access-control-allow-origin: * access-control-expose-headers: asset-id,connection,content-length,content-type,etag,link,location,repository-id,x-breadcrumb-trail,x-request-id,version,video-rendition-available,retry-after,vary,content-location,video-rendition-duration,Total-Count,Content-Disposition access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59 build: adea17a6 content-location: https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=1;size=1200;type=image%2Fjpeg?api_key=dc_sendtrack content-type: image/jpeg etag: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzE=" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true"
2024-11-01 12:47:57 UTC	1477	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 65 66 66 65 63 74 69 76 65 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 61 63 2f 65 66 66 65 63 74 69 76 65 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 70 6f 6c 69 63 79 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a Data Ascii: link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective"link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:
2024-11-01 12:47:57 UTC	1255	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 2f 3a 64 69 73 63 61 72 64 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 64 69 73 63 61 72 64 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59/:discard>; rel="http://ns.adobe.com/adobecloud/rel/discard"link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f
2024-11-01 12:47:57 UTC	2015	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 2f 72 65 73 6f 75 72 63 65 3a 7b 72 65 73 6f 75 72 63 65 7d 2f 3a 70 61 67 65 7b 3f 6f 72 64 65 72 42 79 2c 73 74 61 72 74 2c 6c 69 6d 69 74 2c 70 72 6f 70 65 72 74 79 2c 76 65 72 73 69 6f 6e 7d 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 70 61 67 65 22 3b 20 74 65 6d 70 6c 61 74 65 64 3d 22 74 72 75 65 22 3b 20 74 79 70 65 3d 22 61 70 70 6c Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59/resource:{resource}/:page{?orderBy,start,limit,property,version}>; rel="http://ns.adobe.com/adobecloud/rel/page"; templated="true"; type="appl
2024-11-01 12:47:57 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 64 30 32 37 31 35 2c 20 32 30 32 34 2f 30 35 2f 32 32 2d 30 34 3a 31 32 3a 33 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.fd02715, 2024/05/22-04:12:37 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-11-01 12:47:57 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-11-01 12:47:57 UTC	1371	IN	Data Raw: 08 06 07 03 04 05 02 01 09 0a 0b 01 01 01 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 01 02 06 07 06 07 07 75 00 00 00 00 01 02 03 04 05 06 11 12 13 07 14 16 21 22 31 51 95 08 15 41 55 56 d2 d5 23 61 66 94 a5 e2 17 24 32 33 34 71 b1 09 0a 42 53 62 82 a1 18 19 1a 25 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 52 54 57 58 59 5a 63 64 65 67 68 69 6a 72 73 74 75 76 77 78 79 7a 81 83 84 85 86 87 88 89 8a 91 92 93 96 97 98 99 9a a2 a3 a4 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c1 c2 c3 c4 c5 c6 c7 c8 c9 ca d1 d3 d4 d6 d7 d8 d9 da e1 e3 e4 e5 e6 e7 e8 e9 ea f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 00 02 03 07 02 01 09 89 00 00 00 00 00 00 00 01 11 02 03 12 14 21 52 92 a2 d1 f0 d3 e1 71 04 31 51 Data Ascii: u!"1QAUV#af$234qBSb%&'()*56789:CDEFGHIJRTWXYZcdeghijrstuvwxyz!Rq1Q
2024-11-01 12:47:57 UTC	1371	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f ff d7 aa 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f ff Data Ascii: @
2024-11-01 12:47:57 UTC	1371	IN	Data Raw: 0a 59 3a 96 af c0 8a b3 d4 86 78 e4 99 88 d5 46 b9 5f 1b 5c af 6a 23 95 11 77 44 d9 55 11 7c 6a 07 9f 91 ed 03 46 d1 c3 65 33 0e cc 54 9e 9e 1e 17 cf 7d 6b cf 14 ce 62 33 f0 1e 2d 72 af 51 ee d9 91 b1 76 73 e4 56 b1 bb b9 51 00 f2 74 cf 6a 58 ed 45 97 c3 d3 a1 51 cb 53 31 85 8f 39 1d d5 9e 05 48 d1 ef 58 dd 59 f1 35 ce 93 ab 13 9a ad 91 cd 45 8d af 6b a3 57 72 6a a0 19 1d 4d 53 a6 2e 45 6a 5a 99 7a 56 22 a2 d5 92 ec 91 58 89 ed 85 8d 45 55 74 aa d7 2a 46 d4 46 b9 55 5f b2 22 22 ef e6 50 3e ea 6a 2d 3f 72 47 c5 53 27 52 c4 91 c2 db 32 32 29 e3 7b 9b 03 d1 1c d9 5c 8d 72 aa 46 e6 b9 1c d7 af 92 a8 a8 a8 bb 2a 01 fb 8a cf e0 b3 0d 91 d8 9c 95 5c 8b 61 54 49 9d 52 68 e7 46 2b b7 d9 1c b1 b9 dc 55 76 5d b7 db 7d 97 6f 30 18 6b bb 61 c7 4b da a2 76 7f 8f a5 de Data Ascii: Y:xF_\j#wDU\|jFe3T}kb3-rQvsVQtjXEQS19HXY5EkWrjMS.EjZzV"XEUtFFU_""P>j-?rGS'R22){\rF\aTIRhF+Uv]}o0kaKv
2024-11-01 12:47:57 UTC	1371	IN	Data Raw: 95 23 46 a6 c8 ae 72 b1 ae 0c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff d6 aa 40 00 00 00 00 00 00 00 e0 be b7 92 8d 95 a1 d3 5b dd 27 f7 44 9b 7e 97 57 8a f4 fa 9c 55 1d c3 96 dc b8 aa 2f 1d f6 54 50 34 1c 1a 7b b6 4d 73 ac aa 66 b3 b8 36 e9 4b f8 7c 1e 4f 18 eb ed 9d 8e 8a 4b f7 62 92 28 64 ac d6 3e 69 12 38 fa 8c 93 9a ba 46 a2 b1 c8 8f 55 e2 8a 18 fe 8d ec ab 5a bf 2b a5 aa 56 d2 0d d2 93 e9 fc 7e 42 a6 a4 ce bd f0 2a 64 df 6e 05 8a 34 4e 92 b9 d3 ee ed dc af 7a af 4f 9a ec ad e9 b5 af 0e 6d 1b a3 7b 4e 56 76 71 87 bf a5 2c 50 af a3 dd 96 66 46 fc b3 57 73 1e eb 71 c9 d2 58 9a c9 15 ea cf 29 ad 73 b8 aa 2b dd b3 57 8b 55 54 3e f0 dd 85 e4 99 d9 3e 81 c4 db d3 11 a6 6b c2 7a 96 b5 8c 4b d1 ea 3f 1f 0d 8b 8d 57 4e f4 76 d2 31 95 a7 Data Ascii: #Fr@['D~WU/TP4{Msf6K\|OKb(d>i8FUZ+V~B*dn4NzOm{NVvq,PfFWsqX)s+WUT>>kzK?WNv1
2024-11-01 12:47:57 UTC	1371	IN	Data Raw: 23 95 9a 5d 2e cd 7a d6 51 20 89 8a 8b 3e 11 d4 1d 24 36 52 ca c8 bb cc ed 99 07 74 64 8c 72 b9 ef 99 62 8a 27 4a 19 1e 9a ec 56 ee 32 fe 2a fd cc ab 6c d9 c6 5d a9 3a af 2b d3 24 b0 51 a7 6e b4 69 f6 76 d5 b5 89 ee 7d e7 4a 8c 8b 8c 30 a3 7a 6c 6b b7 e6 06 cc c6 c3 76 2a bc 2e ba 07 4f d4 95 db d6 8d d1 47 c1 d2 b9 d1 a7 17 3a 45 e6 91 ab 52 57 72 d9 f2 a3 de d6 b1 ae 46 34 3b 40 00 00 00 00 0c 5b 5a 68 97 6a ab b8 34 b1 7e 5a b8 bc 55 97 de 9e bd 67 49 0c f2 d8 6c 4b 1d 67 36 78 dc c7 46 d8 56 49 24 54 4d d5 ef e9 f8 d1 1a bb 86 35 85 ec a7 50 e9 89 21 9f 4c 66 a0 6b e9 ba e5 6a 55 f2 30 4b 66 2f 6b ae 4c db 4c 81 ee 6c d1 ca b2 d6 b0 92 2c 73 23 f6 7c 4f e9 bd 9b a2 3d a1 91 a6 8c c8 be 7d 27 66 ee 59 d7 ad e9 db 56 2d db b3 2c 68 d7 59 7d 9a 96 2b 2a Data Ascii: #].zQ >$6Rtdrb'JV2l]:+$Qniv}J0zlkv.OG:ERWrF4;@[Zhj4~ZUgIlKg6xFVI$TM5P!LfkjU0Kf/kLLl,s#\|O=}'fYV-,hY}+*

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:47:57 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-11-01 12:47:57 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:47:58 UTC	607	OUT	GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=1;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:47:58 UTC	1234	IN	HTTP/1.1 200 OK Connection: close Content-Length: 79803 access-control-allow-headers: authorization,x-api-key,x-request-id,if-match,accept,cache-control,uncommitted-revision,rendition-live,if-none-match,x-access-token,Uber-Trace-Id,priority,Content-Disposition access-control-allow-methods: OPTIONS,GET access-control-allow-origin: * access-control-expose-headers: asset-id,connection,content-length,content-type,etag,link,location,repository-id,x-breadcrumb-trail,x-request-id,version,video-rendition-available,retry-after,vary,content-location,video-rendition-duration,Total-Count,Content-Disposition access-control-max-age: 86400 asset-id: urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59 build: adea17a6 content-location: https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=1;size=1200;type=image%2Fjpeg?api_key=dc_sendtrack content-type: image/jpeg etag: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzE=" link: <https://platform-cs-va6c2.adobe.io/content/acl/check/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59{?privilege,relation}>; rel="http://ns.adobe.com/adobecloud/rel/ac/check"; templated="true"
2024-11-01 12:47:58 UTC	1477	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 65 66 66 65 63 74 69 76 65 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 61 63 2f 65 66 66 65 63 74 69 76 65 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 70 6c 61 74 66 6f 72 6d 2d 63 73 2d 76 61 36 63 32 2e 61 64 6f 62 65 2e 69 6f 2f 63 6f 6e 74 65 6e 74 2f 61 63 6c 2f 70 6f 6c 69 63 79 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a Data Ascii: link: <https://platform-cs-va6c2.adobe.io/content/acl/effective/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59>; rel="http://ns.adobe.com/adobecloud/rel/ac/effective"link: <https://platform-cs-va6c2.adobe.io/content/acl/policy/urn:aaid:sc:VA6C2:
2024-11-01 12:47:58 UTC	1255	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 2f 3a 64 69 73 63 61 72 64 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 64 69 73 63 61 72 64 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59/:discard>; rel="http://ns.adobe.com/adobecloud/rel/discard"link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f
2024-11-01 12:47:58 UTC	2015	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 73 68 61 72 69 6e 67 2e 61 64 6f 62 65 63 63 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 74 6f 72 61 67 65 2f 69 64 2f 75 72 6e 3a 61 61 69 64 3a 73 63 3a 56 41 36 43 32 3a 32 38 63 33 66 35 63 61 2d 34 65 64 33 2d 34 61 35 31 2d 61 66 62 30 2d 61 66 32 31 39 33 34 39 37 65 35 39 2f 72 65 73 6f 75 72 63 65 3a 7b 72 65 73 6f 75 72 63 65 7d 2f 3a 70 61 67 65 7b 3f 6f 72 64 65 72 42 79 2c 73 74 61 72 74 2c 6c 69 6d 69 74 2c 70 72 6f 70 65 72 74 79 2c 76 65 72 73 69 6f 6e 7d 3e 3b 20 72 65 6c 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 61 64 6f 62 65 63 6c 6f 75 64 2f 72 65 6c 2f 70 61 67 65 22 3b 20 74 65 6d 70 6c 61 74 65 64 3d 22 74 72 75 65 22 3b 20 74 79 70 65 3d 22 61 70 70 6c Data Ascii: link: <https://cdn-sharing.adobecc.com/content/storage/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59/resource:{resource}/:page{?orderBy,start,limit,property,version}>; rel="http://ns.adobe.com/adobecloud/rel/page"; templated="true"; type="appl
2024-11-01 12:47:58 UTC	1371	IN	Data Raw: ff d8 ff e1 09 bf 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 64 30 32 37 31 35 2c 20 32 30 32 34 2f 30 35 2f 32 32 2d 30 34 3a 31 32 3a 33 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 Data Ascii: http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.fd02715, 2024/05/22-04:12:37 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-sy
2024-11-01 12:47:58 UTC	1371	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-11-01 12:47:58 UTC	1371	IN	Data Raw: 08 06 07 03 04 05 02 01 09 0a 0b 01 01 01 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 01 02 06 07 06 07 07 75 00 00 00 00 01 02 03 04 05 06 11 12 13 07 14 16 21 22 31 51 95 08 15 41 55 56 d2 d5 23 61 66 94 a5 e2 17 24 32 33 34 71 b1 09 0a 42 53 62 82 a1 18 19 1a 25 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 52 54 57 58 59 5a 63 64 65 67 68 69 6a 72 73 74 75 76 77 78 79 7a 81 83 84 85 86 87 88 89 8a 91 92 93 96 97 98 99 9a a2 a3 a4 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c1 c2 c3 c4 c5 c6 c7 c8 c9 ca d1 d3 d4 d6 d7 d8 d9 da e1 e3 e4 e5 e6 e7 e8 e9 ea f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa 11 01 00 00 02 03 07 02 01 09 89 00 00 00 00 00 00 00 01 11 02 03 12 14 21 52 92 a2 d1 f0 d3 e1 71 04 31 51 Data Ascii: u!"1QAUV#af$234qBSb%&'()*56789:CDEFGHIJRTWXYZcdeghijrstuvwxyz!Rq1Q
2024-11-01 12:47:58 UTC	1371	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f ff d7 aa 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f ff Data Ascii: @
2024-11-01 12:47:58 UTC	1371	IN	Data Raw: 0a 59 3a 96 af c0 8a b3 d4 86 78 e4 99 88 d5 46 b9 5f 1b 5c af 6a 23 95 11 77 44 d9 55 11 7c 6a 07 9f 91 ed 03 46 d1 c3 65 33 0e cc 54 9e 9e 1e 17 cf 7d 6b cf 14 ce 62 33 f0 1e 2d 72 af 51 ee d9 91 b1 76 73 e4 56 b1 bb b9 51 00 f2 74 cf 6a 58 ed 45 97 c3 d3 a1 51 cb 53 31 85 8f 39 1d d5 9e 05 48 d1 ef 58 dd 59 f1 35 ce 93 ab 13 9a ad 91 cd 45 8d af 6b a3 57 72 6a a0 19 1d 4d 53 a6 2e 45 6a 5a 99 7a 56 22 a2 d5 92 ec 91 58 89 ed 85 8d 45 55 74 aa d7 2a 46 d4 46 b9 55 5f b2 22 22 ef e6 50 3e ea 6a 2d 3f 72 47 c5 53 27 52 c4 91 c2 db 32 32 29 e3 7b 9b 03 d1 1c d9 5c 8d 72 aa 46 e6 b9 1c d7 af 92 a8 a8 a8 bb 2a 01 fb 8a cf e0 b3 0d 91 d8 9c 95 5c 8b 61 54 49 9d 52 68 e7 46 2b b7 d9 1c b1 b9 dc 55 76 5d b7 db 7d 97 6f 30 18 6b bb 61 c7 4b da a2 76 7f 8f a5 de Data Ascii: Y:xF_\j#wDU\|jFe3T}kb3-rQvsVQtjXEQS19HXY5EkWrjMS.EjZzV"XEUtFFU_""P>j-?rGS'R22){\rF\aTIRhF+Uv]}o0kaKv
2024-11-01 12:47:58 UTC	1371	IN	Data Raw: 95 23 46 a6 c8 ae 72 b1 ae 0c cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ff d6 aa 40 00 00 00 00 00 00 00 e0 be b7 92 8d 95 a1 d3 5b dd 27 f7 44 9b 7e 97 57 8a f4 fa 9c 55 1d c3 96 dc b8 aa 2f 1d f6 54 50 34 1c 1a 7b b6 4d 73 ac aa 66 b3 b8 36 e9 4b f8 7c 1e 4f 18 eb ed 9d 8e 8a 4b f7 62 92 28 64 ac d6 3e 69 12 38 fa 8c 93 9a ba 46 a2 b1 c8 8f 55 e2 8a 18 fe 8d ec ab 5a bf 2b a5 aa 56 d2 0d d2 93 e9 fc 7e 42 a6 a4 ce bd f0 2a 64 df 6e 05 8a 34 4e 92 b9 d3 ee ed dc af 7a af 4f 9a ec ad e9 b5 af 0e 6d 1b a3 7b 4e 56 76 71 87 bf a5 2c 50 af a3 dd 96 66 46 fc b3 57 73 1e eb 71 c9 d2 58 9a c9 15 ea cf 29 ad 73 b8 aa 2b dd b3 57 8b 55 54 3e f0 dd 85 e4 99 d9 3e 81 c4 db d3 11 a6 6b c2 7a 96 b5 8c 4b d1 ea 3f 1f 0d 8b 8d 57 4e f4 76 d2 31 95 a7 Data Ascii: #Fr@['D~WU/TP4{Msf6K\|OKb(d>i8FUZ+V~B*dn4NzOm{NVvq,PfFWsqX)s+WUT>>kzK?WNv1
2024-11-01 12:47:58 UTC	1371	IN	Data Raw: 23 95 9a 5d 2e cd 7a d6 51 20 89 8a 8b 3e 11 d4 1d 24 36 52 ca c8 bb cc ed 99 07 74 64 8c 72 b9 ef 99 62 8a 27 4a 19 1e 9a ec 56 ee 32 fe 2a fd cc ab 6c d9 c6 5d a9 3a af 2b d3 24 b0 51 a7 6e b4 69 f6 76 d5 b5 89 ee 7d e7 4a 8c 8b 8c 30 a3 7a 6c 6b b7 e6 06 cc c6 c3 76 2a bc 2e ba 07 4f d4 95 db d6 8d d1 47 c1 d2 b9 d1 a7 17 3a 45 e6 91 ab 52 57 72 d9 f2 a3 de d6 b1 ae 46 34 3b 40 00 00 00 00 0c 5b 5a 68 97 6a ab b8 34 b1 7e 5a b8 bc 55 97 de 9e bd 67 49 0c f2 d8 6c 4b 1d 67 36 78 dc c7 46 d8 56 49 24 54 4d d5 ef e9 f8 d1 1a bb 86 35 85 ec a7 50 e9 89 21 9f 4c 66 a0 6b e9 ba e5 6a 55 f2 30 4b 66 2f 6b ae 4c db 4c 81 ee 6c d1 ca b2 d6 b0 92 2c 73 23 f6 7c 4f e9 bd 9b a2 3d a1 91 a6 8c c8 be 7d 27 66 ee 59 d7 ad e9 db 56 2d db b3 2c 68 d7 59 7d 9a 96 2b 2a Data Ascii: #].zQ >$6Rtdrb'JV2l]:+$Qniv}J0zlkv.OG:ERWrF4;@[Zhj4~ZUgIlKg6xFVI$TM5P!LfkjU0Kf/kLLl,s#\|O=}'fYV-,hY}+*

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:48:02 UTC	722	OUT	POST /api/4507022599913472/envelope/?sentry_key=a70bff58cd4048f9e05163230edfd1bd&sentry_version=7 HTTP/1.1 Host: o4505393339695104.ingest.us.sentry.io Connection: keep-alive Content-Length: 578 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://acrobat.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:48:02 UTC	578	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 30 31 54 31 32 3a 34 38 3a 30 31 2e 30 39 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 31 38 2e 30 22 7d 2c 22 64 73 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 61 37 30 62 66 66 35 38 63 64 34 30 34 38 66 39 65 30 35 31 36 33 32 33 30 65 64 66 64 31 62 64 40 6f 34 35 30 35 33 39 33 33 33 39 36 39 35 31 30 34 2e 69 6e 67 65 73 74 2e 75 73 2e 73 65 6e 74 72 79 2e 69 6f 2f 34 35 30 37 30 32 32 35 39 39 39 31 33 34 37 32 22 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 61 39 66 31 31 66 66 66 39 32 30 35 34 63 35 33 61 32 39 37 65 35 Data Ascii: {"sent_at":"2024-11-01T12:48:01.095Z","sdk":{"name":"sentry.javascript.browser","version":"7.118.0"},"dsn":"https://a70bff58cd4048f9e05163230edfd1bd@o4505393339695104.ingest.us.sentry.io/4507022599913472"}{"type":"session"}{"sid":"a9f11fff92054c53a297e5
2024-11-01 12:48:02 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 01 Nov 2024 12:48:02 GMT Content-Type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 12:48:02 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:48:03 UTC	452	OUT	GET /api/4507022599913472/envelope/?sentry_key=a70bff58cd4048f9e05163230edfd1bd&sentry_version=7 HTTP/1.1 Host: o4505393339695104.ingest.us.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:48:03 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Fri, 01 Nov 2024 12:48:03 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:48:07 UTC	926	OUT	GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://acrobat.adobe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzA="
2024-11-01 12:48:08 UTC	536	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 01 Nov 2024 12:48:07 GMT Via: 1.1 varnish Content-Location: https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?api_key=dc_sendtrack ETag: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzA=" X-Served-By: cache-dfw-kdal2120101-DFW X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1730465288.643790,VS0,VE312 Vary: origin,priority,Accept,rendition-live

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:48:08 UTC	718	OUT	GET /rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?access_token=1730507971_urn%3Aaaid%3Asc%3AVA6C2%3A28c3f5ca-4ed3-4a51-afb0-af2193497e59%3Bpublic_383ea3def3b3eb5568608beed4754fb9decbd811&api_key=dc_sendtrack HTTP/1.1 Host: cdn-sharing.adobecc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzA="
2024-11-01 12:48:09 UTC	543	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 01 Nov 2024 12:48:08 GMT Via: 1.1 varnish Content-Location: https://cdn-sharing.adobecc.com/rendition/id/urn:aaid:sc:VA6C2:28c3f5ca-4ed3-4a51-afb0-af2193497e59;page=0;size=1200;type=image%2Fjpeg?api_key=dc_sendtrack ETag: "dXJuOmFhaWQ6c2M6VkE2QzI6MjhjM2Y1Y2EtNGVkMy00YTUxLWFmYjAtYWYyMTkzNDk3ZTU5LzEyMDAvanBlZy8wLzA=" Age: 268 X-Served-By: cache-dfw-kdfw8210157-DFW X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1730465289.814364,VS0,VE1 Vary: origin,priority,Accept,rendition-live