Edit tour

Windows Analysis Report
Credit Card Authorization Form.pdf

Overview

General Information

Sample name:	Credit Card Authorization Form.pdf
Analysis ID:	1577099
MD5:	d42718aad08c2e4d04fad3c465e38b12
SHA1:	39d1a490682830a77267ea8cd6614bb336bf2739
SHA256:	18a0c02abbe3880010c2863e3d26791771ffd51a8fa8ce6bd895ebebfe02eb5b
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

Blob-based file download detected

Downloads suspicious files via Chrome

HTML page contains base64 encoded files

IP address seen in connection with other malware

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 6540 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Credit Card Authorization Form.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 5732 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 6636 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2260 --field-trial-handle=1552,i,16749495978696567103,8341145372217453035,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2040,i,927129136615329189,15538360311667193620,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1984,i,4601340424966888979,1320841207906655574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING DNS Lookup for Possible Common Brand Phishing Hosted on Legitimate Windows Service

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T01:01:49.162341+0100	2026486	1	Potential Corporate Privacy Violation	192.168.2.16	54863	1.1.1.1	53	UDP
2024-12-18T01:01:49.162341+0100	2026486	1	Potential Corporate Privacy Violation	192.168.2.16	51335	1.1.1.1	53	UDP
2024-12-18T01:03:09.050770+0100	2026486	1	Potential Corporate Privacy Violation	192.168.2.16	64766	1.1.1.1	53	UDP
2024-12-18T01:03:09.051139+0100	2026486	1	Potential Corporate Privacy Violation	192.168.2.16	58772	1.1.1.1	53	UDP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.0.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://adobe.blob.core.windows.net/adobe/adobe.ht... The provided JavaScript snippet appears to be a highly suspicious and potentially malicious script. It exhibits several high-risk indicators, including dynamic code execution through base64-encoded content, potential data exfiltration, and obfuscated code. The combination of these behaviors suggests a high likelihood of malicious intent, warranting a high-risk score.

HTML page contains base64 encoded files

Source: https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 151.101.1.229 151.101.1.229
Source: Joe Sandbox View	IP Address: 151.101.129.229 151.101.129.229

Source: Network traffic	Suricata IDS: 2026486 - Severity 1 - ET PHISHING DNS Lookup for Possible Common Brand Phishing Hosted on Legitimate Windows Service : 192.168.2.16:54863 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026486 - Severity 1 - ET PHISHING DNS Lookup for Possible Common Brand Phishing Hosted on Legitimate Windows Service : 192.168.2.16:51335 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026486 - Severity 1 - ET PHISHING DNS Lookup for Possible Common Brand Phishing Hosted on Legitimate Windows Service : 192.168.2.16:64766 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2026486 - Severity 1 - ET PHISHING DNS Lookup for Possible Common Brand Phishing Hosted on Legitimate Windows Service : 192.168.2.16:58772 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.1
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.1
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.147.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /npm/javascript-obfuscator/dist/index.browser.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobe.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jszip/3.10.1/jszip.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobe.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jszip/3.10.1/jszip.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/javascript-obfuscator/dist/index.browser.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: 77EC63BDA74BD0D0E0426DC8F80085060.3.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_176.14.dr, chromecache_179.14.dr	String found in binary or memory: http://stuartk.com/jszip
Source: 2D85F72862B55C4EADD9E66E06947F3D0.3.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_180.14.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/javascript-obfuscator/dist/index.browser.js
Source: chromecache_180.14.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js
Source: 87df5a63-4d58-4117-a9d9-fcbb6c1d3536.tmp.4.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_176.14.dr, chromecache_179.14.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/main/LICENSE
Source: chromecache_176.14.dr, chromecache_179.14.dr	String found in binary or memory: https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.

Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Credit Card Authorization Form.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2260 --field-trial-handle=1552,i,16749495978696567103,8341145372217453035,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2040,i,927129136615329189,15538360311667193620,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1984,i,4601340424966888979,1320841207906655574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2260 --field-trial-handle=1552,i,16749495978696567103,8341145372217453035,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2040,i,927129136615329189,15538360311667193620,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1984,i,4601340424966888979,1320841207906655574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
151.101.1.229	unknown	United States	54113	FASTLYUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577099
Start date and time:	2024-12-18 01:01:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Credit Card Authorization Form.pdf
Detection:	MAL
Classification:	mal56.phis.winPDF@40/73@11/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source	Detection	Scanner	Label	Link
Credit Card Authorization Form.pdf	5%	ReversingLabs
Credit Card Authorization Form.pdf	2%	Virustotal		Browse

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
www.google.com	172.217.19.228	true	false	high
x1.i.lencr.org	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://cdn.jsdelivr.net/npm/javascript-obfuscator/dist/index.browser.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js	false		high

Name	Source	Malicious	Reputation
https://chrome.cloudflare-dns.com	87df5a63-4d58-4117-a9d9-fcbb6c1d3536.tmp.4.dr	false	high
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.3.dr	false	high
https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.	chromecache_176.14.dr, chromecache_179.14.dr	false	high
https://github.com/nodeca/pako/blob/main/LICENSE	chromecache_176.14.dr, chromecache_179.14.dr	false	high
http://stuartk.com/jszip	chromecache_176.14.dr, chromecache_179.14.dr	false	high

Input	Output
URL: https://adobe.blob.core.windows.net/adobe/adobe.ht... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "The provided JavaScript snippet appears to be a highly suspicious and potentially malicious script. It exhibits several high-risk indicators, including dynamic code execution through base64-encoded content, potential data exfiltration, and obfuscated code. The combination of these behaviors suggests a high likelihood of malicious intent, warranting a high-risk score." }
const base64ZIP = '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
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "No se pudo cargar el documento PDF.", "prominent_button_name": "Volver a cargar", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: PDF document Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://adobe.blob.core.windows.net Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://adobe.blob.core.windows.net

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
151.101.1.229	http://www.ledger-secure03948.sssgva.com/	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/jquery.magnific-popup/1.0.0/jquery.magnific-popup.min.js
151.101.1.229	New Scanned Copy.html	Get hash	malicious	HTMLPhisher	Browse	cdn.jsdelivr.net/jquery.slick/1.6.0/slick.min.js
151.101.129.229	http://valleyprohealth.org	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/jquery.slick/1.5.1/slick-theme.css

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
jsdelivr.map.fastly.net	https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://6movies.stream/series/cobra-kai-80711/6-4/	Get hash	malicious	Unknown	Browse	151.101.1.229
	http://sdgfdjfgd19sdgfghfs.z33.web.core.windows.net	Get hash	malicious	TechSupportScam	Browse	151.101.129.229
	http://www.delinian.com	Get hash	malicious	Unknown	Browse	151.101.1.229
	http://www.delinian.com/delinian-group-trading-companies	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://atc-secure.com/nocod/wetransdnyd.html#k.muench@muenchundmuench.com	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://alluc.co/watch-movies/passengers.html	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://aweitapp.com/zeng/advance/auth	Get hash	malicious	HTMLPhisher	Browse	151.101.129.229
	Remit_Advice_SMKT_84655.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://business.livechathelpsuite.com	Get hash	malicious	Unknown	Browse	151.101.1.229
bg.microsoft.map.fastly.net	Configurator.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	hades.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://pdf-ezy.com/pdf-ezy.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	Harrisassoc_Updated_Workplace_Policies_and_Compliance_Guidelines.pdf.pdf	Get hash	malicious	HTMLPhisher	Browse	199.232.214.172
	support.Client.exe	Get hash	malicious	ScreenConnect Tool	Browse	199.232.214.172
	5.msi	Get hash	malicious	DanaBot, Nitol	Browse	199.232.214.172
	file.exe	Get hash	malicious	Remcos	Browse	199.232.214.172
	https://garfieldthecat.tech/Receipt.html	Get hash	malicious	WinSearchAbuse	Browse	199.232.210.172
	lavita.msi	Get hash	malicious	BruteRatel, Latrodectus	Browse	199.232.210.172
	mjjt5kTb4o.lnk	Get hash	malicious	Unknown	Browse	199.232.214.172
cdnjs.cloudflare.com	https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D	Get hash	malicious	Unknown	Browse	104.17.25.14
	Harrisassoc_Updated_Workplace_Policies_and_Compliance_Guidelines.pdf.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://drive.google.com/file/d/1t3oVTU9WVeXXW61-QBDfjBrcece1DEFY/view?usp=sharing	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.google.co.th/url?q=jODz3y3HOSozuuQiApLh&rct=5CHARyytTPSJ3J3wDcT&sa=t&esrc=temadewelgFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ6CHARlDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%6D%6F%74%6C%65%79%2D%61%6D%65%6E%61%62%6C%65%2D%73%74%69%6E%67%2E%67%6C%69%74%63%68%2E%6D%65#Y2hhbmd5ZW9sLmNob2lAaHl1bmRhaWVsZXZhdG9yLmNvbQ==	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fpub-c51a5b71098c4a50b29ad0816d037292.r2.dev%2525252Findex.html%25252F1FPh%25252FkO25AQ%25252FAQ%25252F3e065842-509e-4fd5-abbb-5283a8ac4086%25252F1%25252FRkloQ4shWG%252F1FPh%252Fk_25AQ%252FAQ%252Fdde43c95-583c-418a-adc0-08f493a126f6%252F1%252FJb7OErMoyM%2F1FPh%2Fk_25AQ%2FAQ%2Fb4b83026-0c0f-44d4-9e59-6245afb2c831%2F1%2F0MDiG0XvGK/1FPh/le25AQ/AQ/97716a3f-8a20-4219-bc1f-a50876348ddc/1/HkaU6VJ0d2#	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://mail.donotreply.biz/XWW04VVZpU2JyWTFmVy96T2RUOUEvcEhyMWhFSm5uZElnVUlmb2dTZEdMRFdGSU1UV2V3S3RUNGdrNmNQRFJ4WTFPRHdYYlkraDV3S1YyVVpuU3E3K2p1bWowcEt3M24ySVBLanRDUkwyYitYWExuYTB5YlhVTUhySWZKbGJCTE9oRHl2RCtjR29BbEk3ZEwxZFJaNmNoK29ESk0vTGcxSmtyK0FWTExLWTdxYlQ1Yys1bjNiTUczY0RnPT0tLTU2R0pFM1VwZFRnVndZSWktLXptU2lWOHlQdjR0eGI1K09OQVZtRnc9PQ==?cid=2315575162	Get hash	malicious	KnowBe4	Browse	104.17.25.14
	https://1drv.ms/w/c/17cc1e7b64547fa0/ER4uyAUCto9GkfZ_Sw-4_NAB9TeJj_jWV9oRzb3kdQINFQ?e=4%3aaVtPRh&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	104.17.25.14
	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	http://sharefileon.com	Get hash	malicious	Unknown	Browse	104.17.24.14

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.184695855868644
Encrypted:	false
SSDEEP:	6:7Qf3Gg9+q2PRN2nKuAl9OmbnIFUt8OQf3ggJZmw+OQf3BG9VkwORN2nKuAl9Omb5:7Qf2g9+vaHAahFUt8OQfHJ/+OQfU9V5c
MD5:	E1A59063C3C56EE78262486B434C61D7
SHA1:	7225A72FE4161E036B661A45A5674B044947FCAF
SHA-256:	FFF4115099B476DBB9C422073FE2FE6F08D7DDFB61D946376DE3C100D52EEDEF
SHA-512:	E3C36994FA3E38EB93872AF99823125E267602213E12F0309EE89422069AA1224051E564863EA9E7F9C2D6B8D699499C2F2A8355E846D67BEF37790C0D021D1F
Malicious:	false
Reputation:	low
Preview:	2024/12/17-19:01:39.414 19dc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/17-19:01:39.416 19dc Recovering log #3.2024/12/17-19:01:39.417 19dc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 17 23:01:50 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.966156233460863
Encrypted:	false
SSDEEP:	48:80dcTgoIHHidAKZdA1FehwiZUklqehTy+3:8Hngsy
MD5:	814CB6C324A72FF6030115D3AF599EDF
SHA1:	D1C9DEE7363A67D4B7F61C944AC235E9077BA50E
SHA-256:	87286C00F8A0F8AC07F10FA476E3567E62B3E280B8BE088E6CECEB71C8619E85
SHA-512:	87635E6151745F163641D2E91E6C99AFD5F68587C993000084CCE79D4DFE58DC56584BF5F5FED293CD6CD6E592A25F6F694EB059F891BD455AA889096EC78E34
Malicious:	false
Preview:	L..................F.@.. ...$+.,....\....P..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y(.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y8.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y8.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y8............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y:............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........X.b......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Credit Card Authorization Form.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\87df5a63-4d58-4117-a9d9-fcbb6c1d3536.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241218000140Z-168.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7012

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.7012

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Windows Analysis Report
Credit Card Authorization Form.pdf

File type:	PDF document, version 1.5
Entropy (8bit):	4.913941073921024
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Credit Card Authorization Form.pdf
File size:	56'145 bytes
MD5:	d42718aad08c2e4d04fad3c465e38b12
SHA1:	39d1a490682830a77267ea8cd6614bb336bf2739
SHA256:	18a0c02abbe3880010c2863e3d26791771ffd51a8fa8ce6bd895ebebfe02eb5b
SHA512:	1a127ffe37dbe33d41c5a67f1d18d191ad0eaf4723273ee517c5793ccbc6a367ce4007a05f440eecea33497121b3e7b06c391e2c792194149db9686bfb087e86
SSDEEP:	384:oOqmEF+mMDc/5555555558F67cdOr9wavSN/Bi36livjuE/7FMngm:REz/555555555+KhGwjCL
TLSH:	AA432930F3DBEB8A2B8B695D957E3C335B0192D002E90023752F8C5667A8F760A475BD
File Content Preview:	%PDF-1.5..%......2 0 obj..<</Pages 6 0 R/Names <</JavaScript 5 0 R>>/Type/Catalog/Metadata 33 0 R>>..endobj..8 0 obj..<</Resources <</XObject <</TLFKIIZgXL 13 0 R>>>>/MediaBox[0 0 595 842]/Type/Page/Parent 6 0 R/Contents 12 0 R/Annots[9 0 R 10 0 R 11 0 R]

General
Header:	%PDF-1.5
Total Entropy:	4.913941
Total Bytes:	56145
Stream Entropy:	4.803261
Stream Bytes:	54703
Entropy outside Streams:	5.381640
Bytes outside Streams:	1442
Number of EOF found:	1
Bytes after EOF:

Name	Count
obj	10
endobj	10
stream	8
endstream	8
xref	0
trailer	0
startxref	1
/Page	1
/Encrypt	0
/ObjStm	1
/URI	0
/JS	0
/JavaScript	1
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 01:01:49.301843882 CET	53	53524	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:49.309978008 CET	53	51640	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:50.054698944 CET	62526	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:52.027837038 CET	52518	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:52.028284073 CET	57388	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:52.031991005 CET	61362	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:52.032347918 CET	53847	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:52.060147047 CET	53	52252	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:52.164793015 CET	53	52518	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:52.165431976 CET	53	57388	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:52.168894053 CET	53	61362	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:52.169964075 CET	53	53847	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:53.956070900 CET	65341	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:53.956291914 CET	52139	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:54.093549013 CET	53	65341	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:54.093575001 CET	53	52139	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:54.297106981 CET	62412	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:54.297626972 CET	58656	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:54.434178114 CET	53	62412	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:54.434500933 CET	53	58656	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:56.533437967 CET	50821	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:56.533437967 CET	52802	53	192.168.2.16	1.1.1.1
Dec 18, 2024 01:01:56.670255899 CET	53	50821	1.1.1.1	192.168.2.16
Dec 18, 2024 01:01:56.671339989 CET	53	52802	1.1.1.1	192.168.2.16
Dec 18, 2024 01:02:09.062869072 CET	53	61824	1.1.1.1	192.168.2.16
Dec 18, 2024 01:02:28.172483921 CET	53	61207	1.1.1.1	192.168.2.16
Dec 18, 2024 01:02:32.829385996 CET	53	53113	1.1.1.1	192.168.2.16
Dec 18, 2024 01:02:39.326775074 CET	138	138	192.168.2.16	192.168.2.255
Dec 18, 2024 01:02:49.237771034 CET	53	53783	1.1.1.1	192.168.2.16
Dec 18, 2024 01:02:51.183645964 CET	53	59782	1.1.1.1	192.168.2.16
Dec 18, 2024 01:03:22.099358082 CET	53	51577	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 18, 2024 01:01:49.395261049 CET	192.168.2.16	1.1.1.1	c23f	(Port unreachable)	Destination Unreachable
Dec 18, 2024 01:01:57.182424068 CET	192.168.2.16	1.1.1.1	c2ba	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 01:01:50.397116899 CET	1.1.1.1	192.168.2.16	0x8732	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 01:01:52.164793015 CET	1.1.1.1	192.168.2.16	0xe391	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 01:01:52.164793015 CET	1.1.1.1	192.168.2.16	0xe391	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:52.164793015 CET	1.1.1.1	192.168.2.16	0xe391	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:52.164793015 CET	1.1.1.1	192.168.2.16	0xe391	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:52.164793015 CET	1.1.1.1	192.168.2.16	0xe391	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:52.165431976 CET	1.1.1.1	192.168.2.16	0x96ec	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 01:01:52.168894053 CET	1.1.1.1	192.168.2.16	0xb982	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:52.168894053 CET	1.1.1.1	192.168.2.16	0xb982	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:52.169964075 CET	1.1.1.1	192.168.2.16	0x10ee	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 18, 2024 01:01:52.197443008 CET	1.1.1.1	192.168.2.16	0x9597	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:52.197443008 CET	1.1.1.1	192.168.2.16	0x9597	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:54.093549013 CET	1.1.1.1	192.168.2.16	0x221a	No error (0)	www.google.com		172.217.19.228	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:54.093575001 CET	1.1.1.1	192.168.2.16	0x7e3e	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 18, 2024 01:01:54.434178114 CET	1.1.1.1	192.168.2.16	0x5944	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:54.434178114 CET	1.1.1.1	192.168.2.16	0x5944	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:54.434500933 CET	1.1.1.1	192.168.2.16	0x5b90	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 18, 2024 01:01:56.670255899 CET	1.1.1.1	192.168.2.16	0xd951	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 01:01:56.670255899 CET	1.1.1.1	192.168.2.16	0xd951	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:56.670255899 CET	1.1.1.1	192.168.2.16	0xd951	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:56.670255899 CET	1.1.1.1	192.168.2.16	0xd951	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:56.670255899 CET	1.1.1.1	192.168.2.16	0xd951	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:01:56.671339989 CET	1.1.1.1	192.168.2.16	0x9e20	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 01:02:07.149276972 CET	1.1.1.1	192.168.2.16	0xdd71	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 18, 2024 01:02:07.149276972 CET	1.1.1.1	192.168.2.16	0xdd71	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-12-18 00:01:53 UTC	574	OUT	GET /npm/javascript-obfuscator/dist/index.browser.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobe.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 00:01:53 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1534944 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.1.1 X-JSD-Version-Type: version ETag: W/"176be0-ZKd3I1MIpHM7ByqRe4LbBKMiybE" Accept-Ranges: bytes Age: 38847 Date: Wed, 18 Dec 2024 00:01:53 GMT X-Served-By: cache-fra-etou8220144-FRA, cache-ewr-kewr1740028-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-18 00:01:53 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 69 6e 64 65 78 2e 62 72 6f 77 73 65 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 4a 61 76 61 53 63 72 69 70 74 4f 62 66 75 73 63 Data Ascii: /! For license information please see index.browser.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.JavaScriptObfusc
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 79 2c 72 26 4f 3f 52 3a 31 29 29 2c 69 7d 2c 46 6f 72 49 6e 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 6e 65 72 61 74 65 49 74 65 72 61 74 69 6f 6e 46 6f 72 53 74 61 74 65 6d 65 6e 74 28 22 69 6e 22 2c 65 2c 74 26 4f 3f 52 3a 31 29 7d 2c 46 6f 72 4f 66 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 6e 65 72 61 74 65 49 74 65 72 61 74 69 6f 6e 46 6f 72 53 74 61 74 65 6d 65 6e 74 28 22 6f 66 22 2c 65 2c 74 26 4f 3f 52 3a 31 29 7d 2c 4c 61 62 65 6c 65 64 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 65 2e 6c 61 62 65 6c 2e 6e 61 6d 65 2b 22 3a 22 2c 74 68 69 73 2e 6d 61 79 62 Data Ascii: y,r&O?R:1)),i},ForInStatement:function(e,t){return this.generateIterationForStatement("in",e,t&O?R:1)},ForOfStatement:function(e,t){return this.generateIterationForStatement("of",e,t&O?R:1)},LabeledStatement:function(e,t){return[e.label.name+":",this.mayb
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 28 65 2e 65 78 74 65 6e 64 65 64 52 61 6e 67 65 5b 31 5d 3d 74 5b 72 5d 2e 72 61 6e 67 65 5b 30 5d 29 2c 28 72 2d 3d 31 29 3e 3d 30 26 26 28 65 2e 65 78 74 65 6e 64 65 64 52 61 6e 67 65 5b 30 5d 3d 74 5b 72 5d 2e 72 61 6e 67 65 5b 31 5d 29 2c 65 7d 72 65 74 75 72 6e 20 72 3d 7b 41 73 73 69 67 6e 6d 65 6e 74 45 78 70 72 65 73 73 69 6f 6e 3a 22 41 73 73 69 67 6e 6d 65 6e 74 45 78 70 72 65 73 73 69 6f 6e 22 2c 41 73 73 69 67 6e 6d 65 6e 74 50 61 74 74 65 72 6e 3a 22 41 73 73 69 67 6e 6d 65 6e 74 50 61 74 74 65 72 6e 22 2c 41 72 72 61 79 45 78 70 72 65 73 73 69 6f 6e 3a 22 41 72 72 61 79 45 78 70 72 65 73 73 69 6f 6e 22 2c 41 72 72 61 79 50 61 74 74 65 72 6e 3a 22 41 72 72 61 79 50 61 74 74 65 72 6e 22 2c 41 72 72 6f 77 46 Data Ascii: ==t.length&&(e.extendedRange[1]=t[r].range[0]),(r-=1)>=0&&(e.extendedRange[0]=t[r].range[1]),e}return r={AssignmentExpression:"AssignmentExpression",AssignmentPattern:"AssignmentPattern",ArrayExpression:"ArrayExpression",ArrayPattern:"ArrayPattern",ArrowF
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 2e 74 79 70 65 7c 7c 74 68 69 73 2e 5f 5f 63 75 72 72 65 6e 74 2e 77 72 61 70 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 72 3b 66 6f 72 28 72 3d 5b 5d 2c 65 3d 31 2c 74 3d 74 68 69 73 2e 5f 5f 6c 65 61 76 65 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 65 3c 74 3b 2b 2b 65 29 72 2e 70 75 73 68 28 74 68 69 73 2e 5f 5f 6c 65 61 76 65 6c 69 73 74 5b 65 5d 2e 6e 6f 64 65 29 3b 72 65 74 75 72 6e 20 72 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 75 72 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 63 75 72 72 65 6e 74 2e 6e 6f 64 65 7d 2c 64 2e 70 72 6f 74 6f 74 79 Data Ascii: tion(){return this.current().type\|\|this.__current.wrap},d.prototype.parents=function(){var e,t,r;for(r=[],e=1,t=this.__leavelist.length;e<t;++e)r.push(this.__leavelist[e].node);return r},d.prototype.current=function(){return this.__current.node},d.prototy
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 70 6f 73 3d 72 2c 74 68 69 73 2e 6c 69 6e 65 53 74 61 72 74 3d 74 68 69 73 2e 69 6e 70 75 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 5c 6e 22 2c 72 2d 31 29 2b 31 2c 74 68 69 73 2e 63 75 72 4c 69 6e 65 3d 74 68 69 73 2e 69 6e 70 75 74 2e 73 6c 69 63 65 28 30 2c 74 68 69 73 2e 6c 69 6e 65 53 74 61 72 74 29 2e 73 70 6c 69 74 28 76 29 2e 6c 65 6e 67 74 68 29 3a 28 74 68 69 73 2e 70 6f 73 3d 74 68 69 73 2e 6c 69 6e 65 53 74 61 72 74 3d 30 2c 74 68 69 73 2e 63 75 72 4c 69 6e 65 3d 31 29 2c 74 68 69 73 2e 74 79 70 65 3d 53 2e 65 6f 66 2c 74 68 69 73 2e 76 61 6c 75 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 65 6e 64 3d 74 68 69 73 2e 70 6f 73 2c 74 68 69 73 2e 73 74 61 72 74 4c 6f 63 3d 74 68 69 73 2e 65 6e 64 4c 6f 63 3d 74 68 69 73 Data Ascii: pos=r,this.lineStart=this.input.lastIndexOf("\n",r-1)+1,this.curLine=this.input.slice(0,this.lineStart).split(v).length):(this.pos=this.lineStart=0,this.curLine=1),this.type=S.eof,this.value=null,this.start=this.end=this.pos,this.startLoc=this.endLoc=this
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 7b 76 61 72 20 72 3d 65 2e 63 6f 6d 70 75 74 65 64 2c 6e 3d 65 2e 6b 65 79 3b 72 65 74 75 72 6e 21 72 26 26 28 22 49 64 65 6e 74 69 66 69 65 72 22 3d 3d 3d 6e 2e 74 79 70 65 26 26 6e 2e 6e 61 6d 65 3d 3d 3d 74 7c 7c 22 4c 69 74 65 72 61 6c 22 3d 3d 3d 6e 2e 74 79 70 65 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 74 29 7d 7a 2e 70 61 72 73 65 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 74 68 69 73 2e 69 6e 69 74 46 75 6e 63 74 69 6f 6e 28 65 29 2c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 39 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 36 26 26 21 6e 29 26 26 28 74 68 69 73 2e 74 79 70 65 3d 3d 3d 53 2e 73 74 61 72 26 26 74 26 4a 26 26 74 68 69 Data Ascii: {var r=e.computed,n=e.key;return!r&&("Identifier"===n.type&&n.name===t\|\|"Literal"===n.type&&n.value===t)}z.parseFunction=function(e,t,r,n,i){this.initFunction(e),(this.options.ecmaVersion>=9\|\|this.options.ecmaVersion>=6&&!n)&&(this.type===S.star&&t&J&&thi
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 53 2e 62 72 61 63 65 52 2e 75 70 64 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 21 3d 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 70 6f 70 28 29 3b 65 3d 3d 3d 6e 65 2e 62 5f 73 74 61 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 68 69 73 2e 63 75 72 43 6f 6e 74 65 78 74 28 29 2e 74 6f 6b 65 6e 26 26 28 65 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 70 6f 70 28 29 29 2c 74 68 69 73 2e 65 78 70 72 41 6c 6c 6f 77 65 64 3d 21 65 2e 69 73 45 78 70 72 7d 65 6c 73 65 20 74 68 69 73 2e 65 78 70 72 41 6c 6c 6f 77 65 64 3d 21 30 7d 2c 53 2e 62 72 61 63 65 4c 2e 75 70 64 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 Data Ascii: S.braceR.updateContext=function(){if(1!==this.context.length){var e=this.context.pop();e===ne.b_stat&&"function"===this.curContext().token&&(e=this.context.pop()),this.exprAllowed=!e.isExpr}else this.exprAllowed=!0},S.braceL.updateContext=function(e){this
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 79 77 6f 72 64 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 39 26 26 74 68 69 73 2e 74 79 70 65 3d 3d 3d 53 2e 73 74 61 72 29 26 26 21 76 2e 74 65 73 74 28 74 68 69 73 2e 69 6e 70 75 74 2e 73 6c 69 63 65 28 74 68 69 73 2e 6c 61 73 74 54 6f 6b 45 6e 64 2c 74 68 69 73 2e 73 74 61 72 74 29 29 7d 2c 61 65 2e 70 61 72 73 65 4f 62 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 74 61 72 74 4e 6f 64 65 28 29 2c 6e 3d 21 30 2c 69 3d 7b 7d 3b 66 6f 72 28 72 2e 70 72 6f 70 65 72 74 69 65 73 3d 5b 5d 2c 74 68 69 73 2e 6e 65 78 74 28 29 3b 21 74 68 69 73 2e 65 61 74 28 53 2e 62 72 61 63 65 52 29 3b 29 7b 69 66 28 6e 29 6e 3d 21 31 3b 65 6c 73 65 20 69 66 28 74 68 69 73 2e 65 78 70 65 63 74 28 Data Ascii: yword\|\|this.options.ecmaVersion>=9&&this.type===S.star)&&!v.test(this.input.slice(this.lastTokEnd,this.start))},ae.parseObj=function(e,t){var r=this.startNode(),n=!0,i={};for(r.properties=[],this.next();!this.eat(S.braceR);){if(n)n=!1;else if(this.expect(
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 32 39 35 7c 7c 69 3e 3d 35 37 33 34 34 7c 7c 65 2b 31 3e 3d 6e 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 61 3d 72 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2b 31 29 3b 72 65 74 75 72 6e 20 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 3f 28 69 3c 3c 31 30 29 2b 61 2d 35 36 36 31 33 38 38 38 3a 69 7d 2c 4d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 73 6f 75 72 63 65 2c 6e 3d 72 2e 6c 65 6e 67 74 68 3b 69 66 28 65 3e 3d 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 69 2c 61 3d 72 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 72 65 74 75 72 6e 21 74 26 26 21 74 68 69 73 2e 73 77 69 74 63 68 55 7c 7c 61 Data Ascii: 295\|\|i>=57344\|\|e+1>=n)return i;var a=r.charCodeAt(e+1);return a>=56320&&a<=57343?(i<<10)+a-56613888:i},Me.prototype.nextIndex=function(e,t){void 0===t&&(t=!1);var r=this.source,n=r.length;if(e>=n)return n;var i,a=r.charCodeAt(e);return!t&&!this.switchU\|\|a
2024-12-18 00:01:54 UTC	16384	IN	Data Raw: 73 2b 31 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 31 32 26 26 36 31 3d 3d 3d 74 68 69 73 2e 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 74 68 69 73 2e 70 6f 73 2b 32 29 3f 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 53 2e 61 73 73 69 67 6e 2c 33 29 3a 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 31 32 34 3d 3d 3d 65 3f 53 2e 6c 6f 67 69 63 61 6c 4f 52 3a 53 2e 6c 6f 67 69 63 61 6c 41 4e 44 2c 32 29 3a 36 31 3d 3d 3d 74 3f 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 53 2e 61 73 73 69 67 6e 2c 32 29 3a 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 31 32 34 3d 3d 3d 65 3f 53 2e 62 69 74 77 69 73 65 4f 52 3a 53 2e 62 69 74 77 69 73 65 41 4e 44 2c 31 29 7d 2c 47 65 2e 72 65 61 64 54 Data Ascii: s+1);return t===e?this.options.ecmaVersion>=12&&61===this.input.charCodeAt(this.pos+2)?this.finishOp(S.assign,3):this.finishOp(124===e?S.logicalOR:S.logicalAND,2):61===t?this.finishOp(S.assign,2):this.finishOp(124===e?S.bitwiseOR:S.bitwiseAND,1)},Ge.readT

Timestamp	Bytes transferred	Direction	Data
2024-12-18 00:01:53 UTC	566	OUT	GET /ajax/libs/jszip/3.10.1/jszip.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobe.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 00:01:53 UTC	957	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 00:01:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"62e9bbf5-6f55" Last-Modified: Wed, 03 Aug 2022 00:06:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1588896 Expires: Mon, 08 Dec 2025 00:01:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HBFn40PJ9SM40o7v3giS0uoWqulxaWyFduufXPpIWELDdcRHteoUY4JsDXr7MmNZTUDJDJQkbbTwNjds1n6X6JjwUF6UlESJhRSJI%2B5OjsY7gFvkJY%2Bh4ooAtdHCr38rWXSnCwEG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f3ae1865d42c328-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 00:01:53 UTC	412	IN	Data Raw: 33 39 37 35 0d 0a 2f 2a 21 0a 0a 4a 53 5a 69 70 20 76 33 2e 31 30 2e 31 20 2d 20 41 20 4a 61 76 61 53 63 72 69 70 74 20 63 6c 61 73 73 20 66 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 61 6e 64 20 72 65 61 64 69 6e 67 20 7a 69 70 20 66 69 6c 65 73 0a 3c 68 74 74 70 3a 2f 2f 73 74 75 61 72 74 6b 2e 63 6f 6d 2f 6a 73 7a 69 70 3e 0a 0a 28 63 29 20 32 30 30 39 2d 32 30 31 36 20 53 74 75 61 72 74 20 4b 6e 69 67 68 74 6c 65 79 20 3c 73 74 75 61 72 74 20 5b 61 74 5d 20 73 74 75 61 72 74 6b 2e 63 6f 6d 3e 0a 44 75 61 6c 20 6c 69 63 65 6e 63 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 6f 72 20 47 50 4c 76 33 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 53 74 75 6b 2f 6a 73 7a 69 70 2f 6d 61 69 Data Ascii: 3975/*!JSZip v3.10.1 - A JavaScript class for generating and reading zip files<http://stuartk.com/jszip>(c) 2009-2016 Stuart Knightley <stuart [at] stuartk.com>Dual licenced under the MIT license or GPLv3. See https://raw.github.com/Stuk/jszip/mai
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3b 65 6c 73 65 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 4a 53 5a 69 70 3d 65 28 29 7d 7d 28 66 75 6e 63 74 69 6f 6e Data Ascii: t"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).JSZip=e()}}(function
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 72 65 70 6c 61 63 65 28 2f 5b 5e 41 2d 5a 61 2d 7a 30 2d 39 2b 2f 3d 5d 2f 67 2c 22 22 29 29 2e 6c 65 6e 67 74 68 2f 34 3b 69 66 28 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 3d 3d 3d 70 2e 63 68 61 72 41 74 28 36 34 29 26 26 66 2d 2d 2c 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 32 29 3d 3d 3d 70 2e 63 68 61 72 41 74 28 36 34 29 26 26 66 2d 2d 2c 66 25 31 21 3d 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 62 61 73 65 36 34 20 69 6e 70 75 74 2c 20 62 61 64 20 63 6f 6e 74 65 6e 74 20 6c 65 6e 67 74 68 2e 22 29 3b 66 6f 72 28 6c 3d 63 2e 75 69 6e 74 38 61 72 72 61 79 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 7c 66 29 3a 6e 65 77 20 41 72 72 61 79 28 30 7c 66 29 3b 6f 3c 65 2e 6c 65 6e Data Ascii: replace(/[^A-Za-z0-9+/=]/g,"")).length/4;if(e.charAt(e.length-1)===p.charAt(64)&&f--,e.charAt(e.length-2)===p.charAt(64)&&f--,f%1!=0)throw new Error("Invalid base64 input, bad content length.");for(l=c.uint8array?new Uint8Array(0\|f):new Array(0\|f);o<e.len
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 72 46 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 70 69 70 65 28 6e 65 77 20 73 29 2e 70 69 70 65 28 6e 65 77 20 61 28 22 75 6e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 22 29 29 2e 70 69 70 65 28 74 2e 63 6f 6d 70 72 65 73 73 57 6f 72 6b 65 72 28 72 29 29 2e 70 69 70 65 28 6e 65 77 20 61 28 22 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 22 29 29 2e 77 69 74 68 53 74 72 65 61 6d 49 6e 66 6f 28 22 63 6f 6d 70 72 65 73 73 69 6f 6e 22 2c 74 29 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 7b 22 2e 2f 65 78 74 65 72 6e 61 6c 22 3a 36 2c 22 2e 2f 73 74 72 65 61 6d 2f 43 72 63 33 32 50 72 6f 62 65 22 3a 32 35 2c 22 2e 2f 73 74 72 65 61 6d 2f 44 61 74 61 4c 65 6e 67 74 68 50 72 6f 62 65 22 3a 32 36 2c 22 2e 2f 73 74 72 65 Data Ascii: rFrom=function(e,t,r){return e.pipe(new s).pipe(new a("uncompressedSize")).pipe(t.compressWorker(r)).pipe(new a("compressedSize")).withStreamInfo("compression",t)},t.exports=o},{"./external":6,"./stream/Crc32Probe":25,"./stream/DataLengthProbe":26,"./stre
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 6f 6d 69 73 65 3a 6e 7d 7d 2c 7b 6c 69 65 3a 33 37 7d 5d 2c 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 31 36 41 72 72 61 79 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 33 32 41 72 72 61 79 2c 69 3d 65 28 22 70 61 6b 6f 22 29 2c 73 3d 65 28 22 2e 2f 75 74 69 6c 73 22 29 2c 61 3d 65 28 22 2e 2f 73 74 72 65 61 6d 2f 47 65 6e 65 72 69 63 57 6f 72 6b 65 72 22 29 2c 6f 3d 6e 3f 22 75 69 6e 74 38 61 72 72 61 79 22 3a 22 61 72 72 61 79 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 61 2e Data Ascii: omise:n}},{lie:37}],7:[function(e,t,r){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Uint32Array,i=e("pako"),s=e("./utils"),a=e("./stream/GenericWorker"),o=n?"uint8array":"array";function h(e,t){a.
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 54 6f 28 22 73 74 72 69 6e 67 22 2c 73 28 64 29 29 2c 6d 3d 49 2e 74 72 61 6e 73 66 6f 72 6d 54 6f 28 22 73 74 72 69 6e 67 22 2c 4f 2e 75 74 66 38 65 6e 63 6f 64 65 28 64 29 29 2c 5f 3d 63 2e 6c 65 6e 67 74 68 21 3d 3d 68 2e 6e 61 6d 65 2e 6c 65 6e 67 74 68 2c 67 3d 6d 2e 6c 65 6e 67 74 68 21 3d 3d 64 2e 6c 65 6e 67 74 68 2c 62 3d 22 22 2c 76 3d 22 22 2c 79 3d 22 22 2c 77 3d 68 2e 64 69 72 2c 6b 3d 68 2e 64 61 74 65 2c 78 3d 7b 63 72 63 33 32 3a 30 2c 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 3a 30 2c 75 6e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 3a 30 7d 3b 74 26 26 21 72 7c 7c 28 78 2e 63 72 63 33 32 3d 65 2e 63 72 63 33 32 2c 78 2e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 3d 65 2e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 2c 78 Data Ascii: ansformTo("string",s(d)),m=I.transformTo("string",O.utf8encode(d)),_=c.length!==h.name.length,g=m.length!==d.length,b="",v="",y="",w=h.dir,k=h.date,x={crc32:0,compressedSize:0,uncompressedSize:0};t&&!r\|\|(x.crc32=e.crc32,x.compressedSize=e.compressedSize,x
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 64 73 3d 5b 5d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6f 75 72 63 65 4f 66 66 73 65 74 3d 30 2c 74 68 69 73 2e 65 6e 74 72 69 65 73 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 46 69 6c 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 6f 75 72 63 65 73 3d 5b 5d 7d 49 2e 69 6e 68 65 72 69 74 73 28 73 2c 69 29 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 74 61 2e 70 65 72 63 65 6e 74 7c 7c 30 2c 72 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 43 6f 75 6e 74 2c 6e 3d 74 68 69 73 2e 5f 73 6f 75 72 63 65 73 2e 6c 65 6e 67 74 68 3b 74 68 69 73 2e 61 63 63 75 6d 75 6c 61 74 65 3f 74 68 69 73 2e 63 6f 6e 74 65 6e 74 42 75 66 66 65 72 2e 70 75 73 68 28 65 29 3a 28 74 68 69 73 2e 62 79 Data Ascii: ds=[],this.currentSourceOffset=0,this.entriesCount=0,this.currentFile=null,this._sources=[]}I.inherits(s,i),s.prototype.push=function(e){var t=e.meta.percent\|\|0,r=this.entriesCount,n=this._sources.length;this.accumulate?this.contentBuffer.push(e):(this.by
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 72 2c 6e 2c 69 29 7b 76 61 72 20 73 3d 49 2e 74 72 61 6e 73 66 6f 72 6d 54 6f 28 22 73 74 72 69 6e 67 22 2c 69 28 6e 29 29 3b 72 65 74 75 72 6e 20 52 2e 43 45 4e 54 52 41 4c 5f 44 49 52 45 43 54 4f 52 59 5f 45 4e 44 2b 22 5c 30 5c 30 5c 30 5c 30 22 2b 41 28 65 2c 32 29 2b 41 28 65 2c 32 29 2b 41 28 74 2c 34 29 2b 41 28 72 2c 34 29 2b 41 28 73 2e 6c 65 6e 67 74 68 2c 32 29 2b 73 7d 28 74 68 69 73 2e 64 69 72 52 65 63 6f 72 64 73 2e 6c 65 6e 67 74 68 2c 72 2c 65 2c 74 68 69 73 2e 7a 69 70 43 6f 6d 6d 65 6e 74 2c 74 68 69 73 2e 65 6e 63 6f 64 65 46 69 6c 65 4e 61 6d 65 29 3b 74 68 69 73 2e 70 75 73 68 28 7b 64 61 74 61 3a 6e 2c 6d 65 74 61 3a 7b 70 65 72 63 65 6e 74 3a 31 30 30 7d 7d 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 70 61 72 65 4e 65 78 Data Ascii: r,n,i){var s=I.transformTo("string",i(n));return R.CENTRAL_DIRECTORY_END+"\0\0\0\0"+A(e,2)+A(e,2)+A(t,4)+A(r,4)+A(s.length,2)+s}(this.dirRecords.length,r,e,this.zipComment,this.encodeFileName);this.push({data:n,meta:{percent:100}})},s.prototype.prepareNex
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 2e 67 65 6e 65 72 61 74 65 57 6f 72 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 28 61 2e 73 74 72 65 61 6d 46 69 6c 65 73 2c 74 2c 61 2e 70 6c 61 74 66 6f 72 6d 2c 61 2e 65 6e 63 6f 64 65 46 69 6c 65 4e 61 6d 65 29 2c 68 3d 30 3b 74 72 79 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 68 2b 2b 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 7c 7c 74 2c 6e 3d 75 5b 72 5d 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 72 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 6d 65 74 68 6f 64 20 21 22 29 3b 72 65 74 75 72 6e 20 6e 7d 28 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 72 65 73 73 Data Ascii: .generateWorker=function(e,a,t){var o=new n(a.streamFiles,t,a.platform,a.encodeFileName),h=0;try{e.forEach(function(e,t){h++;var r=function(e,t){var r=e\|\|t,n=u[r];if(!n)throw new Error(r+" is not a valid compression method !");return n}(t.options.compress
2024-12-18 00:01:53 UTC	1369	IN	Data Raw: 2e 2f 7a 69 70 45 6e 74 72 69 65 73 22 29 2c 61 3d 65 28 22 2e 2f 73 74 72 65 61 6d 2f 43 72 63 33 32 50 72 6f 62 65 22 29 2c 6c 3d 65 28 22 2e 2f 6e 6f 64 65 6a 73 55 74 69 6c 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 69 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 2e 64 65 63 6f 6d 70 72 65 73 73 65 64 2e 67 65 74 43 6f 6e 74 65 6e 74 57 6f 72 6b 65 72 28 29 2e 70 69 70 65 28 6e 65 77 20 61 29 3b 72 2e 6f 6e 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 65 29 7d 29 2e 6f 6e 28 22 65 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 73 74 72 65 61 6d 49 6e 66 6f 2e 63 72 63 33 32 21 3d 3d 6e 2e 64 65 63 6f 6d 70 72 65 73 73 65 64 2e 63 72 63 Data Ascii: ./zipEntries"),a=e("./stream/Crc32Probe"),l=e("./nodejsUtils");function f(n){return new i.Promise(function(e,t){var r=n.decompressed.getContentWorker().pipe(new a);r.on("error",function(e){t(e)}).on("end",function(){r.streamInfo.crc32!==n.decompressed.crc

Timestamp	Bytes transferred	Direction	Data
2024-12-18 00:01:55 UTC	379	OUT	GET /ajax/libs/jszip/3.10.1/jszip.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 00:01:56 UTC	955	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 00:01:56 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"62e9bbf5-6f55" Last-Modified: Wed, 03 Aug 2022 00:06:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1588899 Expires: Mon, 08 Dec 2025 00:01:56 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5uqYlOTmJrQaQ9XVLma4zEROvtkYp47XyUOdKF3N3Mwmf1Viq1Fkts0GBvIpK%2Bc6tsolLMimsK1D1m5zxDxSvL96SA9IwzJ44GCidQkTDFZS4L1a26IM55m113dr1skgzSdbv8ux"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f3ae195a9b643cf-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 00:01:56 UTC	414	IN	Data Raw: 37 62 66 35 0d 0a 2f 2a 21 0a 0a 4a 53 5a 69 70 20 76 33 2e 31 30 2e 31 20 2d 20 41 20 4a 61 76 61 53 63 72 69 70 74 20 63 6c 61 73 73 20 66 6f 72 20 67 65 6e 65 72 61 74 69 6e 67 20 61 6e 64 20 72 65 61 64 69 6e 67 20 7a 69 70 20 66 69 6c 65 73 0a 3c 68 74 74 70 3a 2f 2f 73 74 75 61 72 74 6b 2e 63 6f 6d 2f 6a 73 7a 69 70 3e 0a 0a 28 63 29 20 32 30 30 39 2d 32 30 31 36 20 53 74 75 61 72 74 20 4b 6e 69 67 68 74 6c 65 79 20 3c 73 74 75 61 72 74 20 5b 61 74 5d 20 73 74 75 61 72 74 6b 2e 63 6f 6d 3e 0a 44 75 61 6c 20 6c 69 63 65 6e 63 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 6f 72 20 47 50 4c 76 33 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 53 74 75 6b 2f 6a 73 7a 69 70 2f 6d 61 69 Data Ascii: 7bf5/*!JSZip v3.10.1 - A JavaScript class for generating and reading zip files<http://stuartk.com/jszip>(c) 2009-2016 Stuart Knightley <stuart [at] stuartk.com>Dual licenced under the MIT license or GPLv3. See https://raw.github.com/Stuk/jszip/mai
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3b 65 6c 73 65 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 4a 53 5a 69 70 3d 65 28 29 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).JSZip=e()}}(function()
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 70 6c 61 63 65 28 2f 5b 5e 41 2d 5a 61 2d 7a 30 2d 39 2b 2f 3d 5d 2f 67 2c 22 22 29 29 2e 6c 65 6e 67 74 68 2f 34 3b 69 66 28 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 3d 3d 3d 70 2e 63 68 61 72 41 74 28 36 34 29 26 26 66 2d 2d 2c 65 2e 63 68 61 72 41 74 28 65 2e 6c 65 6e 67 74 68 2d 32 29 3d 3d 3d 70 2e 63 68 61 72 41 74 28 36 34 29 26 26 66 2d 2d 2c 66 25 31 21 3d 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 62 61 73 65 36 34 20 69 6e 70 75 74 2c 20 62 61 64 20 63 6f 6e 74 65 6e 74 20 6c 65 6e 67 74 68 2e 22 29 3b 66 6f 72 28 6c 3d 63 2e 75 69 6e 74 38 61 72 72 61 79 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 7c 66 29 3a 6e 65 77 20 41 72 72 61 79 28 30 7c 66 29 3b 6f 3c 65 2e 6c 65 6e 67 74 Data Ascii: place(/[^A-Za-z0-9+/=]/g,"")).length/4;if(e.charAt(e.length-1)===p.charAt(64)&&f--,e.charAt(e.length-2)===p.charAt(64)&&f--,f%1!=0)throw new Error("Invalid base64 input, bad content length.");for(l=c.uint8array?new Uint8Array(0\|f):new Array(0\|f);o<e.lengt
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 70 69 70 65 28 6e 65 77 20 73 29 2e 70 69 70 65 28 6e 65 77 20 61 28 22 75 6e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 22 29 29 2e 70 69 70 65 28 74 2e 63 6f 6d 70 72 65 73 73 57 6f 72 6b 65 72 28 72 29 29 2e 70 69 70 65 28 6e 65 77 20 61 28 22 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 22 29 29 2e 77 69 74 68 53 74 72 65 61 6d 49 6e 66 6f 28 22 63 6f 6d 70 72 65 73 73 69 6f 6e 22 2c 74 29 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 7b 22 2e 2f 65 78 74 65 72 6e 61 6c 22 3a 36 2c 22 2e 2f 73 74 72 65 61 6d 2f 43 72 63 33 32 50 72 6f 62 65 22 3a 32 35 2c 22 2e 2f 73 74 72 65 61 6d 2f 44 61 74 61 4c 65 6e 67 74 68 50 72 6f 62 65 22 3a 32 36 2c 22 2e 2f 73 74 72 65 61 6d Data Ascii: rom=function(e,t,r){return e.pipe(new s).pipe(new a("uncompressedSize")).pipe(t.compressWorker(r)).pipe(new a("compressedSize")).withStreamInfo("compression",t)},t.exports=o},{"./external":6,"./stream/Crc32Probe":25,"./stream/DataLengthProbe":26,"./stream
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 69 73 65 3a 6e 7d 7d 2c 7b 6c 69 65 3a 33 37 7d 5d 2c 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 31 36 41 72 72 61 79 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 69 6e 74 33 32 41 72 72 61 79 2c 69 3d 65 28 22 70 61 6b 6f 22 29 2c 73 3d 65 28 22 2e 2f 75 74 69 6c 73 22 29 2c 61 3d 65 28 22 2e 2f 73 74 72 65 61 6d 2f 47 65 6e 65 72 69 63 57 6f 72 6b 65 72 22 29 2c 6f 3d 6e 3f 22 75 69 6e 74 38 61 72 72 61 79 22 3a 22 61 72 72 61 79 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 61 2e 63 61 Data Ascii: ise:n}},{lie:37}],7:[function(e,t,r){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Uint32Array,i=e("pako"),s=e("./utils"),a=e("./stream/GenericWorker"),o=n?"uint8array":"array";function h(e,t){a.ca
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 73 66 6f 72 6d 54 6f 28 22 73 74 72 69 6e 67 22 2c 73 28 64 29 29 2c 6d 3d 49 2e 74 72 61 6e 73 66 6f 72 6d 54 6f 28 22 73 74 72 69 6e 67 22 2c 4f 2e 75 74 66 38 65 6e 63 6f 64 65 28 64 29 29 2c 5f 3d 63 2e 6c 65 6e 67 74 68 21 3d 3d 68 2e 6e 61 6d 65 2e 6c 65 6e 67 74 68 2c 67 3d 6d 2e 6c 65 6e 67 74 68 21 3d 3d 64 2e 6c 65 6e 67 74 68 2c 62 3d 22 22 2c 76 3d 22 22 2c 79 3d 22 22 2c 77 3d 68 2e 64 69 72 2c 6b 3d 68 2e 64 61 74 65 2c 78 3d 7b 63 72 63 33 32 3a 30 2c 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 3a 30 2c 75 6e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 3a 30 7d 3b 74 26 26 21 72 7c 7c 28 78 2e 63 72 63 33 32 3d 65 2e 63 72 63 33 32 2c 78 2e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 3d 65 2e 63 6f 6d 70 72 65 73 73 65 64 53 69 7a 65 2c 78 2e 75 Data Ascii: sformTo("string",s(d)),m=I.transformTo("string",O.utf8encode(d)),_=c.length!==h.name.length,g=m.length!==d.length,b="",v="",y="",w=h.dir,k=h.date,x={crc32:0,compressedSize:0,uncompressedSize:0};t&&!r\|\|(x.crc32=e.crc32,x.compressedSize=e.compressedSize,x.u
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 3d 5b 5d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6f 75 72 63 65 4f 66 66 73 65 74 3d 30 2c 74 68 69 73 2e 65 6e 74 72 69 65 73 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 46 69 6c 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 6f 75 72 63 65 73 3d 5b 5d 7d 49 2e 69 6e 68 65 72 69 74 73 28 73 2c 69 29 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 74 61 2e 70 65 72 63 65 6e 74 7c 7c 30 2c 72 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 43 6f 75 6e 74 2c 6e 3d 74 68 69 73 2e 5f 73 6f 75 72 63 65 73 2e 6c 65 6e 67 74 68 3b 74 68 69 73 2e 61 63 63 75 6d 75 6c 61 74 65 3f 74 68 69 73 2e 63 6f 6e 74 65 6e 74 42 75 66 66 65 72 2e 70 75 73 68 28 65 29 3a 28 74 68 69 73 2e 62 79 74 65 Data Ascii: =[],this.currentSourceOffset=0,this.entriesCount=0,this.currentFile=null,this._sources=[]}I.inherits(s,i),s.prototype.push=function(e){var t=e.meta.percent\|\|0,r=this.entriesCount,n=this._sources.length;this.accumulate?this.contentBuffer.push(e):(this.byte
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 6e 2c 69 29 7b 76 61 72 20 73 3d 49 2e 74 72 61 6e 73 66 6f 72 6d 54 6f 28 22 73 74 72 69 6e 67 22 2c 69 28 6e 29 29 3b 72 65 74 75 72 6e 20 52 2e 43 45 4e 54 52 41 4c 5f 44 49 52 45 43 54 4f 52 59 5f 45 4e 44 2b 22 5c 30 5c 30 5c 30 5c 30 22 2b 41 28 65 2c 32 29 2b 41 28 65 2c 32 29 2b 41 28 74 2c 34 29 2b 41 28 72 2c 34 29 2b 41 28 73 2e 6c 65 6e 67 74 68 2c 32 29 2b 73 7d 28 74 68 69 73 2e 64 69 72 52 65 63 6f 72 64 73 2e 6c 65 6e 67 74 68 2c 72 2c 65 2c 74 68 69 73 2e 7a 69 70 43 6f 6d 6d 65 6e 74 2c 74 68 69 73 2e 65 6e 63 6f 64 65 46 69 6c 65 4e 61 6d 65 29 3b 74 68 69 73 2e 70 75 73 68 28 7b 64 61 74 61 3a 6e 2c 6d 65 74 61 3a 7b 70 65 72 63 65 6e 74 3a 31 30 30 7d 7d 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 70 61 72 65 4e 65 78 74 53 Data Ascii: n,i){var s=I.transformTo("string",i(n));return R.CENTRAL_DIRECTORY_END+"\0\0\0\0"+A(e,2)+A(e,2)+A(t,4)+A(r,4)+A(s.length,2)+s}(this.dirRecords.length,r,e,this.zipComment,this.encodeFileName);this.push({data:n,meta:{percent:100}})},s.prototype.prepareNextS
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 65 6e 65 72 61 74 65 57 6f 72 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 74 29 7b 76 61 72 20 6f 3d 6e 65 77 20 6e 28 61 2e 73 74 72 65 61 6d 46 69 6c 65 73 2c 74 2c 61 2e 70 6c 61 74 66 6f 72 6d 2c 61 2e 65 6e 63 6f 64 65 46 69 6c 65 4e 61 6d 65 29 2c 68 3d 30 3b 74 72 79 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 68 2b 2b 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 7c 7c 74 2c 6e 3d 75 5b 72 5d 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 72 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 63 6f 6d 70 72 65 73 73 69 6f 6e 20 6d 65 74 68 6f 64 20 21 22 29 3b 72 65 74 75 72 6e 20 6e 7d 28 74 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 72 65 73 73 69 6f Data Ascii: enerateWorker=function(e,a,t){var o=new n(a.streamFiles,t,a.platform,a.encodeFileName),h=0;try{e.forEach(function(e,t){h++;var r=function(e,t){var r=e\|\|t,n=u[r];if(!n)throw new Error(r+" is not a valid compression method !");return n}(t.options.compressio
2024-12-18 00:01:56 UTC	1369	IN	Data Raw: 7a 69 70 45 6e 74 72 69 65 73 22 29 2c 61 3d 65 28 22 2e 2f 73 74 72 65 61 6d 2f 43 72 63 33 32 50 72 6f 62 65 22 29 2c 6c 3d 65 28 22 2e 2f 6e 6f 64 65 6a 73 55 74 69 6c 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 69 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 2e 64 65 63 6f 6d 70 72 65 73 73 65 64 2e 67 65 74 43 6f 6e 74 65 6e 74 57 6f 72 6b 65 72 28 29 2e 70 69 70 65 28 6e 65 77 20 61 29 3b 72 2e 6f 6e 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 65 29 7d 29 2e 6f 6e 28 22 65 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 73 74 72 65 61 6d 49 6e 66 6f 2e 63 72 63 33 32 21 3d 3d 6e 2e 64 65 63 6f 6d 70 72 65 73 73 65 64 2e 63 72 63 33 32 Data Ascii: zipEntries"),a=e("./stream/Crc32Probe"),l=e("./nodejsUtils");function f(n){return new i.Promise(function(e,t){var r=n.decompressed.getContentWorker().pipe(new a);r.on("error",function(e){t(e)}).on("end",function(){r.streamInfo.crc32!==n.decompressed.crc32

Timestamp	Bytes transferred	Direction	Data
2024-12-18 00:01:57 UTC	387	OUT	GET /npm/javascript-obfuscator/dist/index.browser.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 00:01:58 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1534944 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 4.1.1 X-JSD-Version-Type: version ETag: W/"176be0-ZKd3I1MIpHM7ByqRe4LbBKMiybE" Accept-Ranges: bytes Date: Wed, 18 Dec 2024 00:01:58 GMT Age: 38851 X-Served-By: cache-fra-etou8220144-FRA, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 69 6e 64 65 78 2e 62 72 6f 77 73 65 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 4a 61 76 61 53 63 72 69 70 74 4f 62 66 75 73 63 Data Ascii: /! For license information please see index.browser.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.JavaScriptObfusc
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 79 2c 72 26 4f 3f 52 3a 31 29 29 2c 69 7d 2c 46 6f 72 49 6e 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 6e 65 72 61 74 65 49 74 65 72 61 74 69 6f 6e 46 6f 72 53 74 61 74 65 6d 65 6e 74 28 22 69 6e 22 2c 65 2c 74 26 4f 3f 52 3a 31 29 7d 2c 46 6f 72 4f 66 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 6e 65 72 61 74 65 49 74 65 72 61 74 69 6f 6e 46 6f 72 53 74 61 74 65 6d 65 6e 74 28 22 6f 66 22 2c 65 2c 74 26 4f 3f 52 3a 31 29 7d 2c 4c 61 62 65 6c 65 64 53 74 61 74 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 65 2e 6c 61 62 65 6c 2e 6e 61 6d 65 2b 22 3a 22 2c 74 68 69 73 2e 6d 61 79 62 Data Ascii: y,r&O?R:1)),i},ForInStatement:function(e,t){return this.generateIterationForStatement("in",e,t&O?R:1)},ForOfStatement:function(e,t){return this.generateIterationForStatement("of",e,t&O?R:1)},LabeledStatement:function(e,t){return[e.label.name+":",this.mayb
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 28 65 2e 65 78 74 65 6e 64 65 64 52 61 6e 67 65 5b 31 5d 3d 74 5b 72 5d 2e 72 61 6e 67 65 5b 30 5d 29 2c 28 72 2d 3d 31 29 3e 3d 30 26 26 28 65 2e 65 78 74 65 6e 64 65 64 52 61 6e 67 65 5b 30 5d 3d 74 5b 72 5d 2e 72 61 6e 67 65 5b 31 5d 29 2c 65 7d 72 65 74 75 72 6e 20 72 3d 7b 41 73 73 69 67 6e 6d 65 6e 74 45 78 70 72 65 73 73 69 6f 6e 3a 22 41 73 73 69 67 6e 6d 65 6e 74 45 78 70 72 65 73 73 69 6f 6e 22 2c 41 73 73 69 67 6e 6d 65 6e 74 50 61 74 74 65 72 6e 3a 22 41 73 73 69 67 6e 6d 65 6e 74 50 61 74 74 65 72 6e 22 2c 41 72 72 61 79 45 78 70 72 65 73 73 69 6f 6e 3a 22 41 72 72 61 79 45 78 70 72 65 73 73 69 6f 6e 22 2c 41 72 72 61 79 50 61 74 74 65 72 6e 3a 22 41 72 72 61 79 50 61 74 74 65 72 6e 22 2c 41 72 72 6f 77 46 Data Ascii: ==t.length&&(e.extendedRange[1]=t[r].range[0]),(r-=1)>=0&&(e.extendedRange[0]=t[r].range[1]),e}return r={AssignmentExpression:"AssignmentExpression",AssignmentPattern:"AssignmentPattern",ArrayExpression:"ArrayExpression",ArrayPattern:"ArrayPattern",ArrowF
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 2e 74 79 70 65 7c 7c 74 68 69 73 2e 5f 5f 63 75 72 72 65 6e 74 2e 77 72 61 70 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 72 3b 66 6f 72 28 72 3d 5b 5d 2c 65 3d 31 2c 74 3d 74 68 69 73 2e 5f 5f 6c 65 61 76 65 6c 69 73 74 2e 6c 65 6e 67 74 68 3b 65 3c 74 3b 2b 2b 65 29 72 2e 70 75 73 68 28 74 68 69 73 2e 5f 5f 6c 65 61 76 65 6c 69 73 74 5b 65 5d 2e 6e 6f 64 65 29 3b 72 65 74 75 72 6e 20 72 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 75 72 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 63 75 72 72 65 6e 74 2e 6e 6f 64 65 7d 2c 64 2e 70 72 6f 74 6f 74 79 Data Ascii: tion(){return this.current().type\|\|this.__current.wrap},d.prototype.parents=function(){var e,t,r;for(r=[],e=1,t=this.__leavelist.length;e<t;++e)r.push(this.__leavelist[e].node);return r},d.prototype.current=function(){return this.__current.node},d.prototy
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 70 6f 73 3d 72 2c 74 68 69 73 2e 6c 69 6e 65 53 74 61 72 74 3d 74 68 69 73 2e 69 6e 70 75 74 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 5c 6e 22 2c 72 2d 31 29 2b 31 2c 74 68 69 73 2e 63 75 72 4c 69 6e 65 3d 74 68 69 73 2e 69 6e 70 75 74 2e 73 6c 69 63 65 28 30 2c 74 68 69 73 2e 6c 69 6e 65 53 74 61 72 74 29 2e 73 70 6c 69 74 28 76 29 2e 6c 65 6e 67 74 68 29 3a 28 74 68 69 73 2e 70 6f 73 3d 74 68 69 73 2e 6c 69 6e 65 53 74 61 72 74 3d 30 2c 74 68 69 73 2e 63 75 72 4c 69 6e 65 3d 31 29 2c 74 68 69 73 2e 74 79 70 65 3d 53 2e 65 6f 66 2c 74 68 69 73 2e 76 61 6c 75 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 65 6e 64 3d 74 68 69 73 2e 70 6f 73 2c 74 68 69 73 2e 73 74 61 72 74 4c 6f 63 3d 74 68 69 73 2e 65 6e 64 4c 6f 63 3d 74 68 69 73 Data Ascii: pos=r,this.lineStart=this.input.lastIndexOf("\n",r-1)+1,this.curLine=this.input.slice(0,this.lineStart).split(v).length):(this.pos=this.lineStart=0,this.curLine=1),this.type=S.eof,this.value=null,this.start=this.end=this.pos,this.startLoc=this.endLoc=this
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 7b 76 61 72 20 72 3d 65 2e 63 6f 6d 70 75 74 65 64 2c 6e 3d 65 2e 6b 65 79 3b 72 65 74 75 72 6e 21 72 26 26 28 22 49 64 65 6e 74 69 66 69 65 72 22 3d 3d 3d 6e 2e 74 79 70 65 26 26 6e 2e 6e 61 6d 65 3d 3d 3d 74 7c 7c 22 4c 69 74 65 72 61 6c 22 3d 3d 3d 6e 2e 74 79 70 65 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 74 29 7d 7a 2e 70 61 72 73 65 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 74 68 69 73 2e 69 6e 69 74 46 75 6e 63 74 69 6f 6e 28 65 29 2c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 39 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 36 26 26 21 6e 29 26 26 28 74 68 69 73 2e 74 79 70 65 3d 3d 3d 53 2e 73 74 61 72 26 26 74 26 4a 26 26 74 68 69 Data Ascii: {var r=e.computed,n=e.key;return!r&&("Identifier"===n.type&&n.name===t\|\|"Literal"===n.type&&n.value===t)}z.parseFunction=function(e,t,r,n,i){this.initFunction(e),(this.options.ecmaVersion>=9\|\|this.options.ecmaVersion>=6&&!n)&&(this.type===S.star&&t&J&&thi
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 53 2e 62 72 61 63 65 52 2e 75 70 64 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 21 3d 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 70 6f 70 28 29 3b 65 3d 3d 3d 6e 65 2e 62 5f 73 74 61 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 68 69 73 2e 63 75 72 43 6f 6e 74 65 78 74 28 29 2e 74 6f 6b 65 6e 26 26 28 65 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 70 6f 70 28 29 29 2c 74 68 69 73 2e 65 78 70 72 41 6c 6c 6f 77 65 64 3d 21 65 2e 69 73 45 78 70 72 7d 65 6c 73 65 20 74 68 69 73 2e 65 78 70 72 41 6c 6c 6f 77 65 64 3d 21 30 7d 2c 53 2e 62 72 61 63 65 4c 2e 75 70 64 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 Data Ascii: S.braceR.updateContext=function(){if(1!==this.context.length){var e=this.context.pop();e===ne.b_stat&&"function"===this.curContext().token&&(e=this.context.pop()),this.exprAllowed=!e.isExpr}else this.exprAllowed=!0},S.braceL.updateContext=function(e){this
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 79 77 6f 72 64 7c 7c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 39 26 26 74 68 69 73 2e 74 79 70 65 3d 3d 3d 53 2e 73 74 61 72 29 26 26 21 76 2e 74 65 73 74 28 74 68 69 73 2e 69 6e 70 75 74 2e 73 6c 69 63 65 28 74 68 69 73 2e 6c 61 73 74 54 6f 6b 45 6e 64 2c 74 68 69 73 2e 73 74 61 72 74 29 29 7d 2c 61 65 2e 70 61 72 73 65 4f 62 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 74 61 72 74 4e 6f 64 65 28 29 2c 6e 3d 21 30 2c 69 3d 7b 7d 3b 66 6f 72 28 72 2e 70 72 6f 70 65 72 74 69 65 73 3d 5b 5d 2c 74 68 69 73 2e 6e 65 78 74 28 29 3b 21 74 68 69 73 2e 65 61 74 28 53 2e 62 72 61 63 65 52 29 3b 29 7b 69 66 28 6e 29 6e 3d 21 31 3b 65 6c 73 65 20 69 66 28 74 68 69 73 2e 65 78 70 65 63 74 28 Data Ascii: yword\|\|this.options.ecmaVersion>=9&&this.type===S.star)&&!v.test(this.input.slice(this.lastTokEnd,this.start))},ae.parseObj=function(e,t){var r=this.startNode(),n=!0,i={};for(r.properties=[],this.next();!this.eat(S.braceR);){if(n)n=!1;else if(this.expect(
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 32 39 35 7c 7c 69 3e 3d 35 37 33 34 34 7c 7c 65 2b 31 3e 3d 6e 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 61 3d 72 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2b 31 29 3b 72 65 74 75 72 6e 20 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 3f 28 69 3c 3c 31 30 29 2b 61 2d 35 36 36 31 33 38 38 38 3a 69 7d 2c 4d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 73 6f 75 72 63 65 2c 6e 3d 72 2e 6c 65 6e 67 74 68 3b 69 66 28 65 3e 3d 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 69 2c 61 3d 72 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 72 65 74 75 72 6e 21 74 26 26 21 74 68 69 73 2e 73 77 69 74 63 68 55 7c 7c 61 Data Ascii: 295\|\|i>=57344\|\|e+1>=n)return i;var a=r.charCodeAt(e+1);return a>=56320&&a<=57343?(i<<10)+a-56613888:i},Me.prototype.nextIndex=function(e,t){void 0===t&&(t=!1);var r=this.source,n=r.length;if(e>=n)return n;var i,a=r.charCodeAt(e);return!t&&!this.switchU\|\|a
2024-12-18 00:01:58 UTC	16384	IN	Data Raw: 73 2b 31 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 63 6d 61 56 65 72 73 69 6f 6e 3e 3d 31 32 26 26 36 31 3d 3d 3d 74 68 69 73 2e 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 74 68 69 73 2e 70 6f 73 2b 32 29 3f 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 53 2e 61 73 73 69 67 6e 2c 33 29 3a 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 31 32 34 3d 3d 3d 65 3f 53 2e 6c 6f 67 69 63 61 6c 4f 52 3a 53 2e 6c 6f 67 69 63 61 6c 41 4e 44 2c 32 29 3a 36 31 3d 3d 3d 74 3f 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 53 2e 61 73 73 69 67 6e 2c 32 29 3a 74 68 69 73 2e 66 69 6e 69 73 68 4f 70 28 31 32 34 3d 3d 3d 65 3f 53 2e 62 69 74 77 69 73 65 4f 52 3a 53 2e 62 69 74 77 69 73 65 41 4e 44 2c 31 29 7d 2c 47 65 2e 72 65 61 64 54 Data Ascii: s+1);return t===e?this.options.ecmaVersion>=12&&61===this.input.charCodeAt(this.pos+2)?this.finishOp(S.assign,3):this.finishOp(124===e?S.logicalOR:S.logicalAND,2):61===t?this.finishOp(S.assign,2):this.finishOp(124===e?S.bitwiseOR:S.bitwiseAND,1)},Ge.readT