IOC Report
https://ca.docusign.net/Signing/EmailStart.aspx?a=1cdabf46-ff5a-4450-ae28-4b5293077687&etti=24&acct=938a1226-4cc2-4b96-95f9-d33be464ae6b&er=5b95ae4e-7414-40c0-b9fc-e2de228fcc1b

Files

File Path	Type	Category	Malicious	Download
Chrome Cache Entry: 132	ASCII text, with very long lines (65446)	dropped
Details File: Chrome Cache Entry: 132 Category: dropped Dump: chromecache_132.1.dr ID: dr_2 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65446) Entropy: 4.900727228872249 Encrypted: false Size: 240425 Whitelisted: false
Chrome Cache Entry: 133	ASCII text, with very long lines (16730)	downloaded
Details File: Chrome Cache Entry: 133 Category: downloaded Dump: chromecache_133.1.dr ID: dr_3 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (16730) Entropy: 5.306771125576961 Encrypted: false Size: 16901 Whitelisted: false
Chrome Cache Entry: 134	Unicode text, UTF-8 text, with very long lines (62585), with LF, NEL line terminators	dropped
Details File: Chrome Cache Entry: 134 Category: dropped Dump: chromecache_134.1.dr ID: dr_4 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (62585), with LF, NEL line terminators Entropy: 5.376999342958499 Encrypted: false Size: 262762 Whitelisted: false
Chrome Cache Entry: 135	ASCII text, with very long lines (65536), with no line terminators	downloaded
Details File: Chrome Cache Entry: 135 Category: downloaded Dump: chromecache_135.1.dr ID: dr_5 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65536), with no line terminators Entropy: 5.092451370734677 Encrypted: false Size: 240748 Whitelisted: false
Chrome Cache Entry: 138	ASCII text, with very long lines (65440)	dropped
Details File: Chrome Cache Entry: 138 Category: dropped Dump: chromecache_138.1.dr ID: dr_6 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65440) Entropy: 5.331139727346418 Encrypted: false Size: 896397 Whitelisted: false
Chrome Cache Entry: 140	ASCII text	dropped
Details File: Chrome Cache Entry: 140 Category: dropped Dump: chromecache_140.1.dr ID: dr_7 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text Entropy: 4.18401975910281 Encrypted: false Size: 119869 Whitelisted: false
Chrome Cache Entry: 143	ASCII text, with no line terminators	downloaded
Details File: Chrome Cache Entry: 143 Category: downloaded Dump: chromecache_143.1.dr ID: dr_8 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with no line terminators Entropy: 3.75 Encrypted: false Size: 16 Whitelisted: false
Chrome Cache Entry: 145	Unicode text, UTF-8 text, with very long lines (16131)	downloaded
Details File: Chrome Cache Entry: 145 Category: downloaded Dump: chromecache_145.1.dr ID: dr_9 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (16131) Entropy: 5.440394317836884 Encrypted: false Size: 16304 Whitelisted: false
Chrome Cache Entry: 146	ASCII text, with no line terminators	downloaded
Details File: Chrome Cache Entry: 146 Category: downloaded Dump: chromecache_146.1.dr ID: dr_10 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with no line terminators Entropy: 4.327567157116928 Encrypted: false Size: 40 Whitelisted: false
Chrome Cache Entry: 147	ASCII text, with very long lines (65438)	downloaded
Details File: Chrome Cache Entry: 147 Category: downloaded Dump: chromecache_147.1.dr ID: dr_11 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65438) Entropy: 5.532306833998972 Encrypted: false Size: 107155 Whitelisted: false
Chrome Cache Entry: 148	ASCII text, with very long lines (65443)	dropped
Details File: Chrome Cache Entry: 148 Category: dropped Dump: chromecache_148.1.dr ID: dr_12 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65443) Entropy: 5.389525544005444 Encrypted: false Size: 262914 Whitelisted: false
Chrome Cache Entry: 151	Unicode text, UTF-8 text, with very long lines (65442)	dropped
Details File: Chrome Cache Entry: 151 Category: dropped Dump: chromecache_151.1.dr ID: dr_13 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (65442) Entropy: 5.71547634770312 Encrypted: false Size: 482829 Whitelisted: false
Chrome Cache Entry: 155	HTML document, ASCII text, with very long lines (65448)	downloaded
Details File: Chrome Cache Entry: 155 Category: downloaded Dump: chromecache_155.1.dr ID: dr_14 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: HTML document, ASCII text, with very long lines (65448) Entropy: 5.379394559816006 Encrypted: false Size: 86929 Whitelisted: false
Chrome Cache Entry: 157	Unicode text, UTF-8 text, with very long lines (63904), with LF, NEL line terminators	dropped
Details File: Chrome Cache Entry: 157 Category: dropped Dump: chromecache_157.1.dr ID: dr_15 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (63904), with LF, NEL line terminators Entropy: 5.382437057341234 Encrypted: false Size: 131847 Whitelisted: false
Chrome Cache Entry: 158	Unicode text, UTF-8 text, with very long lines (48118)	dropped
Details File: Chrome Cache Entry: 158 Category: dropped Dump: chromecache_158.1.dr ID: dr_16 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (48118) Entropy: 5.498686458928295 Encrypted: false Size: 48291 Whitelisted: false
Chrome Cache Entry: 159	Unicode text, UTF-8 text, with very long lines (65448)	dropped
Details File: Chrome Cache Entry: 159 Category: dropped Dump: chromecache_159.1.dr ID: dr_17 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (65448) Entropy: 5.551869891682633 Encrypted: false Size: 1075806 Whitelisted: false
Chrome Cache Entry: 160	ASCII text, with very long lines (7936)	dropped
Details File: Chrome Cache Entry: 160 Category: dropped Dump: chromecache_160.1.dr ID: dr_18 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (7936) Entropy: 5.138313538663401 Encrypted: false Size: 8107 Whitelisted: false
Chrome Cache Entry: 161	ASCII text, with very long lines (21531)	downloaded
Details File: Chrome Cache Entry: 161 Category: downloaded Dump: chromecache_161.1.dr ID: dr_19 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (21531) Entropy: 5.480800140862226 Encrypted: false Size: 21720 Whitelisted: false
Chrome Cache Entry: 163	HTML document, ASCII text, with very long lines (332), with CRLF line terminators	downloaded
Details File: Chrome Cache Entry: 163 Category: downloaded Dump: chromecache_163.1.dr ID: dr_20 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: HTML document, ASCII text, with very long lines (332), with CRLF line terminators Entropy: 4.844496412048544 Encrypted: false Size: 5385 Whitelisted: false
Chrome Cache Entry: 165	Web Open Font Format, TrueType, length 47748, version 1.0	downloaded
Details File: Chrome Cache Entry: 165 Category: downloaded Dump: chromecache_165.1.dr ID: dr_21 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Web Open Font Format, TrueType, length 47748, version 1.0 Entropy: 7.989435227374723 Encrypted: false Size: 47748 Whitelisted: false
Chrome Cache Entry: 166	ASCII text, with very long lines (10743)	dropped
Details File: Chrome Cache Entry: 166 Category: dropped Dump: chromecache_166.1.dr ID: dr_22 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (10743) Entropy: 5.445291257740891 Encrypted: false Size: 10914 Whitelisted: false
Chrome Cache Entry: 167	Web Open Font Format, TrueType, length 13780, version 1.0	downloaded
Details File: Chrome Cache Entry: 167 Category: downloaded Dump: chromecache_167.1.dr ID: dr_23 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Web Open Font Format, TrueType, length 13780, version 1.0 Entropy: 7.973002703865565 Encrypted: false Size: 13780 Whitelisted: false
Chrome Cache Entry: 168	ASCII text, with very long lines (65448)	dropped
Details File: Chrome Cache Entry: 168 Category: dropped Dump: chromecache_168.1.dr ID: dr_24 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65448) Entropy: 5.509832558907373 Encrypted: false Size: 536342 Whitelisted: false
Chrome Cache Entry: 169	ASCII text, with very long lines (10456)	dropped
Details File: Chrome Cache Entry: 169 Category: dropped Dump: chromecache_169.1.dr ID: dr_25 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (10456) Entropy: 5.29721452473812 Encrypted: false Size: 10627 Whitelisted: false
Chrome Cache Entry: 170	Unicode text, UTF-8 text, with very long lines (65456)	dropped
Details File: Chrome Cache Entry: 170 Category: dropped Dump: chromecache_170.1.dr ID: dr_26 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (65456) Entropy: 5.340676419568639 Encrypted: false Size: 921134 Whitelisted: false
Chrome Cache Entry: 173	ASCII text, with very long lines (16402)	dropped
Details File: Chrome Cache Entry: 173 Category: dropped Dump: chromecache_173.1.dr ID: dr_27 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (16402) Entropy: 5.49235449290822 Encrypted: false Size: 16571 Whitelisted: false
Chrome Cache Entry: 174	PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced	downloaded
Details File: Chrome Cache Entry: 174 Category: downloaded Dump: chromecache_174.1.dr ID: dr_28 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced Entropy: 7.660950602080433 Encrypted: false Size: 2879 Whitelisted: false
Chrome Cache Entry: 176	ASCII text, with very long lines (65443)	downloaded
Details File: Chrome Cache Entry: 176 Category: downloaded Dump: chromecache_176.1.dr ID: dr_29 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65443) Entropy: 5.247053548385026 Encrypted: false Size: 156020 Whitelisted: false
Chrome Cache Entry: 177	very short file (no magic)	downloaded
Details File: Chrome Cache Entry: 177 Category: downloaded Dump: chromecache_177.1.dr ID: dr_30 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: very short file (no magic) Entropy: 0.0 Encrypted: false Size: 1 Whitelisted: false
Chrome Cache Entry: 178	Web Open Font Format, CFF, length 33752, version 0.0	downloaded
Details File: Chrome Cache Entry: 178 Category: downloaded Dump: chromecache_178.1.dr ID: dr_31 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Web Open Font Format, CFF, length 33752, version 0.0 Entropy: 7.984139047245452 Encrypted: false Size: 33752 Whitelisted: false
Chrome Cache Entry: 180	SVG Scalable Vector Graphics image	dropped
Details File: Chrome Cache Entry: 180 Category: dropped Dump: chromecache_180.1.dr ID: dr_32 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: SVG Scalable Vector Graphics image Entropy: 4.936853809456331 Encrypted: false Size: 257 Whitelisted: false
Chrome Cache Entry: 181	ASCII text, with very long lines (9326)	downloaded
Details File: Chrome Cache Entry: 181 Category: downloaded Dump: chromecache_181.1.dr ID: dr_33 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (9326) Entropy: 5.247323835650863 Encrypted: false Size: 9497 Whitelisted: false
Chrome Cache Entry: 182	ASCII text, with very long lines (65448)	downloaded
Details File: Chrome Cache Entry: 182 Category: downloaded Dump: chromecache_182.1.dr ID: dr_34 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65448) Entropy: 5.267608913485359 Encrypted: false Size: 84410 Whitelisted: false
Chrome Cache Entry: 183	ASCII text, with no line terminators	downloaded
Details File: Chrome Cache Entry: 183 Category: downloaded Dump: chromecache_183.1.dr ID: dr_35 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with no line terminators Entropy: 3.921928094887362 Encrypted: false Size: 20 Whitelisted: false
Chrome Cache Entry: 184	ASCII text, with very long lines (65448)	dropped
Details File: Chrome Cache Entry: 184 Category: dropped Dump: chromecache_184.1.dr ID: dr_36 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65448) Entropy: 5.4432648811075355 Encrypted: false Size: 95990 Whitelisted: false
Chrome Cache Entry: 185	ASCII text, with very long lines (24945)	dropped
Details File: Chrome Cache Entry: 185 Category: dropped Dump: chromecache_185.1.dr ID: dr_37 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (24945) Entropy: 5.405009760198076 Encrypted: false Size: 25116 Whitelisted: false
Chrome Cache Entry: 186	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced	dropped
Details File: Chrome Cache Entry: 186 Category: dropped Dump: chromecache_186.1.dr ID: dr_38 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Entropy: 7.667690083187348 Encrypted: false Size: 996 Whitelisted: false
Chrome Cache Entry: 190	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	dropped
Details File: Chrome Cache Entry: 190 Category: dropped Dump: chromecache_190.1.dr ID: dr_39 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Entropy: 6.860674885804344 Encrypted: false Size: 326 Whitelisted: false
Chrome Cache Entry: 191	GIF image data, version 89a, 44 x 44	dropped
Details File: Chrome Cache Entry: 191 Category: dropped Dump: chromecache_191.1.dr ID: dr_40 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: GIF image data, version 89a, 44 x 44 Entropy: 7.319238994753888 Encrypted: false Size: 3745 Whitelisted: false
Chrome Cache Entry: 194	Unicode text, UTF-8 text, with very long lines (31005)	dropped
Details File: Chrome Cache Entry: 194 Category: dropped Dump: chromecache_194.1.dr ID: dr_41 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (31005) Entropy: 5.242409516669761 Encrypted: false Size: 31180 Whitelisted: false
Chrome Cache Entry: 196	Unicode text, UTF-8 text, with very long lines (62224)	downloaded
Details File: Chrome Cache Entry: 196 Category: downloaded Dump: chromecache_196.1.dr ID: dr_42 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (62224) Entropy: 5.679649441702976 Encrypted: false Size: 223437 Whitelisted: false
Chrome Cache Entry: 202	ASCII text, with very long lines (58219)	downloaded
Details File: Chrome Cache Entry: 202 Category: downloaded Dump: chromecache_202.1.dr ID: dr_43 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (58219) Entropy: 5.299623325732865 Encrypted: false Size: 58390 Whitelisted: false
Chrome Cache Entry: 207	ASCII text, with very long lines (631), with no line terminators	dropped
Details File: Chrome Cache Entry: 207 Category: dropped Dump: chromecache_207.1.dr ID: dr_44 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (631), with no line terminators Entropy: 5.128339437058419 Encrypted: false Size: 631 Whitelisted: false
Chrome Cache Entry: 209	ASCII text, with very long lines (8950)	dropped
Details File: Chrome Cache Entry: 209 Category: dropped Dump: chromecache_209.1.dr ID: dr_45 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (8950) Entropy: 5.238966386478742 Encrypted: false Size: 9145 Whitelisted: false
Chrome Cache Entry: 212	ASCII text, with very long lines (65448)	downloaded
Details File: Chrome Cache Entry: 212 Category: downloaded Dump: chromecache_212.1.dr ID: dr_46 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (65448) Entropy: 5.157822763671653 Encrypted: false Size: 91963 Whitelisted: false
Chrome Cache Entry: 214	ASCII text, with no line terminators	dropped
Details File: Chrome Cache Entry: 214 Category: dropped Dump: chromecache_214.1.dr ID: dr_47 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with no line terminators Entropy: 2.9140163035068447 Encrypted: false Size: 23 Whitelisted: false
Chrome Cache Entry: 216	Unicode text, UTF-8 text, with very long lines (65447)	dropped
Details File: Chrome Cache Entry: 216 Category: dropped Dump: chromecache_216.1.dr ID: dr_48 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (65447) Entropy: 5.436259503914193 Encrypted: false Size: 247686 Whitelisted: false
Chrome Cache Entry: 217	ASCII text, with very long lines (11685)	dropped
Details File: Chrome Cache Entry: 217 Category: dropped Dump: chromecache_217.1.dr ID: dr_49 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (11685) Entropy: 5.265914800594064 Encrypted: false Size: 11854 Whitelisted: false
Chrome Cache Entry: 219	SVG Scalable Vector Graphics image	downloaded
Details File: Chrome Cache Entry: 219 Category: downloaded Dump: chromecache_219.1.dr ID: dr_50 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: SVG Scalable Vector Graphics image Entropy: 4.845018163410625 Encrypted: false Size: 150 Whitelisted: false
Chrome Cache Entry: 223	Web Open Font Format, TrueType, length 37560, version 1.0	downloaded
Details File: Chrome Cache Entry: 223 Category: downloaded Dump: chromecache_223.1.dr ID: dr_51 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Web Open Font Format, TrueType, length 37560, version 1.0 Entropy: 7.986336222628645 Encrypted: false Size: 37560 Whitelisted: false
Chrome Cache Entry: 224	HTML document, ASCII text, with very long lines (420), with no line terminators	downloaded
Details File: Chrome Cache Entry: 224 Category: downloaded Dump: chromecache_224.1.dr ID: dr_52 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: HTML document, ASCII text, with very long lines (420), with no line terminators Entropy: 4.741436263470251 Encrypted: false Size: 420 Whitelisted: false
Chrome Cache Entry: 226	ASCII text, with very long lines (11764)	downloaded
Details File: Chrome Cache Entry: 226 Category: downloaded Dump: chromecache_226.1.dr ID: dr_53 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (11764) Entropy: 5.260324965681804 Encrypted: false Size: 11977 Whitelisted: false
Chrome Cache Entry: 227	ASCII text, with very long lines (35598)	dropped
Details File: Chrome Cache Entry: 227 Category: dropped Dump: chromecache_227.1.dr ID: dr_54 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text, with very long lines (35598) Entropy: 5.34071947051645 Encrypted: false Size: 35769 Whitelisted: false
Chrome Cache Entry: 228	ASCII text	dropped
Details File: Chrome Cache Entry: 228 Category: dropped Dump: chromecache_228.1.dr ID: dr_55 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: ASCII text Entropy: 4.8436943585630665 Encrypted: false Size: 169 Whitelisted: false
Chrome Cache Entry: 229	GIF image data, version 89a, 145 x 60	downloaded
Details File: Chrome Cache Entry: 229 Category: downloaded Dump: chromecache_229.1.dr ID: dr_56 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: GIF image data, version 89a, 145 x 60 Entropy: 7.404941626697962 Encrypted: false Size: 5469 Whitelisted: false
Chrome Cache Entry: 233	Unicode text, UTF-8 text, with very long lines (65169)	dropped
Details File: Chrome Cache Entry: 233 Category: dropped Dump: chromecache_233.1.dr ID: dr_0 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Unicode text, UTF-8 text, with very long lines (65169) Entropy: 5.408535421664194 Encrypted: false Size: 534064 Whitelisted: false
Chrome Cache Entry: 234	SVG Scalable Vector Graphics image	downloaded
Details File: Chrome Cache Entry: 234 Category: downloaded Dump: chromecache_234.1.dr ID: dr_1 Target ID: 1 Process: C:\Program Files\Google\Chrome\Application\chrome.exe Type: SVG Scalable Vector Graphics image Entropy: 4.718277261919778 Encrypted: false Size: 3728 Whitelisted: false

There are 48 hidden files, click here to show them.

URLs

Name	IP	Malicious
https://ca.docusign.net/Signing/EmailStart.aspx?a=1cdabf46-ff5a-4450-ae28-4b5293077687&etti=24&acct=938a1226-4cc2-4b96-95f9-d33be464ae6b&er=5b95ae4e-7414-40c0-b9fc-e2de228fcc1b
Details Filetype: URL Filename: https://ca.docusign.net/Signing/EmailStart.aspx?a=1cdabf46-ff5a-4450-ae28-4b5293077687&etti=24&acct=938a1226-4cc2-4b96-95f9-d33be464ae6b&er=5b95ae4e-7414-40c0-b9fc-e2de228fcc1b Signature Hits Behavior Group Mitre Attack AI detected landing page (webpage, office document or email) Persistence and Installation Behavior Browser Extensions Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code) Phishing Scripting Deobfuscate/Decode Files or Information Detected non-DNS traffic on DNS port Networking Stores files to the Windows start menu directory Boot Survival Registry Run Keys / Startup Folder Classification label System Summary Connects to IPs without corresponding DNS lookups Networking Creates files inside the user directory System Summary Masquerading HTML page is missing a favicon Phishing Performs DNS lookups Networking Non-Application Layer Protocol Spawns processes System Summary Process Injection Uses HTTPS Networking Encrypted Channel Application Layer Protocol Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis Uses secure TLS version for HTTPS connections Compliance, Networking Found graphical window changes (likely an installer) System Summary
https://ca.docusign.net/Signing/?ti=1c89f53b54dd4e79bb69deb1114abc6b
Details Name: https://ca.docusign.net/Signing/?ti=1c89f53b54dd4e79bb69deb1114abc6b TargetID: 0 From Memory: false Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Source: browser Signature Hits Behavior Group Mitre Attack AI detected landing page (webpage, office document or email) Persistence and Installation Behavior Browser Extensions HTML page is missing a favicon Phishing
https://cmedthai.com/n/?c3Y9bzM2NV8xX3NwJnJhbmQ9ZW5kbFVsRT0mdWlkPVVTRVIyNjA3MjAyNFVOSVFVRTAzNDQwNzI2NTIyMDI0MjAyNDA3MjY0NDAzNTI=N0123N
Details Name: https://cmedthai.com/n/?c3Y9bzM2NV8xX3NwJnJhbmQ9ZW5kbFVsRT0mdWlkPVVTRVIyNjA3MjAyNFVOSVFVRTAzNDQwNzI2NTIyMDI0MjAyNDA3MjY0NDAzNTI=N0123N TargetID: 0 From Memory: false Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Source: browser

Domains

Name	IP	Malicious
cmedthai.com	203.78.107.122
Details Name: cmedthai.com IP: 203.78.107.122 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Active: true Signature Hits Behavior Group Mitre Attack Performs DNS lookups Networking Application Layer Protocol Non-Application Layer Protocol
www.google.com	142.250.186.164
Details Name: www.google.com IP: 142.250.186.164 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Active: true Signature Hits Behavior Group Mitre Attack Performs DNS lookups Networking Application Layer Protocol Non-Application Layer Protocol
api.mixpanel.com	35.190.25.25
Details Name: api.mixpanel.com IP: 35.190.25.25 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Active: true Signature Hits Behavior Group Mitre Attack Performs DNS lookups Networking Application Layer Protocol Non-Application Layer Protocol
arya-1323461286.us-west-2.elb.amazonaws.com	52.32.246.233
Details Name: arya-1323461286.us-west-2.elb.amazonaws.com IP: 52.32.246.233 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Active: true
a.docusign.com	unknown
Details Name: a.docusign.com TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Signature Hits Behavior Group Mitre Attack Performs DNS lookups Networking Application Layer Protocol Non-Application Layer Protocol
docucdn-a.akamaihd.net	unknown
Details Name: docucdn-a.akamaihd.net TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Signature Hits Behavior Group Mitre Attack Performs DNS lookups Networking Application Layer Protocol Non-Application Layer Protocol
ca.docusign.net	unknown
Details Name: ca.docusign.net TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Signature Hits Behavior Group Mitre Attack Performs DNS lookups Networking Application Layer Protocol Non-Application Layer Protocol Spawns processes System Summary Process Injection

IPs

IP	Domain	Country	Malicious
142.250.186.35	unknown	United States
Details IP: 142.250.186.35 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false
1.1.1.1	unknown	Australia
Details IP: 1.1.1.1 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: Australia Countrycode: AUS ASN number: 13335 ASN name: CLOUDFLARENETUS Private: false Signature Hits Behavior Group Mitre Attack Connects to IPs without corresponding DNS lookups Networking
216.58.206.78	unknown	United States
Details IP: 216.58.206.78 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false
192.168.2.16	unknown	unknown
Details IP: 192.168.2.16 TargetID: 0 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Private: true Signature Hits Behavior Group Mitre Attack Detected non-DNS traffic on DNS port Networking Uses secure TLS version for HTTPS connections Compliance, Networking
2.19.126.227	unknown	European Union
Details IP: 2.19.126.227 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: European Union Countrycode: EU ASN number: 16625 ASN name: AKAMAI-ASUS Private: false
203.78.107.122	cmedthai.com	Thailand
Details IP: 203.78.107.122 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: Thailand Countrycode: THA ASN number: 18362 ASN name: NETWAY-AS-APNetwayCommunicationCoLtdTH Private: false Domain: cmedthai.com
64.233.166.84	unknown	United States
Details IP: 64.233.166.84 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false
35.190.25.25	api.mixpanel.com	United States
Details IP: 35.190.25.25 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false Domain: api.mixpanel.com
239.255.255.250	unknown	Reserved
Details IP: 239.255.255.250 TargetID: 0 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: Reserved Countrycode: ZZZ Private: false
142.250.185.163	unknown	United States
Details IP: 142.250.185.163 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false
52.32.246.233	arya-1323461286.us-west-2.elb.amazonaws.com	United States
Details IP: 52.32.246.233 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 16509 ASN name: AMAZON-02US Private: false Domain: arya-1323461286.us-west-2.elb.amazonaws.com
142.250.186.164	www.google.com	United States
Details IP: 142.250.186.164 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false Domain: www.google.com
52.235.59.100	unknown	United States
Details IP: 52.235.59.100 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 8075 ASN name: MICROSOFT-CORP-MSN-AS-BLOCKUS Private: false
142.250.186.42	unknown	United States
Details IP: 142.250.186.42 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false
172.217.16.142	unknown	United States
Details IP: 172.217.16.142 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 15169 ASN name: GOOGLEUS Private: false
52.235.63.109	unknown	United States
Details IP: 52.235.63.109 TargetID: 1 Current Path: C:\Program Files\Google\Chrome\Application\chrome.exe Country: United States Countrycode: USA ASN number: 8075 ASN name: MICROSOFT-CORP-MSN-AS-BLOCKUS Private: false

There are 6 hidden IPs, click here to show them.