IOC Report
https://na4.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAXOLPIJBfBmvGxlXwPlfq9c6X3NsD1pg6O8JYZY2E-Ga3AuSQNGZ-g8N0TvBmaUFABJvylLGhsJ9uMpqr2DHsr9g8lX7QuPwmuLcGhhclzXMQHuhGjFAB_Dnt33FKgDL2&

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
Unicode text, UTF-8 text, with very long lines (2258)
dropped
Chrome Cache Entry: 101
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 102
Web Open Font Format (Version 2), CFF, length 29980, version 1.0
downloaded
Chrome Cache Entry: 103
JSON data
dropped
Chrome Cache Entry: 104
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 105
JSON data
downloaded
Chrome Cache Entry: 106
Web Open Font Format (Version 2), CFF, length 41556, version 1.0
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (2947)
dropped
Chrome Cache Entry: 108
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 109
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 110
JSON data
dropped
Chrome Cache Entry: 111
ASCII text, with very long lines (2947)
downloaded
Chrome Cache Entry: 112
JSON data
downloaded
Chrome Cache Entry: 113
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 114
Web Open Font Format (Version 2), CFF, length 78776, version 1.0
downloaded
Chrome Cache Entry: 115
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 116
ASCII text, with very long lines (65519)
dropped
Chrome Cache Entry: 117
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1306, components 3
dropped
Chrome Cache Entry: 118
JSON data
dropped
Chrome Cache Entry: 119
JSON data
dropped
Chrome Cache Entry: 120
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 121
Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
downloaded
Chrome Cache Entry: 122
Web Open Font Format (Version 2), CFF, length 75984, version 1.0
downloaded
Chrome Cache Entry: 123
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1306, components 3
downloaded
Chrome Cache Entry: 124
ASCII text, with very long lines (13689), with no line terminators
downloaded
Chrome Cache Entry: 125
PNG image data, 176 x 168, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 126
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 127
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 128
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 129
ASCII text, with very long lines (45810)
dropped
Chrome Cache Entry: 130
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 131
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 132
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 133
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 134
PNG image data, 176 x 168, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 135
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 136
ASCII text, with very long lines (65519)
downloaded
Chrome Cache Entry: 137
JSON data
downloaded
Chrome Cache Entry: 138
JSON data
downloaded
Chrome Cache Entry: 139
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 140
ASCII text, with very long lines (45810)
downloaded
Chrome Cache Entry: 141
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 142
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 143
Web Open Font Format (Version 2), CFF, length 29752, version 1.0
downloaded
Chrome Cache Entry: 144
Unicode text, UTF-8 text, with very long lines (2258)
downloaded
Chrome Cache Entry: 145
Web Open Font Format (Version 2), CFF, length 76192, version 1.0
downloaded
Chrome Cache Entry: 146
Web Open Font Format (Version 2), CFF, length 77784, version 1.0
downloaded
Chrome Cache Entry: 147
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 148
Web Open Font Format, CFF, length 79584, version 0.0
downloaded
Chrome Cache Entry: 149
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 73
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 74
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 75
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 76
Unicode text, UTF-8 text, with very long lines (2258)
dropped
Chrome Cache Entry: 77
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 78
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 79
ASCII text, with very long lines (5632)
downloaded
Chrome Cache Entry: 80
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 81
ASCII text, with very long lines (65134)
dropped
Chrome Cache Entry: 82
PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 83
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 84
HTML document, Unicode text, UTF-8 text, with very long lines (28511)
downloaded
Chrome Cache Entry: 85
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 86
Unicode text, UTF-8 text, with very long lines (65297)
dropped
Chrome Cache Entry: 87
Unicode text, UTF-8 text, with very long lines (2258)
downloaded
Chrome Cache Entry: 89
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 90
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 91
Unicode text, UTF-8 text, with very long lines (65297)
downloaded
Chrome Cache Entry: 92
PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 93
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
Chrome Cache Entry: 94
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 95
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 96
ASCII text, with very long lines (65134)
downloaded
Chrome Cache Entry: 97
Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
dropped
Chrome Cache Entry: 98
Web Open Font Format (Version 2), CFF, length 29924, version 1.0
downloaded
Chrome Cache Entry: 99
ASCII text, with no line terminators
downloaded
There are 67 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1908,i,2733554176455454787,14053848275243881291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na4.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAXOLPIJBfBmvGxlXwPlfq9c6X3NsD1pg6O8JYZY2E-Ga3AuSQNGZ-g8N0TvBmaUFABJvylLGhsJ9uMpqr2DHsr9g8lX7QuPwmuLcGhhclzXMQHuhGjFAB_Dnt33FKgDL2&"

URLs

Name
IP
Malicious
https://na4.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAXOLPIJBfBmvGxlXwPlfq9c6X3NsD1pg6O8JYZY2E-Ga3AuSQNGZ-g8N0TvBmaUFABJvylLGhsJ9uMpqr2DHsr9g8lX7QuPwmuLcGhhclzXMQHuhGjFAB_Dnt33FKgDL2&
https://sso.behance.net/ims
unknown
https://jqueryvalidation.org/
unknown
http://jquery.org/license
unknown
https://lodash.com/
unknown
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
unknown
https://static.adobelogin.com/clients/adobe-sign-2020/4x_f39219ea552b8fc1c7b42c6a2d0290c2.png
13.224.189.8
http://sizzlejs.com/
unknown
https://static.adobelogin.com/clients/adobe-sign-2020/2x_f39219ea552b8fc1c7b42c6a2d0290c2.png
unknown
http://jqueryui.com
unknown
http://api.jqueryui.com/position/
unknown
https://use.typekit.net/af/e301c6/0000000000000000000149e7/27/
unknown
https://github.com/WebReflection/url-search-params/blob/master/README.md#ios-10--other-platforms-bug
unknown
https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1727881899327
99.81.250.169
https://github.com/jquery/jquery-color
unknown
http://typekit.com/eulas/0000000000000000000149e7
unknown
https://use.typekit.net/af/cb695f/000000000000000000017701/27/
unknown
http://underscorejs.org/LICENSE
unknown
http://eightmedia.github.com/hammer.js
unknown
https://jquery.org/license
unknown
https://github.com/gabceb/jquery-browser-plugin
unknown
https://jquery.com/
unknown
https://p.typekit.net/p.gif
unknown
http://typekit.com/eulas/0000000000000000000176ff
unknown
https://github.com/gabceb
unknown
http://typekit.com/eulas/000000000000000000017701
unknown
https://static.adobelogin.com/clients/adobe-sign-2020/f39219ea552b8fc1c7b42c6a2d0290c2.png
unknown
http://typekit.com/eulas/000000000000000000017702
unknown
http://flesler.blogspot.com
unknown
http://typekit.com/eulas/000000000000000000017703
unknown
https://lodash.com/license
unknown
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
unknown
https://static.adobelogin.com/clients/adobe-sign-2020/1x_f39219ea552b8fc1c7b42c6a2d0290c2.png
unknown
http://flesler.blogspot.com/2007/10/jqueryscrollto.html
unknown
https://openjsf.org/
unknown
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
unknown
https://github.com/websanova/mousestop
unknown
https://sizzlejs.com/
unknown
https://js.foundation/
unknown
https://github.com/facebook/regenerator/blob/main/LICENSE
unknown
http://jedwatson.github.io/classnames
unknown
https://dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=9E1005A551ED61CA0A490D45%40AdobeOrg&d_nsid=0&ts=1727881899327
99.81.250.169
http://trentrichardson.com/examples/timepicker
unknown
There are 32 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
dd20fzx9mj46f.cloudfront.net
13.224.189.8
adobe.com.ssl.d1.sc.omtrdc.net
63.140.62.17
www.google.com
216.58.206.36
secure.na4.adobesign.com
52.35.253.84
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
99.81.250.169
secure.na4dc2.echosign.com
52.35.253.84
fp2e7a.wpc.phicdn.net
192.229.221.95
windowsupdatebg.s.llnwi.net
87.248.204.0
use.typekit.net
unknown
p.typekit.net
unknown
ims-na1.adobelogin.com
unknown
secure.na4.echocdn.com
unknown
dpm.demdex.net
unknown
static.adobelogin.com
unknown
static.echocdn.com
unknown
There are 5 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
13.224.189.78
unknown
United States
192.168.2.6
unknown
unknown
216.58.206.36
www.google.com
United States
63.140.62.27
unknown
United States
13.224.189.8
dd20fzx9mj46f.cloudfront.net
United States
63.140.62.17
adobe.com.ssl.d1.sc.omtrdc.net
United States
18.202.109.49
unknown
United States
239.255.255.250
unknown
Reserved
99.81.250.169
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com
United States

DOM / HTML

URL
Malicious
https://na4.documents.adobe.com/public/userMessage?token=A59DBC66ECB7F2734F210B1836E128D1312E52479E1A670A3F336B32E45E910
https://na4.documents.adobe.com/public/userMessage?token=A59DBC66ECB7F2734F210B1836E128D1312E52479E1A670A3F336B32E45E910
https://na4.documents.adobe.com/public/userMessage?token=A59DBC66ECB7F2734F210B1836E128D1312E52479E1A670A3F336B32E45E910
https://auth.services.adobe.com/en_US/deeplink.html?deeplink=ssofirst&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FEchoSign2%2FAdobeID%2Fcode%3Fredirect_uri%3Dhttps%253A%252F%252Fgps.echosign.com%252Fpublic%252FadobeIDLogin%253Fserver%253Dna4.documents.adobe.com%2526isAdobeSignAuth%253Dfalse%2526port%253D443%26state%3D5e3fa6080f778198bce2065c11f736284fb842515c3cd03fca993e4cece5efa8%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=EchoSign2&scope=openid%2CAdobeID%2CDCAPI%2Cadditional_info.account_type%2Cskybox%2Cupdate_profile.first_name%2Cupdate_profile.last_name%2Cagreement_send%2Cagreement_sign%2Csign_library_write%2Csign_user_read%2Csign_user_write%2Cagreement_read%2Cagreement_write%2Cwidget_read%2Cwidget_write%2Cworkflow_read%2Cworkflow_write%2Csign_addressbook_read%2Csign_library_read%2Cadditional_info.projectedProductContext%2Csign_webhook_read%2Csign_webhook_write%2Csign_webhook_retention%2Csao.ACOM_ESIGN_TRIAL%2Cee.GROUP_SIGN_WEB%2Cadditional_info.ownerOrg%2Caddi