Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Fw_ Complete with Docusign_ J929272_SOW Extension_002_09-OCT-24_201415.pdf.eml
|
RFC 822 mail, ASCII text, with very long lines (857), with CRLF line terminators
|
initial sample
|
 |
|
|
C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst
|
Microsoft Outlook email folder (>=2003)
|
dropped
|
|
|
|
C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal
|
SQLite Write-Ahead Log, version 3007000
|
modified
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{CD0ED681-5B48-46A2-B918-397AB52629A8}.tmp
|
data
|
modified
|
||
|
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728576002588920900_71364968-CE07-4103-82E7-792B9BA0DE6E.log
|
ASCII text, with very long lines (28778), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728576002589646400_71364968-CE07-4103-82E7-792B9BA0DE6E.log
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241010T1200020369-6504.etl
|
data
|
modified
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 15:00:22 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 15:00:22 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 15:00:22 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 15:00:22 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 15:00:22 2024, atime=Mon Oct 2 20:46:57
2023, length=1210144, window=hide
|
dropped
|
||
|
Chrome Cache Entry: 135
|
HTML document, ASCII text, with very long lines (65448)
|
dropped
|
||
|
Chrome Cache Entry: 140
|
ASCII text, with very long lines (65438)
|
dropped
|
||
|
Chrome Cache Entry: 141
|
ASCII text, with very long lines (37014)
|
downloaded
|
||
|
Chrome Cache Entry: 145
|
Unicode text, UTF-8 text, with very long lines (13673)
|
downloaded
|
||
|
Chrome Cache Entry: 147
|
ASCII text, with very long lines (27176)
|
downloaded
|
||
|
Chrome Cache Entry: 148
|
Unicode text, UTF-8 text, with very long lines (30984)
|
downloaded
|
||
|
Chrome Cache Entry: 151
|
ASCII text, with no line terminators
|
dropped
|
||
|
Chrome Cache Entry: 152
|
Unicode text, UTF-8 text, with very long lines (63087)
|
dropped
|
||
|
Chrome Cache Entry: 153
|
ASCII text, with very long lines (631), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 155
|
ASCII text, with very long lines (65448)
|
downloaded
|
||
|
Chrome Cache Entry: 156
|
ASCII text, with very long lines (16718)
|
dropped
|
||
|
Chrome Cache Entry: 157
|
ASCII text, with very long lines (65448)
|
downloaded
|
||
|
Chrome Cache Entry: 159
|
ASCII text, with very long lines (9667)
|
dropped
|
||
|
Chrome Cache Entry: 160
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 165
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 166
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
|
Chrome Cache Entry: 168
|
ASCII text, with very long lines (65448)
|
downloaded
|
||
|
Chrome Cache Entry: 169
|
PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 170
|
GIF image data, version 89a, 535 x 234
|
downloaded
|
||
|
Chrome Cache Entry: 172
|
ASCII text
|
dropped
|
||
|
Chrome Cache Entry: 173
|
ASCII text, with very long lines (57954)
|
dropped
|
||
|
Chrome Cache Entry: 176
|
ASCII text, with very long lines (65448)
|
dropped
|
||
|
Chrome Cache Entry: 177
|
Unicode text, UTF-8 text, with very long lines (65169)
|
dropped
|
||
|
Chrome Cache Entry: 178
|
ASCII text, with very long lines (65448)
|
dropped
|
||
|
Chrome Cache Entry: 179
|
ASCII text, with very long lines (65448)
|
dropped
|
||
|
Chrome Cache Entry: 180
|
GIF image data, version 89a, 210 x 234
|
dropped
|
||
|
Chrome Cache Entry: 182
|
JSON data
|
downloaded
|
||
|
Chrome Cache Entry: 183
|
ASCII text, with very long lines (65446)
|
downloaded
|
||
|
Chrome Cache Entry: 187
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 188
|
Web Open Font Format (Version 2), TrueType, length 29516, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 190
|
ASCII text, with very long lines (65443)
|
downloaded
|
||
|
Chrome Cache Entry: 194
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 195
|
Web Open Font Format, TrueType, length 13780, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 196
|
Web Open Font Format (Version 2), TrueType, length 31468, version 1.0
|
downloaded
|
||
|
Chrome Cache Entry: 198
|
ASCII text, with very long lines (65447)
|
downloaded
|
||
|
Chrome Cache Entry: 199
|
Unicode text, UTF-8 text, with very long lines (65442)
|
dropped
|
||
|
Chrome Cache Entry: 200
|
GIF image data, version 89a, 145 x 60
|
dropped
|
||
|
Chrome Cache Entry: 204
|
ASCII text, with very long lines (46034)
|
downloaded
|
||
|
Chrome Cache Entry: 205
|
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
Chrome Cache Entry: 207
|
ASCII text, with very long lines (65449)
|
downloaded
|
||
|
Chrome Cache Entry: 209
|
Unicode text, UTF-8 text, with very long lines (65442)
|
downloaded
|
||
|
Chrome Cache Entry: 211
|
ASCII text, with very long lines (11684)
|
dropped
|
||
|
Chrome Cache Entry: 214
|
ASCII text, with very long lines (16777)
|
downloaded
|
||
|
Chrome Cache Entry: 217
|
SVG Scalable Vector Graphics image
|
dropped
|
||
|
Chrome Cache Entry: 219
|
ASCII text, with very long lines (65440)
|
downloaded
|
||
|
Chrome Cache Entry: 220
|
ASCII text, with very long lines (20560)
|
downloaded
|
||
|
Chrome Cache Entry: 222
|
ASCII text
|
downloaded
|
||
|
Chrome Cache Entry: 225
|
ASCII text, with very long lines (12839)
|
dropped
|
||
|
Chrome Cache Entry: 226
|
Unicode text, UTF-8 text, with very long lines (16888)
|
dropped
|
||
|
Chrome Cache Entry: 227
|
ASCII text, with very long lines (7965)
|
dropped
|
||
|
Chrome Cache Entry: 229
|
ASCII text, with very long lines (65448)
|
downloaded
|
||
|
Chrome Cache Entry: 231
|
ASCII text, with very long lines (24513)
|
dropped
|
||
|
Chrome Cache Entry: 232
|
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
|
Chrome Cache Entry: 235
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 236
|
ASCII text, with no line terminators
|
downloaded
|
||
|
Chrome Cache Entry: 237
|
ASCII text, with very long lines (9377)
|
downloaded
|
||
|
Chrome Cache Entry: 238
|
ASCII text, with very long lines (65453)
|
dropped
|
||
|
Chrome Cache Entry: 239
|
Web Open Font Format, CFF, length 33752, version 0.0
|
downloaded
|
There are 65 hidden files, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://na2.docusign.net/Signing/?ti=687025a17ea54551bfa5602a9e03a561
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
cdn.optimizely.com
|
104.18.66.57
|
||
|
nam11.safelinks.eop-tm2.outlook.com
|
104.47.58.156
|
||
|
urldefense.com
|
52.204.90.22
|
||
|
www.google.com
|
172.217.23.100
|
||
|
api.mixpanel.com
|
35.186.241.51
|
||
|
arya-1323461286.us-west-2.elb.amazonaws.com
|
35.161.37.142
|
||
|
nam11.safelinks.protection.outlook.com
|
unknown
|
||
|
a.docusign.com
|
unknown
|
||
|
docucdn-a.akamaihd.net
|
unknown
|
||
|
na2.docusign.net
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.113.194.132
|
unknown
|
United States
|
||
|
35.161.37.142
|
arya-1323461286.us-west-2.elb.amazonaws.com
|
United States
|
||
|
142.250.186.35
|
unknown
|
United States
|
||
|
142.250.186.78
|
unknown
|
United States
|
||
|
35.186.241.51
|
api.mixpanel.com
|
United States
|
||
|
104.18.66.57
|
cdn.optimizely.com
|
United States
|
||
|
162.248.185.182
|
unknown
|
United States
|
||
|
1.1.1.1
|
unknown
|
Australia
|
||
|
162.248.185.183
|
unknown
|
United States
|
||
|
54.201.17.39
|
unknown
|
United States
|
||
|
2.19.126.218
|
unknown
|
European Union
|
||
|
192.168.2.18
|
unknown
|
unknown
|
||
|
104.47.58.156
|
nam11.safelinks.eop-tm2.outlook.com
|
United States
|
||
|
64.233.167.84
|
unknown
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
2.19.126.140
|
unknown
|
European Union
|
||
|
142.250.185.131
|
unknown
|
United States
|
||
|
172.217.23.100
|
www.google.com
|
United States
|
||
|
142.250.186.142
|
unknown
|
United States
|
||
|
52.204.90.22
|
urldefense.com
|
United States
|
||
|
51.116.253.168
|
unknown
|
United Kingdom
|
||
|
142.250.186.42
|
unknown
|
United States
|
There are 12 hidden IPs, click here to show them.