Windows Analysis Report
https://na2.docusign.net/Signing/EmailStart.aspx?a=00c6a14e-a8e7-4223-9765-b10754976206&etti=24&acct=77b54376-cfe0-40a4-ada4-41dcbd6fe4fa&er=61ed0986-cfa5-49af-9b2c-480985e92055

Overview

General Information

Sample URL:	https://na2.docusign.net/Signing/EmailStart.aspx?a=00c6a14e-a8e7-4223-9765-b10754976206&etti=24&acct=77b54376-cfe0-40a4-ada4-41dcbd6fe4fa&er=61ed0986-cfa5-49af-9b2c-480985e92055
Analysis ID:	1541144

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Signatures

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Source: https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.10.26-8/signing-conversations.js?cs=7aa34814

HTTP Parser: /*! for license information please see signing-conversations.js.license.txt */!function(){var e,t,n,r,o,i={57279:function(e,t,n){"use strict";var r=n(5946);object.defineproperty(t,"__esmodule",{value:!0}),t.default=void 0;var o=r(n(61240)),i=r(n(20271)),a=r(n(43563)),u=r(n(70533)),s=function(){function e(){(0,i.default)(this,e),(0,u.default)(this,"queue",new array),(0,u.default)(this,"workingonpromise",!1)}return(0,a.default)(e,[{key:"enqueue",value:function(e){var t=this;return new o.default((function(n,r){t.queue.push({worker:e,resolve:n,reject:r}),t.dequeue()}))}},{key:"dequeue",value:function(){var e=this;if(this.workingonpromise)return!1;var t=this.queue.shift();if(!t)return!1;try{this.workingonpromise=!0,t.worker().then((function(n){e.workingonpromise=!1,t.resolve(n),e.dequeue()})).catch((function(n){e.workingonpromise=!1,t.reject(n),e.dequeue()}))}catch(e){this.workingonpromise=!1,t.reject(e),this.dequeue()}return!0}}]),e}();t.default=s},74087:function(e,t,n){"use strict";var r=n(50697);object.definep...

Source: https://na2.docusign.net/Signing/?ti=037422d42bd9412587ae3907855d546c

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.17:58220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:58330 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.73:443 -> 192.168.2.17:58329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.17:58343 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.17:58171 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: global traffic	DNS traffic detected: DNS query: na2.docusign.net
Source: global traffic	DNS traffic detected: DNS query: docucdn-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: a.docusign.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.mixpanel.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: qrco.de
Source: global traffic	DNS traffic detected: DNS query: cdn.qr-code-generator.com

Source: unknown	Network traffic detected: HTTP traffic on port 58220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58336
Source: unknown	Network traffic detected: HTTP traffic on port 58310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58343
Source: unknown	Network traffic detected: HTTP traffic on port 58317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58261
Source: unknown	Network traffic detected: HTTP traffic on port 58324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58260
Source: unknown	Network traffic detected: HTTP traffic on port 58177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 58334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58311
Source: unknown	Network traffic detected: HTTP traffic on port 58316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58310
Source: unknown	Network traffic detected: HTTP traffic on port 58337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58324
Source: unknown	Network traffic detected: HTTP traffic on port 58261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58329
Source: unknown	Network traffic detected: HTTP traffic on port 58336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58326
Source: unknown	Network traffic detected: HTTP traffic on port 58332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58176
Source: unknown	Network traffic detected: HTTP traffic on port 58260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58173
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58176 -> 443

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.17:58220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58261 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:58266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:58330 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.73:443 -> 192.168.2.17:58329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.17:58343 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@27/77@28/115

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1964,i,17852227853175610878,2280977696238749756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/Signing/EmailStart.aspx?a=00c6a14e-a8e7-4223-9765-b10754976206&etti=24&acct=77b54376-cfe0-40a4-ada4-41dcbd6fe4fa&er=61ed0986-cfa5-49af-9b2c-480985e92055"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1964,i,17852227853175610878,2280977696238749756,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://qrco.de/bfV79j
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1972,i,13350871724550564956,11267885716930809181,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1972,i,13350871724550564956,11267885716930809181,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.248.185.181	unknown	United States	62856	DOCUS-6-PRODUS	false
142.250.186.67	unknown	United States	15169	GOOGLEUS	false
104.18.66.57	unknown	United States	13335	CLOUDFLARENETUS	false
162.248.185.182	unknown	United States	62856	DOCUS-6-PRODUS	false
216.58.206.74	unknown	United States	15169	GOOGLEUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
3.161.82.105	d2ab0gkja3j0kr.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.168	unknown	United States	15169	GOOGLEUS	false
107.178.240.159	api.mixpanel.com	United States	15169	GOOGLEUS	false
13.33.187.85	qrco.de	United States	16509	AMAZON-02US	false
34.223.160.188	unknown	United States	16509	AMAZON-02US	false
34.104.35.123	unknown	United States	15169	GOOGLEUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
104.18.65.57	cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.40	unknown	United States	15169	GOOGLEUS	false
142.250.186.163	unknown	United States	15169	GOOGLEUS	false
52.42.45.237	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
2.19.126.97	unknown	European Union	16625	AKAMAI-ASUS	false
142.251.173.84	unknown	United States	15169	GOOGLEUS	false
35.190.25.25	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.16.168.5	unknown	European Union	20940	AKAMAI-ASN1EU	false
142.250.186.42	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

Contacted Domains

Name	IP	Active
cdn.optimizely.com	104.18.65.57	true
d2ab0gkja3j0kr.cloudfront.net	3.161.82.105	true
www.google.com	142.250.186.36	true
api.mixpanel.com	107.178.240.159	true
qrco.de	13.33.187.85	true
arya-1323461286.us-west-2.elb.amazonaws.com	52.42.45.237	true
cdn.qr-code-generator.com	unknown	unknown
a.docusign.com	unknown	unknown
docucdn-a.akamaihd.net	unknown	unknown
na2.docusign.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://na2.docusign.net/Signing/?ti=037422d42bd9412587ae3907855d546c	false		unknown
https://qrco.de/bfV79j	false		unknown

ID:	1541144
Product:	CloudBasic
Start time:	14:03:16
Start date:	24.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 11:03:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	2D201B55D3FDD9BCADFB1996C5D6821D	AC087D3CCD57ADDC001253877D8F640A17D3084A	4EF0B5B072811EF4778B25DA4D6676FBEADC163431791F1DB138C3B56C9B8F7A
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 11:03:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	4ED8C20E89917F2C4593922670FBFA14	A8511ADB424124E49210E25B645E64FBF2C1FC54	75012864A2CEB6277E6B3E67FA5D20B656145AF802DFDC1852C53C10D31ACB7E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	DFFA22F19C5261F4276B71ADB453397A	182C0EB6C07BD75E71C662DE27D86D302EE6F66C	BE6D11C7CF14ED25D8E2BB311736AA73D4719D4825B68A34F3BD67547D7FA176
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 11:03:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	E02D0FCF5810CEE0E975C4C502D242A6	D258D3BE4324E133E0B2F5250537CE9A30FBE191	B92836EC047409067F4AAB42014055A57D2732295A6BFE03F3FF120567533E25
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 11:03:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	8B64896BF24F8380D123C6C811FD19FE	D1DD1C37F4003DF0167EC45254968F81622CBDDB	453B2A199468140EC278913AECD4CB6CA6DC03EF1CC35F4F020452FDF0AB8AD3
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 11:03:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	FE085E9E6ABBAEA8AEDE7D78EA65F602	F99C2D784885B50B47932462E2A3D0FDB4385F8B	AB5C344FE43F969F8732CC647246E1E22758DF68AA427A6741B03928878EA524
Chrome Cache Entry: 242	ASCII text, with very long lines (6455)	7C6BEDD9B75D72907D591245A4E212CB	FC6B2C0E89BCD4C4521FB3426D88D0A326839F8E	52C5D697C1D2EEF48D021BAF563B26208AB7F59474B0B78DB0AC8239E51AEA2A
Chrome Cache Entry: 246	ASCII text, with no line terminators	84100B349395F367D41A8B44D0020355	676BB250F143F6C863C58C79B4CA1ABF7312DF00	5EAE3F71BE133111621E17FEE9DC04578D885A74EAF4D40AAC9634B7DB4B5459
Chrome Cache Entry: 247	ASCII text, with very long lines (65536), with no line terminators	07A12FC88A4788F651FBA8A912C55C2D	B5B28EA52BC3D73AB416492ACC8784C6ACAF373C	A6C76E1983A8FB63FB7A87147DD2BF6E2AF0875AD71B184BA31403B6838A0F87
Chrome Cache Entry: 249	Unicode text, UTF-8 text, with very long lines (65452)	6B9E763659722B759B330AFF51DA7D30	2D273929A0BDC0BC24C5234A10DEF2E713BB50CD	B9338C45BBE474A3C1D05FFE0EA1B3BCB8515D56EA2D7927DA2A34C5D7BECE06
Chrome Cache Entry: 256	ASCII text, with very long lines (57931)	09A24028990121221D57DD5A6FDB4AEB	07948564AE3ED1C38C47A4005B97E2AA98A49B01	9DC14CA5CEA76005E0632D7EF57EF1405DDA9AD0A0F33ACBC3BC3149AD0CB79E
Chrome Cache Entry: 257	ASCII text, with very long lines (65448)	5BDABCD6C45CAAD8B5855528AEC7B1DF	62BCF113A643A35D9A4FA5997D6926F4E6AB0499	201685703E0D8F7BA3994A340AC693CF11FF4885BCDB0F6D225EE6B3990193CC
Chrome Cache Entry: 260	Unicode text, UTF-8 text, with very long lines (63087)	6503230F4A6FEBB2ED820A06626FC46B	11EBA7D98F1B0BE2BEEA1009F0A993BC5DF7C4CB	B5D8C675F1B227346E2F54E5DFF33A1A0890A068AF65F8551FCC5CE66F1125E2
Chrome Cache Entry: 263	Unicode text, UTF-8 text, with very long lines (30984)	48BC933608F733A9283F2218C73A941F	E04E625C70A5E8505B77A51D82D9A73AFA9F3547	FCBC395A3D24699D9229846A30C9FE245D77A7AFDBC8386838A03A837C6672AA
Chrome Cache Entry: 264	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel	87EEBD70B533B24B2C127E7D113C3B88	F5E633F6C5D9EA1913FEDF665E80D212490B0EF9	EC8835E4783C5026B39D4BDCC14B454460E7500BC812F6D83D2654E94B49D49B
Chrome Cache Entry: 265	ASCII text, with very long lines (65448)	FFC995495B9BD876B88ABC7E73E867A4	28EF2CAC33B7BD81F90B5EC0AFC534A899A62EDC	D7325AD98A5F0BE6BD3112C375030BF901224AEFCA21B1D24A6C589C6B9D80BD
Chrome Cache Entry: 267	ASCII text, with very long lines (65440)	202430AFDC27F45C73C3E3FA3694F6C0	0EE2C593EB4ECB80D02DA2BCED08293FC46DA0D1	A3DC9EA908EF210520125B4CD493DE3C994F8D8EC7EA84E7F39EAF477BD8CF1E
Chrome Cache Entry: 268	ASCII text, with very long lines (65457)	5A3832E809193F848215CB1F1D51AE92	F2D848CEC96AB9D55D533AB5D9AB6700DD2133F7	BABDEA5355F3172C11BCE2DE8058ECB33125D82945B0EBFFBFD6FE231A77A874
Chrome Cache Entry: 269	GIF image data, version 89a, 145 x 60	097D652B65DEC6E954C335739754FC61	83155314927200EC3B9951246D0C1C3B631B088A	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
Chrome Cache Entry: 270	ASCII text, with very long lines (20077)	122EC44E390326FBCB2241007A0C98B5	40AD77078C63FE0698185B6B3309BD93E1F4B9FF	C7C7B34F7F439361AC41EBB57C8BA26DD6196C45CE6E466B0C717EDD3029FF2B
Chrome Cache Entry: 273	ASCII text, with very long lines (27372)	2A6C8D1B72EBF378899A61A22A89920F	6B40108A687B50554348F2592BF310FAB66143DC	B65A36DDD85DEF0F675AC5897C25598E43DCC39FC2A45AEAABD316F3DC943187
Chrome Cache Entry: 275	ASCII text	ECE7A224F69AB2205D90900589AE1D05	3D861B816A5DA892C8A88D5755A5537C036239DE	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
Chrome Cache Entry: 276	HTML document, ASCII text, with very long lines (334), with CRLF line terminators	E698403F61CC4F810916B0F7E3F17B87	9E74C5E11F342BA248152FBCD32043C5D79ADD58	D5055630032DCC826C478296F885AF9254FFF0575D25F6BEA7C986B7F5CEFE0B
Chrome Cache Entry: 278	Unicode text, UTF-8 text, with very long lines (65439)	F16ED34E9172F038CBC3427E5EA61469	01BEACC0E85DEF2795319348E8A1159820D35939	9032F033B718170C8609A4CD97459285102CB9A0BBB9669951D11C6DACBAACC1
Chrome Cache Entry: 279	ASCII text, with very long lines (65448)	9DA993B3F5C7590CCCA0A4D411BC44A8	23D1C23805D2C364B5FCD8B26863584180B00714	CBF3E508493FAF9864881FA1DD1A157739501028FBE7006C78ED3299556BA349
Chrome Cache Entry: 283	PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced	C87DA3413DAD0BC57D3F6C42C3848657	5F307E843AE7B61DBB541B55CC159386664A40F4	AE8E67BAA196F0D1A50103804DA7CC8EA1B30F97A3878F044D2EE03902D9925E
Chrome Cache Entry: 284	ASCII text, with very long lines (12839)	62BEFAA1DEA794FA5C228FA9A20A5246	642E87CFCADCEDA77CA42932CFCB86FA05334AB9	289F32276174CA09EF5D6574B4641515B7FE4FF643FBFD80CAA3905665EEFE05
Chrome Cache Entry: 285	ASCII text, with very long lines (65448)	51E25B8A8D64616309DCBD0977CD8AC9	FBDA65EFD745B635B9AEF52003339FC680AB39CD	5717996076FF00F5DEDDC9D3E6BCCAA441708A42C71A4FA8892017BA7950DD09
Chrome Cache Entry: 286	SVG Scalable Vector Graphics image	C97430373AB9005C3A90AF1A0BE778CA	C9AF625A22C3A2A367AEE01205899BAF147596B2	5E674F5B96257920F3E7609E564B1AA0B06A9770422C9AD06D9D5E0D651608A0
Chrome Cache Entry: 287	ASCII text, with very long lines (19766)	9108BC56D14C98A79B6E2E9BA4F81D6D	2ECECDC8F2F269085713D6A741361F0631940637	924388FDE8F27BFE851E99D1B4E5D62B7493FE2DE6F3FD007E571BA21C87BB9C
Chrome Cache Entry: 292	ASCII text, with very long lines (65536), with no line terminators	2C73DD9B48CB342C5FEB81C8A378B291	FA52BCA3CF57FFE2FBA82D3C923B1A3DE1E38E76	DA90AEA8421C31DDAB9FADDF17FC9D1F7EE9B466786C8113F0C523DB8CB3F00C
Chrome Cache Entry: 296	ASCII text, with very long lines (65448)	AFEB5ECA8D00802FEABCACB1A960AC1E	2739EB27E219F5BC80C82E1BFC1A434AA494D0D7	E451EEAE12302410673586871F0E545FB03379726222B64C3DF622D2320B6D1E
Chrome Cache Entry: 297	ASCII text, with very long lines (65447)	D2F6FAEE5A4B20F278AEA0BC45D0C89E	BF4C8735E66413BA0683DA12A780E604C3F27191	4FE72069072918D391344ABE90D0182E942694C7081673BF3DB305126E8E8854
Chrome Cache Entry: 299	ASCII text, with very long lines (17950)	21C141ED2EF1EAE95687786E708BE685	341F512DAF337CA3DD42825512BCB46111ABCA21	AC278A3BA55635EDD59A84D16212ED4E48AA297546C8638AB868F7F4F3BB3620
Chrome Cache Entry: 304	Unicode text, UTF-8 text, with very long lines (13863)	C9AB9F3BD762C88427A56758E7CD67A7	1A6A149748E537BE34BC87969AD78F8BCC0AE635	B505C188591627CED490ED469D5CCD8D1EFF1C3018C7311642E4A5CCFFD4332B
Chrome Cache Entry: 305	ASCII text, with very long lines (65448)	B61D74CB1EFAD0D1AEF8D0CE3DD2C6B7	479891ECFEB4488E72829F52CF75A6A23D7CC5F6	0F820B74D13E5A343455A7946F809E9F7EA65026FD56F0FE5FF2B80DB5F06FC1
Chrome Cache Entry: 308	Web Open Font Format (Version 2), TrueType, length 29516, version 1.0	5D66C3D97D4F69A2B3527E3997CBB66B	94EF4F31C1A1CD780A172EDFBF9E3DE61697EF5A	1BF53B33743C5C45D6C944815F74CBF58B228806858FB6E3A0B86C1204F4BE06
Chrome Cache Entry: 311	ASCII text, with very long lines (17329)	E0395E74BC93B4BFADC786F6F9DC645A	AFF0347AD0EE3C9CA932184AD3DD8AFDC6FD8FF6	29EEE0DE8AC0F4304CB01DC649993B9A78F5855E758E5F072D03904839DA3217
Chrome Cache Entry: 312	ASCII text, with very long lines (46070)	2BC06A2EBA5CA8B484B84FA01919F26F	61F0A68BC1B7A90E5FC656C281D732A030AF501C	D173FD18A1E0AAE428B5BDF0560803CF2E95050C58EED4A580E31A7DA8691FD9
Chrome Cache Entry: 313	ASCII text, with very long lines (65447)	B996140AA55B4DCEFBE20B0EC96447B3	5C715DD38582604148904BADAF0342982195F698	54C6DB3FC48C1F54FAD197E91744DA04EB8FB584FBDB581A5C1E92CD6E72E12D
Chrome Cache Entry: 314	ASCII text, with no line terminators	1000A6CAF7299F030F5C73974CCD617E	44C1943894BE0A43D5F1176C085F82A9CF75DAAA	BB107868145E022BC860243BF8E7144DB9F5350D02F73F9EF56F70C3B89A2BEB
Chrome Cache Entry: 315	Web Open Font Format (Version 2), TrueType, length 31468, version 1.0	B70FB054C362CBA0FE0E6233920555E4	C1C2CDF248E7042B196EE18512C1DE9418ED61F2	C2DD95A4FD1D3569F219994B8BA845A5AE065733B80619B87157FA7BA97CCB74
Chrome Cache Entry: 318	ASCII text, with very long lines (17204)	D12BDBC55B5C9E64AF37C7750C5D89F6	B32ADA4832CAC602486F8E5030B80E66B73937FB	4923D769D1D3DA957CD9F9F5030E33F6BCD881291A8FF3C2730BFE175D52FA15
Chrome Cache Entry: 320	JSON data	49C1F8DEA7F6F2CF7F40EC0787E65D9F	31AA3E2E28F0970E373759C452CBF44CFECDCB07	8F89EC58713B993040CFDD3668F015D166FF5990131F14417A8BDEC465AEF911
Chrome Cache Entry: 322	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced	F4B52A4EB3D0CDD585A73EADE7CC734A	00BD17DB2EA7F845910C713CBFF3A6719D59A1EC	94BACE793EA5F351B65F5B2948BEB949B01FB811274A3F8EB8D52B9719A149BB
Chrome Cache Entry: 323	ASCII text	DA3C82EBA202CFA972C1BD8CDD9945F9	EE0D05E543C097EA4A38ECCBBEB036EF40B6861C	990AD520D12CC7583FC51CE2E436DFBA8226C9BED25DA55C3A5C46F1B8512D94
Chrome Cache Entry: 326	ASCII text, with very long lines (65446)	7E4446C2B304CD85BFC0353535C38CE8	AC982793D6A610A02C92254784C7AC5C554F62B1	DBCACD679B359983BDFB45D67E24069529982B01AFF7E3F543EA6B9534F323D2
Chrome Cache Entry: 327	ASCII text, with very long lines (27974)	F03BC80FE19576E53EE79979463F9024	3B2AE70F8ECC97DDA978AE7473146C83BE499262	955EC39E298442113983D14E7EBCB49C8C57F301E88A3DAA05705AD34556286B
Chrome Cache Entry: 329	Unicode text, UTF-8 text, with very long lines (65169)	A3519B1CBCA03ABE6BBBE5CCD4995402	46DD73B803E74ADCFA03C5D4F9614FDF595DE65A	0BBD085704353CF4D748BA6DAF9ACB245DC01AD64EB156984BA5BF7B256269EA
Chrome Cache Entry: 330	Unicode text, UTF-8 text, with very long lines (65446)	7FE25BE33AC537B233B9E1D3B53C30D6	53332F07FE455F6D77104A2E153B1033C03C10C5	048898107B20BFFE7B2690476083A57DA8F5B5A33DF95395FA478DD3E80E8622
Chrome Cache Entry: 332	Unicode text, UTF-8 text, with very long lines (65433)	FFF6E9B98FCD50A4DD16468FB561173E	B7F0170A96CE3ABB11ECD8254B531AE8218C4185	6D2B4294095379BD608695BAA30D8F8AC51A5D3E9F0749A4D8296B4813C13EEF
Chrome Cache Entry: 333	ASCII text, with very long lines (7965)	CF0A3FB647010CD001AF1B0430E25098	2DEA95C29D245223540CCBFE2F246F718DB7B283	D7B8DDB44BFC73780B9AF7FBB6619AABEDC3C57062FF68E06A016DE042A7FF71
Chrome Cache Entry: 334	SVG Scalable Vector Graphics image	6E132855B6DDD5C7A1FA7DAD2C9FE964	0342D3665682749F7C312B8B1EE6A169FA4C68C5	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
Chrome Cache Entry: 335	ASCII text	7363E1A92A77C2F6AB0332C9A64CC051	B424892E6298C96B00A63BF7B3244AFC93EFDEAB	4E640814854B6E878309D5B3ADD69C450D0995CF83617BBFAFBA63EA2043CF2F
Chrome Cache Entry: 337	ASCII text, with very long lines (20560)	D56F8C4A6B3DB2677E962A7B0F45634A	5AFF66065038A218B20AAA779AE7F9023C88287A	1C0ECB84B8364F76298D5022BDD9A03CDE1E065964BDB5870FA6439572F550D9
Chrome Cache Entry: 340	SVG Scalable Vector Graphics image	EC396047518A7FEF11D53D1B4F6BE65B	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
Chrome Cache Entry: 341	ASCII text, with very long lines (65438)	C9A178E87EF9D67207B744DD8252556E	32A11476141AE8CC9E0881E56743DFA0DBC0843E	4298AB8A22EEDA2DEEEACBA50E9AB4E86696CEF95E639F4ACB8DA89C8187809E
Chrome Cache Entry: 342	ASCII text, with very long lines (631), with no line terminators	9F4AFCC9A94BF7F159B575C59399104F	C507985195049626D803EB2AD1E9F4907DD437A0	D60ACD030B234963F5D32529D69B499BA397097515E275DC2BD2DA55358C31F2
Chrome Cache Entry: 343	ASCII text, with very long lines (9377)	B37450C5A66EEE84E294D821A6A02A64	3BF70E88ADEE39121B6237EE5D3BE9021565BB71	30092DA12ACD136AE59B9DAA166475DAEB91A6C1085CB2A78EB70793E9F5C5C1
Chrome Cache Entry: 345	ASCII text, with very long lines (65448)	88383B0CB4DE7EBA40D7BEE66CDD359B	38363E3E87B46FF324A6DAA844D978F78699DEBC	7C9371A4BA66B61F81937D1106113C6C7626A07638E53F305C95E772802C650B
Chrome Cache Entry: 346	ASCII text, with very long lines (52240)	A407C368011283A2E90E39C31D7C074F	967E873665404DE2F39D4C27D3218A4FADF06717	DCB0D3378502347EA16252B8D9C59F8258C29F1D746AFCD46A1498416950846E
Chrome Cache Entry: 347	ASCII text, with very long lines (16718)	7E0A5ABCB31199770B38DD9A0F557491	D4719F356E6800A6F664BCE7B3DDF7715607E5A3	0EE7DF63AA74F1623D01D69A016D845FD9024854A2F034D229ADE68D801DE4AA
Chrome Cache Entry: 349	ASCII text, with very long lines (65448)	1C065938739CF31D81692C38819E045C	9038D98DEA16113148D68413B8F54E1B3AC4C755	17AFE3069E479E437A4864A4684A5BCBD0A3C2DD328274BED28EFC91A5CC9C0F
Chrome Cache Entry: 350	Unicode text, UTF-8 text, with very long lines (16888)	CE7C0BB19E58A93C8F056BC20DAB9A26	13E50DC5E64A6BCB229ED4FE3B7AD1233833914F	18283FDE9392D1E5083F28DFF6FBE0DFE9FA450F1829A885858C05DEA1BF2813
Chrome Cache Entry: 352	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	AFE00DB89CE086B91A541C227EDBF136	961B2EE6FB39C4D515BDC49EC1BA688B0916F104	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
Chrome Cache Entry: 353	ASCII text, with very long lines (9667)	67EB698330BC24C39D51CE54687CBE19	864D423ED1CF0D6F3CF2DEF9D935DF7190094551	F5C08FB0F269E1D448373EFDB4F80474ED401EEADF6794416B20C55EFCC5AB01
Chrome Cache Entry: 354	HTML document, ASCII text, with very long lines (65448)	48EB4E014D9BA07A1FDE36774CEFE18C	AEB98C46BB9E7632D8F4035F66044AD5428534B4	3441A0C0375E37A41F5879FD999A5BCF7EE319E3E798081EC53FD3365DBE0D63
Chrome Cache Entry: 355	Web Open Font Format, TrueType, length 13780, version 1.0	D2793531447C140874B62B7448EF7191	1CE36AA9C6445DACDFA8B597BD79A34514CC9F60	2B1A1F78DF06385464750F48AED402C315164D51FD9475E8B5A47D897CF9C084
Chrome Cache Entry: 357	ASCII text, with very long lines (32844)	072146BBA6E4EB09461CFC1365FF1C6E	90765FB7072CDF6F9C945D723DFA3C4499AA0B88	8BA950B78817B87D98FB3784B08434D1EC450F8D88EED1B5C5BBE2349B89614E
Chrome Cache Entry: 359	ASCII text, with no line terminators	C9785540787087E135E2E3256D4128E6	41BD40CDDBF7127B59A6D093F72D6EF7AC2E45D4	ADB38815ED6BC0240FFD0E7299D9CFA5860D5C662C7C2B4DAE11EF97EC951B05
Chrome Cache Entry: 360	ASCII text, with very long lines (30012)	4011F6F95BA3B294E76FCFD7D3CF034D	C584E662B0C3C08BBEF2F92F19E13BF4770255F0	822098BC9C4C8CC7DF2B904F07A3C806FA11EA13E3E7E8D881C6DDD7F89B25A9
Chrome Cache Entry: 361	ASCII text, with very long lines (65443)	9B61B834FF999AAD4BB439D9EE5A3196	495602BE2117F051D6E368479FD809F47AEDE4AD	83C653E075572D19FE96B349AFE6ECCC5970846D61292C4CAA6C596569267843
Chrome Cache Entry: 362	ASCII text, with very long lines (21847)	8A612EE2BD50D337463A01E9EC96528F	6FF3DC65AA61653C9E6AE4CE221C8281648AE859	72821F1D699BC87FAEF1A2F24D55ABE06E8A9BC9C72C85EE0BC468B761637F3E
Chrome Cache Entry: 363	TrueType Font data, 13 tables, 1st "FFTM"	6CEBCEA9026D9E4F0FFBEB8472D9A55F	C3F5E027AEB89F44BDC6212FF58BCA932210BAE3	B68F76D79AF55C660781CF0439D7914A4C4192AA8AE2B0C45AE5331465B65C18
Chrome Cache Entry: 364	Web Open Font Format, CFF, length 33752, version 0.0	4DE7535F6F5DF8D5437C21C068DDB0EC	3553204B4624CA41CF1C4F3BD9B37D8C968CBA23	8F6A520A392FF62149E5FC5AA87BFAB9B3816CD6010D4D4FCA194E8683CA498B
Chrome Cache Entry: 366	ASCII text, with very long lines (20077)	A0801C8AF9DD93D6365B98955F63831E	1E39A6F43F33E0AC2BC6602F228FEE25192EA602	0518729CF60348FDBEAEA4449854B132EAE7419F2720EC81B33A5FCFAF25751F
Chrome Cache Entry: 367	ASCII text, with very long lines (11612)	65EF5CC9C9B87CD7C388B70074F64DBB	37C3113D7AF0C4482B438D573EDC42FF248799ED	9DFEA8EEDC818466F675726AD0B49B316A1460830A95159F34A934124FFB916F

Windows Analysis Report
https://na2.docusign.net/Signing/EmailStart.aspx?a=00c6a14e-a8e7-4223-9765-b10754976206&etti=24&acct=77b54376-cfe0-40a4-ada4-41dcbd6fe4fa&er=61ed0986-cfa5-49af-9b2c-480985e92055

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://na2.docusign.net/Signing/EmailStart.aspx?a=00c6a14e-a8e7-4223-9765-b10754976206&etti=24&acct=77b54376-cfe0-40a4-ada4-41dcbd6fe4fa&er=61ed0986-cfa5-49af-9b2c-480985e92055

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Screenshots

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://na2.docusign.net/Signing/EmailStart.aspx?a=00c6a14e-a8e7-4223-9765-b10754976206&etti=24&acct=77b54376-cfe0-40a4-ada4-41dcbd6fe4fa&er=61ed0986-cfa5-49af-9b2c-480985e92055