Windows Analysis Report
https://na2.docusign.net/Signing/EmailStart.aspx?a=4174db92-522c-4bf5-8c4b-e7b0cf607ab0&acct=23785f6d-05e4-4cfc-b399-e804e495ab71&er=71639067-2cb3-4848-aca0-e72c5cdd3bbf

Overview

General Information

Sample URL:	https://na2.docusign.net/Signing/EmailStart.aspx?a=4174db92-522c-4bf5-8c4b-e7b0cf607ab0&acct=23785f6d-05e4-4cfc-b399-e804e495ab71&er=71639067-2cb3-4848-aca0-e72c5cdd3bbf
Analysis ID:	1427017
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1Host: a.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713298219370 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na2.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713298219373 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na2.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713298219370 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713298219373 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: unknown

DNS traffic detected: queries for: na2.docusign.net

Source: chromecache_108.2.dr	String found in binary or memory: http://dbj.org/dbj/?p=286
Source: chromecache_108.2.dr	String found in binary or memory: http://dean.edwards.name/weblog/2005/10/add-event/
Source: chromecache_108.2.dr	String found in binary or memory: http://documentcloud.github.com/underscore/
Source: chromecache_108.2.dr	String found in binary or memory: http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
Source: chromecache_108.2.dr	String found in binary or memory: http://mixpanel.com/
Source: chromecache_108.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-12.4
Source: chromecache_108.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials
Source: chromecache_108.2.dr	String found in binary or memory: https://gist.github.com/1930440
Source: chromecache_108.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js/blob/master/json_parse.js
Source: chromecache_93.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_93.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.2/LICENSE

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/108@20/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2028,i,8087644695049965104,3964481613383778308,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/Signing/EmailStart.aspx?a=4174db92-522c-4bf5-8c4b-e7b0cf607ab0&acct=23785f6d-05e4-4cfc-b399-e804e495ab71&er=71639067-2cb3-4848-aca0-e72c5cdd3bbf"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2028,i,8087644695049965104,3964481613383778308,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Ok
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Ok
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.190.25.25	api.mixpanel.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.162.217.246	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
64.233.185.105	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

Contacted Domains

Name	IP	Active
www.google.com	64.233.185.105	true
api.mixpanel.com	35.190.25.25	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
arya-1323461286.us-west-2.elb.amazonaws.com	35.162.217.246	true
cdn.optimizely.com	unknown	unknown
a.docusign.com	unknown	unknown
docucdn-a.akamaihd.net	unknown	unknown
na2.docusign.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://na2.docusign.net/Signing/?ti=7d5411edbf694262a0ed71852bf35fb2	false		high
https://a.docusign.com/ds_arya_wrapper.min.js?f=1	false		high

ID:	1427017
Product:	CloudBasic
Start time:	22:09:27
Start date:	16.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 100	ASCII text, with very long lines (65448)	0288FC3471A8DD0E6C982C541767674B	1000697CB6D8844BE8C967C9F00EEDCA5B14F2C9	8B90C98283E93FF94BD1BC062074D3A7C758BE9D91BA380D4E553FE69BF6704D
Chrome Cache Entry: 101	ASCII text, with very long lines (631), with no line terminators	814F133B73F24E5010981825D3CB9512	8215E6A2D9DAACEB4341F9F42560D5C55897FB10	EA5834B7262CADEF1200FB5B768ECEA5284ED84AAE2D5B282EAF5387905AB4E5
Chrome Cache Entry: 102	ASCII text, with no line terminators	C9785540787087E135E2E3256D4128E6	41BD40CDDBF7127B59A6D093F72D6EF7AC2E45D4	ADB38815ED6BC0240FFD0E7299D9CFA5860D5C662C7C2B4DAE11EF97EC951B05
Chrome Cache Entry: 103	Web Open Font Format, TrueType, length 13780, version 1.0	D2793531447C140874B62B7448EF7191	1CE36AA9C6445DACDFA8B597BD79A34514CC9F60	2B1A1F78DF06385464750F48AED402C315164D51FD9475E8B5A47D897CF9C084
Chrome Cache Entry: 104	SVG Scalable Vector Graphics image	21F840ABAA13C71AFB622EEC231F720C	41F57D2E935AD0EED26F96729789470737FB6F3E	0DC820F1B38866F9EF0C1D25880AF9F4C924B8D1B82D1463876D0724FD4A03C8
Chrome Cache Entry: 105	ASCII text, with very long lines (65446)	26AD954ED264E683562C58DC90C531CC	3D3CAD8659C545F6C8DCA4AE4B5AF081CEF5D864	16BFBF9722DD7066F9FB8FE0FBA433D2CCD4166245A25452489EA11ACFC6F523
Chrome Cache Entry: 106	ASCII text, with very long lines (65443)	54738E49588E2E398B94C2454D208F46	386B688A55AC9AD8BF503F797EFC9049149C6C92	DEEA495C7FE5E07F6BA70C777A960E96D30AB97D61DE25B174A1CF4D5DAA879E
Chrome Cache Entry: 107	ASCII text, with very long lines (28691)	3B74506F59DA529F6BF8FDF4EC64E648	8321BF29181D448B0814B437B9649596ED337A3F	C8E0F842F09D3BD9C68B92E38C23BD5357BF9C24929B0EBE521FED4E8DBC5D78
Chrome Cache Entry: 108	ASCII text	ECE7A224F69AB2205D90900589AE1D05	3D861B816A5DA892C8A88D5755A5537C036239DE	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
Chrome Cache Entry: 109	Unicode text, UTF-8 text, with very long lines (65452)	F9718817AF161D92D76D42FAA7B1C592	C07597E869B66BE593ACB5BE8A27782E26DF61EC	0FFB1DEA6E22132A6A7B5039EF2A9D530104D66269447C4667C31CFE70F7D948
Chrome Cache Entry: 110	ASCII text	7363E1A92A77C2F6AB0332C9A64CC051	B424892E6298C96B00A63BF7B3244AFC93EFDEAB	4E640814854B6E878309D5B3ADD69C450D0995CF83617BBFAFBA63EA2043CF2F
Chrome Cache Entry: 111	Web Open Font Format, TrueType, length 47748, version 1.0	4A573FAC9111D6ADCB3994983539BD75	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
Chrome Cache Entry: 112	ASCII text, with very long lines (65440)	989E0734903E88BD11A2F87224A25417	8AB4FA9597D8F00ADD77A06CBC0A92D4840D189C	C17E9F34C0FE1A3B1157C59AB69A1193C9D50906CF4827BA50261E152AA595E0
Chrome Cache Entry: 113	ASCII text, with very long lines (8936)	2F6FDE4CBA3AD9A1F287620FD833AE0D	97138C2E1807F1FEEE542723532130C9C06A7364	51DDA176EF6DCC935F425A488A1FF2200B8DAF1A1A30DA1A6EC9EAAA5A5E3ED7
Chrome Cache Entry: 114	Unicode text, UTF-8 text, with very long lines (30982)	BE691A15672DCB9C9EE784716E37BD4C	88ECF813BA6E08B7464F37D52AD7FB7299B7D17A	1A476B931DF6FE5B443FAAC0630AEC30E590F42965044615299160D94A60A7F2
Chrome Cache Entry: 115	Web Open Font Format, TrueType, length 47748, version 1.0	4A573FAC9111D6ADCB3994983539BD75	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
Chrome Cache Entry: 116	SVG Scalable Vector Graphics image	21F840ABAA13C71AFB622EEC231F720C	41F57D2E935AD0EED26F96729789470737FB6F3E	0DC820F1B38866F9EF0C1D25880AF9F4C924B8D1B82D1463876D0724FD4A03C8
Chrome Cache Entry: 117	GIF image data, version 89a, 44 x 44	DEBD77E543E64173837073B5751ABB08	71577CA453893F08A57A63953B836E8198D878AF	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
Chrome Cache Entry: 118	SVG Scalable Vector Graphics image	6E132855B6DDD5C7A1FA7DAD2C9FE964	0342D3665682749F7C312B8B1EE6A169FA4C68C5	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
Chrome Cache Entry: 119	Web Open Font Format, CFF, length 33752, version 0.0	4DE7535F6F5DF8D5437C21C068DDB0EC	3553204B4624CA41CF1C4F3BD9B37D8C968CBA23	8F6A520A392FF62149E5FC5AA87BFAB9B3816CD6010D4D4FCA194E8683CA498B
Chrome Cache Entry: 120	ASCII text, with very long lines (23649)	AF4725803A1C4CD80ACB7A7C4A81110B	6DAF5742828ABC0560F7B8661B986DE42ABF8306	F3D8E97FF1BB6EDC836D0788B5A78AFCA4860386B248DF4B4BC32AB63E72B339
Chrome Cache Entry: 121	ASCII text, with very long lines (65448)	37D3E81979D1329C9A17C16C6C0B4AC4	41E07AD3EB64E807A658302390C5A57E52377F3D	3071863E3EBDA01F1931DB48BDA4B572070BD4982DD57EB14440A6AAA4C73D59
Chrome Cache Entry: 122	ASCII text, with no line terminators	1000A6CAF7299F030F5C73974CCD617E	44C1943894BE0A43D5F1176C085F82A9CF75DAAA	BB107868145E022BC860243BF8E7144DB9F5350D02F73F9EF56F70C3B89A2BEB
Chrome Cache Entry: 123	HTML document, ASCII text, with very long lines (65448)	9B77D503E6E40B9EC40CC05068C4F6B0	668F210D30FBA706D71DD19421D466F672E68C5E	8B30012277A5A52D32AE45130E38012A651A981186DA78CFFB19918F24FDBEEE
Chrome Cache Entry: 124	ASCII text, with very long lines (13242)	AA0BB38D201D9EB7E5C9E0EA4BE80792	6AD2F44B704F8EA79718CDBA081DBD414A6637D6	2CA01F23E5683592F3302C68137A8475CD0ABE3FE9D0AED5E501F93A2DA44D70
Chrome Cache Entry: 125	ASCII text, with very long lines (65448)	F1CACFF1D8C524865D21895836550E24	F7B969BEF44A15869B7C9C0ECBCDB01FD424B9DB	A383FA595672D1684EB03453B4048919765D46507A9D5B44459D93A9CF9D53A3
Chrome Cache Entry: 126	JSON data	D44CAC6CDD6E59A5F225A809B32E64C6	E6CC5180DC2468A904EA9FCEA5D3521B55197936	9132DF22A47F8813E64066362699E7F875557299F971B91BE32E3439F049A043
Chrome Cache Entry: 127	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	AFE00DB89CE086B91A541C227EDBF136	961B2EE6FB39C4D515BDC49EC1BA688B0916F104	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
Chrome Cache Entry: 128	ASCII text, with no line terminators	84100B349395F367D41A8B44D0020355	676BB250F143F6C863C58C79B4CA1ABF7312DF00	5EAE3F71BE133111621E17FEE9DC04578D885A74EAF4D40AAC9634B7DB4B5459
Chrome Cache Entry: 129	Unicode text, UTF-8 text, with very long lines (61862)	897848EE1FD41F8041DEAF2588FEDC58	776FEEF7C1B9CFA7236BCD25798AA7E48A7A4550	92B44C79CAAEE8FB028A53468447CB6D06CAA26E06B65CEE588FAC46440ECF1D
Chrome Cache Entry: 130	ASCII text, with very long lines (65447)	190913587E7767A800817CBD88CF0B8B	457AD10EFCF996E378EF76631CDAACCBAFB8CFAE	1A284295679AE0E8C918509B99A454FAED71E7B313551A6BDC7A30C92AC50495
Chrome Cache Entry: 131	JSON data	D44CAC6CDD6E59A5F225A809B32E64C6	E6CC5180DC2468A904EA9FCEA5D3521B55197936	9132DF22A47F8813E64066362699E7F875557299F971B91BE32E3439F049A043
Chrome Cache Entry: 132	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced	AE012B2DA9094388D75DE6D2D0E3FAAE	F2847697FDFD6B5BCD98CE6C072EF0C1EC9B52B3	8200B426F594E9C37980E36F479CABB0349FEEB618CDFC85A0ACF229E5669710
Chrome Cache Entry: 133	ASCII text, with very long lines (11789)	BAD9DC30565F2862AA4367FA48FD43FD	EBD42C26150D4F9D08D62A38BF5E2B2FB0B4FD32	F82ED28D3D41C8F4E2C6A1623896FA76A363A4A87835C97AAE750549B055E417
Chrome Cache Entry: 134	SVG Scalable Vector Graphics image	6E132855B6DDD5C7A1FA7DAD2C9FE964	0342D3665682749F7C312B8B1EE6A169FA4C68C5	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
Chrome Cache Entry: 135	SVG Scalable Vector Graphics image	EC396047518A7FEF11D53D1B4F6BE65B	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
Chrome Cache Entry: 136	GIF image data, version 89a, 145 x 60	097D652B65DEC6E954C335739754FC61	83155314927200EC3B9951246D0C1C3B631B088A	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
Chrome Cache Entry: 137	ASCII text, with very long lines (34237)	F856B3D4370812023CBDAF061A941EF6	AAAE0E7B14A73D805A4C46821FADB5EB051E7E39	01E118A62A7C5E11D435A84C6310FDDB4C794B4F494EDE00F43BBF31BA7CADA1
Chrome Cache Entry: 138	ASCII text, with very long lines (21484)	A317CC5DA2D4CA558A374A505F86F4A0	781E4EE418AA11E00959C0B4203A3D87A98A20D4	916A2619BC6275416FCA1476BD0ABC2BDCE1F24821CA7E3576380E15D0F13259
Chrome Cache Entry: 139	ASCII text, with very long lines (16717)	92D61B50E00F80FC75A8C22CA4C0B43B	C060D52D62B7517A891BDD80E1ABD803C1C51D21	04C9B5B71035630AF29F27E44B2B055F98FA280A7F3530FD4C4E2031569E2603
Chrome Cache Entry: 140	ASCII text, with very long lines (65443)	EE4DB06ED4862663B9E84888B1449BB3	868557B6051BAA0448C0757A41E13CC214DB673D	7252C0CB7D8378D4FE778844672D11818FED42A4DE3517D226C659237DA87E2A
Chrome Cache Entry: 141	GIF image data, version 89a, 44 x 44	DEBD77E543E64173837073B5751ABB08	71577CA453893F08A57A63953B836E8198D878AF	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
Chrome Cache Entry: 142	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	AFE00DB89CE086B91A541C227EDBF136	961B2EE6FB39C4D515BDC49EC1BA688B0916F104	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
Chrome Cache Entry: 143	Unicode text, UTF-8 text, with very long lines (21884)	19213DF8CB6E0979F497A613B1CC7A59	5B90E1344E06909F47097CCDD8AC3722F603838F	3AD05702AB7044779F0E22A42DFFE1C0BFEB546D27D06F1ED7D8A1E19FC1199B
Chrome Cache Entry: 144	ASCII text, with very long lines (436), with no line terminators	33082B06FEED95F2D3A99A8349A71417	2D7AA967FA59FCB14D5D55EB4CFC2BEDD59DFBF6	7030B77DE682BDDF6B706F2B33A956F43A1DFE39EB4A45ECE67FEBA03AAD5201
Chrome Cache Entry: 145	ASCII text, with very long lines (62117)	C709560D3A5E7FB5EA2EE45F31453DCA	7D56654E25D9A216117EB758AB90B940DB312314	7D7C3910597ADF79BAF8293816032988178BFB27D64BF354E74693A04D037A13
Chrome Cache Entry: 146	SVG Scalable Vector Graphics image	4333D3B6CCF95B701880AFFF4128ED2F	0297E1CA11915A9E27E8B4A6173D1FFEF235ED3F	68844C99D8BACB1F656D3D1A9D07237A92B55C0996F9DE751102107F009EC8A6
Chrome Cache Entry: 147	ASCII text, with very long lines (65438)	D33ABE3CC710444C881B2D0FEE913295	5DFF05D6B8DC622A5DE015404914615297686CA3	09E7A8624D5D7B86B70D2AEE5654981D211AD556AE50BF37B2D68949950A6DA5
Chrome Cache Entry: 148	ASCII text, with very long lines (16384)	676B998BBCAC362E1190838CF49DBEF3	5097FAA88E3C7F857C9B804B378AB9390E7E90EE	1B4FC92A2F81310CD2811027E11316633AAB180E8FBF67727A3B4975FD726796
Chrome Cache Entry: 149	SVG Scalable Vector Graphics image	EC396047518A7FEF11D53D1B4F6BE65B	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
Chrome Cache Entry: 91	ASCII text, with very long lines (19601)	9F321C3E7FBA0F3E6D43F488ADC930A5	C280266808C4B23969DE943D0ACEBC04DEF4826F	EEA48822A68BD5401D08780CBF238E118F52E7445B6EEAD09C5C5187EAA49BC6
Chrome Cache Entry: 92	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced	AE012B2DA9094388D75DE6D2D0E3FAAE	F2847697FDFD6B5BCD98CE6C072EF0C1EC9B52B3	8200B426F594E9C37980E36F479CABB0349FEEB618CDFC85A0ACF229E5669710
Chrome Cache Entry: 93	Unicode text, UTF-8 text, with very long lines (65445)	C3C54E671D8B3A0E0DB1E6C394D75885	71ED41E8165B0580E42AECF4462B064554101547	1F6B2C9F37CD3AF4D4DCF33F123E7C932823C7A8A08E552F6065A393427B25D3
Chrome Cache Entry: 94	Unicode text, UTF-8 text, with very long lines (65247)	958F1B034B93F045246502153AE2A125	FA9953118165B8372CD35BB1B1780B34D3982823	F7BB75AB57789E3EE06B180A4B152834045E56AA82302B261C97384D875833E5
Chrome Cache Entry: 95	ASCII text, with very long lines (65536), with no line terminators	2C73DD9B48CB342C5FEB81C8A378B291	FA52BCA3CF57FFE2FBA82D3C923B1A3DE1E38E76	DA90AEA8421C31DDAB9FADDF17FC9D1F7EE9B466786C8113F0C523DB8CB3F00C
Chrome Cache Entry: 96	GIF image data, version 89a, 145 x 60	097D652B65DEC6E954C335739754FC61	83155314927200EC3B9951246D0C1C3B631B088A	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
Chrome Cache Entry: 97	ASCII text, with very long lines (58175)	09333BF57AF8836D3CA135C4B012C59A	8CFD2EE21A7F99BF239C7FF203729B1A84B77391	1E79FA97DCFC6CDC0A266D7A38D4DB61E227999785B4A3FFF926ABFDC4631F6F
Chrome Cache Entry: 98	SVG Scalable Vector Graphics image	4333D3B6CCF95B701880AFFF4128ED2F	0297E1CA11915A9E27E8B4A6173D1FFEF235ED3F	68844C99D8BACB1F656D3D1A9D07237A92B55C0996F9DE751102107F009EC8A6
Chrome Cache Entry: 99	ASCII text, with very long lines (7911)	AD817D1D4C0D802DF20DE16A89E835B5	116D51E9230FFB8A0E1299D09E80941177F78133	1C48B68786B248DE1B850AB622DD450D5EF69C2E80034B276FA06E6E61BC920E

Windows Analysis Report
https://na2.docusign.net/Signing/EmailStart.aspx?a=4174db92-522c-4bf5-8c4b-e7b0cf607ab0&acct=23785f6d-05e4-4cfc-b399-e804e495ab71&er=71639067-2cb3-4848-aca0-e72c5cdd3bbf

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://na2.docusign.net/Signing/EmailStart.aspx?a=4174db92-522c-4bf5-8c4b-e7b0cf607ab0&acct=23785f6d-05e4-4cfc-b399-e804e495ab71&er=71639067-2cb3-4848-aca0-e72c5cdd3bbf

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://na2.docusign.net/Signing/EmailStart.aspx?a=4174db92-522c-4bf5-8c4b-e7b0cf607ab0&acct=23785f6d-05e4-4cfc-b399-e804e495ab71&er=71639067-2cb3-4848-aca0-e72c5cdd3bbf