Windows Analysis Report
https://na2.docusign.net/signing/emails/v1-7e4338614cd04d838758eb831275322bb8b544f118a24b3fb8d83e44a51689ee

Overview

General Information

Sample URL:	https://na2.docusign.net/signing/emails/v1-7e4338614cd04d838758eb831275322bb8b544f118a24b3fb8d83e44a51689ee
Analysis ID:	1428779
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Classification

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49808 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49741 version: TLS 1.2

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49808 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1Host: a.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713535388374 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na2.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713535388375 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na2.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na2.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=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%3D%3D&ip=1&_=1713535388375 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRzY3JlZW5faGVpZ2h0IjogMTAyNCwiJHNjcmVlbl93aWR0aCI6IDEyODAsIm1wX2xpYiI6ICJ3ZWIiLCJkaXN0aW5jdF9pZCI6ICIxOGVmNmFiMGFjYTNiOC0wMmVkNWViM2MwYWIzYy0yNjAzMWU1MS0xNDAwMDAtMThlZjZhYjBhY2IxYjUiLCIkaW5pdGlhbF9yZWZlcnJpbmdfZG9tYWluIjogIiRkaXJlY3QiLCJtcF9wYWdlIjogIm5hMi5kb2N1c2lnbi5uZXQiLCJtcF9icm93c2VyIjogIkNocm9tZSIsIm1wX3BsYXRmb3JtIjogIldpbmRvd3MiLCJ0b2tlbiI6ICIzMDRjY2JkZTI0ZDNiMTVmZmUyZDVkZTMwYzEwZGFiMiJ9fQ%3D%3D&ip=1&_=1713535388374 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: unknown

DNS traffic detected: queries for: na2.docusign.net

Source: chromecache_113.2.dr	String found in binary or memory: http://dbj.org/dbj/?p=286
Source: chromecache_113.2.dr	String found in binary or memory: http://dean.edwards.name/weblog/2005/10/add-event/
Source: chromecache_113.2.dr	String found in binary or memory: http://documentcloud.github.com/underscore/
Source: chromecache_113.2.dr	String found in binary or memory: http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
Source: chromecache_113.2.dr	String found in binary or memory: http://mixpanel.com/
Source: chromecache_113.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-12.4
Source: chromecache_113.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials
Source: chromecache_113.2.dr	String found in binary or memory: https://gist.github.com/1930440
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js/blob/master/json_parse.js
Source: chromecache_96.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_96.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.2/LICENSE

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49741 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/113@24/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=2024,i,15035561699717979938,14526954516782873913,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na2.docusign.net/signing/emails/v1-7e4338614cd04d838758eb831275322bb8b544f118a24b3fb8d83e44a51689ee"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=2024,i,15035561699717979938,14526954516782873913,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.186.241.51	unknown	United States	15169	GOOGLEUS	false
130.211.34.183	api.mixpanel.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.162.217.246	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
64.233.176.106	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.23

Contacted Domains

Name	IP	Active
www.google.com	64.233.176.106	true
api.mixpanel.com	130.211.34.183	true
fp2e7a.wpc.phicdn.net	192.229.211.108	true
arya-1323461286.us-west-2.elb.amazonaws.com	35.162.217.246	true
cdn.optimizely.com	unknown	unknown
a.docusign.com	unknown	unknown
docucdn-a.akamaihd.net	unknown	unknown
na2.docusign.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://na2.docusign.net/Signing/?ti=c4e32be37d314cb7a3f1a30f4f3c3fa6	false		high
https://a.docusign.com/ds_arya_wrapper.min.js?f=1	false		high

ID:	1428779
Product:	CloudBasic
Start time:	16:02:11
Start date:	19.04.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 100	GIF image data, version 89a, 145 x 60	097D652B65DEC6E954C335739754FC61	83155314927200EC3B9951246D0C1C3B631B088A	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
Chrome Cache Entry: 101	GIF image data, version 89a, 494 x 234	DBC9BE0A97B22F64BEFE4F4A8EC86C52	A75FDD2D2450F64F8315E1048C2D3E969A05F204	FA23900008473FAA386A00F4E2D815BE0DB309906F6CDB3C763A6AEEA57C531D
Chrome Cache Entry: 102	ASCII text, with very long lines (58175)	09333BF57AF8836D3CA135C4B012C59A	8CFD2EE21A7F99BF239C7FF203729B1A84B77391	1E79FA97DCFC6CDC0A266D7A38D4DB61E227999785B4A3FFF926ABFDC4631F6F
Chrome Cache Entry: 103	ASCII text, with very long lines (7911)	AD817D1D4C0D802DF20DE16A89E835B5	116D51E9230FFB8A0E1299D09E80941177F78133	1C48B68786B248DE1B850AB622DD450D5EF69C2E80034B276FA06E6E61BC920E
Chrome Cache Entry: 104	GIF image data, version 89a, 494 x 234	DBC9BE0A97B22F64BEFE4F4A8EC86C52	A75FDD2D2450F64F8315E1048C2D3E969A05F204	FA23900008473FAA386A00F4E2D815BE0DB309906F6CDB3C763A6AEEA57C531D
Chrome Cache Entry: 105	ASCII text, with very long lines (65448)	0288FC3471A8DD0E6C982C541767674B	1000697CB6D8844BE8C967C9F00EEDCA5B14F2C9	8B90C98283E93FF94BD1BC062074D3A7C758BE9D91BA380D4E553FE69BF6704D
Chrome Cache Entry: 106	ASCII text, with very long lines (631), with no line terminators	EA2619963A52D436C6A3ABA89A535453	8527216CAABEEE1D6327906010FE0B997125DF6E	BAD9B2DE4E0F52A85443867321CA244AF50D9FD24F27CE6FD08545DD729B1022
Chrome Cache Entry: 107	ASCII text, with no line terminators	C9785540787087E135E2E3256D4128E6	41BD40CDDBF7127B59A6D093F72D6EF7AC2E45D4	ADB38815ED6BC0240FFD0E7299D9CFA5860D5C662C7C2B4DAE11EF97EC951B05
Chrome Cache Entry: 108	Web Open Font Format, TrueType, length 13780, version 1.0	D2793531447C140874B62B7448EF7191	1CE36AA9C6445DACDFA8B597BD79A34514CC9F60	2B1A1F78DF06385464750F48AED402C315164D51FD9475E8B5A47D897CF9C084
Chrome Cache Entry: 109	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced	F4B52A4EB3D0CDD585A73EADE7CC734A	00BD17DB2EA7F845910C713CBFF3A6719D59A1EC	94BACE793EA5F351B65F5B2948BEB949B01FB811274A3F8EB8D52B9719A149BB
Chrome Cache Entry: 110	ASCII text, with very long lines (65446)	26AD954ED264E683562C58DC90C531CC	3D3CAD8659C545F6C8DCA4AE4B5AF081CEF5D864	16BFBF9722DD7066F9FB8FE0FBA433D2CCD4166245A25452489EA11ACFC6F523
Chrome Cache Entry: 111	ASCII text, with very long lines (65443)	54738E49588E2E398B94C2454D208F46	386B688A55AC9AD8BF503F797EFC9049149C6C92	DEEA495C7FE5E07F6BA70C777A960E96D30AB97D61DE25B174A1CF4D5DAA879E
Chrome Cache Entry: 112	ASCII text, with very long lines (28691)	3B74506F59DA529F6BF8FDF4EC64E648	8321BF29181D448B0814B437B9649596ED337A3F	C8E0F842F09D3BD9C68B92E38C23BD5357BF9C24929B0EBE521FED4E8DBC5D78
Chrome Cache Entry: 113	ASCII text	ECE7A224F69AB2205D90900589AE1D05	3D861B816A5DA892C8A88D5755A5537C036239DE	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
Chrome Cache Entry: 114	GIF image data, version 89a, 200 x 200	5F32E0AA2C7298B478152B9FD2EBB3D2	69982449E7AE6111779AB2D6FF18A26028381472	CAEDC368429D6BB35E678AAC43574DAC770F236A55D25FD13BC3A06FB21B1E1A
Chrome Cache Entry: 115	Unicode text, UTF-8 text, with very long lines (65452)	F9718817AF161D92D76D42FAA7B1C592	C07597E869B66BE593ACB5BE8A27782E26DF61EC	0FFB1DEA6E22132A6A7B5039EF2A9D530104D66269447C4667C31CFE70F7D948
Chrome Cache Entry: 116	ASCII text	7363E1A92A77C2F6AB0332C9A64CC051	B424892E6298C96B00A63BF7B3244AFC93EFDEAB	4E640814854B6E878309D5B3ADD69C450D0995CF83617BBFAFBA63EA2043CF2F
Chrome Cache Entry: 117	Web Open Font Format, TrueType, length 47748, version 1.0	4A573FAC9111D6ADCB3994983539BD75	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
Chrome Cache Entry: 118	ASCII text, with very long lines (65440)	989E0734903E88BD11A2F87224A25417	8AB4FA9597D8F00ADD77A06CBC0A92D4840D189C	C17E9F34C0FE1A3B1157C59AB69A1193C9D50906CF4827BA50261E152AA595E0
Chrome Cache Entry: 119	ASCII text, with very long lines (8936)	2F6FDE4CBA3AD9A1F287620FD833AE0D	97138C2E1807F1FEEE542723532130C9C06A7364	51DDA176EF6DCC935F425A488A1FF2200B8DAF1A1A30DA1A6EC9EAAA5A5E3ED7
Chrome Cache Entry: 120	Unicode text, UTF-8 text, with very long lines (30982)	BE691A15672DCB9C9EE784716E37BD4C	88ECF813BA6E08B7464F37D52AD7FB7299B7D17A	1A476B931DF6FE5B443FAAC0630AEC30E590F42965044615299160D94A60A7F2
Chrome Cache Entry: 121	Web Open Font Format, TrueType, length 47748, version 1.0	4A573FAC9111D6ADCB3994983539BD75	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
Chrome Cache Entry: 122	GIF image data, version 89a, 44 x 44	DEBD77E543E64173837073B5751ABB08	71577CA453893F08A57A63953B836E8198D878AF	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
Chrome Cache Entry: 123	SVG Scalable Vector Graphics image	6E132855B6DDD5C7A1FA7DAD2C9FE964	0342D3665682749F7C312B8B1EE6A169FA4C68C5	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
Chrome Cache Entry: 124	GIF image data, version 89a, 228 x 234	9F2E17B1A3A99C9D94E3FF82DD2AF341	25B20595E3D684A041F343672E043FCEA248B25A	1860B1FBE187873D719CF45A9A02E32C942AFDE30077E55165855CCCBBF22CF1
Chrome Cache Entry: 125	Web Open Font Format, CFF, length 33752, version 0.0	4DE7535F6F5DF8D5437C21C068DDB0EC	3553204B4624CA41CF1C4F3BD9B37D8C968CBA23	8F6A520A392FF62149E5FC5AA87BFAB9B3816CD6010D4D4FCA194E8683CA498B
Chrome Cache Entry: 126	ASCII text, with very long lines (23649)	AF4725803A1C4CD80ACB7A7C4A81110B	6DAF5742828ABC0560F7B8661B986DE42ABF8306	F3D8E97FF1BB6EDC836D0788B5A78AFCA4860386B248DF4B4BC32AB63E72B339
Chrome Cache Entry: 127	ASCII text, with very long lines (65448)	37D3E81979D1329C9A17C16C6C0B4AC4	41E07AD3EB64E807A658302390C5A57E52377F3D	3071863E3EBDA01F1931DB48BDA4B572070BD4982DD57EB14440A6AAA4C73D59
Chrome Cache Entry: 128	ASCII text, with no line terminators	1000A6CAF7299F030F5C73974CCD617E	44C1943894BE0A43D5F1176C085F82A9CF75DAAA	BB107868145E022BC860243BF8E7144DB9F5350D02F73F9EF56F70C3B89A2BEB
Chrome Cache Entry: 129	HTML document, ASCII text, with very long lines (65448)	9B77D503E6E40B9EC40CC05068C4F6B0	668F210D30FBA706D71DD19421D466F672E68C5E	8B30012277A5A52D32AE45130E38012A651A981186DA78CFFB19918F24FDBEEE
Chrome Cache Entry: 130	ASCII text, with very long lines (13242)	AA0BB38D201D9EB7E5C9E0EA4BE80792	6AD2F44B704F8EA79718CDBA081DBD414A6637D6	2CA01F23E5683592F3302C68137A8475CD0ABE3FE9D0AED5E501F93A2DA44D70
Chrome Cache Entry: 131	ASCII text, with very long lines (65448)	F1CACFF1D8C524865D21895836550E24	F7B969BEF44A15869B7C9C0ECBCDB01FD424B9DB	A383FA595672D1684EB03453B4048919765D46507A9D5B44459D93A9CF9D53A3
Chrome Cache Entry: 132	JSON data	E5600279938AB5FD3D877E2DD30021FC	1C00B775BF6DF9C3A2C4D16C3DD87F44E989662A	1AF04A32AC0EE0174D14E67FD1BBE759BBF5FE8CE0622605B2661EAEF4D07DCA
Chrome Cache Entry: 133	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	AFE00DB89CE086B91A541C227EDBF136	961B2EE6FB39C4D515BDC49EC1BA688B0916F104	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
Chrome Cache Entry: 134	Unicode text, UTF-8 text, with very long lines (61862)	897848EE1FD41F8041DEAF2588FEDC58	776FEEF7C1B9CFA7236BCD25798AA7E48A7A4550	92B44C79CAAEE8FB028A53468447CB6D06CAA26E06B65CEE588FAC46440ECF1D
Chrome Cache Entry: 135	GIF image data, version 89a, 200 x 200	5F32E0AA2C7298B478152B9FD2EBB3D2	69982449E7AE6111779AB2D6FF18A26028381472	CAEDC368429D6BB35E678AAC43574DAC770F236A55D25FD13BC3A06FB21B1E1A
Chrome Cache Entry: 136	ASCII text, with very long lines (65447)	190913587E7767A800817CBD88CF0B8B	457AD10EFCF996E378EF76631CDAACCBAFB8CFAE	1A284295679AE0E8C918509B99A454FAED71E7B313551A6BDC7A30C92AC50495
Chrome Cache Entry: 137	JSON data	E5600279938AB5FD3D877E2DD30021FC	1C00B775BF6DF9C3A2C4D16C3DD87F44E989662A	1AF04A32AC0EE0174D14E67FD1BBE759BBF5FE8CE0622605B2661EAEF4D07DCA
Chrome Cache Entry: 138	ASCII text, with very long lines (11789)	BAD9DC30565F2862AA4367FA48FD43FD	EBD42C26150D4F9D08D62A38BF5E2B2FB0B4FD32	F82ED28D3D41C8F4E2C6A1623896FA76A363A4A87835C97AAE750549B055E417
Chrome Cache Entry: 139	ASCII text, with no line terminators	15773BD842174B268631A9B454013EE2	732BE8BB4EF5B7E645CC32E4E00908637AF40410	D813A1BAA5CA5A75513228489D66F71C2A4CA4FAB71EAD1544008D148C8D6C3D
Chrome Cache Entry: 140	SVG Scalable Vector Graphics image	6E132855B6DDD5C7A1FA7DAD2C9FE964	0342D3665682749F7C312B8B1EE6A169FA4C68C5	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
Chrome Cache Entry: 141	SVG Scalable Vector Graphics image	EC396047518A7FEF11D53D1B4F6BE65B	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
Chrome Cache Entry: 142	GIF image data, version 89a, 145 x 60	097D652B65DEC6E954C335739754FC61	83155314927200EC3B9951246D0C1C3B631B088A	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
Chrome Cache Entry: 143	ASCII text, with very long lines (34237)	F856B3D4370812023CBDAF061A941EF6	AAAE0E7B14A73D805A4C46821FADB5EB051E7E39	01E118A62A7C5E11D435A84C6310FDDB4C794B4F494EDE00F43BBF31BA7CADA1
Chrome Cache Entry: 144	ASCII text, with very long lines (21484)	A317CC5DA2D4CA558A374A505F86F4A0	781E4EE418AA11E00959C0B4203A3D87A98A20D4	916A2619BC6275416FCA1476BD0ABC2BDCE1F24821CA7E3576380E15D0F13259
Chrome Cache Entry: 145	ASCII text, with very long lines (16717)	92D61B50E00F80FC75A8C22CA4C0B43B	C060D52D62B7517A891BDD80E1ABD803C1C51D21	04C9B5B71035630AF29F27E44B2B055F98FA280A7F3530FD4C4E2031569E2603
Chrome Cache Entry: 146	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced	F4B52A4EB3D0CDD585A73EADE7CC734A	00BD17DB2EA7F845910C713CBFF3A6719D59A1EC	94BACE793EA5F351B65F5B2948BEB949B01FB811274A3F8EB8D52B9719A149BB
Chrome Cache Entry: 147	ASCII text, with very long lines (65443)	EE4DB06ED4862663B9E84888B1449BB3	868557B6051BAA0448C0757A41E13CC214DB673D	7252C0CB7D8378D4FE778844672D11818FED42A4DE3517D226C659237DA87E2A
Chrome Cache Entry: 148	GIF image data, version 89a, 44 x 44	DEBD77E543E64173837073B5751ABB08	71577CA453893F08A57A63953B836E8198D878AF	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
Chrome Cache Entry: 149	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	AFE00DB89CE086B91A541C227EDBF136	961B2EE6FB39C4D515BDC49EC1BA688B0916F104	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
Chrome Cache Entry: 150	ASCII text, with no line terminators	84100B349395F367D41A8B44D0020355	676BB250F143F6C863C58C79B4CA1ABF7312DF00	5EAE3F71BE133111621E17FEE9DC04578D885A74EAF4D40AAC9634B7DB4B5459
Chrome Cache Entry: 151	Web Open Font Format, TrueType, length 37560, version 1.0	B9D0556A2C620A939D54C63BE3DF6C6C	97968884D4C5A93C46AB1334CE9E9156C694EA4D	90973DB3F26FE86B648EC735F3183B44902E5CEDF2B1A042402BAC39DA70404F
Chrome Cache Entry: 152	Unicode text, UTF-8 text, with very long lines (21884)	19213DF8CB6E0979F497A613B1CC7A59	5B90E1344E06909F47097CCDD8AC3722F603838F	3AD05702AB7044779F0E22A42DFFE1C0BFEB546D27D06F1ED7D8A1E19FC1199B
Chrome Cache Entry: 153	ASCII text, with very long lines (62117)	C709560D3A5E7FB5EA2EE45F31453DCA	7D56654E25D9A216117EB758AB90B940DB312314	7D7C3910597ADF79BAF8293816032988178BFB27D64BF354E74693A04D037A13
Chrome Cache Entry: 154	ASCII text, with very long lines (65438)	D33ABE3CC710444C881B2D0FEE913295	5DFF05D6B8DC622A5DE015404914615297686CA3	09E7A8624D5D7B86B70D2AEE5654981D211AD556AE50BF37B2D68949950A6DA5
Chrome Cache Entry: 155	ASCII text, with very long lines (16384)	676B998BBCAC362E1190838CF49DBEF3	5097FAA88E3C7F857C9B804B378AB9390E7E90EE	1B4FC92A2F81310CD2811027E11316633AAB180E8FBF67727A3B4975FD726796
Chrome Cache Entry: 156	SVG Scalable Vector Graphics image	EC396047518A7FEF11D53D1B4F6BE65B	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
Chrome Cache Entry: 95	ASCII text, with very long lines (19601)	9F321C3E7FBA0F3E6D43F488ADC930A5	C280266808C4B23969DE943D0ACEBC04DEF4826F	EEA48822A68BD5401D08780CBF238E118F52E7445B6EEAD09C5C5187EAA49BC6
Chrome Cache Entry: 96	Unicode text, UTF-8 text, with very long lines (65445)	C3C54E671D8B3A0E0DB1E6C394D75885	71ED41E8165B0580E42AECF4462B064554101547	1F6B2C9F37CD3AF4D4DCF33F123E7C932823C7A8A08E552F6065A393427B25D3
Chrome Cache Entry: 97	Unicode text, UTF-8 text, with very long lines (65247)	958F1B034B93F045246502153AE2A125	FA9953118165B8372CD35BB1B1780B34D3982823	F7BB75AB57789E3EE06B180A4B152834045E56AA82302B261C97384D875833E5
Chrome Cache Entry: 98	GIF image data, version 89a, 228 x 234	9F2E17B1A3A99C9D94E3FF82DD2AF341	25B20595E3D684A041F343672E043FCEA248B25A	1860B1FBE187873D719CF45A9A02E32C942AFDE30077E55165855CCCBBF22CF1
Chrome Cache Entry: 99	ASCII text, with very long lines (65536), with no line terminators	2C73DD9B48CB342C5FEB81C8A378B291	FA52BCA3CF57FFE2FBA82D3C923B1A3DE1E38E76	DA90AEA8421C31DDAB9FADDF17FC9D1F7EE9B466786C8113F0C523DB8CB3F00C

Windows Analysis Report
https://na2.docusign.net/signing/emails/v1-7e4338614cd04d838758eb831275322bb8b544f118a24b3fb8d83e44a51689ee

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://na2.docusign.net/signing/emails/v1-7e4338614cd04d838758eb831275322bb8b544f118a24b3fb8d83e44a51689ee

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://na2.docusign.net/signing/emails/v1-7e4338614cd04d838758eb831275322bb8b544f118a24b3fb8d83e44a51689ee