Windows Analysis Report
https://na2.docusign.net/Signing/EmailStart.aspx?a=91c094aa-160d-4756-b8b7-0f3428ae2124&acct=e9c112fa-3eae-493c-8bfc-d97737244948&er=7fde1f21-6f07-4a5d-8217-7c1e45a31ab1

Overview

General Information

Sample URL: https://na2.docusign.net/Signing/EmailStart.aspx?a=91c094aa-160d-4756-b8b7-0f3428ae2124&acct=e9c112fa-3eae-493c-8bfc-d97737244948&er=7fde1f21-6f07-4a5d-8217-7c1e45a31ab1
Analysis ID: 756305

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

No high impact signatures.

Classification

There are no high impact signatures.

Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\GoogleUpdater
Source: unknown DNS traffic detected: queries for: na2.docusign.net
Source: unknown Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: classification engine Classification label: clean0.win@25/0@10/139
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Program Files\Google\GoogleUpdater
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://na2.docusign.net/Signing/EmailStart.aspx?a=91c094aa-160d-4756-b8b7-0f3428ae2124&acct=e9c112fa-3eae-493c-8bfc-d97737244948&er=7fde1f21-6f07-4a5d-8217-7c1e45a31ab1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1796,i,12823625518947830979,6690553971199126096,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1796,i,12823625518947830979,6690553971199126096,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\GoogleUpdater
windows-stand
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
23.213.161.134
 unknown United States
20940 AKAMAI-ASN1EU false
142.250.186.67
 unknown United States
15169 GOOGLEUS false
142.250.185.206
 clients.l.google.com United States
15169 GOOGLEUS false
34.104.35.123
 unknown United States
15169 GOOGLEUS false
142.250.186.36
 www.google.com United States
15169 GOOGLEUS false
172.217.16.205
 accounts.google.com United States
15169 GOOGLEUS false
52.89.240.141
 arya-1323461286.us-west-2.elb.amazonaws.com United States
16509 AMAZON-02US false
142.250.186.106
 unknown United States
15169 GOOGLEUS false
107.178.240.159
 api.mixpanel.com United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
172.217.23.99
 unknown United States
15169 GOOGLEUS false
162.248.185.47
 unknown United States
62856 DOCUS-6-PRODUS false
142.250.186.100
 unknown United States
15169 GOOGLEUS false

Private

IP
192.168.2.1
127.0.0.1

Contacted Domains

Name IP Active
accounts.google.com 172.217.16.205 true
www.google.com 142.250.186.36 true
api.mixpanel.com 107.178.240.159 true
clients.l.google.com 142.250.185.206 true
arya-1323461286.us-west-2.elb.amazonaws.com 52.89.240.141 true
clients2.google.com unknown unknown
a.docusign.com unknown unknown
docucdn-a.akamaihd.net unknown unknown
na2.docusign.net unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://na2.docusign.net/Signing/?ti=0887c2ccf2404f13b8802110625d2cba false
    		high