hxxps://eu[.]docusign[.]net/Signing/EmailStart[.]aspx?a=a8ed3ab9-acea-84a1-81a2-b671abdf4322&etti=70&acct=968b1e24-ca62-4e2d-ac95-bd81862ae648&er=24cc05de-edf0-81f4-81bb-9a6cd3db78bb&svl=true

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 13:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://eu.docusign.net/Signing/EmailStart.aspx?a=a8ed3ab9-acea-84a1-81a2-b671abdf4322&etti=70&acct=968b1e24-ca62-4e2d-ac95-bd81862ae648&er=24cc05de-edf0-81f4-81bb-9a6cd3db78bb&svl=true
Sample260723-qstdwaxycv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5616	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292873156084848"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
1788	chrome.exe
1788	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe
Token: SeShutdownPrivilege	5360	chrome.exe
Token: SeCreatePagefilePrivilege	5360	chrome.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe
5360	chrome.exe

Suspicious use of WriteProcessMemory 29 IoCs

description	pid	Process	procid_target
PID 5360 wrote to memory of 4576	5360	chrome.exe	85
PID 5360 wrote to memory of 1536	5360	chrome.exe	86
PID 5360 wrote to memory of 1536	5360	chrome.exe	86
PID 5360 wrote to memory of 5616	5360	chrome.exe	87
PID 5360 wrote to memory of 4144	5360	chrome.exe	88
PID 5360 wrote to memory of 4144	5360	chrome.exe	88
PID 5360 wrote to memory of 2400	5360	chrome.exe	90
PID 5360 wrote to memory of 5832	5360	chrome.exe	91
PID 5360 wrote to memory of 2400	5360	chrome.exe	90
PID 5360 wrote to memory of 5832	5360	chrome.exe	91
PID 5360 wrote to memory of 1676	5360	chrome.exe	92
PID 5360 wrote to memory of 1676	5360	chrome.exe	92
PID 5360 wrote to memory of 1572	5360	chrome.exe	103
PID 5360 wrote to memory of 1572	5360	chrome.exe	103
PID 5360 wrote to memory of 5408	5360	chrome.exe	104
PID 5360 wrote to memory of 5408	5360	chrome.exe	104
PID 5360 wrote to memory of 1960	5360	chrome.exe	105
PID 5360 wrote to memory of 4060	5360	chrome.exe	109
PID 5360 wrote to memory of 5008	5360	chrome.exe	110
PID 5360 wrote to memory of 2780	5360	chrome.exe	111
PID 5360 wrote to memory of 5540	5360	chrome.exe	115
PID 5360 wrote to memory of 5540	5360	chrome.exe	115
PID 5360 wrote to memory of 856	5360	chrome.exe	117
PID 5360 wrote to memory of 856	5360	chrome.exe	117
PID 5360 wrote to memory of 4288	5360	chrome.exe	118
PID 5360 wrote to memory of 4288	5360	chrome.exe	118
PID 5360 wrote to memory of 5760	5360	chrome.exe	119
PID 5360 wrote to memory of 5760	5360	chrome.exe	119
PID 5360 wrote to memory of 1788	5360	chrome.exe	120

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://eu.docusign.net/Signing/EmailStart.aspx?a=a8ed3ab9-acea-84a1-81a2-b671abdf4322&etti=70&acct=968b1e24-ca62-4e2d-ac95-bd81862ae648&er=24cc05de-edf0-81f4-81bb-9a6cd3db78bb&svl=true
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fffceccc728,0x7fffceccc734,0x7fffceccc740
  2⤵
  PID:4576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,2957276858372172212,204280998833707678,262144 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1936 /prefetch:2
  2⤵
  PID:1536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2232,i,4190591340231230628,4952972385199552199,524288 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2384,i,3302327703954218280,12078797598998367460,524288 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3208,i,14088943962960942937,7653162189592936689,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3216,i,15902807314849391806,4644261152350298616,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4432,i,9621548297824772103,13286718768507245921,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4444 /prefetch:2
  2⤵
  PID:1676
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=5072,i,11712822341258569875,1049028977235365677,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5236,i,17963498473386978227,18092133589789496633,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5852,i,7709174147465939843,11982786046339169899,524288 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5024,i,6964352654932442767,3309847841907294541,524288 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5052,i,8705134312055038633,3322687225101190751,524288 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4900 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4920,i,12851581156428113010,217239474936245406,524288 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4852 /prefetch:8
  2⤵
  PID:2780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5024,i,14240529232081716718,3770082084140024817,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:5540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5876,i,9092763265820693280,12763593453276718702,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6012,i,1882557486632500369,8756825202504169789,2097152 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6552,i,6535624688914734610,5876994565731628622,524288 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:5760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=964,i,16096518550774528435,12798212883739539096,262144 --field-trial-handle=1940,i,6224894608170472445,2318916627952185965,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1788

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4612

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 782fe6b54722dc7859a0f76c221fac9903c3ede1885bd26a852d6b9013b3ae73
MD5 42541ba212768c466b922c896c5a8cf2
SHA1 3f1971e91baf723bb95baed371636e12153dc4e6
SHA512 c4d6a5ad769c2dbcb0ddfce16295e3476168d9016678b76e2cd6060850851bdf9baef44a38b0c56c98e9222a7e715531f1a5407ed94b3201f115d8d983a9b03e
TLSH
T15AE0E5AECA619C371CFD071860501746E65513173B40848B3A3C8A0D4F7532A435686C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Size 30KB
SHA256 346cfd3df3dbb80d08655ae396a413f66cbccfcf201eae36a6403dcf7ed372bc
MD5 ba0e987e564cd3409e9d6f690d641f55
SHA1 1c2684bd20c775b7497796c2fa66ad4943f6b824
SHA512 dfba7d6b8114c9dd1a3288e053f6e7c18a1909f6cbbdf35e46b1972e15497d1c35fe1007fc90caf111d20ab036d9e1c73c15edd7b2bf24f24ca4a2a36eba571d
SSDEEP 768:lIQXpJaSv1p16Copvvta/RKIxLD+fSw88A9mWLkYWsxMppOD95:eSNzxopta/8IZGA93LtxMppOL
TLSH
T1F0E2F198CDD5DD934DD4167EC4398B88E361B42CCA9D89D33EA9E5293830A0C31AE639
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000036

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036
Size 28KB
SHA256 1bf53b33743c5c45d6c944815f74cbf58b228806858fb6e3a0b86c1204f4be06
MD5 5d66c3d97d4f69a2b3527e3997cbb66b
SHA1 94ef4f31c1a1cd780a172edfbf9e3de61697ef5a
SHA512 feb229cf976dc037130ce7e7a6c0e32fa8bd0c63382b0ffad82e4448767b88f8c17c431055bf834af6a5e92e2d34a6ec7432afdabcea9fae867517613afd3621
SSDEEP 768:YDWMT03T1/sy4Upj+7eLeD2qaWOJEPiAnKJ/JJzySg41:l35/syg7eLeD2PaiaKAV41
TLSH
T14CD2D146FE1D417CE5B277207AAB289E0B333C533A6147B91323985A5C68ED2D9C11B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000037

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037
Size 30KB
SHA256 f2c05d1d723bd31646c2c5adb65c29f317feab778a02511fbdcbc180853ca042
MD5 89c979cff1ebcbd06171dcd15927eb3a
SHA1 ddfb17da64f896ea2682bec12499ed9d8f65f69d
SHA512 ad58c49e307e87d94bcd1ad7dd7d729b752817dc2451d5869a7ecb652622fdc0be51c4baa263747d986898756d6b178570ba9ac839af748fa808dc9b7ceced9e
SSDEEP 768:QpME5mXXDrh5SBgD1LiXEBZiLKLWWPTO45o/fdQIdJAL:QpFEhFDRiXUoReOO4QId6L
TLSH
T106E2E19EBD4C25AE4220879142510089F2B19F4FEDDF1FD2E05D4D25B49D8ADBC2D62F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 b6ef31820e65567e56a7d58e168427bcc5d0f4d5cc7e0d731ca57ce4cc467472
MD5 fce5ada2c4cc3c4a779290b93c340327
SHA1 e6b6a4b4486a7484cc9fea54c0958210fd4b52e1
SHA512 f315d1581af565b98fbe20d2b675e6215e6603f248ccf3ca75402bd619ab0ec9a0d4a25cc04cc708f96eed948fae822efaa6f542b69fac133456f7fc3b7a3a4b
TLSH
T1C63144BA7188D4C2EF6A49BF8A59FCA1B8190221C121B32FFD52559063432FF9C48B45
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 840B
SHA256 2854066435d3a70bce3b69aa8a73ea8842d7f155462528a26f98b7aed055e4fa
MD5 510bde7e40f41ee0b9b24c6dba6c61f0
SHA1 bc4cfa4c49194ef3a8a1648c52c72867e8106fcd
SHA512 f0e7bd50796b46687a9dcfc49345421a9983df5d38fae9f3cdd09a50a17ed46269235ef08b3e8f535a435c7948d801424eaa40ca62960c73d8e30da110633b1c
TLSH
T126014F52C6D444C3DFC088F7C482FCCA7A170214006D5B8B6FB94BB890AB9CF3858651
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\000003.log
Size 42KB
SHA256 fa289f17232df0a475d9ec182f53687cbef1740b49bc35afc1c1694820c24b97
MD5 304362472c0b80fc50d4a05d3bb020d1
SHA1 d20feb4b3343843fc5d2c79f9c616d8a4eb7b236
SHA512 ef47a62dfcb805a4aa2fc421dab0de180a6ac4a167f0a9ede1685cc73553fe97d31b20ff812809031aa3e047cc6cc7ef0d6099f7d64f09ba03d2123363f24065
SSDEEP 768:nuCrK2UaOy2mV2l/G2eWwJN2YCV2tY2u+2lhv2/gzlCtcO9lEaP2XJ2/DcP2hN:RKZaOyrVE/GpWuNNCVuYx+0FmM+fiJQH
TLSH
T117130E2939F91629F3B71FBC5A764281547AFEE8DC91C3989075618C4E20B90CD73A3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\LOG
Size 355B
SHA256 379d56628dacbc6d7c3369be73896f1d1a37dc8c99385f2bd1a2148d4b973afe
MD5 5eb8accb6c30ebc86dc71a248d7ff3cb
SHA1 ba53fb1dd4fd351e15376a0d827ff65137b240df
SHA512 b824445ef61dc219c4a8e8c88bd6ec4507363e141541e3a6d7d2b35cd4b80e4d998a3f8dafdf14284e7edd5216a907e9f7b72ce8796747ea7a6f16890faf78a2
TLSH
T1CBE02079A9C9C56F50D8806B15347B4FCAD6150DD7CDAD454F19F82071CB048F578751
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 9ee455e5dfdf67e3a7ce0393e6522a9d8f33a068480242b661aaab606f6fa539
MD5 da13153f8b3f362102b72522ebe71c31
SHA1 9692d325f959b95c68d59403130115cdd16fb5f2
SHA512 a04bee9ab72b13e147a784c3c2f27d1f7fd6c739fa4395dde6d0dcd8fd6d42f84dae79f89b6ccf1dbecdba4dda3ed260a84ef8daab2efefdc0d91994f062102a
SSDEEP 192:Djza4dZAJlaaIEd7Qetp3BWGfAIlNPhaPxvRfP+gXDDADXDapDrDIDDWfUpWXD5B:Djza4dZAJlaaIEd7Qetp3BWGfAIlNpal
TLSH
T15E22BDF7C3E4992DCD2162F5AB262F1FCE190924532C3D26C9E47E2B93E2871E10165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1ee1bf1ac52cc17045af0293c1a0a453e68dd3e03a23ce6af7c2d06db8cdfaf9
MD5 1d65287ba7ae87ce3cb70cac88a70b9a
SHA1 997fc7a1ec78f91a9b5dcf2a4015020b3179f3eb
SHA512 8167399b93bdf9dfcddcdb6eda3fa44d70ab091991ac520ecc79b92aa246b367709f389d063ec184778cfc5b6baf6305a9d2051f9d428172b6284798833dbd10
TLSH
T1044149F7D7D886AE890195E4B6152E2FCE2D0D54532C3C5AC8D4AE0B57E2971D24058E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 0f1d6bef3e97f47cc2345d47c6826544e6780d13c195129e7e66f8d8e392d25f
MD5 49f510304bf3b69bc4e3a50ae4e170d4
SHA1 681f5f974898b5e204894b9fda5c1412cc2d49b0
SHA512 64568c6f0d8b71eb0ff7d66c8e123fd9b29fa4d94e1ff3aeff1d46edbc237797925db0107c3878ac07b42fa4bb1011bb9ed6e1a800b9f13c93b51f5605b10eda
SSDEEP 192:5R3r/RQTkUov71hpAPRp2T592Hsb+WNnGHvzA2esUCWmVyIsnAUge:5R3r5QZ0BhUXAQwmU2Hne
TLSH
T11E42B62FA920697B6CCBD22AFD627B57D7F1102521E11EC0E6FC8A1C15D76CC222742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 de1be948862b885fcbf84d8d6ccfad48f0f79e0cfa6a5d1924606a7c682e6044
MD5 b797e0b4d9759b6e9b3204e1d3743583
SHA1 0fc61a8a035a1731b9838a97247b6c2e9417bc6f
SHA512 9fc2b6f437dcb8aa0f30bb3f92d085a0c884c7608491901f2d320d2e6a9ccb0330f5d5367d8ce59b494cb5a4865b24628c97a0f3c8b0667abb1e83b264695544
SSDEEP 192:5RLcBzrt6t6k2ov71hpuPRpvFnKpl92Hsb+WN7yWDD4GH6QmAbTwPbWlz2xsUCWL:5RLmzrwt20BhqXqQwBkAfqbE2KnE
TLSH
T11B62A46FA9202A7B5CDBD22AF8517B5BD3F2102665E01EC0A6FC8A1C15D7BCD3217427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 4d789f636ef62d11994e16734b2f83b704c20bd242a1bab446dc2916eff6d4c2
MD5 6f95b439d6708a75e6a0c9b82738e6db
SHA1 79b4742fb01902c2b1f886289699456c2f9308df
SHA512 c3dc2901e268475a3f48915223a28e3c9bab0cf7c7bce7e41e644be3f784720cb2eec0843b9e80a6d70f9967137911e490813565f827875285078419f6057630
SSDEEP 192:5R3rt6t6kUov71hpAPRp2VL592Hsb+WNmWDLGH6OduTwPbe9sUCWMVyIsnAUgE:5R3rwtU0BhUXuQwiRoqbe2FE
TLSH
T1CD52B46FA9206A7B6CDBD22AF9517B17D7F1102621E01EC0E6FCCA1C15D76CD222742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 562fd0509f58b987bde2e6dedffe51fb2fa2c20bd52a3c29ec9b09a0d72e84fb
MD5 95e159ef26aa890d0ebdcd4602f34878
SHA1 797d6b3b2e7b72af1ef9c18333aee51053cccf75
SHA512 b866c857fc16a96c7a4d6be594756074bb7a7e5a615dbafac87ca8cfcfea3519946421fab57f7ac5dba6ffbe4c9c34d2ad4800ed87587e4e6a87f557b35b4242
SSDEEP 192:5RLcBzrt6t6khov71hpuPRpvFnRpl92Hsb+WN7yWDLGH6QmAbTwPbWlz2xsUCWAO:5RLmzrwth0BhqXfQwCkAfqbE2KnE
TLSH
T11762B46FA9202A7B5CDBD22AF8517B17D7F2102666E01EC0E6FC8A1C15D76CD321742B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 c54836683d23f9fee57c69a9d42002f448a01bbb5b6b38437c5fcac9744adcc4
MD5 97aacfb3977979cfbf9d8a6c4d36d689
SHA1 28c462804fa985bea43aac67e658ae60025ec226
SHA512 ac229055b177234c91f43061b9900ff41ba000713f4120fbf08cb18c16d47d484d5415a198c6f1896335d53e2a7e2f4dc407a06b90151f49d9994124c8990d05
SSDEEP 384:+wjKJ7KxkXqKf/pUZNCgVLH2HfgslU697pLuLcSjwxXODKh+ErU3wZJHG/A1YTPB:+0KJ7KxkXqKf/pUZNCgVLH2HfgsG697U
TLSH
T192720A676C488E770F94C68CEC177F4FADB5024B65E9886483FA982903D5BCF11462EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\20b3c329-eac0-4f12-92bf-373206a76962\index-dir\the-real-index
Size 840B
SHA256 60f38446a6648aeb94d2cbee1a655b200989ffd2ffed9159220d614663692c3a
MD5 fabe3ca272868420642b0ea75c07420e
SHA1 8a0fc489c62ff3823dc95fae9d1a1c64ae79a8c9
SHA512 59228033abadca37714058ffca1a7a64f0e71f421774a22d4a520c342efdeb6458a7ad79b1e89748cfa0777cec2622ca3194c77cc2e77a688126496b0498e2d7
TLSH
T168014187037601D9CE520ABE34B256C43BB8C7CAE781138B519DBCFD6852A8B7A25424
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\20b3c329-eac0-4f12-92bf-373206a76962\index-dir\the-real-index
Size 840B
SHA256 ebd9e4ba12da92779fee338f327d78041ddf2eedba546449e9988c7dba068bc6
MD5 cea453126c1645a6bd7b980412950190
SHA1 87bc59f6a45ca78d64fcca52e8a49e85b7abea60
SHA512 024c93d32e83335b40fcd13f14e7da671cdaebc6f5bb7dfd9114519aea4e2dbce5eab877022cc6e15aa1fae4682db5b86629d5703edb970512967bfa38984cdf
TLSH
T18D0147C6437610C4CA0506BA346306D437B8CED5A789234F538DBCF97413E577611824
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590834.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\20b3c329-eac0-4f12-92bf-373206a76962\index-dir\the-real-index~RFe590834.TMP
Size 48B
SHA256 197f980c68006441b2f07a9172d5502bca17a93d1f9f751950af3e75146b598f
MD5 9de6244fedb604733138e31554f31393
SHA1 3e2864f977e248724564157ff2bce89712393a07
SHA512 dea1afe941dfcf15d41d3a4f83fa0395b43bfad7ad2dc1e0c9b489430bf6464f8925629b28eb1276c3af91e9a0cd79c90ed7144bd75392add4053f5f9027b47d
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt
Size 182B
SHA256 954194f1d2c7a870e0363f098a2aeff504310891d608208794292d8d6c6bdd03
MD5 e8b757d2146c88542f98fb70974c17dc
SHA1 b86776fbe311c2627eba37904af892f82e81b3e7
SHA512 bb15f671d720cd4c481b0cb954c762f29af7e782f8a84e4f275d190109c164dfda03f91206759b436c28f8c84fd0311c1331aaee8621e526aeaafbae97967a51
TLSH
T1F5C0127618A55823FED1B2C457021B48C21763FA4FD1C9C1180CE01056844111547B6B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt
Size 182B
SHA256 f8e391d0e595bfb08aac44e19eee611edcfaa4d28a6c759d243d2ee56cec2201
MD5 3c7bc729d162cb9812293a5725e2974e
SHA1 7abe246db43070dc08f753556465c236caba16c6
SHA512 02894c279cbf949b5efdf6367664ef71a143c7669eb9a4a5080443412e6761614c92c870b8c8aa8fe2910afbf9e6e203dfeff708a566939c5dbc299a7be825dc
TLSH
T161C0127618A55423EED0B2C467021B49C21762FB4ED5C9C1190DE01052444122947B5B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe590863.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt~RFe590863.TMP
Size 186B
SHA256 e31df9133277cb04a12b85c79cb943a662761408c30fb0843718982f6e944b91
MD5 8a79f8fd3bd1573ca95b59a2e41828b0
SHA1 906c6477dd7f75ef609e028d7b5baede8f576822
SHA512 d1783a2f982db97311e39f89b8a80d0aff844cf28121447d0bc82f3a7b43c35d5fda1054b7db7f3c18c352ac15cc4a97c15bd64a7083d7efadd3ddfc0530ca6c
TLSH
T1C5C0127618F55523EED072C457121B84C2176AFA4ED1CFC1184DF0106234412564BB5B
MD5 SHA1 SHA512 TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 27KB
SHA256 fb61b3fae68417c8f3a1e0f55514359aa51a749119dd767d1ca51903706bb586
MD5 1492581785df7cf9c98e099132721ef0
SHA1 1b5fde5ded8dfbfd423cd6610fb0abb5259da1e6
SHA512 4edf01d0454a09a9ca6ef6daef20dc1e90b6e880d027ac49f8c2af24b3d4c197f65f285b58b23e397663d34b9d7943d67801f8bd09c121ca7bb3a4ae74d54b90
SSDEEP 768:v80Kd+kNZaePh+LCn1AlFZvMYelBW7u6OygoNwUThFuGbYIL:R+/ZmTeTwQGlL
TLSH
T137C219F4B3B4D4330FE745A5B1312122A17772463989C1E5F26C9ACA2A4D406BB79F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 3b4131539c74d990e2ad87615a22e9f376be720b32a9538c3f11c95ff881ee43
MD5 0c50d958e5607141570e1f815cb9164b
SHA1 dca50d7b5457ca599f9f17b1f309ee090757e6e7
SHA512 d4b2df1c258acc8d4cd48f22de0eea186466cbc59d40dfd8c7d25e9721bb22fc7f0838387e477aab4b6d274315d30e5b145b82c40dfcf4b75d439acacc0600e2
TLSH
T1F1B0124084826252D1830BF41142248C7124AF209A0A170183F0A962C8253548115150
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 ed35058a2c0e1ebfce04f7fb1bfc32323aaa1681dd4332efe3387d3f2ff44a23
MD5 c9341d54ee76c004e5366601eedb64c7
SHA1 34647cb8fa753d8f82d118c59089953d9687195e
SHA512 a255df125faa9b0cbeab0d62994f3eb1a7f7fc5a1ca38b26e0d1b07c64cbd8a798f7c724e0e798c225205eb62886a37f3b11da3dafe7ec648f00e54b4c815630
TLSH
T187C01203C81661B1C20F03B6318AADFCF394EF34EA1F174A76F02923EC345328114152
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5891bc.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5891bc.TMP
Size 96B
SHA256 9c9aa98d1391096b1ab0e8524cc45b2ac16481aecba561ed5075293b53804345
MD5 cb14bc185b6155e893c5952e11ec4f42
SHA1 6502531c33edab23abdd2cb3e34ac3a111be2d46
SHA512 a3ed1391ec43635c7758c8f9d965147e8b85fde29b270c796a8c1602709603e7553ee8949dee3ee77335bbc978206efa90c0dce42cdea5bbc40a5141cedd3c9f
TLSH
T164B02280C0033A22C08303B03880F8C83020CF28C283028A82E00B2ACC30220CE28820
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 c650057692a63c0025d6993e97c454254addfb2db2ed8f018811a0f9019e3b99
MD5 616b2fa2ee30fef47ba5d1738b822b3a
SHA1 57bb5c7d41e4a6d668bc83be1e73d9a5c207968e
SHA512 03cbc8f1a0de9c3b110ad0a0db373f5ef8ed19e7392bfbf265202284e6ac3f795ea80e7ac24e2d36e8e3ff84d40b25216373e5ab5b2fb572dd9f6ccdc50a9fde
TLSH
T1C6B002A4534661B3C80457FB51D3D55BB7310D9D13E2758284E21C99D4313748567443
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 24e06a6bc5d04e37b2efee492db36d5c00d87e00a1a036e3537ed45ad31752ee
MD5 b68ee0762f96681cae61ed8b6acbb750
SHA1 4e7bb02cbaa847c572874e2540299a321816c126
SHA512 9bfcbd320fbe173aa39f848e31fa79b8fe884a66b739c68c5958d227134ac58bdc3e95cb2fee8befd07a3b83eff74597c29219be80159bbb3fb0383f9b28d07e
SSDEEP 3072:yGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Fm7Rkm1tYpBeh2BAo3
TLSH
T168C3123B4D75A9375DB9BB0EB08E0B1F1EF24AA7C920DE52C8D85B0427E97CC1A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 20dc238a27d77efa84e8a4eae26d19a09eed77c2b411d39bd3c11bd4120a0324
MD5 15ae37dc0fc0d2f15663873209afc0ff
SHA1 791e9b1a2cd7545728f9fdf71573fc7b97ec2d1e
SHA512 68a10e0c374b31ec8e52c743e51ab95271a88fb21f10ba76807964ee1b233f1e625785fc06812962a3bb47f6523eecbe62769ab697e81a7802f3122a91aac06c
SSDEEP 3072:mGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Rm7Rkm1tYpBeh2BAo3
TLSH
T1E4C312275E71E9375D79AB4EB08E0B1F1EF14AA6C930DE92C8D85B0437E97CC1A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 850a5908b39c88165f7de448347d529d2c312affac657d52b14b0794ceb28512
MD5 5e66542cd042aff9941b5b8fa0c7add7
SHA1 f0003af95953be602e824eac65cde5cef48091fe
SHA512 bce5568bcd4494f839ce5c98d869e06cfe7ad0611cd033c220ea9c6e0aa69cc1946912dd606d1ba4b7b89405fb25c77e4f7266d6917e614e88cf3f64eefdc4e4
SSDEEP 3072:qGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:tm7Rkm1tYpBeh2BAo3
TLSH
T169C3122B5DB5E9375DB5BB1EB08E0B1F1DF14AA6C920DE92C8D45B0427EA7CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 6b2c25d8453a54065a900eee6be7a6ca659fc1a2ce2fcab66f485c5cb3ee17d3
MD5 b62a39c59d6bd2f7f257afd0679f3ef2
SHA1 3fcb5aa53ed8ae016a1926a3df67dc2fc23031a4
SHA512 5468d8000e1006fc90d104ada13a7732f782a916dc1db75147118f8e8e0891b7919bbbba5895f3afbb09b5e43488d5e94d520884e940128dbe0d45833f1bf0e6
SSDEEP 3072:RGm7D5Lk17ox1tIpud63U8BehbCBi9fTrM3:Am7Rkm1tYpBeh2BAo3
TLSH
T145C3122B5DB5E9375DB9BB1EB08E0B1F1DF14AA7C920DE52C8D45B0427EA7CC0A05A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download