hxxps://na2[.]docusign[.]net/Signing/EmailStart[.]aspx?a=6f03e92c-e76b-81c8-824c-67bdba9dc445&etti=25&acct=7257188b-1c3c-40bf-9bd6-d5dcab808477&er=4431048b-ab0a-8868-822a-b5d57f69ab19

Analysis

user interaction
yes
max time kernel
104s
max time network
104s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
30/07/2026, 15:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://na2.docusign.net/Signing/EmailStart.aspx?a=6f03e92c-e76b-81c8-824c-67bdba9dc445&etti=25&acct=7257188b-1c3c-40bf-9bd6-d5dcab808477&er=4431048b-ab0a-8868-822a-b5d57f69ab19
Sample260730-swkx1scl21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1296	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298989287157207"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe
Token: SeShutdownPrivilege	1248	chrome.exe
Token: SeCreatePagefilePrivilege	1248	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe
1248	chrome.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 1248 wrote to memory of 2056	1248	chrome.exe	81
PID 1248 wrote to memory of 4892	1248	chrome.exe	82
PID 1248 wrote to memory of 1296	1248	chrome.exe	83
PID 1248 wrote to memory of 4892	1248	chrome.exe	82
PID 1248 wrote to memory of 3596	1248	chrome.exe	84
PID 1248 wrote to memory of 3596	1248	chrome.exe	84
PID 1248 wrote to memory of 4804	1248	chrome.exe	85
PID 1248 wrote to memory of 4804	1248	chrome.exe	85
PID 1248 wrote to memory of 4872	1248	chrome.exe	86
PID 1248 wrote to memory of 4872	1248	chrome.exe	86
PID 1248 wrote to memory of 784	1248	chrome.exe	87
PID 1248 wrote to memory of 784	1248	chrome.exe	87
PID 1248 wrote to memory of 3840	1248	chrome.exe	90
PID 1248 wrote to memory of 3840	1248	chrome.exe	90
PID 1248 wrote to memory of 1052	1248	chrome.exe	91
PID 1248 wrote to memory of 4920	1248	chrome.exe	93
PID 1248 wrote to memory of 1536	1248	chrome.exe	94
PID 1248 wrote to memory of 2548	1248	chrome.exe	95

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://na2.docusign.net/Signing/EmailStart.aspx?a=6f03e92c-e76b-81c8-824c-67bdba9dc445&etti=25&acct=7257188b-1c3c-40bf-9bd6-d5dcab808477&er=4431048b-ab0a-8868-822a-b5d57f69ab19
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc0cdac728,0x7ffc0cdac734,0x7ffc0cdac740
  2⤵
  PID:2056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1584,i,16600876260444302938,15876628314196781219,262144 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2136,i,4782674463944497434,2376029964003029720,524288 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2164 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2260,i,1402936730512732910,9845711504474057594,524288 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2616 /prefetch:13
  2⤵
  PID:3596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3204,i,13535952363667847063,6973385989962880524,2097152 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3208,i,9820072609323323603,13503269131268434736,2097152 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4288,i,9587231743965382956,3203970561763517829,2097152 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,2122930788775072856,15468298022291356398,2097152 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,14505830870160123545,6925988706147168224,524288 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:14
  2⤵
  PID:1052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,13363673831739558344,17165257368294282253,524288 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:4920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,4030080681815319225,1155042061778355840,524288 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5660 /prefetch:14
  2⤵
  PID:1536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,13940707352746239353,3042299187812242758,524288 --field-trial-handle=2016,i,6953987797131989585,17525978440963711845,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3640 /prefetch:14
  2⤵
  PID:2548

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:444

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e246ba98e5b2a8573b4c1ba578b994f6de6faf305ee80e8a2285c5911d6936f0
MD5 9c715a230bc7a50e4fd27fa6de70a666
SHA1 34e33f1b350c55f43ac9ccbb9373ac0c9261b830
SHA512 755821677ac85f31f9794fb4ae2d7f558bb8aeb26dac049c73955376fb3720af88654a98b522620f4e33657852ac3ba998ca6a406fc8e8c247f55db50a08e349
TLSH
T114E02BEACA11AD3B1DFC0719A4545A87DA50136727504D0F3B3D811E8FB16368581C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 960B
SHA256 36d576a5b663bba9953fa2551bee19b7c4cb7242007b8e5ffc0b007e4aa5c104
MD5 6977534cac446407a50f37615ddda148
SHA1 4ad310594973317a8e1cf17cd32c4ddba4f22f4d
SHA512 a8446ffb7188545db5191208597b32242ad7bc17cde1cfded21945baef02c6a4ba441205a0879149b9180d0ba7c0c37c6aed2057381adde20cefbdeaacbc9d9b
TLSH
T186114505A4C1CD07EF2400F31421ADB02694A7088D07DB07F695CDD9F86FAD2A2E26DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 552B
SHA256 0a9d8b9a47f56a76adbd6a3098d36fc21af1ecd7e9712c97520090571d5a36cb
MD5 9e938a6e5b45289490922f7c0cd74ea5
SHA1 fea23c962482750dc7b61977da55e22fdbc570ee
SHA512 ca6a1260a93256fd850ea3ef0a25d00cf7ba25b149573e2c58bea2e6e5c989b8e4b4dd2fcb26ed817d0690aa2e8cf57cf4ba39729f614abee61310e456334575
TLSH
T1CCF0E514B9C5C603CF7050F350B36D906AC8840D8D675B4BB3D9156DD87F69AA17119D
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\000003.log
Size 49KB
SHA256 c4903ce7b481b6d8963254c293b1d5eae65db1638bcdae3116784bc539d33c6b
MD5 bac8ebfff0128eb16daa59102569d562
SHA1 51da881dcda6c95e9007f21771a6938d4312daef
SHA512 ba012be47a13c4d44bc0bb6a0e4e631fe32b4aa36c5838980a547c7f1a69c97d3b3070941600dd52092f94ce2d32b3772fdf58ebcf3a0020a4ea60c5261dbf02
SSDEEP 1536:mZQGSmvmUsA1Bq9kuQZ0FfnkQ7mFK39r+:mZQGSmvmUsA1Bq9kuQZ0FfnkQ7mFKtr+
TLSH
T15C331F1976F91B24F3B75FBD5A760281587ABEB9DC91C7589071214C4E20B80DCB3A3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\LOG
Size 353B
SHA256 0a9080f5a54d4d1d3fdc97f394ad0f15a3ee05b431da1a097ed1eeef635ae343
MD5 bcdc696b4e639b9da0e52fe322ff0eaf
SHA1 b9d28d4d3934adf60abb0854e15c9c3ca9eaf675
SHA512 4ebf07e9bf513915c49e18372993953acf72808741cfac1dd5336ea230d46795099a0a861d4b3a059dd2cc0f6df72ee5ce38710aaea3ea8344b9d25a8116feeb
TLSH
T15FE0D87894CAC66F619C80AA65307B4EC9F2150A97DC79854F06E81071CA008A5E9651
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a20410730424c4f8e68374c8d101bb2a92b8b21f9bd81fa8358d11bf7e481ced
MD5 5c7b0d120d7e1ba69667c4b16629003c
SHA1 e15107f0e8ef6740dcaad92caf54f3cd29824a92
SHA512 26bcb86ecb41e9ab51b31e7cacc88443b54d952d7dbf3ff318c7421298b654eaf77210a6e86cada9f2967cb028406322d2a328ea27fd2050b49a727fced9a4ac
TLSH
T18C417AF3C7E8897D890156F5A7292E2FCE290E14532C3C5AC8D4AF0F53E28B1E24158E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f64b193c6ba87653bffb9dc42d1789f7df34b4d88f16c1131122ab4023eaf2c0
MD5 643e50fe8eb9616d20ebf5d19dca4b49
SHA1 a3f79020bffb7b48f62e552f63c7e735743cb3d4
SHA512 24e72b5cdcfe41ac135ea1aa3d63855b5ba389742f2c0bab3f674a89fa24d4e112598bd9ba32f5954e0ff3931dfa5af6845a6d7ca2714e4052c0788d16519f79
TLSH
T14F518FF793B4997DCA1192F4E7256E1FCE290A24131C3C66C9D4AE2B53E2871D10075F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 500b7543763afcad0b36cb8144b3171aa4d2f9aae70b05c2dd9449d29f8ea760
MD5 972bae9eb8e5b0cf99490b6176ad06aa
SHA1 d4452a1c92c98921b7f93e4ea938942f2b7e3134
SHA512 e2525354b2a81283c62cf556e7c1243c34cb1160a067a0f4a714ec39986af4af47c55f0f174028f940ced8c5653f8f256011fc8bd95987279651e88a5fa20fcf
TLSH
T1B9518FF793B4997DCA1192F4EB256E1FCE290A24131C3C66C9D4AE2B53E2871D10074F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 1a0e893ee6d5e1b08f1202e70f31356c67229e63b0cb1c6589be79241156d22e
MD5 dda803393783bff310717d9b02c71394
SHA1 5ef8e3bcde2258962f45cf03ddda76c770d5a156
SHA512 aeece7f4dd9a0c48000c2d9b5d5dbdc74fc4f9cd5240887ea0045973227974942f06a9ae92e3400b867e5a7165b9d81de040e089bcc65061ad8762bc11f9ef6d
SSDEEP 192:NRqB1PfnBjhksv7sBpAPRp28a49NHsb+WNsQHQimE2wjIWajYVyIsnAUge:NRqXHn848UXLrw242Oc8e
TLSH
T16D42F86FAA106A7BACDBD229F9627717E3F5202135D01E84E6FC891C15E79CD232740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 0d2a156654c1c543f684a1b78fc1acde7a605db8760d180da55c6029bd11d4cc
MD5 fca0a080e03e1f9f1f1ec2f425ee2b0e
SHA1 04435d408b3c935d0c54889e9019a986e7e3d26e
SHA512 0133469141ee35d9bb385a53718d74af5f96fe7ea3c4d774df026da6bbcd201abccd4b10b8b4bb6f9e60e57cecfd324ba1f320a5bc5ef4bba05fdb56deff9ffe
SSDEEP 384:7tjtw7KxkXqKf/pUZNCgVLH2HfgslsD7pLuLcSj5EXODtw+ErU3U2HG4B6T6:7ttw7KxkXqKf/pUZNCgVLH2HfgsiD7pa
TLSH
T14572F9A76C4C8E770F94CACCDC16BB4FADB5024B65E9886487FA581903D5BCB110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\0a2b129b-c9d7-4cb3-8773-1c848a02d9d8\index-dir\the-real-index
Size 216B
SHA256 2e34c9cfd7f974ed0d15c83aa9b5f07c9c44eaa8049087a85b304c0de83331b0
MD5 db0af62d13efa8719b0ed5d2784c6d4c
SHA1 d4f688c1fd0590c88b5d9229da453fa66f7c3907
SHA512 5e819d0e38812d051b583441cf7141685780d4ef49dc226fc0cddada57363e76f5dd5a2d9caa58cb11226665203402d551a7fe38aed0edf3584b271590bba8c6
TLSH
T16CD08C200E885A3EC22503B6A09007C1377389B1EB806A0328C028B0EE631A32A7A88C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\0a2b129b-c9d7-4cb3-8773-1c848a02d9d8\index-dir\the-real-index
Size 720B
SHA256 dd45701b9c8eba286f93490d480ae309a88636d7d08d64e7b4e18c1dcd010d83
MD5 b5246c8906714b473cac3f50fc27b31b
SHA1 6d668a9bbe895c3b98ffa8be4d6512f38a35e3d9
SHA512 561de20f535272f381d0a866ef60f06464d78021f008fb2569acb43748b9aea6d1943835853f7d108dae1e12d4208fd900f39e785f53fd9f5597177643561d58
TLSH
T1B70105504A741EBEC59513F7505052C03FF6D5E552415B43315424FE75232DABE590AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5921f5.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\0a2b129b-c9d7-4cb3-8773-1c848a02d9d8\index-dir\the-real-index~RFe5921f5.TMP
Size 48B
SHA256 8dccce25e5558274827ecd1dbe9340ae30ee9d1ff1bb54ddc09cfd45a5102ecd
MD5 e4833f228ec092d49bd2b40958d8616d
SHA1 42c7366a4b33a8b059ca2319b42c926597849b8d
SHA512 f1a3f991790bfa2bb62529ca210cfe1b001a6e8a8912f4c952d91dbddab9ba26e5f0562064e09237fed9f8e70087cf12d6de72be071e94514504f7b26fdf468c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt
Size 182B
SHA256 b764277f56a6a3f9a956c6d1c2f9fb658608d6e29d29e1ba85a05a90a4510da3
MD5 df67fe64fd2f77bde34afc58a1c85779
SHA1 0666d5a37dc0ebcfad5b057b7825038d01f2f5a3
SHA512 36e4223f25a02ab97662b02a520413fe47bed9c7ff66c01abe94a4884d6fb57829697fe0d9ac615a2955d965d3bd6d43fce561e783fe5418fe3bf2bbb9929302
TLSH
T1ECC0123609A064769DE173C507423B98821661FA4EE19AC1140D95A087544221A1FA57
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt
Size 181B
SHA256 2b0915639b9a800245b29b0a767b5b5946990dd4d6a9a4469b99fdd36757f7de
MD5 1254df3138fef91b6fe595567af9fcb9
SHA1 a9786ea98d63b264a0b72e20b34913dabf3e71fe
SHA512 1330b15310718a6425307b4387737aaef67d3de0d217724647b875d7adbdbeb6b0e723e856536fd1942ba594e4315fc643535eb67c2efd1824b8baa03b097f13
TLSH
T116C0123609E064669DD173D517423758C21661F64EE19EC1140D946087544211A1FA57
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe592224.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt~RFe592224.TMP
Size 186B
SHA256 96a0f81f229820f7e7fa2413c7101aa2a1414df01d174402628c26068adc81c1
MD5 c72ad15ac71aeb56ee0368b063c48855
SHA1 1eb5d4248fb95e370538a130769ec040c5436b6e
SHA512 1e67936777660b682a332fc9144b5b775cf2fcc6ed72c37df7e4784dbd69e8b5eb208d003d8dd31cd5ac21cd9ce9f6d70a6bd29d4d5150bd31a4fc84317ac942
TLSH
T19CC0123609A064269ED172C507423789822669F64ED1DAC1144DB06096744125B1FA57
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 69e1ff0b52d5adab6d84651b10a3a0b9c3db33dcb663bb716707b3c309aa2ca2
MD5 1c43f3ed03db5ba457b50c22ae9401ac
SHA1 87255d66ba1f034f6a6fd7de7c4a87d3e60b2d05
SHA512 b5f0f76db055e55964b8c5d4c1d0ebf7484f0990ec973d144774944c370831c09ead6a7290314f100eb00dca5c15e5f3b657f61f956b75acb862938946b1b85b
TLSH
T1DCC01213C816A141C14B03B520C69CFCB258DF24DE3A339DA7F05D72EC342328115153
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591f84.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591f84.TMP
Size 96B
SHA256 caf5c904c196c388ed40aa88d9f88b7756c0b71a26ed7c0faaf6c999737b21b9
MD5 30cd169d2c4c1afe18a215873b5d2ec8
SHA1 3a1cd7c294806f34c0a6cc0a8173aef2b2b10236
SHA512 1544f2063544e93d9c3d6e8805bad44ceac6f26fa63c036c9702d183678b07da8a64556e9ab04760a4159c2a733bd34a53f25a945f734f49e7355380bdb10e55
TLSH
T1C8B02200C0022303C08303B02C8080E83030EF32C3230202ABE00A22CC32A208030020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 04dcbe52bab72b8ffc64c3d2e6114b9de902f8822052fb6cdf8b7260c1068b6d
MD5 82472fb22866efcaad16dff87f1a1e10
SHA1 1919b703294827b6bbd76bc70a6fcda3492059f0
SHA512 90eeb3dc256a2a4648db03f8cfba9dfb166d32bdcdeb10528562ac4fce37f96fd328fd20419c3d44c0dc93c61eff53be1af9ea2d35df0f69ad6f1209e8e0332b
SSDEEP 3072:hGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:wm7Rkm1tYpBeh2BAoe
TLSH
T1E8C3123B5E74A9375DB5BB1EB04E0A1F1EF149A7C920DE92C8D85B0423EA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2f8343d2861c69023f6c3ff6989e67d2ea1b35b0b05ea70683f900b868bbea80
MD5 2dca834b1ec8e6b87d205691c26fb05f
SHA1 e450a4967816ad6091ebf817936afb0719006e51
SHA512 dfd229a1f3754714ec414f830f5af1bf2abd576279ba5ed557216a1aa9e3cb2d42abcfeb4cf3d5a501cc935a24d2929c527df9285efae07a5be4504995309178
SSDEEP 3072:EKGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:ENm7Rkm1tYpBeh2BAoe
TLSH
T161C3123B5D68A8375DB5BB0EB04E1E1F1DF149A7D924EE92C8D85F0423E9BCC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 c353c103587eabc94c053ca21f269a939cd793a738bbfd873407bbdce0a66934
MD5 6b2079d7b61ed05e02142aeefe272719
SHA1 0868c58ed04ca72355c1957e5f4c5b193f2eb575
SHA512 65ca9a8ab1bac1dcb3c2bab7285fe3d3af1d553f292eca298baa024538713d809e60659147ef08671d2dada6c369faff39e2b5169f56ed541d013f52ddca3894
SSDEEP 3072:qGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:tm7Rkm1tYpBeh2BAoe
TLSH
T144C3123B5E74A9375DB5BB1EB04E0A1F1EF149A7C920DA92C8D85B0423EA7CC1A49934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 d6137acba4e817349a19d58438bed6644248c9b369a315be099e5cd02297b68d
MD5 f09691f310d8bb976919f826acb03589
SHA1 4a010ae268be888537e213868095a732d75a2b21
SHA512 88c22c9887e986b62e344d6928586545ba3322e06b442321c6a007146306570ad1676ca933d27760d9c06da9051727a48afaac7411d6277202be10e9f6ac0d57
SSDEEP 3072:DGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMe:6m7Rkm1tYpBeh2BAoe
TLSH
T128C3122B5E75A9775DB5B70EB08E0B1F1EF14EA6C920DE82C8D85B0427E97CC0A45934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download