hxxps://na4[.]docusign[.]net/Signing/EmailStart[.]aspx?a=a663c479-550e-84e8-82b4-11aa9d16b4fb&etti=25&acct=b3088486-1f44-4afa-857b-1a784de11849&er=1851b59d-d636-849c-8252-db69729cd0e7&ensd=OlmiHSbJ0eI9ZkG%252fXULDaocuPpBZdhOcEdRGMTE5ebYvnVlLkst%252fufPl7Flmbmysx8jhAVKqwQUNN2IwWtJHm8fwmvKct%252fijiRs0V7k39yodpYoxm7neVJ2LT3nWlZ3iz8U1r8U5dfmYcCfWph%252fpmOqk5kOe9lOSbHO1b87dWuo2VnxDFsmnSee9JqP5cHsB

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/08/2026, 18:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://na4.docusign.net/Signing/EmailStart.aspx?a=a663c479-550e-84e8-82b4-11aa9d16b4fb&etti=25&acct=b3088486-1f44-4afa-857b-1a784de11849&er=1851b59d-d636-849c-8252-db69729cd0e7&ensd=OlmiHSbJ0eI9ZkG%252fXULDaocuPpBZdhOcEdRGMTE5ebYvnVlLkst%252fufPl7Flmbmysx8jhAVKqwQUNN2IwWtJHm8fwmvKct%252fijiRs0V7k39yodpYoxm7neVJ2LT3nWlZ3iz8U1r8U5dfmYcCfWph%252fpmOqk5kOe9lOSbHO1b87dWuo2VnxDFsmnSee9JqP5cHsB
Sample260807-wpf72aam4x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5112	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305995496610944"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
744	chrome.exe
744	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe
Token: SeShutdownPrivilege	1576	chrome.exe
Token: SeCreatePagefilePrivilege	1576	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe
1576	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 1576 wrote to memory of 1588	1576	chrome.exe	86
PID 1576 wrote to memory of 2544	1576	chrome.exe	87
PID 1576 wrote to memory of 2544	1576	chrome.exe	87
PID 1576 wrote to memory of 5112	1576	chrome.exe	88
PID 1576 wrote to memory of 4432	1576	chrome.exe	89
PID 1576 wrote to memory of 4432	1576	chrome.exe	89
PID 1576 wrote to memory of 4448	1576	chrome.exe	91
PID 1576 wrote to memory of 4448	1576	chrome.exe	91
PID 1576 wrote to memory of 3196	1576	chrome.exe	92
PID 1576 wrote to memory of 3196	1576	chrome.exe	92
PID 1576 wrote to memory of 1480	1576	chrome.exe	93
PID 1576 wrote to memory of 1480	1576	chrome.exe	93
PID 1576 wrote to memory of 2592	1576	chrome.exe	94
PID 1576 wrote to memory of 2592	1576	chrome.exe	94
PID 1576 wrote to memory of 4932	1576	chrome.exe	97
PID 1576 wrote to memory of 3448	1576	chrome.exe	103
PID 1576 wrote to memory of 4720	1576	chrome.exe	104
PID 1576 wrote to memory of 2484	1576	chrome.exe	105
PID 1576 wrote to memory of 744	1576	chrome.exe	113

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://na4.docusign.net/Signing/EmailStart.aspx?a=a663c479-550e-84e8-82b4-11aa9d16b4fb&etti=25&acct=b3088486-1f44-4afa-857b-1a784de11849&er=1851b59d-d636-849c-8252-db69729cd0e7&ensd=OlmiHSbJ0eI9ZkG%252fXULDaocuPpBZdhOcEdRGMTE5ebYvnVlLkst%252fufPl7Flmbmysx8jhAVKqwQUNN2IwWtJHm8fwmvKct%252fijiRs0V7k39yodpYoxm7neVJ2LT3nWlZ3iz8U1r8U5dfmYcCfWph%252fpmOqk5kOe9lOSbHO1b87dWuo2VnxDFsmnSee9JqP5cHsB
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff53afc728,0x7fff53afc734,0x7fff53afc740
  2⤵
  PID:1588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,16204188281227646076,642036156151069175,262144 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:2544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2200,i,15976401120051249876,13286695492283629174,524288 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1572 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2380,i,14811798813293686261,958027219268951666,524288 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2400 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3176,i,6265257034370225358,6226091299428622712,2097152 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3188,i,4032148587020155002,5328922932300151852,2097152 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3052 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4412,i,3928814570788813551,8389071859856087299,2097152 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4448 /prefetch:2
  2⤵
  PID:1480
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,7469387500970294264,12913306705569914843,2097152 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,3512810065559287583,15570101536971031291,524288 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5596 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,12126422231383268200,10386944225886725797,524288 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5612,i,623727462565212003,17428651922502899837,524288 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5620,i,6743152408124520656,3688160293721526703,524288 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=988,i,8899078740179628116,5524143932089983960,262144 --field-trial-handle=2004,i,12006505983278377536,14693840275939630219,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:744

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:5092

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2db3240fe02e7f81a603a779f93f9b62e588c46d3545ab7ae4908632abd498dc
MD5 d58f829e12c780eda343a16b17222208
SHA1 0cf64dcb1615828274cf6e934a616a21873560d6
SHA512 ff4b9222d805f760670e12c883a092390e4070d98f167454d16502a600a075c3b0e02cf25b2d5f8565a44d7e25b34c8fda062a158d3a06f65b3893d546f385ed
TLSH
T13EE02BE9C821EC270DFD476D50500B45EA1153572761895F3A3C81088FB16A701C685C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 babbb0dbbd56cdaa5287c7f14bda7afe0e7e96c1b604588edde6e8d2472b948f
MD5 e89b3341bca1d22b8231b3ab2ce79c9d
SHA1 543e7fd1feee9ade2876f8c5cbbcb6193f3de527
SHA512 f7ac352dbb5d257817833979b449987c5db7979cbd1a51c775be36e793e105a071651959352d1906af7a071f165cfd2af30aa777144fc820eb1790a519b09365
TLSH
T1F7F0D80B4ECD5202DF7495BE909B2D54BED0184BCCAD2302BAC13F54AF6FAD10197316
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\000003.log
Size 28KB
SHA256 f7c1c6e9b60a3d9ae031826f1a97e7fb9f1ffa1e8b1953bf5a146782ec10cdbf
MD5 2c8029940e3620d8bbbf8f4d7a71ba6d
SHA1 a06cb1b9f1eaca4b61bd52ef0c9ba2906439d449
SHA512 490e8f3000592790aff3a5820d132dc21e5ac01bd3880abadbfdcc9fbebb8bf28f710766f7e0db3d2a1666d8c17b97940c047c3137558a70a9a45a397adab31e
SSDEEP 768:nuCuj2eaT02osb2iftk/j2+CDP2u42Ja2uK322L0l92/2Zlpqd:AjPaT0ZsbDfUjpCDt4oax+vg5Y
TLSH
T1E5D2122939F91629F6B71FBD5A760681547AFEE8DC91C39C5064228C4D30B90CDB3A3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\LOG
Size 355B
SHA256 ba24703def017f7dafa7dc8b83cdafd5537eb6246d79775116a8243e4c315390
MD5 05369b13f920deefbc2bf6a43c3d924a
SHA1 8536f55238dbcace7fd81e5fe12219101ebe6fe2
SHA512 41fce388947f2aa167791d4d0631a35fdcabdb0a0a04df057e9c8bfcd8a5c056d39b5eebea3ec95a4e3a36bd65dc650e38bb118679a5dac3af4b0d403835f825
TLSH
T1EBE0D83899D9CD6F2498806B25347B4F9EEA251A9ACCAA451F06F41071CA8186568A61
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 5f958a6a7f3dec25b173dcead5694924c3f296eb537e851e3972db614b8589bd
MD5 52104cb364b76cbb02acd08ba3a668f4
SHA1 0b3110df8169300f159845ee95fb4e8343b811c1
SHA512 c255b382ddb71db120a15088a1997e874bf99dfb7e345fad426f928dee5b2dbd531c026cd69fc186e7adb9c2ee9a47bf5255fba7989132ebc9024ef30f2d081d
TLSH
T102417CB3C7E8867D890156F4B7152E1FCE290E24536C3D5AC8D4AF1F67E28B5D20058E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8724f3e179799ee73147469a87f2cba5a579db943a8039f49d6b03857045dd60
MD5 640f2e090ecc9ad4ad28ab65f870d8c2
SHA1 41b149fab742052deceb4313327fa1365b9aa800
SHA512 a39c5cc5abba5360f6713efbee794bc150202de29a42bb5cee4a44e46864f04d8b0cb41677b81780f9333dfd7f19e73750e852278d76676f158c8f9384a34f58
TLSH
T1A6519EF797F4997DC91192F4AB256E1FCE290924132C3866C9E46E1B93E2871D10178F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 93d0a6b8b9c2c4039c96879411d4bd20dfcb434719885c212263cdfc7e1a1438
MD5 34d27e04141cef5f59385697a2ab4358
SHA1 c35c691bbab9d36e514ff96e94d91f9e5fdeee9c
SHA512 0b9ffa0abd59eca3fdfee178c21cb974c9bfe484e1e020e70348b4b2be33154c23ae023ccc60b91a15c68357bd8f9c7c1f308454e38cf59daa3fcc448951f071
TLSH
T1D0417CB3C7E8867D890156F4BB152E1FCE290E24536C3D5AC8D4AF1F67E28B5D20058E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bb40bec6a9f805dae88a1a067efff2fca94e24303b6973d64b6cc1e47f3fd5a4
MD5 5915441981258fa70f7553d795def561
SHA1 cf9ceeda89a7db0ade060dd99363abfd9da3536d
SHA512 80d9cda53e741127c1c37014d37e2e5ac2e50e7e676066c086fb89bdc3f8ae30589563660f7a97510ec76a828148304c706671bc0df89c465410cdf90972c7ae
SSDEEP 192:IRUWI0+c8OsBv7ApAPRp2IYD9qHsb+WNCI+xLdfcgG2HCeOsxVGVyIsnAUge:IRUWj8RkUX6kwCt+2esxoe
TLSH
T1C342D77AEA10697B9CDBC229FA257B67E7F5203520D02ED0EAFC892C15E75CD211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 496cdf42d5af579bdc88c73cc87808ec2b20ad78d2321ca14f60bd652c5a1976
MD5 e4525aafa19dfaf9328446e0d6eaa837
SHA1 8ff0e47f6ab5033e2e620a0dd6d95abe9f8fb4d5
SHA512 ab686f5d2d187a3a1cf67944ea533d7a3b24baf90fb61e536644a2c8da3d95b623e9e8cc96974420d9dc87fcaf944dbb820e28c93a18aa50ffad5e581d00d151
SSDEEP 192:IRUWI0+c8OsEv7ApgPRpeIYD9qHsb+WNCI+xLdfcgG2yCeOsxV4VyIsnAUgE:IRUWj8gksXikwCt+21sxmE
TLSH
T1FF52D7BAEA106D7B9CDBC229F9157B27E7F5203521D02E90E6FC892C15E79CD211302B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 96fd2a509bd2c202caacfeab6d731f301ff9a2178e6af35adaa84cc3eeb2f234
MD5 d0d704b49f7df0cc9ece974f6c3bbc2f
SHA1 9353a7f8238be820cc4213360897a3e52c090dc9
SHA512 a8be3ef27035937d54222bf15fb206ac655d7cfde5c58243597c76f4268ad9edabc83c998f587b99b92d492cde3e6e60005c05761775a7289c2188d8ac82f3c0
SSDEEP 192:IRUWI0+c8Osnv7ApAPRp2IYD9qHsb+WNCI+xLdfcgG2hCeOsxVGVyIsnAUgE:IRUWj8vkUX6kwCt+2EsxIE
TLSH
T1BD52E7BAEA106D7B9CDBD229FA257B27E7F5203520D02E90E6FC892C15E75CD211701B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
MD5 28aca1b912d001e337a9e715a111a353
SHA1 177a8b35a6fa74a15deedffd79dc9066169fc496
SHA512 0e554b40f873ea651a22f9b91cf52ad45cc99b35e2db0e34845d695aa13aaf61497b6646f39f5b0ba26fc4a43100e92a0aff8ad949d0289fb397cfe00b0cede5
SSDEEP 384:V7jxY7KxkXqKf/pUZNCgVLH2HfgsluX7pLuLcSjvKXODx4+ErU31PHG0pdpS8gfp:V3xY7KxkXqKf/pUZNCgVLH2HfgskX7pf
TLSH
T1A4720967AC0C9E374F94D6CCDC277B4FADB5015B61E9886483FA981903D5BCA110A1FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\bb7239e5-9c73-489b-a377-21adb1a2e0d5\index-dir\the-real-index
Size 240B
SHA256 4cab6028174670321e871cd8ad3e15cdd440d04f23bdf9ca2c37690ebd3df013
MD5 929d195fc8d0528e7f79e8db65908daa
SHA1 3b25ec47e7b4c2232586c68316315902159d77e2
SHA512 41fdc811d69837b9b26d93552e16d062a9180051a36e2e4e0a603b304bc8a2fb3166ab861ac1fd413341a640660642d58b88a493ef832d90dc4699525c58d437
TLSH
T1CBD080548E108455C650173DF0421D543DF48814B3445D07C2AD95F5CBC5276321205C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c0da.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\bb7239e5-9c73-489b-a377-21adb1a2e0d5\index-dir\the-real-index~RFe58c0da.TMP
Size 48B
SHA256 80da00d5322e4f757e0a24c84d9d34547ff8ff627fd91bc9e90802cad4d7164e
MD5 a981b630a7d73d90021a86f9fba90cb9
SHA1 e3ed4e8e31fe6318b4b6097b6ea6802f705bcd55
SHA512 a5b872732ac7a9a917433d3c8b15e7d72b2dbd9d5d534f44af9e74ceff4fa26a90c43ec77c32d07fa56baf0b879f620e08c8b501c374479845568c40c3b50dc6
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt
Size 181B
SHA256 65b83a6e4cd94cb815f9464244be9c231bce1b5b958be497b6bf8d2ee79f9864
MD5 2931f67fd4c041d140394a402dc646cf
SHA1 c32674b9b9057d4714828df13ac24ef575a019d9
SHA512 1b6ffa1728e9a3a87ad7bf25d9e248b8333da245ecd4488dcf138eb903354854731c6b2cee123d8d613929fdfb738174b9269383a110b3c29268212adff6fcb7
TLSH
T111C0127A18A598335DE0B1E42F521389C50761FA4E91C9C1894D501036841215657B67
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58c109.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt~RFe58c109.TMP
Size 186B
SHA256 b3cc4e9d8f211ad23ededbe6726f4f5f428d7b16ec3f875a0e54125057feb951
MD5 08e3da3cd8e1c315106779aceaa025d9
SHA1 1f7935de2013657e054aa460f971d02c64516f26
SHA512 62befb7c696c7828ea65f16719407f2798d78056e589926e83f407affdb4d2c178863493ee63ceef58b7a1bba8322cedef104c1d9ad7a0651c4e8fc975998c02
TLSH
T1EAC0127A18A594239EE0B1D41F221389850769FA4E91DAC1884D70003A741229657B67
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 a925ee47afdbe398c338b2eb0d86c0264cb9f42cdd8e4ce6e6590eb450ea2391
MD5 435d6d5d0e3bd333d8d64281c7574e02
SHA1 cdfac452afaf6615ccf029ff623bed59f0e3ab0b
SHA512 5e03c618d33886e48687e934ea4a3b7bf50a28fd18e496f7ec0678fa6d8963ba0456e46f306401767b469c94248e519f33a229e92fc9c3db92414d21feaee0ed
TLSH
T140C01203C91A6166C0CB03B118D69CFC76549F34DA1E135966E03E12FC3853281291A3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bd11.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bd11.TMP
Size 96B
SHA256 4578f298ee764b06a2b2b56bc1d7d51657fa3a1a33322bd102beefc611e19e08
MD5 ce214832f390d9400d49cc7c4c27478e
SHA1 476627b0b3af698726ac7a2fa7dbed486db22346
SHA512 59054543f65fbe2d41ede40c95a4f8021a60b2e92da34eca62953f9ff149fa172c20f6a840f811fcabb51d967d9190b8bb45549f76ac6d0d4c2db9a458c83761
TLSH
T1BDB022C2C0233202C00303B23EEA88C8B820CF2AC2038303C2E00B2ECC20230023A030
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 2e9c3476b78b319305e6da5a4c9e91ab28f5a4bcde929f130ff55bc4951ec60b
MD5 2bf81ee0a46e3ec845ae15841f75816b
SHA1 15777c605b5761ca8e033f14e864d084136e603c
SHA512 57e8694422ce6fec98db2bd59d146a22796f7ef34f9632461b79f7724a679d0ff3e1bcf1d0f0ec0211536c74607f48abca0dc5633735a93375814f542c71bd5c
SSDEEP 3072:vNGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:cm7Rkm1tYpBeh2BAog
TLSH
T177C3023B5D75A8375DF5BB4EA04E0A2F2EF249A7C920DE52C8D85A0433F97CD1A44934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 ac85db6b07a45c7eab963b3cc21d8c82d9534bf56a4bc6e99c43ecfaf808d6fb
MD5 a6bdecf1470a313d5d59196a8f0b7aed
SHA1 7e879c6cec598b281d1a767176df63c13a9a010f
SHA512 3481dc2aeddf9aeeb20051779c355513847bbf9bfff971bd03478e016c18e9ec62ad8904b8776752c6ed9875b64cf33b5abd9810c682d7790d4fa77017b6a126
SSDEEP 3072:AlGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:jm7Rkm1tYpBeh2BAog
TLSH
T13FC3023B5D75ED3B5CB5A74EB08E0B1E2EF149A6C920DE9288D85A0437F97CD0A44A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 06f95348c29f3b6460b141e00686e32bb9ab88d782383bed4034bc1ab20d632b
MD5 4e5b07f516ad7b6a58e79d5047801221
SHA1 d8cd01e7918346eff30b93a1b3d69e0d08720508
SHA512 7c092d8c8dec51df38521c8e519505f97beed764930e9e513953b3a03642198219a725f8eb0c542d600784a0b5ea6f765c295d74eaa369baaa721013125a2b89
SSDEEP 3072:vDGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:im7Rkm1tYpBeh2BAog
TLSH
T1DCC3123B5D64A8375DB5B71EB08E0B1F1EF249A7C924DE92C8D85B0423EA7CD0A44A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 116KB
SHA256 a7296b51c26308d6f04dc94903c3e54284c53a4268ecf7c2840334820153fab3
MD5 b818722791e8d01f3049b20ac8b9ab82
SHA1 2696020715aaa7c800580ec2a62b34eee5c63106
SHA512 9c8ae8e83f706279d08ebab063e325fc98e9d618490f9dd55a49381ec38b56d9bd146ace853a7272e4e98c2ce380379084d667c36e8578b4c4481d8c34f3ae0e
SSDEEP 3072:MDGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMg:5m7Rkm1tYpBeh2BAog
TLSH
T1A2C3123B5D64E8375DB5B71EB08E0B1F1EF249A7C920DE92C8D85B0423EA7CD0A45A34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download