Edit tour

Windows Analysis Report
https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec

Overview

General Information

Sample URL:	https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec
Analysis ID:	1375362
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Yara detected obfuscated html page

Phishing site detected (based on OCR NLP Model)

Creates files inside the system directory

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML body with high number of large embedded background images detected

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6156 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1976,i,17207357813094850106,15988107850640687673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_201	JoeSecurity_Obshtml	Yara detected obfuscated html page	Joe Security

HTML

Source	Rule	Description	Author	Strings
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML

Yara detected obfuscated html page

Source: Yara match

File source: dropped/chromecache_201, type: DROPPED

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM	ML Model on OCR Text: Matched 88.8% probability on "Please Review & Act on These Documents DocuSign Alex Faith Patricia Williams Thanks View More Please review the dcxwments tElow. OTHER ACTIONS CONTINUE VIEW DOCUMENT This file is protected by AdobeDoc@ Security. Microsoft OneDrive Microsoft your privxy_ To iem more, please our Statement Microsoft Corporatin, Microsoft Way. Rednu'd. WA "052 Auaua-OOCUMENT.pdf Of & - English V T "
Source: Chrome DOM	ML Model on OCR Text: Matched 92.8% probability on "Please Review & Act on These Documents Alex Faith Patricia Williams Thanks View More Please review the dcxwments tElow. CONTINUE OTHER ACTIONS Auaua-OOCUMENT.pdf Of & - English V T "
Source: Chrome DOM	ML Model on OCR Text: Matched 100.0% probability on "OTHER ACTIONS Done! Finish to send the completed document. FINISH O DocuSign Envelope 10: 77C05A7g-027A414F-91FF-B4112349A25E Adobe' Reader' Xi Click Review OR Download to access this document that was shared with you. VIEW DOCUMENT This file is protected by Security. Microsoft OneDrive Set Micrxoft privxy_ To iem please our Statnent Microsoft Corporaton, One Microsoft Way. Rednu'd WA 98052 AAua-OOCUMENTpdf Of & - English V T "

Source: https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML

HTTP Parser: Total embedded image size: 47958

Source: https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML

HTTP Parser: Total embedded background img size: 603920

Source: https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML

HTTP Parser: <input type="password" .../> found

Source: https://na4.docusign.net/Signing/conversations/?ti=0c688b1864424f61bc9b49fdb53ece79&integratorname=comments	HTTP Parser: No favicon
Source: https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML	HTTP Parser: No favicon
Source: https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML	HTTP Parser: No favicon

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49848 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 16MB later: 26MB

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25

Source: unknown

DNS traffic detected: queries for: na4.docusign.net

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.237.25:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.16:49848 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_6156_2126555602

Source: classification engine

Classification label: mal60.phis.win@14/228@40/153

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1976,i,17207357813094850106,15988107850640687673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1976,i,17207357813094850106,15988107850640687673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	13 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	2 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses

Source	Detection	Scanner	Label	Link
https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Link
f005.backblazeb2.com	1%	Virustotal	Browse
qrco.de	0%	Virustotal	Browse
volpin.com.br	0%	Virustotal	Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false		high
volpin.com.br	98.142.105.210	true	false	0%, Virustotal, Browse	unknown
accounts.google.com	142.251.163.84	true	false		high
code.jquery.com	151.101.2.137	true	false		high
f005.backblazeb2.com	149.137.136.16	true	false	1%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false		high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false		high
www.google.com	142.250.81.228	true	false		high
api.mixpanel.com	107.178.240.159	true	false		high
clients.l.google.com	142.251.40.238	true	false		high
qrco.de	18.238.49.108	true	false	0%, Virustotal, Browse	unknown
arya-1323461286.us-west-2.elb.amazonaws.com	35.155.172.121	true	false		high
cdn.optimizely.com	unknown	unknown	false		high
clients2.google.com	unknown	unknown	false		high
na4.docusign.net	unknown	unknown	false		high
a.docusign.com	unknown	unknown	false		high
docucdn-a.akamaihd.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
https://na4.docusign.net/Signing/?ti=0c688b1864424f61bc9b49fdb53ece79	false	high
https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML	false	unknown
https://na4.docusign.net/Signing/conversations/?ti=0c688b1864424f61bc9b49fdb53ece79&integratorname=comments	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
130.211.34.183	unknown	United States	15169	GOOGLEUS	false
107.178.240.159	api.mixpanel.com	United States	15169	GOOGLEUS	false
142.251.32.106	unknown	United States	15169	GOOGLEUS	false
142.250.80.3	unknown	United States	15169	GOOGLEUS	false
162.248.184.187	unknown	United States	62856	DOCUS-6-PRODUS	false
162.248.184.188	unknown	United States	62856	DOCUS-6-PRODUS	false
142.251.40.170	unknown	United States	15169	GOOGLEUS	false
149.137.136.16	f005.backblazeb2.com	United States	30103	ZOOM-VIDEO-COMM-ASUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
1.1.1.1	unknown	Australia	13335	CLOUDFLARENETUS	false
142.251.40.238	clients.l.google.com	United States	15169	GOOGLEUS	false
142.250.81.228	www.google.com	United States	15169	GOOGLEUS	false
142.251.40.138	unknown	United States	15169	GOOGLEUS	false
104.77.220.192	unknown	United States	16625	AKAMAI-ASUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
23.55.235.225	unknown	United States	20940	AKAMAI-ASN1EU	false
142.250.81.234	unknown	United States	15169	GOOGLEUS	false
142.250.65.227	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
23.56.162.197	unknown	United States	16625	AKAMAI-ASUS	false
18.238.49.108	qrco.de	United States	16509	AMAZON-02US	false
142.250.72.99	unknown	United States	15169	GOOGLEUS	false
35.155.172.121	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
23.37.123.235	unknown	United States	20940	AKAMAI-ASN1EU	false
98.142.105.210	volpin.com.br	United States	33182	DIMENOCUS	false
142.251.163.84	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1375362
Start date and time:	2024-01-16 14:38:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@14/228@40/153

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe
Excluded IPs from analysis (whitelisted): 142.250.80.3, 162.248.184.187, 34.104.35.123, 23.37.123.235, 23.37.123.242, 142.251.32.106, 142.250.176.202, 142.250.65.202, 142.250.65.234, 142.250.64.74, 142.250.81.234, 142.251.40.234, 142.251.35.170, 142.251.40.106, 142.251.40.202, 142.250.65.170, 142.251.40.138, 142.251.40.170, 142.250.72.106, 142.251.41.10, 142.250.80.106, 23.55.235.225, 23.55.235.217, 104.77.220.192, 23.56.162.197
Excluded domains from analysis (whitelisted): a1737.b.akamai.net, na4-se.docusign.net.akadns.net, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, na4.docusign.net.akadns.net, docucdn-a.akamaihd.net.edgesuite.net, cdn.o6.edgekey.net, e5048.dsca.akamaiedge.net
Not all processes where analyzed, report is missing behavior information

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 12:39:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9803960790937705
Encrypted:	false
SSDEEP:
MD5:	D73326A7E3B82C6E6D1C575D18431064
SHA1:	5A1C2759D7ABF45B4D1F90A8AD012FDE39057C10
SHA-256:	7A8D29C66BBF2132A827103882C8D213F05A1BBBE0AEAFD1A5D58EF4EE8CEF4A
SHA-512:	1AC3FA6C7C8A041D0030D4402C41333FC269ECA0C2A540099D876772D12C2D9ECB72719CC40D7B11AAA7A4D838056175D2E307CF36D9B87555F5E96182F251DE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......ch.H..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0X.l....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 12:39:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.997595161473921
Encrypted:	false
SSDEEP:
MD5:	052992B5216CB79498F2C038A99CD74B
SHA1:	3AA3A0ECACA6A05551DE7F5B078B6A3AADA49BC0
SHA-256:	808998AA893D065DA84C54C8D91F8CDA5EA8DCB5EF7DB7359D0381E52BC8FAF5
SHA-512:	5F81CB4383C5DEC7AF93ADEEBE27830921BE3017D54567BB3468A4BDF459BBD4D2BD981A9C0043E3E14A9B24142A4189F952F01D7F1AC126AE094D72B7D603CF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....ZZUh.H..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0X.l....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006287289757667
Encrypted:	false
SSDEEP:
MD5:	B9051691C1EB079FDCD054DF618E3C78
SHA1:	4AC6266AFB654CBB11EF40E907A029B8593029E5
SHA-256:	AA3408C9C2F8D3DB6E40B5105C884309D7AE268FA5E57AEF53CFCEAC0C09CDBE
SHA-512:	9087F9C62C9916C6741D27BDBA8D9F4E0B255109472B266CB2A431FC2CDF9C90C0B5AD078F8265CB6D41B98C62EFE1546F91647A791D41CDA2742B2EB7B784A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0X.l....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 12:39:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9946086813631387
Encrypted:	false
SSDEEP:
MD5:	020A177BB7CDFC54A51291423F7CE690
SHA1:	62735FD714F3194495F9BF69F83C349CBE61766A
SHA-256:	CC5715A06DEACC26DF13424779B2F103619F78604457F3A655FE7DA191B22D45
SHA-512:	C01C834ECF9170773EC0D95D1EC76122192065742A8D9EC9E0F36A92688A6846A71A072AA8FEAE389363F6E25816C2C9ACD60E15C7F4183A03458CEA02EB81AE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....?Oh.H..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0X.l....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 12:39:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.980596970418784
Encrypted:	false
SSDEEP:
MD5:	B727DF6ACD4ECFD2459AA06AD76C1B7D
SHA1:	3A7180557D70AD79D6C052CABC988974501011BC
SHA-256:	084E5E6E281B187666EC6B8648AE9252A2777A2EE89DF432BF6795C793DAA3CD
SHA-512:	BE5D7B3DF1A89D66C925B2371F4610D120DCE36EFE38EAA0AB13FE91F48E5FCA0B868DD561D24AFDF6013ABB45520A35795D15051084088CE43F1FC9B4C6519C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....u.\h.H..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0X.l....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jan 16 12:39:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9917666808330545
Encrypted:	false
SSDEEP:
MD5:	9AF0822784E36CA6726FBEC18CEDBB5D
SHA1:	259A91762C3E695B8629DC8EC12C3DB2ECFD5243
SHA-256:	D8E36A10928DC2F5F97C9B63ED23BD2E05EF232E7D00B7F208DBB423FCCD4E04
SHA-512:	A588F1CAE360DD21E591A151CFA31ACC58764527E2E5A5E499237BF3391D5A8A2AB8E0E34414814C85F07FE9445EA10A027C96BC851CBE4B920C9DB46A988B37
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....W.Fh.H..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I0X.l....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V0X.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V0X.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V0X.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V0X.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	312916
Entropy (8bit):	5.387339857873147
Encrypted:	false
SSDEEP:
MD5:	3824FFE403C11902295777F94888AD16
SHA1:	D4D6287CC390CE5191928B65B759107F20BEAA36
SHA-256:	6386731C228BA85F8004EF67C5D3FCF1D70958FD6F9783008E9D5614C0068CFB
SHA-512:	4BD11BA72910D8D0AF1ABF71F4668CC085527077D9E3CCA7403C6E239B20A96227310B0B5880C9ABE05F414D4B69475089AD877B1257A2A4DF0F0D4E9D15C07D
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.3999.js?cs=97884e3573457cba5595
Preview:	/! For license information please see signing_iframeless_mobile.3999.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3999],{50901:function(e,t,n){var r=n(40202);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,i,a,o){var s,l,u=null!=t?t:e.nullContext\|\|{},c=e.hooks.helperMissing,d="function",p=e.escapeExpression,g=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" <"+p(typeof(l=null!=(l=g(n,"htmlTag")\|\|(null!=t?g(t,"htmlTag"):t))?l:c)===d?l.call(u,{name:"htmlTag",hash:{},data:i,loc:{start:{line:3,column:3},end:{line:3,column:14}}}):l)+'\n class="pdf-ua_'+p(typeof(l=null!=(l=g(n,"tag")\|\|(null!=t?g(t,"tag"):t))?l:c)===d?l.call(u,{name:"tag",hash:{},data:i,loc:{start:{line:4,column:18},end:{line:4,column:25}}}):l)+"_"+p(typeof(l=null!=(l=g(n,"pathString")\|\|(null!=t?g(t,"pathString"):t))?l:c)===d?l.call(u,{name:"pathString",hash:{},data:i,loc:{start:{line:4,column:26},end:{line:4,column:40}}}):

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	121570
Entropy (8bit):	5.25965288274412
Encrypted:	false
SSDEEP:
MD5:	199D9AA7778D1DA42A1A623BD210B610
SHA1:	5B70D1AA88D12358D00195F3602804AEEDE7CAA0
SHA-256:	3A3D5C63DEED5675A59F50D653D0A2C641D9E5DA5F3CB058843FD2DA6121648F
SHA-512:	2FEACEEFC9BB838FF599F7B65057F3F5946C1BCCA0F814D7A408BF25C3E4761FA898CD4875CC07CC77829CBEC967FA74F30617B31D9B778007CCD1A4C852DE2E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.3935.js?cs=5757d8abb1f5a8621567
Preview:	/! For license information please see signing_iframeless_mobile.3935.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3935],{64448:function(e,t,n){var r=n(67294),l=n(27418),i=n(54142);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(a(227));function o(e,t,n,r,l,i,a,o,u){var c=Array.prototype.slice.call(arguments,3);try{t.apply(n,c)}catch(e){this.onError(e)}}var u=!1,c=null,s=!1,f=null,d={onError:function(e){u=!0,c=e}};function p(e,t,n,r,l,i,a,s,f){u=!1,c=null,o.apply(d,arguments)}var m=null,h=null,g=null;function v(e,t,n){var r=e.type\|\|"unknown-event";e.currentTarget=g(n),function(e,t,n,r,l,i,o,d,m){if(p.apply(this,arguments),u){if(!u)throw Error(a(198)

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	downloaded
Size (bytes):	72738
Entropy (8bit):	5.414980388694463
Encrypted:	false
SSDEEP:
MD5:	8D1D43156A8395393EB5A3A402ED22AB
SHA1:	51C729AEA1035006EAE86EE13AC818ABE09BBF48
SHA-256:	06DA9C69CBF0258C425C701A7E8F992E4230EC17CF2A67065F98A269743565F4
SHA-512:	36C828F0918209556A73596CACA9B5BE4FDA82CBA613EF8650D13D3E4B722989B57AEC183CA3A343DACF692D48F3DD6A3CCF719E42CBAA9348D87BE5C439C638
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.js?cs=a28e17903
Preview:	/! For license information please see signing_iframeless_mobile.js.LICENSE.txt /.!function(){var t,e,r,n,o,i={19662:function(t,e,r){var n=r(60614),o=r(66330),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a function")}},39483:function(t,e,r){var n=r(4411),o=r(66330),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a constructor")}},96077:function(t,e,r){var n=r(60614),o=String,i=TypeError;t.exports=function(t){if("object"==typeof t\|\|n(t))return t;throw i("Can't set "+o(t)+" as a prototype")}},51223:function(t,e,r){var n=r(5112),o=r(70030),i=r(3070).f,a=n("unscopables"),c=Array.prototype;null==c[a]&&i(c,a,{configurable:!0,value:o(null)}),t.exports=function(t){c[a][t]=!0}},25787:function(t,e,r){var n=r(47976),o=TypeError;t.exports=function(t,e){if(n(e,t))return t;throw o("Incorrect invocation")}},19670:function(t,e,r){var n=r(70111),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not an object")}},18533:fun

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30979)
Category:	downloaded
Size (bytes):	31154
Entropy (8bit):	5.241501260778013
Encrypted:	false
SSDEEP:
MD5:	2813A8DFFDA6B88C78F8E95F6323135B
SHA1:	D6E0EF0B59DFEB274481ED70B5884B44C79AE911
SHA-256:	40E1E52F2B2BF6C472E98213D7B5D5C36A55F1BFFEC111652466C0C4C03D27F6
SHA-512:	399A2F5CB9329E2E19C6E47025780BED392D74FD52F6960303AA98736855FF9BDE3B6D97434D2FFD5ED0CD04FF6D8963BBA95FB5ADB1300F9393B70634AFF6B8
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.1057.js?cs=7e0112050248bcd56a98
Preview:	/! For license information please see signing_iframeless_mobile.1057.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1057],{35099:function(e,t,n){var i,o;"undefined"!=typeof self&&self,i=function(){"function"!=typeof Promise&&function(t){function n(e,t){return function(){e.apply(t,arguments)}}function i(e){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=null,this._value=null,this._deferreds=[],c(e,n(r,this),n(a,this))}function o(e){var t=this;return null===this._state?void this._deferreds.push(e):void p((function(){var n=t._state?e.onFulfilled:e.onRejected;if(null!==n){var i;try{i=n(t._value)}catch(t){return void e.reject(t)}e.resolve(i)}else(t._state?e.resolve:e.reject)(t._value)}))}function r(e){try{if(e===this)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var t=e.t

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (306), with CRLF line terminators
Category:	downloaded
Size (bytes):	5908
Entropy (8bit):	4.457053412257076
Encrypted:	false
SSDEEP:
MD5:	C239F54089757725658A81B43F9F59CF
SHA1:	5F5D4529783B674CF68B439F312D6BE62952DEDD
SHA-256:	F400DADE8E2C465062CA805EB57A691EDD11A26A3345EB1E3F6DE3AD9476B1EE
SHA-512:	86B174D24DFA547E4199017F1CA56534C0A6C32ABF3F04773E19CCE8FDDE09FBD118C0C134C0433EAAC1EF357DD926882C5A37BAEB10D6BF3F41FB3E400C8362
Malicious:	false
Reputation:	low
URL:	https://na4.docusign.net/Signing/conversations/?ti=0c688b1864424f61bc9b49fdb53ece79&integratorname=comments
Preview:	..<!DOCTYPE html>..<html>..<head>.. <title>DocuSign</title>..</head>..<body>.. <script>.. var cAppConfig = {.. recieverOrigin: 'https://NA4.docusign.net',.. hasComments: false,.. forceLoad: false,.. historyPollingInterval: 0,.. commentsPollingInterval: 180000,.. recipientVisibleDocuments: [{"DocumentIds":["8cf2c7f9-63fb-4b99-b5de-8bdc71bd402e"],"RecipientId":"432aa911-ffaa-47c2-9cba-5584ad4ba6ec"}],.. conditionalRecipientPlaceholderData: [],.. postCommentAfterAgreementSucceeds: true.. };.. </script>....<script>.... (function () {.. .. window.cdnURL = 'https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/';.. window.primaryCdnUrl = window.cdnURL;.. window.fallbackCdnEnabled = true;.. window.cdnUrlsAttempted = [window.cdnURL];.. window.cdnDidFallback = false;.. .. wi

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8909)
Category:	downloaded
Size (bytes):	9080
Entropy (8bit):	5.291812260984607
Encrypted:	false
SSDEEP:
MD5:	2CB234471662DE969D538828E6738C37
SHA1:	2A47707EB02E36D0EC52055300B4C8E17C00476B
SHA-256:	BE7F15468F0D71848E1D6ED16929BA98CF0EFE4C6CAE38D90DD19A3EED58801B
SHA-512:	FC1C89CEB39BA1F0BE4621E9D769214779A8319CEA59E85B3F8F9B7D2E39568DF097ABF78F54B9FF2369B66B94E67362D69F29E634763B6D960363C91C80A5A8
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.5461.js?cs=8d15923a1bbe034da5d8
Preview:	/! For license information please see signing_iframeless_mobile.5461.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5461],{52356:function(e,t,i){i(41817),i(66992),i(33948),i(47042),i(39714),i(91038),i(74916);var s=i(72316),n=i.n(s),o=i(59050);function a(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var i=0,s=new Array(t);i<t;i++)s[i]=e[i];return s}function r(e,t,i){var s,a=(i=i\|\|{})._isSideEffect,r=null===(s=this.computed)\|\|void 0===s?void 0:s[e],g=r&&this.computed[e].set,u={};return r&&(u=o.ZP.extend({useTwoWayBinding:!0,useModel:this},this.computedDefaults)),a\|\|!r?n().Model.prototype.set.call(this,e,t,i):g?g.call(this,t,i):u.useTwoWayBinding&&d.call(this,e,t,i),this}function g(e,t){var i,s,n=(t=t\|\|{}).useModel\|\|this,o=t.useAttribute,r=t.useAttributes;return o?e=o:null!=r&&r.length&&(e=(i=r,s=1,function(e){if(Array.isArray(e))return e}(i)\|\|function(e,t){var i=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterat

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16417)
Category:	downloaded
Size (bytes):	16588
Entropy (8bit):	5.4353318693995964
Encrypted:	false
SSDEEP:
MD5:	90C14D23F815D8769CA65669106ED28B
SHA1:	9C3E5772281F891F48FDF55BA8AA0BB1DE803262
SHA-256:	17516EC2CCB8D6B68F628E5965F574B0D9F87AC465279EDC11ACB143C9C06E68
SHA-512:	8D322D05CE2ACB0B23A3D448538232450522627CBAB807D45938E5638080A1FBEB3BC4B62D3AE5A44F66A1A7FCB3405E5ACC3B9395AE1FF2484A283B85B53596
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.2816.js?cs=a1f597dac5d0512d0389
Preview:	/! For license information please see signing_iframeless_mobile.2816.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2816,2538],{38054:function(e,r,a){a.d(r,{g:function(){return G}});var o=a(45490),n=a(97842),i=a(67294),t=a(28068),d=a(52369),l=a(45697),s=a.n(l),c=a(67579),u=a(40402),p=a(35628),f=a(61813),b=a(76204),g=a(22324),x=a(25354),h={base:()=>({wrap:{"a, a:hover, button, button:hover":{color:"inherit"}}})},m=a(85061),v=["accessibilityText","forwardedRef","href","onClick","rel","target","text"];function w(e){var r=e.accessibilityText,a=e.forwardedRef,i=e.href,t=e.onClick,d=e.rel,l=e.target,s=e.text,c=(0,n.Z)(e,v),u=(0,p.G)(h);return(0,m.jsx)("div",{css:u.wrap},(0,m.jsx)(x.zx,(0,o.Z)({},c,{accessibilityText:r,forwardedRef:a,href:i,kind:"tertiary",onClick:t,rel:d,target:l,text:s})))}w.displayName="InlineMessage.Action",w.propTypes={accessibilityText:s().string,"data-.*":s().string,forwardedRef:c.l.ReactRef,href:s().string,"on[A-

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	265074
Entropy (8bit):	5.363799585369286
Encrypted:	false
SSDEEP:
MD5:	61453B66A3F58DE5D9BFC2551BA8A14B
SHA1:	B0D56B905DF0277C90B848B94F07D9909A5708BF
SHA-256:	33EC3BB17DDB50A904E8201C588FC54C529BE48024187CA505694DE51C4F3980
SHA-512:	D4E037E483CCB7AA06FFCEBC49008642CAA1CFC327F3AEE0B11338984B6E50C264197F650BC8E504B2EA62E0052871AAAAAAE661C48D87044437B93C979C6054
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.react-app.js?cs=c441f581a69ded486c22
Preview:	/! For license information please see signing_iframeless_mobile.react-app.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4161],{69797:function(e,t,r){r.d(t,{YQ:function(){return w},DU:function(){return v},pl:function(){return S}}),r(82772);var n=r(19755),o=r.n(n),i=(r(57327),r(88449),r(2490),r(59849),r(163)),a={disabled:"disabled",noAllowedOrigins:"noAllowedOrigins",invalidOrigin:"invalidOrigin",invalidTimeout:"invalidTimeout",timeout:"timeout",invalidAccessToken:"invalidAccessToken",postMessagingFailed:"postMessagingFailed"},l={notaryAuth:"notaryAuth",notaryAccessToken:"notaryAccessToken",notaryAuthError:"notaryAuthError"},c=a,s=l,u=r(113),d=s,f=c,p=(r(21249),r(57640),r(9924),r(73210),r(66992),r(33948),function(e,t){var r=function(r){if(0===r.origin.toUpperCase().indexOf(e.toUpperCase())&&(null==(o=r.data)?void 0:o.eventType)&&o.eventType===l.notaryAccessToken){var n=function(e){var t="Bearer ";return 0===e.indexOf(t)?e.substring

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13245)
Category:	downloaded
Size (bytes):	13416
Entropy (8bit):	5.378684643897129
Encrypted:	false
SSDEEP:
MD5:	6AA616C65B6CE046268C11B608573556
SHA1:	6B544C11A5069F8289546444C1570487585F553A
SHA-256:	924838BA2082177C6BB2AE6FE705338AD42BC68336FF4A0972BF2440A2F0BC8C
SHA-512:	69296C6CBD6645ACDAF5FC78BF986C5544ECD9084B43FB621F81A1D96A0F4E02887D2056997B959FC4607D65ADE6321FB057D5EC099890446F23B88BFFA3467F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.8929.js?cs=784d7a397a094df89c01
Preview:	/! For license information please see signing_iframeless_mobile.8929.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8929],{78671:function(e,r,a){a.d(r,{d:function(){return m}});var t=a(45490),n=a(97842),i=(a(67294),a(45697)),d=a.n(i),o=a(52369),l=a(69626),s=a(35628),p=a(2787),c={base:e=>{var r=e.tokens,a=e.props;return{default:{wrap:(0,p.Z)((0,p.Z)({},r.typography.detailSmall),{},{display:"error"===a.kind?"flex":void 0,margin:0,padding:0,svg:{fill:"currentColor",marginInlineEnd:"8px"}})},helper:{wrap:{color:r.text.subtleColor}},error:{wrap:{color:r.text.errorColor}},disabled:{cursor:"not-allowed",opacity:r.form.disabledOpacity}}}},u=a(85061),f=["children","disabled","id","kind"],b=["error","helper"];function m(e){var r=e.children,a=e.disabled,i=void 0!==a&&a,d=e.id,p=e.kind,b=void 0===p?"helper":p,m=(0,n.Z)(e,f),x=(0,s.G)(c,{children:r,id:d,kind:b}),h="error"===b&&(0,u.jsx)(l.w,{kind:"pebbleError"}),v=[x.default.wrap,x[b].wrap,i&&

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10832)
Category:	downloaded
Size (bytes):	11003
Entropy (8bit):	5.198288191782277
Encrypted:	false
SSDEEP:
MD5:	4AC08A6BBDA587393FD883E887A4DF20
SHA1:	F9588F22412796B55C2FB186BAA92F970F3F663C
SHA-256:	FF0EE9092562180C229AE462032464DD585312F1DA9317B8726D40258E46D280
SHA-512:	531E7C81C7E2563B212AF7E01BA7E9A6F67A9A5CFCD118B694FB0B4028A5F5BEE59BF6E83700AFB35BBBA1591663FC012C77E2B05A1ACAA6DD4A5BAE3F6E2C87
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.5413.js?cs=f1980198a608b7aa279b
Preview:	/! For license information please see signing_iframeless_mobile.5413.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5413],{15413:function(t,e,r){r.d(e,{gF:function(){return n},rx:function(){return h},jx:function(){return w},dz:function(){return d}});var n="https://a.docusign.com/f",o=(r(88674),r(66992),r(33948),r(41817),r(57327),r(88449),r(2490),r(59849),r(15581),r(34514),r(54747),r(49337),r(72443),r(73706),r(10408),r(65069),r(47042),r(87462)),i=r(38973);function a(){a=function(){return t};var t={},e=Object.prototype,r=e.hasOwnProperty,n=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",c=o.asyncIterator\|\|"@@asyncIterator",u=o.toStringTag\|\|"@@toStringTag";function s(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{s({},"")}catch(t){s=function(t,e,r){return t[e]=r}}function l(t,e,r,o){var i=e&&e.prototype instanc

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	150
Entropy (8bit):	4.845018163410625
Encrypted:	false
SSDEEP:
MD5:	C97430373AB9005C3A90AF1A0BE778CA
SHA1:	C9AF625A22C3A2A367AEE01205899BAF147596B2
SHA-256:	5E674F5B96257920F3E7609E564B1AA0B06A9770422C9AD06D9D5E0D651608A0
SHA-512:	C248DE71B5210C8452C17F44B58B370916F4760E607D36F5468C193972CA738FFDD00EBA48DE51F34446C40886820C5EAD9AFA0F777F36299D2E2DDCD09FB831
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <path d="M11 2h2v9h9v2h-9v9h-2v-9H2v-2h9" fill="#FFF" />.</svg>.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	157916
Entropy (8bit):	5.278885637821853
Encrypted:	false
SSDEEP:
MD5:	D5922BEECAAD5AC1AC49B45B4D4BCDD2
SHA1:	E3D882D8192A8AA695BBDACBF2D0ED9DEE9899A8
SHA-256:	92F43405369FC20551C99904F953308797DEB7E56C2343B0D4AC5FEDBC6E02AD
SHA-512:	5687A9B11078F68D1FE199861ED7BA8ABE6FDD24EE9B94B867D0494573134205C0397E10ECECCA4E8BEE47EDE45B1B21C4CC5EADAF91483A362F2CAA72F4FFC3
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.4680.js?cs=14cfbe0465b21b370fc1
Preview:	/! For license information please see signing_iframeless_mobile.4680.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4680],{73169:function(t){for(var n=self.crypto\|\|self.msCrypto,e="-_",a=36;a--;)e+=a.toString(36);for(a=36;a---10;)e+=a.toString(36).toUpperCase();t.exports=function(t){var o="",r=n.getRandomValues(new Uint8Array(t\|\|21));for(a=t\|\|21;a--;)o+=e[63&r[a]];return o}},33241:function(t,n,e){"use strict";e.d(n,{y_:function(){return bi},J7:function(){return Ci},R_:function(){return Si}}),"undefined"==typeof Proxy&&(self.Proxy=function t(){!function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,t)});var a=e(44712),o=e(20713);function r(){var t;return r=a?o(t=a).call(t):function(t){for(var n=1;n<arguments.length;n++){var e=arguments[n];for(var a in e)Object.prototype.hasOwnProperty.call(e,a)&&(t[a]=e[a])}return t},r.apply(this,arguments)}var i=e(19957),s=e(24800),c=e(33704);function l(t,n){if(null==

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631), with no line terminators
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	5.169057379478547
Encrypted:	false
SSDEEP:
MD5:	3847F8D6C4F3753E9FE7F9D496B03B9E
SHA1:	2EBB354C178488CF5B82473FA41931A9DE27948F
SHA-256:	9A42EE6681CF1A21EE48EFE5C961F04C4EFEF7FE1961823BB8825CD86717904C
SHA-512:	5447E6A66C5BA5BF9A1C1FDE6DE12B2314F4ED0C454933690626BFE8EFD42767E71EA80AF9C3C8FCDEF8F4883AA5EB5730FB2FEC7F43E6E14E7548327A00218F
Malicious:	false
Reputation:	low
URL:	https://a.docusign.com/ds_arya_wrapper.min.js?f=1
Preview:	(function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(function(){}),s({})),a=s("");function d(n){throw t+"-"+n}function s(n){var t=typeof n;return function(n){return typeof n==t}}function h(n){for(var t in n)u[t]=n[t]}return{i:function(n){i++?d(1):n!==o&&c(n)&&!n[e]?h(n):d(11)},g:function(n,t){return n&&a(n)?t&&t(u[n])\|\|u[n]\|\|!1:t&&t(u)\|\|u\|\|!1}}})}).call(this);;DS_Arya.i({"DS_A":"7b9153d2-0f8b-4f7a-8d10-d67c15a9951b","DS_A_C":""});

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26290)
Category:	downloaded
Size (bytes):	26489
Entropy (8bit):	5.348648747448666
Encrypted:	false
SSDEEP:
MD5:	0E1BF84FAAA48B2E51A7179537B21505
SHA1:	6B51F7F1EBB9D807CEEE58ECDF42649350725A17
SHA-256:	5C07CFB957B340972DC6E7D4B4A16EF92CB6058291142348C0BEDB32EA816919
SHA-512:	44E339C191A4B5E74A75D4B4DA60E30BFA25BFDB5C36EC519310C1E6D2735B3DA765CE981D4FD40EA34C13249559AF76B6FCA945A779423F6BCE8B0C7EACD72C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.telemetry-recorder.js?cs=39b0c5c8e44074fb3c40
Preview:	/! For license information please see signing_iframeless_mobile.telemetry-recorder.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8846],{76069:function(e,t,r){r.r(t),r.d(t,{default:function(){return V},registerTabLookup:function(){return M}});var n={};r.r(n),r.d(n,{cleanUpTelemetryArr:function(){return g},isTelemetryFeatureEnabled:function(){return h},promiseToSwallowErrors:function(){return v},save:function(){return b},swallowErrors:function(){return m},telemetryRecorder:function(){return p}});var o,a=r(62626),i=(r(74916),r(15306),r(21249),r(57640),r(9924),r(88674),r(92222),r(23157),r(47042),r(39714),r(91038),r(41817),r(66992),r(33948),r(57327),r(88449),r(2490),r(59849),r(15581),r(34514),r(54747),r(49337),r(72443),r(73706),r(10408),r(65069),r(19755)),c=r.n(i),u=r(49919),l=r(47597),f=r(80002),s=(r(73210),r(23123),r(64211),r(41874),r(163)),d=(r(17914),0),p=a.X.createTelemetryRecorder();function y(e){if(d<100){d++;var t=new Error("E

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23634)
Category:	downloaded
Size (bytes):	23805
Entropy (8bit):	5.33166079501071
Encrypted:	false
SSDEEP:
MD5:	800CACD6BD9AF551ED14654BFE43E928
SHA1:	44CBA5C34A4E00D102C0E142D8D86CFF1EC92960
SHA-256:	0EC5CF52D94BD04F04538ED4C994E1B713CA32B574DE9B33F2F8B4B3F9BDB0D9
SHA-512:	AD608BD75442E94F7A8AF50823AF775E46479FE7EDDB919070FFCA79F2F78A5AE994A26D0457836E556A452460F7841F2F88EF8BE804BC3FCEA5FB0597C759E6
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.5357.js?cs=561db2828f9d4e5d650e
Preview:	/! For license information please see signing_iframeless_mobile.5357.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5357],{40232:function(e,t,o){o.d(t,{U:function(){return ee}});var r=o(45490),n=o(97842),a=o(86729),i=o.n(a),l=o(67294),d=o(45697),p=o.n(d),s=o(57105),c=o(4261),f=o(89443),u=o(81770),b=o(52369),v=o(34386),x=o(12170),m=o(67579),h=o(35628),g=o(61813),w=o(69459),y=o(71954),k=o(85375),C=o(11044),Z=o.n(C),E=o(29001),S=o(46742),R=o(40659),z=o(80903),O={base:e=>{var t,o=e.props,r=e.tokens,n=!(null==o\|\|!o.disableArrow),a=!(null==o\|\|!o.preventOverflow),i=!n&&!a;return{default:{popover:{zIndex:S.Z.Callout},wrap:{backgroundColor:r.modal.backgroundColor,borderRadius:"2px",boxShadow:Z()(t="0 0 0 1px ".concat(r.modal.borderColor,", ")).call(t,r.elevation.low),color:E.Z.black,display:"block",position:"relative","&::before":i&&{border:"solid transparent",borderWidth:"11px",content:'""',display:"block",pointerEvents:"none",position:"a

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17382)
Category:	downloaded
Size (bytes):	17553
Entropy (8bit):	5.251484925218921
Encrypted:	false
SSDEEP:
MD5:	8C303A1A9D36640044657051C69D789A
SHA1:	8B6D2CF99C7EEE1809ECEE23CCC1A7497B98FCDF
SHA-256:	D17ABBF384336CF797A5D25AD9E77E581C45E4EF570F7ECCD49B81368CB1F6D1
SHA-512:	ED3924602B0D59AB7F7AF1BF630A961853AEC34007A9394D49760ADB6E54CD3B51A92C91E1FC7ABB038572B6BBF093A8D029C2ADA5033D1CBCF206D5D84EE979
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.8047.js?cs=38fca751b1978e5a9c10
Preview:	/! For license information please see signing_iframeless_mobile.8047.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8047],{8679:function(e,t,r){var n=r(21296),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},u={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},c={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},i={};function f(e){return n.isMemo(e)?c:i[e.$$typeof]\|\|o}i[n.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},i[n.Memo]=c;var a=Object.defineProperty,s=Object.getOwnPropertyNames,l=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,y=Object.getPrototypeOf,d=Object.prototype;e.exports=function e(t,r,n){if("string"!=typeof r){if(d){var o=y(r);o&&o!==d&&e(t,o,n)}var c=s(r);l&&(c=c.concat(l(r))

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65456)
Category:	downloaded
Size (bytes):	1067272
Entropy (8bit):	5.366803555058549
Encrypted:	false
SSDEEP:
MD5:	3B0DBD843A8839BF95502908E6FF4497
SHA1:	0956781BDC52A7A244B26C010C5211107E9D05AE
SHA-256:	1B815E4AA1BDBC922D43F9BB04C1E0B9FAF4FB634717808AEFCA06439F3CA2BF
SHA-512:	F27087CEAAC4E46E5F6816F9C346031C60F95AE2CB519CF8F591065D91FA1B7426E7E11D130DEBEF7E6F5847219D6F123DAB9350DFB45E1DE702132236505CF7
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing-conversations.js?cs=a28e17903
Preview:	/! For license information please see signing-conversations.js.LICENSE.txt /.!function(){var t,e,n,r,i={80417:function(t,e,n){"use strict";var r=n(73806);Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0;var i=r(n(71519)),o=r(n(38351)),a=r(n(62817)),u=r(n(67939)),s=function(){function t(){(0,o.default)(this,t),(0,u.default)(this,"queue",new Array),(0,u.default)(this,"workingOnPromise",!1)}return(0,a.default)(t,[{key:"enqueue",value:function(t){var e=this;return new i.default((function(n,r){e.queue.push({worker:t,resolve:n,reject:r}),e.dequeue()}))}},{key:"dequeue",value:function(){var t=this;if(this.workingOnPromise)return!1;var e=this.queue.shift();if(!e)return!1;try{this.workingOnPromise=!0,e.worker().then((function(n){t.workingOnPromise=!1,e.resolve(n),t.dequeue()})).catch((function(n){t.workingOnPromise=!1,e.reject(n),t.dequeue()}))}catch(t){this.workingOnPromise=!1,e.reject(t),this.dequeue()}return!0}}]),t}();e.default=s},17914:function(t,e,n){"use strict";var r=

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	119869
Entropy (8bit):	4.18401975910281
Encrypted:	false
SSDEEP:
MD5:	ECE7A224F69AB2205D90900589AE1D05
SHA1:	3D861B816A5DA892C8A88D5755A5537C036239DE
SHA-256:	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
SHA-512:	EEF4BDD54AF95BE42224FFE605BB627293DAEA0C58A50B328ACC8B56040C81FDCB5EC8406F56856FC617A552E4D6DD28BB892467666889D27F03EE8BFCD16D7B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/v/static/mixpanel-2-2-1b.js
Preview:	/. DocuSign modified version of Mixpanel JS Library v2.2.1. * $initial_referer and $referer have been removed, as not to send any senstive information. * $initial_referring_domain and referring_domain have been retained.. . Mixpanel JS Library v2.2.1. . . * Copyright 2012, Mixpanel, Inc. All Rights Reserved. * http://mixpanel.com/. . Includes portions of Underscore.js. * http://documentcloud.github.com/underscore/. * (c) 2011 Jeremy Ashkenas, DocumentCloud Inc.. * Released under the MIT License.. /..// ==ClosureCompiler==.// @compilation_level ADVANCED_OPTIMIZATIONS.// @output_file_name mixpanel-2.2.min.js.// ==/ClosureCompiler==../.Will export window.mixpanel./../.SIMPLE STYLE GUIDE:..this.x == public function.this._x == internal - only use within this file.this.__x == private - only use within the class..Globals should be all caps./.(function(mixpanel) {. /. * Saved references to long variable names, so that closure compiler can. * minimize file size.. */. var

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 44
Category:	downloaded
Size (bytes):	3745
Entropy (8bit):	7.319238994753888
Encrypted:	false
SSDEEP:
MD5:	DEBD77E543E64173837073B5751ABB08
SHA1:	71577CA453893F08A57A63953B836E8198D878AF
SHA-256:	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
SHA-512:	0FB269F547FFB69E59448FA4E9E234DC4E9B381D5336947C12113D7A1DEC71A7D9EC4F6B2841C032EA1E3FB6E68328D34C1EE1B94761171E523AFBFA962280F2
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/imgs/loader.gif
Preview:	GIF89a,.,..2.+++RRRCCCTTT---LLLiii###SSS777@@@EEE888666KKK&&&NNN333%%%<<<000......>>>QQQ(((bbb......WWW...999,,,.................tttuuu$$$...zzzXXXmmm......UUU"""..........................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39EC547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39EB547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6189959b-1072-4052-a607-820f04aae975" stRef:documentID="xmp.did:695

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62148)
Category:	downloaded
Size (bytes):	62319
Entropy (8bit):	5.406139991034088
Encrypted:	false
SSDEEP:
MD5:	31DB29CE9618D7F9F3AF413FB7D81249
SHA1:	B95A456F87FF181739C9A87B0C79A676D6130B55
SHA-256:	4F1A09D3F5D799F14A0ACE9F2659022B6602F58446E073933530E81FE33C2EBE
SHA-512:	8480FDC058ADD912428D64ED3F9096995FB8F609415511957A561CD135494014565060D6B5DF1EB0B7D96875AD95661AED732D90D1AB98ADDB79F775176C408B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.9890.js?cs=f66671fff601475866b4
Preview:	/! For license information please see signing_iframeless_mobile.9890.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9890],{73873:function(e,t,n){"use strict";n.d(t,{w:function(){return o}});var o=function(){return"undefined"!=typeof window&&"documentMode"in window.document}},40125:function(e,t,n){"use strict";n.d(t,{I:function(){return i},f:function(){return a}});var o=n(35343),r=n.n(o),i=["[contenteditable]",'[tabindex]:not([tabindex="-1"])',"details","embed","iframe","a[href]","audio[controls]","img[usemap]",'menu[type="toolbar"]',"object[usemap]","video[controls]","button:not([disabled])",'input:not([disabled]):not([type="hidden"])',"select:not([disabled])","textarea:not([disabled])"].join(", "),a=function(e){return r()(e.querySelectorAll(i))}},25058:function(e,t,n){"use strict";n.d(t,{VW:function(){return i},tH:function(){return a},Tx:function(){return l},BU:function(){return s},F$:function(){return d},oQ:function(){return u},vy:function

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20330)
Category:	downloaded
Size (bytes):	20547
Entropy (8bit):	5.274134582046875
Encrypted:	false
SSDEEP:
MD5:	849818DF5298A05C75C16C394282EFBF
SHA1:	9E4031CDD62B4A58ED21AECD9863174207751622
SHA-256:	9262495CFBE99D6BC10DBB1549B36EA3A092F39B81CEC1CE3AEC19368D7205F8
SHA-512:	03DC74C398C7907C2FDEEF950CB8094C31EED038E3E2EAF13BD1BF6EE54D6726008090CED7F330FB9B9626045A5BF9E0FEA69C07AA993FD1D1B34AADC1DD729E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.redux-learning-model-logger.js?cs=6dd999df936594407ed8
Preview:	/! For license information please see signing_iframeless_mobile.redux-learning-model-logger.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9180],{27418:function(t){var e=Object.getOwnPropertySymbols,r=Object.prototype.hasOwnProperty,n=Object.prototype.propertyIsEnumerable;function o(t){if(null==t)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(t)}t.exports=function(){try{if(!Object.assign)return!1;var t=new String("abc");if(t[5]="de","5"===Object.getOwnPropertyNames(t)[0])return!1;for(var e={},r=0;r<10;r++)e["_"+String.fromCharCode(r)]=r;if("0123456789"!==Object.getOwnPropertyNames(e).map((function(t){return e[t]})).join(""))return!1;var n={};return"abcdefghijklmnopqrst".split("").forEach((function(t){n[t]=t})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},n)).join("")}catch(t){return!1}}()?Object.assign:function(t,i){for(var u,a,c=o(t),l=1;l<arguments.length;l++){for(var s in u=O

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	103725
Entropy (8bit):	5.5154925736475695
Encrypted:	false
SSDEEP:
MD5:	02A0CB866157145FAD250E7DF9991E81
SHA1:	8E2AC89263F517FDC31FDA39F3051D3FCB6736E8
SHA-256:	88B83750FBEE5BFC6968EE4D2F2463758FA5BC58992AFBD351DE48D204A15BD9
SHA-512:	0D4CD53E9719774CA9CA23212B9CE374F3230DCE3D2DCC66AFAABCD570F804A00D9573504EEF11662FF1E0EFCCD5594D796098331324DFB81D1F71C57921146E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.9889.js?cs=32f2cdce66c1098a9e9d
Preview:	/! For license information please see signing_iframeless_mobile.9889.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9889],{67473:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0})},24909:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.sendEventNotification=t.getQueue=t.validateAndGetBatchSize=t.validateAndGetFlushInterval=t.DEFAULT_BATCH_SIZE=t.DEFAULT_FLUSH_INTERVAL=void 0;var n=r(31459),i=r(98125),o=r(27378);t.DEFAULT_FLUSH_INTERVAL=3e4,t.DEFAULT_BATCH_SIZE=10;var s=i.getLogger("EventProcessor");t.validateAndGetFlushInterval=function(e){return e<=0&&(s.warn("Invalid flushInterval "+e+", defaulting to "+t.DEFAULT_FLUSH_INTERVAL),e=t.DEFAULT_FLUSH_INTERVAL),e},t.validateAndGetBatchSize=function(e){return(e=Math.floor(e))<1&&(s.warn("Invalid batchSize "+e+", defaulting to "+t.DEFAULT_BATCH_SIZE),e=t.DEFAULT_BATCH_SIZE),Math.max(1,e)},t.getQueue=function(e,t,r,i){return e>1?new n.DefaultEv

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8188)
Category:	downloaded
Size (bytes):	8395
Entropy (8bit):	5.135321074657934
Encrypted:	false
SSDEEP:
MD5:	A180A72D3E4465E957131C60E7963B07
SHA1:	5034528D1F2ED2F0C2630921FA853D7905E1AE8B
SHA-256:	7DCFEFD9DC6BC346008159474FD5A2C09174708EBC3F7953F68E2B1507F9FD9A
SHA-512:	B7C548FEC26EB67BF78AA50665BC132FEF1737E0AF8EA05C90357FA8DAA3B1A2D5AC4947E5BE432CB1A42E425D1D3D2492D652F2C60D0CF8C53E96BB82682708
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.preload-task-load-arya.js?cs=aa09336952ce56513100
Preview:	/! For license information please see signing_iframeless_mobile.preload-task-load-arya.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4946],{42153:function(t,r,e){e.r(r),e(88674),e(41817),e(66992),e(33948),e(72443),e(73706),e(10408),e(15581),e(2490),e(34514),e(54747),e(65069),e(47042);var n=e(7527),o=e(39792),i=e(38973),a=e(15413);function u(){u=function(){return t};var t={},r=Object.prototype,e=r.hasOwnProperty,n=Object.defineProperty\|\|function(t,r,e){t[r]=e.value},o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function s(t,r,e){return Object.defineProperty(t,r,{value:e,enumerable:!0,configurable:!0,writable:!0}),t[r]}try{s({},"")}catch(t){s=function(t,r,e){return t[r]=e}}function l(t,r,e,o){var i=r&&r.prototype instanceof p?r:p,a=Object.create(i.prototype),u=new j(o\|\|[]);return n(a,"_invoke",{value:L(t,e,u)}),a}function f(t,r,e){try{return{ty

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 47748, version 1.0
Category:	downloaded
Size (bytes):	47748
Entropy (8bit):	7.989435227374723
Encrypted:	false
SSDEEP:
MD5:	4A573FAC9111D6ADCB3994983539BD75
SHA1:	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C
SHA-256:	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
SHA-512:	6ADF6B31AE697E2CFF767BD613E2F787EBB088749EA5D8263044188EA020336ED1368C9EA9C39A19C70B7D96226B018F50C0E319EED1E6A6DBD9F32BCFA2E064
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/HelveticaNeueW01-55Roma.woff
Preview:	wOFF........................................LTSH............._gOS/2.......V...`e8..VDMX...l...g....r.z$cmap...............cvt .......F...F.C..fpgm...........b2Msfgasp................glyf..........MlS...hdmx...\|...~...(...vhead.......6...6..1yhhea...4... ...$...Fhmtx...T.......x.h"fkern...L........v.v.loca.......g...\|....maxp...8... ... ....name...X...b........post........... ...2prep..............\x.].1..0.E....l.......z.w..\.....q...)....o+.K)...4...n\Y.....A.J8.%6.4..6[.1.{...f.?.#.?..<...c..sA>Q..g.L......z....N3!x.c`f.e..........................X.@....A_......\|<...........N0.`...3..X.N1(.!...D.4..x...ex...F..?....%.AB:......)..FB..s06V,...m.........d!.....FV..w..Mf'..A......\..-.G.%..G>.J~.....) .Q.P.B...eQ..b...)f.)AqY....%...)%.PZ...,GYY.r...eE*X&..(+SIV...J...Ueu...T.5.!kQ..M-Y...u,.z.......eC..F4..id.4..l...Md3...4..Z.\......-ekZY2?.Z.qlK....H;......h/;:.B.K...eg:..t.]......NW.n.'.e/zX...)..K.....>..}....'.._.t...9..........1D..q.g...09...wF.Q2...c.%.2

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65446)
Category:	downloaded
Size (bytes):	93118
Entropy (8bit):	5.294821159557167
Encrypted:	false
SSDEEP:
MD5:	9AEEB8AB0951945771C2C266B8D60294
SHA1:	1B96D0961D2C467E3CDB4F74BE01A95EAE5E903A
SHA-256:	CA74604EA3EBC69EE2E292C1573E5D4A848037FD9CC0F669F5B03AB6FF640D50
SHA-512:	D94AB9D2A5B08F46F3CE183394B722617CC58F0A196B3C89F438AF5845B77C1530D5D2AC65E269684FE84B6251C39482A44BF3E17BF712A60A5A2D401B7D0C36
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.2600.js?cs=140961e394fec3008edc
Preview:	/! For license information please see signing_iframeless_mobile.2600.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2600],{61713:function(e,t){!function(){var n,r=Array.prototype.forEach,i=Object.prototype.hasOwnProperty,o=Array.prototype.slice,a=0,s={keys:Object.keys\|\|function(e){if("object"!=typeof e&&"function"!=typeof e\|\|null===e)throw new TypeError("keys() called on a non-object");var t,n=[];for(t in e)e.hasOwnProperty(t)&&(n[n.length]=t);return n},uniqueId:function(e){var t=++a+"";return e?e+t:t},has:function(e,t){return i.call(e,t)},each:function(e,t,n){if(null!=e)if(r&&e.forEach===r)e.forEach(t,n);else if(e.length===+e.length)for(var i=0,o=e.length;i<o;i++)t.call(n,e[i],i,e);else for(var a in e)this.has(e,a)&&t.call(n,e[a],a,e)},once:function(e){var t,n=!1;return function(){return n\|\|(n=!0,t=e.apply(this,arguments),e=null),t}}};n={on:function(e,t,n){return l(this,"on",e,[t,n])&&t?(this._events\|\|(this._events={}),(this._events[e]\|\|(this

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65444)
Category:	downloaded
Size (bytes):	602687
Entropy (8bit):	5.706654033884638
Encrypted:	false
SSDEEP:
MD5:	0797D508B2E8A40CA0EDBB311EE330B2
SHA1:	7DA9F3E205F345C0F1D78644ABE52A80703460FC
SHA-256:	1015D1ECD40D0F24F67C7F463AB37DE5369225D56292F6FD1830FA9C8EC315D6
SHA-512:	5D7BB0ED0F89C443C1644CF517DEDA839309C19A5E8D905C1A98232F1A608CB547F5AAF97335F8862F267303BB98BD0D95300F05A23EF935237D9B98EF70952D
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.5136.js?cs=7b6d53a61669e9412559
Preview:	/! For license information please see signing_iframeless_mobile.5136.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5136,4207],{79924:function(t,e,n){"use strict";n.d(e,{H:function(){return Jt}});var r=n(12303),o=n(70773),a=n(42008),i=n(14660),s=n(40392),c=n(60565),l=n(34061),u=n(45793),f=n(41187);function v(t,e){var n=r(t);if(o){var s=o(t);e&&(s=a(s).call(s,(function(e){return i(t,e).enumerable}))),n.push.apply(n,s)}return n}function h(t){for(var e=1;e<arguments.length;e++){var n,r,o=null!=arguments[e]?arguments[e]:{};e%2?s(n=v(Object(o),!0)).call(n,(function(e){(0,f.Z)(t,e,o[e])})):c?l(t,c(o)):s(r=v(Object(o))).call(r,(function(e){u(t,e,i(o,e))}))}return t}var d=n(50328),p=n(83312),g=n(93748),m=n(82947),_=n.n(m),w=n(81546),C=n.n(w),E=n(43780),y=n.n(E),A=n(26296),T=n.n(A),S=n(34352),b=n.n(S),x={get:function(){return null},has:function(){return!1},forEach:function(){return""}},I=function t(e,n,r,o){(0,p.Z)(this,t),(0,f.Z)(this,"status",void 0)

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	996
Entropy (8bit):	7.667690083187348
Encrypted:	false
SSDEEP:
MD5:	F4B52A4EB3D0CDD585A73EADE7CC734A
SHA1:	00BD17DB2EA7F845910C713CBFF3A6719D59A1EC
SHA-256:	94BACE793EA5F351B65F5B2948BEB949B01FB811274A3F8EB8D52B9719A149BB
SHA-512:	763AF2EADA1D18687D5A4B2BD8323A10D93CC22AE4E78139446D7DDDB617631CE55B695F24D07DF5FAD14B48F0674E56BD031B4DDC50AFCE013F320CF6447EAC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............tEXtSoftware.Adobe ImageReadyq.e<....IDATx..Kr.@...S2...l...,\|.T..@\|.N.8.."....... +....T..B..Dw..Z@..W.=.M.{&..?.}.>..vnT..0h.._>..{.w.LR.}.<.tri5l3.U..D.@.....Jjq....=4....m?\|^,..m.>{s.x.\.....j.z.........l.`...8L1..Z.t..@7......<s;.1...N.<:zg>\|....s.vC].....^...P..%..B._. r.....lU.`..7U.e.B..+`.+.Y.....;.Mr.X.aW....lF/....Q..%p.f.@1.e.@...r.>.M.>...K.U...R{..P..T{.&....z".....T.......RZ....Xd...(>@.>..\......@..x.-...l3............M....$r!l.v%.........a....&.../Hr.lU..!...M.m...N&.....bV.......Y...ww..!...}<.. tsNV....."..3....@o..s....;.....c...@..nG. .v4...:.KJ.o>.JX$..r..:.....M.... .,....u.1.."`r.FH..n^....q..Z.<.tB...).6$......f..6..D'op...G...W...vy.t...u?]...,W..."...T.dV....%G...p./E..ie..6..i.!.4.>......^E...I.:......U..2.al.#.@x..VU..1IY....l.E.......l..%....v!l..y[..../.2%..z[...Z..}g.......%..Q,......7.B...B%....6.`\&o....%e.ML..[%....2.}..J%!..bH-C..(..2......zb2..3..+..X.(K.......IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	136244
Entropy (8bit):	5.177325794975634
Encrypted:	false
SSDEEP:
MD5:	1CD2AAA17DADB56B3B3CBD094E7A5DFC
SHA1:	FB1D0E94FD2189EEFE8998415413CDC02EEE463E
SHA-256:	1B88983C3C90FDEB0CDBF6F639A35E1E758E16C1D569E638B6B79C0CE16C67EB
SHA-512:	AEA112DDD4C19EDED84EF23B25B484737DDC62E1059667310AB16EDEC75F1163AD9C82BBD43B8BC457D942F88D175809F49DE2FED63DCC04FBA06E0740BA9F0F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.olive.js?cs=8a852966a624e50684e7
Preview:	/! For license information please see signing_iframeless_mobile.olive.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4546],{35598:function(e){e.exports=function(e){function t(i){if(n[i])return n[i].exports;var o=n[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="/",t(0)}([function(e,t,n){"use strict";n(1),n(2),n(3);var i=n(76);i.keys().forEach((function(e){i(e)}))},function(e,t,n){"use strict";!function(e,t){e.config={closePopoverOnEsc:!0,closePopoverOnClickAnywhere:!0,debug:!1,isAutoInitEnabled:!0},e.version="17.20.0",e.KEYS={tab:9,enter:13,esc:27,left:37,up:38,right:39,down:40},e.l10n={close:"Close",characterLimit:"{{REMAINING}} (maximum {{MAX}} characters)"},e.init=function(e){var t=[],n={add:function(e){return t.push(e),n},run:function(){var e;for(e=0;e<t.length;e++)t[e]();return n},afterLoad:function(){e.config.isAutoInitEnabled&&e.init.run(),e.util.polyfillFle

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	71533
Entropy (8bit):	5.370415281835754
Encrypted:	false
SSDEEP:
MD5:	ECFD56856ABFD404997CF45BA187BDD6
SHA1:	F06C259982B09375D1AE0A8F2677B1914AF3DE04
SHA-256:	B32DFA237A388D57FF27E11455B85FDD1975B92271FCB7821DB170DB5FD959C7
SHA-512:	C330A20A09EE33D4328BF4216EECB1BF06DB02E22B1280BD8457770C60DD48561B4201C343F89BBEDC5D6D2299DAD68EDD5E939F6713DE5B206338DC0D09FA0B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.2004.js?cs=98cd48fba903a8fa2a83
Preview:	/! For license information please see signing_iframeless_mobile.2004.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2004],{94169:function(e,t,n){var r=n(40202);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,i){var o=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((o(n,"getResource")\|\|t&&o(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeError",{name:"getResource",hash:{},data:i,loc:{start:{line:1,column:57},end:{line:1,column:97}}}))+" "},3:function(e,t,n,r,i){var o=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((o(n,"getResource")\|\|t&&o(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeWarning",{name:"getResource",hash:{},data:i,loc:{start:{line:1,column:107},end:{line:1,column:149}}}))+" "},5:function(e,t,n,r,i

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	downloaded
Size (bytes):	919119
Entropy (8bit):	5.3433622508245495
Encrypted:	false
SSDEEP:
MD5:	071283D8DAC63B162D9B42395BFE5756
SHA1:	D32C45D77FFE758EEE57B18E8B6D238C34585BFC
SHA-256:	0A9D557FB0FE57CF0C2CDBA487F25066AFAD6A1B982290B3358684DFEC322FD2
SHA-512:	FB5012F67887E895E4E6BF1052CFAAF06636E20471E3A20A7A2835DAF2F4896BF528B700BCCB4BF698079C0EF25AFA730AF1A1489B8DD1D3398769217FF1CF07
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.backbone-app.js?cs=e1bc07e97ff649384ac3
Preview:	/! For license information please see signing_iframeless_mobile.backbone-app.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1762,7930],{91465:function(e,t,n){var a=n(40202);e.exports=(a.default\|\|a).template({compiler:[8,">= 4.3.0"],main:function(e,t,n,a,l){var i,o=null!=t?t:e.nullContext\|\|{},r=e.hooks.helperMissing,s=e.escapeExpression,c="function",u=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return'<div id="simple-verify-dialog" class="modal-wrap dialog" data-qa="simple-dialog"><div class="modal-content" role="dialog" aria-labelledby="simple-verify-dialog-title" aria-describedby="simple-verify-dialog-content"><button type="button" class="icon icon-times x-close close" data-action="canceled"><span class="btn-label">'+s((u(n,"$")\|\|t&&u(t,"$")\|\|r).call(o,"DocuSign_Close",{name:"$",hash:{},data:l,loc:{start:{line:1,column:322},end:{line:1,column:344}}}))+'</span></button><div class="header"><h1 id="s

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16044)
Category:	downloaded
Size (bytes):	16215
Entropy (8bit):	5.2839560332903295
Encrypted:	false
SSDEEP:
MD5:	3F1B75820E1296EEC56A219AD8BDAB41
SHA1:	A57D20A35951A6054269C1E7218CACB90C6C2FAC
SHA-256:	CACD3DE23A1062B43CFB840E7D434073195429D7411CD8D98CDF34C79E1DAE0E
SHA-512:	272D3AF67E3ACB996D5B96513EEB12B78ABDB864E8866A8454D80B7B42E0175C81B46E8707E5C7C1AE9A688A5838546879095A336F31C414A98E9DE5519224AD
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.9970.js?cs=0ff98020119a543f6e4c
Preview:	/! For license information please see signing_iframeless_mobile.9970.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9970],{75010:function(e,n,t){t.d(n,{Cx:function(){return Q},IO:function(){return $},TC:function(){return ne},Pq:function(){return B},cC:function(){return X},xB:function(){return v},nf:function(){return K},kF:function(){return ee},ZP:function(){return te},u0:function(){return W},Jt:function(){return z},nF:function(){return N},S:function(){return J},wL:function(){return w},XP:function(){return M},tg:function(){return D},OE:function(){return H},X_:function(){return L},i3:function(){return A},Sq:function(){return j},Tg:function(){return P},MC:function(){return I},Hg:function(){return b},VF:function(){return E},h9:function(){return O}});var i={};t.r(i),t.d(i,{AttachmentFileTypes:function(){return Q},AttachmentMaxFileSizeKB:function(){return $},LinkableTabFamilies:function(){return R},WalkthroughFirstTimeSignerQueryParam:f

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16188)
Category:	downloaded
Size (bytes):	16393
Entropy (8bit):	5.226266955709405
Encrypted:	false
SSDEEP:
MD5:	1018ACD46CF4BE16B903A5AD6E085B1D
SHA1:	B3B75EB51D18850207AA222070D9AC314A818547
SHA-256:	C8251C642BB415AB58B9E38FDD71CECE735886FD0C08AE45140EF05EF34C8453
SHA-512:	AEAFEEC50A221EB1514F048FC4D8DBF5A1345CE8D1EA5E4BE76F107EC642AAD3B61FE6EB5AF1F82E3DB7D7BC7E9C96D0D70521108D015845F741BA058B087DF1
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.preload-task-load-dss.js?cs=6680c4dc585327909187
Preview:	/! For license information please see signing_iframeless_mobile.preload-task-load-dss.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1356],{27418:function(t){var e=Object.getOwnPropertySymbols,r=Object.prototype.hasOwnProperty,n=Object.prototype.propertyIsEnumerable;function o(t){if(null==t)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(t)}t.exports=function(){try{if(!Object.assign)return!1;var t=new String("abc");if(t[5]="de","5"===Object.getOwnPropertyNames(t)[0])return!1;for(var e={},r=0;r<10;r++)e["_"+String.fromCharCode(r)]=r;if("0123456789"!==Object.getOwnPropertyNames(e).map((function(t){return e[t]})).join(""))return!1;var n={};return"abcdefghijklmnopqrst".split("").forEach((function(t){n[t]=t})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},n)).join("")}catch(t){return!1}}()?Object.assign:function(t,i){for(var u,a,c=o(t),l=1;l<arguments.length;l++){for(var f in u=Object(

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	126848
Entropy (8bit):	5.471328899532875
Encrypted:	false
SSDEEP:
MD5:	B6FD81966C7B9C651CDC521AF884883D
SHA1:	9904CE7E5CABAC91E1402928CE571CB778425F61
SHA-256:	A811ECC0FD2031C345606F0B2823C9C0038EE83D5D860DE7CF4459AFE5344A41
SHA-512:	B8BD4075A45E3DA0604A1515625F6DAF60CF1AEFC7BC724DE5CBA682463EBFF6C1AEA61162A78B2BAC2387CC2F66996DB4F64E24649E5E5C55C678C9995B383E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.7776.js?cs=03574f7d2e87833dd044
Preview:	/! For license information please see signing_iframeless_mobile.7776.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[7776],{20765:function(e,t){"use strict";t.Z={currentColor:"currentColor",inherit:"inherit",initial:"initial",transparent:"transparent",unset:"unset",white:"#ffffff",whiteTranslucent:"rgba(255,255,255,0.4)",gray1:"#f9f9f9",gray2:"#f4f4f4",gray3:"#e9e9e9",gray4:"#d9d9d9",gray5:"#cccccc",gray6:"#a9a9a9",gray7:"#999999",gray8:"#777777",gray9:"#666666",gray10:"#555555",black:"#333333",gray9_alpha90:"#666666EE",black_alpha50:"#33333380",avatarBackground:"#e8edf7",avatarPlaceholderBackground:"#b8bfcc",badgeOrange:"#cc4c15",badgeTurquoise:"#3d7e8f",commentsDotBlueActive:"rgba(65,134,236,0.8)",commentsDotBlueInActive:"rgba(65,134,236,0.33)",commentJustPosted:"#e7edf8",DocuSignBluePale2:"#e3edf7",DocuSignBluePale:"#c9dcf0",DocuSignBlueDisabled:"#4f8dce",DocuSignBlueLight:"#2875c4",DocuSignBlue:"#005cb9",DocuSignBlueDark:"#004185",DocuSignB

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 33752, version 0.0
Category:	downloaded
Size (bytes):	33752
Entropy (8bit):	7.984139047245452
Encrypted:	false
SSDEEP:
MD5:	4DE7535F6F5DF8D5437C21C068DDB0EC
SHA1:	3553204B4624CA41CF1C4F3BD9B37D8C968CBA23
SHA-256:	8F6A520A392FF62149E5FC5AA87BFAB9B3816CD6010D4D4FCA194E8683CA498B
SHA-512:	E2A9B45F69BD1CBCF0D5F3710BECFACF6A28AF0A9FD034262F6AF4803628DADCE4C2FCC385758F88130AB68D362F3694ED786D0971CF7FD7E8FAF6CD1C2860DE
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/maven_pro_bold.woff
Preview:	wOFFOTTO...........x........................CFF ......Om......FFTM...h........Z...GDEF..T........ ....GPOS..TH..-....DiP}7GSUB..T(... ... l.t.OS/2.......H...`...Ccmap.......\|....#G..head...0...3...6....hhea...d... ...$.U.>hmtx.......Q...X.Xl7maxp..............P.name.......4....N...post........... .j.fx.c`d```d8...l<..W.n...8..2.F.../..)...:..&.(..v...x.c`d``../........g.2.EP.5.......P.....x.c`b.......u..1...<.f........p...).,fP`P...._....N.u05..X.@r.L.GP..x.m.1O.A.....(...XL...K....+.[...-..@.A....6..K...e#.x..\|.......^.p..PzV...s...=7q.O..z..+.xn.R=Q.....m.Y.......s..><........6n..c.lq@..klPC.....!".,AJ.`N.e.&.L....F..7g..&..w<.J...P..M-..@.Q.Kz.yn.)dRg...B..J...v:....gR.vFC..N.2....PF0..=.)V.,..{..LY.g"...;9..]p..2n!f....IW67..a.%.mO..-......iXax.c```f.`..F..8..1..,..........P..a)........L..(.(H).)().)X).QTz..........@....1.AU.+H(.UZBU2.................n...}.`...V=X.`.I...Q8.z....#..A.L.,.l...\.<.\|...B.".b...R.2.r...J..j...Z.:.z...F.&.f...V.6.v...N...n...

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7405
Entropy (8bit):	2.037697524051661
Encrypted:	false
SSDEEP:
MD5:	888E04D5D5FF290D47BF73787F1E0BFC
SHA1:	C8EDC4B60BB909C025B908F4ADBEEA557581687C
SHA-256:	387483B8C9FB9F677E0D72D066945675540FE417E6E6C70BAA9C013CB8FC88CD
SHA-512:	0662402C7EBC3D670D40EC55E5DC25C4360E54743517B783151F088A23FDCBE70803B4ED43BCE87D5B50908AC52AF4DEEDE6311445086E5CCFF98E2A82C0CB7A
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.15.0/favicons/favicon.ico
Preview:	......00..........6... ......................h.......(...0...`............................................"...........ti......................................\|q......!..............# .......................y......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.921928094887362
Encrypted:	false
SSDEEP:
MD5:	1000A6CAF7299F030F5C73974CCD617E
SHA1:	44C1943894BE0A43D5F1176C085F82A9CF75DAAA
SHA-256:	BB107868145E022BC860243BF8E7144DB9F5350D02F73F9EF56F70C3B89A2BEB
SHA-512:	5864B198DC92823E2F166D2F594BF37B28F53CC0786D4680EB47B3B91D8C3ED831C446AF833EBF5E43A2F03336B8EBE17DDAC57AF5B03F835DE7F15FC551D294
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/cdn-reporter.js
Preview:	window.cdnReport();

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28686)
Category:	downloaded
Size (bytes):	28855
Entropy (8bit):	5.286247566306839
Encrypted:	false
SSDEEP:
MD5:	841FCBF4E587839272CDE9954CBA5499
SHA1:	7799FE97B01DB756F6A17242CA567B33360D7E20
SHA-256:	8F65878D5812DF12A2EE47BD1C8548330CD99BDDF273049ED652F76B6B86FDA4
SHA-512:	616C753BF83CE26E1E025CFAB625E45DDE47CCDBA3ACDC0DE3C9233570078438DBA41CC1DB672E085A724FBE93D39A36F773140B234DC3C15F1BC2E7995A0256
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.558.js?cs=b0aeb3f0791f015ae7d4
Preview:	/! For license information please see signing_iframeless_mobile.558.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[558],{270:function(e,t,n){"use strict";n.d(t,{w:function(){return a}});var r=n(97935),o=n(67294),i=n(54179),a=function(){var e=(0,o.useState)((0,i.XP)()\|\|""),t=(0,r.Z)(e,2),n=t[0],a=t[1];return(0,o.useEffect)((function(){var e=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"";a(e)};return(0,i.lg)(e),function(){return(0,i.B6)(e)}}),[]),n}},34386:function(e,t,n){"use strict";n.d(t,{r:function(){return Le}});var r=n(45490),o=n(2787),i=n(4261),a=n(97842),s=n(99577),f=n.n(s),c=n(67294),u=n(45697),l=n.n(u),p=n(270),d=n(52369),m=n(57807),v=n(73935);function h(e){if(null==e)return window;if("[object Window]"!==e.toString()){var t=e.ownerDocument;return t&&t.defaultView\|\|window}return e}function y(e){return e instanceof h(e).Element\|\|e instanceof Element}function g(e){return e instanceof h(e).HTMLElement\|\|e instanc

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340)
Category:	downloaded
Size (bytes):	86304
Entropy (8bit):	5.5048508743426625
Encrypted:	false
SSDEEP:
MD5:	B60B6A968F43D6B74F377F572840B5A2
SHA1:	465E6504C28233D68A20A61A93861D2E14232424
SHA-256:	C8D7EDD7C2B3527B6F22A9026AF1E3A43F4A7F2BD11E09A694AB56A0C8F9B167
SHA-512:	351BFB12F8B267066BD49F0C5F0D8E29087E0A5A6506D5EDE4AB2B4B6B8AA0E15569CCF139F2CD60396243319C56A569E5EB34E5B7E94C864C6A37E3EC2E4DAD
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.6438.js?cs=8bb3768cef65325f6a41
Preview:	/! For license information please see signing_iframeless_mobile.6438.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6438],{94652:function(e,t,r){"use strict";r.d(t,{r6:function(){return x},xG:function(){return I},uf:function(){return z},wJ:function(){return q},jK:function(){return G},pT:function(){return V},z5:function(){return Z}});var a=r(33596),i=r(50964),n=r(16310),s=r(84686),o=r(87335);function u(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,a=new Array(t);r<t;r++)a[r]=e[r];return a}var c,l,d,h=r(44951),_=r.n(h),m=r(569),f=r.n(m),p=r(68160),g=r.n(p),y=r(13632),v=r.n(y),S=r(40463),D=r.n(S),w=r(46351),M=r.n(w),k=r(36936),Y=r.n(k),b=r(96084),P=function(e){return e.replace(/([\.\\\+\*\?\[\^\]\$\{\}\=\!\<\>\\|\:\-])/g,"\\$1")},x={aed:"...",afn:".",all:"L",amd:".",ang:".",aoa:"Kz",ars:"$",aud:"$",awg:".",azn:".",bam:"KM",bbd:"$",bdt:".",bgn:"..",bhd:"....",bif:"FBu",bmd:"$",bnd:"$",bob:"$b",bov:"BOV",brl:"R$",bsd:"$",btn

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16717)
Category:	downloaded
Size (bytes):	16888
Entropy (8bit):	5.30702098164382
Encrypted:	false
SSDEEP:
MD5:	59D722CC61D16231AD484C505E928175
SHA1:	14AB07F2D8065534478CA795CEC95C59ADDAC752
SHA-256:	C1D3E4A93077E43E282F14B377B7323F067B837C330FA8D48ABAB9ED2F06C9A1
SHA-512:	86D9E8CDDFF83ED8CD6F5D19CD932A95BF5A82CFA66DDC1B00EAC7AB1EEE1726C3826492F98A0C9731004FAC4DBD3FD29D26AF13C986E278FC9F433C8FE1850F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.4318.js?cs=c3953b3cd03fd1083c71
Preview:	/! For license information please see signing_iframeless_mobile.4318.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4318],{90494:function(e,t,s){s(82772),s(39714),s(40561),s(73210),s(74916),s(15306),s(24603);var n=s(19755),i=s.n(n),r=s(60888),o=s(163);t.Z=function(e,t,s){var n,a,l,u=e.ss\|\|{},p=/^\s+/,h=/\s+$/,c=/[xy]/g,d=/.(\/\|\\)/,f=/.[.]/,_=/[\t\r\n]/g,g=Object.prototype.toString.call(e.HTMLElement).indexOf("Constructor")>0,m=t.createElement("input");return m.type="file",n="multiple"in m&&"undefined"!=typeof File&&void 0!==(new XMLHttpRequest).upload,u.obj2string=function(e,t){var s=[];for(var n in e)if(Object.prototype.hasOwnProperty.call(e,n)){var i=t?t+"["+n+"]":n,r=e[n];s.push("object"==typeof r?u.obj2string(r,i):encodeURIComponent(i)+"="+encodeURIComponent(r))}return s.join("&")},u.extendObj=function(e,t){for(var s in t)Object.prototype.hasOwnProperty.call(t,s)&&(e[s]=t[s])},u.contains=function(e,t){for(var s=e.length;s--

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65355)
Category:	downloaded
Size (bytes):	68256
Entropy (8bit):	5.344012702581904
Encrypted:	false
SSDEEP:
MD5:	A82DAAB4FC9699046F54075EEB7CE747
SHA1:	46797AB8B184D1CABC19FA9AF9D17E0D601324EB
SHA-256:	62DD903AB485B3FA41E18AEA82840B6006C6519D565F62F2255BA41D98FA7ED9
SHA-512:	CA3E8F5B91BA7A5082E727E91BB1D6276D8F1768460A53F53B4DFE9199A0689DFC4A4C0034606324CB1FC75455E00F76AA60322BA7D12E329C864A21B710FBF0
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.4831.js?cs=60d9f3ed00daf8b85537
Preview:	/! For license information please see signing_iframeless_mobile.4831.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4831],{64685:function(t,e,r){var n=r(56677),i=r(19237),o="EN-US";function a(t){return n.currencies[t.toUpperCase()]\|\|""}function s(t,e){return i.formatNumber(t,i.getNumberFormat(e,n.numberFormats))}e.formatNumber=function(t,e){return s(t,e=e?i.unifyLocale(e):o)},e.formatCurrencyNumber=function(t,e,r,u){r=r?i.unifyLocale(r):o,e=e.toUpperCase();var l={num:s(t,r),sym:a(e),iso:e},c=i.getCurrencyFormat(e,r,n.currencyFormats);return c=u?c[1]:c[0],i.replacePlaceholders(c,l)},e.getSymbol=a},19237:function(t,e){e.unifyLocale=function(t){return t.replace("_","-").toUpperCase()},e.getNumberFormat=function t(e,r){var n=r[e]\|\|r.DEFAULT;if(!n)return{LEAD_SEP:"",GROUP_SEP:"",DECIMAL_SEP:".",DECIMAL_NUM:2};var i=n.split("\|");return 4!==i.length?t("DEFAULT",r):{LEAD_SEP:i[0],GROUP_SEP:i[1],DECIMAL_SEP:i[2],DECIMAL_NUM:parseInt(i[3])}},e.getCurren

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54997)
Category:	downloaded
Size (bytes):	55166
Entropy (8bit):	5.296021369874208
Encrypted:	false
SSDEEP:
MD5:	EC1E4805DBD2D76F8FD4F0D6C9E056C8
SHA1:	BC5ACB7F6F60A64522C012F157232F03AB633939
SHA-256:	2C1721F703C1D220C587FA049C14FC23B84933C7F1603573B21104E1D8FD93B8
SHA-512:	FAD6019C4A2C4049ECF2533B277BA2D53E7BC462C4CC079EDBD5682B303E27A654B6E9CA30FD9B896484292F30A91E7A398C704140FA7AA3388A584539CC725C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.932.js?cs=fd79b1eb5fd919dd42e0
Preview:	/! For license information please see signing_iframeless_mobile.932.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[932],{60289:function(e,t,r){r.d(t,{E:function(){return m},y:function(){return b}});var n=r(67294),o=(r(64211),r(2490),r(41874),r(41817),r(57327),r(88449),r(59849),r(15581),r(34514),r(54747),r(49337),r(66992),r(33948),r(47042),r(39714),r(91038),r(74916),r(83999)),i=r(4378),a=r(163),u=r(47597),l=r(38113);function c(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function f(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?f(Object(r),!0).forEach((function(t){d(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProp

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	240748
Entropy (8bit):	5.092451370734677
Encrypted:	false
SSDEEP:
MD5:	2C73DD9B48CB342C5FEB81C8A378B291
SHA1:	FA52BCA3CF57FFE2FBA82D3C923B1A3DE1E38E76
SHA-256:	DA90AEA8421C31DDAB9FADDF17FC9D1F7EE9B466786C8113F0C523DB8CB3F00C
SHA-512:	FA16248370983FFFE7DD3E1F68B988FF24D11633CC61C796EE285D06CB4368FBF647CE7805B57B6736038D7E961FD242529D7254938CB6F38217DFC1759B4047
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/olive/17.20.0/css/olive.min.css
Preview:	@font-face{font-family:olive-icons;font-style:normal;font-weight:400;src:url(../fonts/olive-icons.eot);src:url(../fonts/olive-icons.eot?#iefix) format("eot"),url(../fonts/olive-icons.woff) format("woff"),url(../fonts/olive-icons.ttf) format("truetype"),url(../fonts/olive-icons.svg#olive-icons) format("svg")}@-webkit-keyframes slightFadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,5px,0);transform:translate3d(0,5px,0)}to{opacity:1;-webkit-transform:none;transform:none}}@keyframes slightFadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,5px,0);transform:translate3d(0,5px,0)}to{opacity:1;-webkit-transform:none;transform:none}}@-webkit-keyframes scaleIn{0%{-webkit-transform:scale(0);transform:scale(0)}to{-webkit-transform:scale(1);transform:scale(1)}}@keyframes scaleIn{0%{-webkit-transform:scale(0);transform:scale(0)}to{-webkit-transform:scale(1);transform:scale(1)}}/! normalize.css v3.0.1 \| MIT License \| git.io/normalize /html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:1

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24288)
Category:	downloaded
Size (bytes):	24459
Entropy (8bit):	5.171490237000492
Encrypted:	false
SSDEEP:
MD5:	B6FC49209CD2EEF203DBF5F0726A4759
SHA1:	AC7E8E0512AB9F4A05E8A947625ABFACBCEBE012
SHA-256:	939A2B57EDB5F2D70E67D49D98307E86FA39B9D741814F69B95824607E1461C1
SHA-512:	87D658F4E58DBB11D0D83F46483958F3C063FAC233AAF9D6F5BB2C1358E16442DED9DE4BBD05194CBBE1D8D06D1BA12F07D03641E868D6A13FA845F50ED2F2CF
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.9235.js?cs=3e7a4c581d482534e3a2
Preview:	/! For license information please see signing_iframeless_mobile.9235.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9235],{83658:function(n,r,t){var e=t(19781),u=t(43157),i=TypeError,o=Object.getOwnPropertyDescriptor,f=e&&!function(){if(void 0!==this)return!0;try{Object.defineProperty([],"length",{writable:!1}).length=1}catch(n){return n instanceof TypeError}}();n.exports=f?function(n,r){if(u(n)&&!o(n,"length").writable)throw i("Cannot set read only .length");return n.length=r}:function(n,r){return n.length=r}},85117:function(n,r,t){var e=t(66330),u=TypeError;n.exports=function(n,r){if(!delete n[r])throw u("Cannot delete property "+e(r)+" of "+e(n))}},40561:function(n,r,t){var e=t(82109),u=t(47908),i=t(51400),o=t(19303),f=t(26244),c=t(83658),a=t(7207),l=t(65417),s=t(86135),p=t(85117),v=t(81194)("splice"),h=Math.max,y=Math.min;e({target:"Array",proto:!0,forced:!v},{splice:function(n,r){var t,e,v,g,d,b,m=u(this),w=f(m),j=i(n,w),_=ar

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	169
Entropy (8bit):	4.8436943585630665
Encrypted:	false
SSDEEP:
MD5:	7363E1A92A77C2F6AB0332C9A64CC051
SHA1:	B424892E6298C96B00A63BF7B3244AFC93EFDEAB
SHA-256:	4E640814854B6E878309D5B3ADD69C450D0995CF83617BBFAFBA63EA2043CF2F
SHA-512:	8D2D619DCFD1DB0FDEC275BC59C6627F32C37FF58F46C7E72970591F8CF335D37B7A3E21D1640DD40101511183C82487FE2836763B9FEBDFD60867CFB7511EF6
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing-cdn-failure-reporter.js
Preview:	/! For license information please see signing-cdn-failure-reporter.js.LICENSE.txt /.window.cdnReportFailure();.//# sourceMappingURL=signing-cdn-failure-reporter.js.map

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	29803
Entropy (8bit):	5.105083007261462
Encrypted:	false
SSDEEP:
MD5:	1B65D2B5E01B2DE26C23EB64CFB0E8E0
SHA1:	29E9B1409A1A4C4EBDF431BED6D45BE9FC65E894
SHA-256:	BC29D7CCFB3D1994BFA3062F4BD844E81CDD3CE89B4ACEEE1A981729E671179C
SHA-512:	4E08329035573CCBA4CD77A3AB29C28633B86F61C5A50FFBEE48671294BF16508EE6CBD3DDC50D54A334F1DBBDB9DA2E38F9D3921EA29BACDCA384C66D0D68CB
Malicious:	false
Reputation:	low
Preview:	{"accountId": "275532918", "projectId": "20084925044", "revision": "1910", "attributes": [{"id": "20186401010", "key": "isBranded"}, {"id": "20195597153", "key": "isCompletedEmailNotificationEnabled"}, {"id": "20203483991", "key": "isMobile"}, {"id": "20205312882", "key": "isUserAccounted"}, {"id": "20207234882", "key": "language"}, {"id": "20207630262", "key": "country"}, {"id": "20218952064", "key": "isLastSigner"}, {"id": "20330146452", "key": "browser"}, {"id": "20330792890", "key": "environment"}, {"id": "20644900025", "key": "ds_a"}, {"id": "21121790361", "key": "IPAddress"}, {"id": "23060870973", "key": "senderAccountId"}, {"id": "23767381356", "key": "branded"}], "audiences": [{"name": "Force Enabled PSP Sender Accounts - Prod", "conditions": "[\"and\", [\"or\", [\"or\", {\"match\": \"exact\", \"name\": \"senderAccountId\", \"type\": \"custom_attribute\", \"value\": \"1d647807-efdb-46c6-b3de-ddc27dc50cab\"}, {\"match\": \"exact\", \"name\": \"senderAccountId\", \"type\": \"cust

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65325)
Category:	downloaded
Size (bytes):	144877
Entropy (8bit):	5.049937202697915
Encrypted:	false
SSDEEP:
MD5:	450FC463B8B1A349DF717056FBB3E078
SHA1:	895125A4522A3B10EE7ADA06EE6503587CBF95C5
SHA-256:	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
SHA-512:	93BF1ED5F6D8B34F53413A86EFD4A925D578C97ABC757EA871F3F46F340745E4126C48219D2E8040713605B64A9ECF7AD986AA8102F5EA5ECF9228801D962F5D
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors. * Copyright 2011-2018 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:border-box}html{font-family:sans

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 145 x 60
Category:	downloaded
Size (bytes):	5469
Entropy (8bit):	7.404941626697962
Encrypted:	false
SSDEEP:
MD5:	097D652B65DEC6E954C335739754FC61
SHA1:	83155314927200EC3B9951246D0C1C3B631B088A
SHA-256:	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
SHA-512:	DE13A4A8CCEC57F7AF23143D55A93AF581D04F6066DF5C0D0B910DEC17EA0EA430621ACD88A25422A5180F37EDAC44A6746051BCE942F8D5E07BF8842A3F08EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/imgs/transparentLoader.gif
Preview:	GIF89a..<...............................................................................................................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39E8547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39E7547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22335ebf-8a2f-43c0-a35d-602b0ebe7cf3" stRef:documentID="xmp.did:695

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 231 x 76, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3537
Entropy (8bit):	7.903218801437655
Encrypted:	false
SSDEEP:
MD5:	044B1BAFE33F65BA9DD03D14B6CDA242
SHA1:	CA6E879BB34C0A89343C1DAABEC2D9114E0637C9
SHA-256:	D9836397CB6CD908AD639AE32FEA57D7173B8BC3494BE7B8C73B5CEA7442E733
SHA-512:	53F9A02DAD7EE45901BAAC5A47CC8ED26F49746A2D2EC50FFA13C8B542C3583A8B64BC377E896A55C11B864EEB25E4E7E6FAFA112628D81E9F72327A1E651BEA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......L....../......pHYs.................IDATx..i.U.......$(......&......Q.[Q.T.cLL\.cv.....2`.XI....fQ....\p'.............8...y.{N...7...K.......>}.48..8..8..8..8..8..8..8..8..8..8...U...t{....%`c...h...X.&`...X.l..(.!....&...q.`.o$.{.....'...;..@(...1.V......S.1u /......N.f..'`=...k.e..@y.....z.ygu..L+.V....~..t.x........zg%.....rL...G}....>.lW....../...gO.FP.w.{E.+g..R.....X.m95..<L1...6.r..g5....w.. .Q.X.........x.x...... ..C....[_Sc)...O..;.;..#.g1...LFL.Nq.a\/...W!C.8.....U.l...\|......)..h_.C..,OP.....G...\.O.@......Ek...l...O.{'y)g.~..F.%d.z.mw.9..}.IQg...j..flw.E3y..=.\|d.c..j..;....@.:7.?6..^.....B\..W.\|.........t.Hd.;..R.c9.r/0.X.....G.e:.+b .....@.......Gz.....1.....\[ZN ........O..V........0.y...e.u....j...J..\y.".Y.`Va..;>....=.#......b...8.x...<......6..HO..87..C...d...6.U.....N2O......L.P.'YR.....w.....2..e)e(.s...z....VK.....F.#....Wc..7!....e[.}.p!...u`.h.z'.u.......~.b.Js..$...!....=.....V./.....r.V9.CFBI..c

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14950)
Category:	downloaded
Size (bytes):	15139
Entropy (8bit):	5.463036332718399
Encrypted:	false
SSDEEP:
MD5:	D28CD8A0F0494894E0B3E00EA159AD0E
SHA1:	02411FC7D0344EFA179D7A2BDB8DD34C1A48D1F7
SHA-256:	336A40D54184AC03CB6B1799527C203C15E68ABCB165DE5CAB24E4F94F0219E9
SHA-512:	5FAB3142AEBBE22A722AC650B4C01C603FD65DBF1CC39CBA0F23AEAE56CF3F7009E938B451CDA7901E1D5D1E9E5C5D0133E6A696DDDD6F39B41826B3C77BE519
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.global-modals.js?cs=85da8a615a78f07ff761
Preview:	/! For license information please see signing_iframeless_mobile.global-modals.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6989],{83516:function(e,t,n){n.r(t),n.d(t,{default:function(){return S}});var o=n(67294),r=n(88483),i=n(25354),a=(n(74916),n(83999)),u=n(30932),l=n(22828),s=n(96597),c=n(163),d=a.Z.signing,g=n(83931),p=n(90181),_=n(75010),b=n(47277),S=e=>{var t=(0,g.Z)(),n=function(e){var t=function(e){return{visible:!1,error:e}}(e),n=(0,u.dd)("ErrorDialog",(e=>e),t),r=n.state,i=n.hide;return(0,o.useEffect)((()=>{var e;e=/<[a-z/][\s\S]*>/i.test(r.error.errorMessage)?"Has HTML Tag":"No HTML Tag",s.Z.post("ErrorMessageWithHtml",{Description:e}),c.ZP.getValue("SIGN_29070_LogErrorDialogMessage",!1)&&s.Z.post("ErrorDialogMessage",{Description:r.error.errorMessage})}),[r.error]),{state:r,handleClose:function(){l.Z.trigger("errorDialogClosed"),i("ErrorDialog"),r.error.reload?d.sendMessage("reloadRequested"):(r.error.redirectUrl&&l.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	257
Entropy (8bit):	4.936853809456331
Encrypted:	false
SSDEEP:
MD5:	6E132855B6DDD5C7A1FA7DAD2C9FE964
SHA1:	0342D3665682749F7C312B8B1EE6A169FA4C68C5
SHA-256:	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
SHA-512:	F3314BB8BFC2D262F98FAE116DC50A38BDB2A6AD2D6950BD42BBA43457A934B68894AD8C0952E7C2286E31433185DA1424CAC3048CE47AB0B2A0338C14210761
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <path d="M13.36 15H20V4H4v11h5v3.114L13.36 15zM4 2h16c1.105 0 2 .895 2 2v11c0 1.105-.895 2-2 2h-6l-7 5v-5H4c-1.105 0-2-.895-2-2V4c0-1.105.895-2 2-2z" fill="#333"/>.</svg>.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22643)
Category:	downloaded
Size (bytes):	22814
Entropy (8bit):	5.23607580990324
Encrypted:	false
SSDEEP:
MD5:	556C380A3F908E3637517D94B2562350
SHA1:	4F4048BD15A7960D9A162B9C6989F5F6A492D5AD
SHA-256:	E36CC63F1CB6595039BED259D9A616860E9E1C072B2EFC170C2DC077050BB9D7
SHA-512:	FC8641D2E070D1ACE2CBBF010CD9781A6A6F1C19A8E251148385FC49E965805FC1D471731E58582349923F24A337CE29E18A78CBEAB9E85FB15210218F71E536
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.8035.js?cs=da0370aecbadd617fcf0
Preview:	/! For license information please see signing_iframeless_mobile.8035.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8035],{23675:function(t,e,r){function n(t){for(var e=arguments.length,r=Array(e>1?e-1:0),n=1;n<e;n++)r[n-1]=arguments[n];throw Error("[Immer] minified error nr: "+t+(r.length?" "+r.map((function(t){return"'"+t+"'"})).join(","):"")+". Find the full error at: https://bit.ly/3cXEKWf")}function o(t){return!!t&&!!t[K]}function i(t){var e;return!!t&&(function(t){if(!t\|\|"object"!=typeof t)return!1;var e=Object.getPrototypeOf(t);if(null===e)return!0;var r=Object.hasOwnProperty.call(e,"constructor")&&e.constructor;return r===Object\|\|"function"==typeof r&&Function.toString.call(r)===L}(t)\|\|Array.isArray(t)\|\|!!t[W]\|\|!!(null===(e=t.constructor)\|\|void 0===e?void 0:e[W])\|\|s(t)\|\|p(t))}function u(t,e,r){void 0===r&&(r=!1),0===a(t)?(r?Object.keys:G)(t).forEach((function(n){r&&"symbol"==typeof n\|\|e(n,t[n],t)})):t.forEach((function(r,n

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3855)
Category:	downloaded
Size (bytes):	4068
Entropy (8bit):	5.1946833006813335
Encrypted:	false
SSDEEP:
MD5:	4223DCB999C294730BA86590F3E20420
SHA1:	BA467ADAC3BFB2B3791259D9B97DBDCDE97EAAAA
SHA-256:	0835E081DF893C895300FFB88BF6C0D9A7917A1F46D93AD896F88229F9D05F39
SHA-512:	F58EBCD48C2473C92F76611139F5CEF7E8DEC7DED281DD712BBEAA093B8C4FFEC3F6F3F8E8D60A70F712D792C4E884F19176E78EA2AD9640BC52D4D7B3FDDC13
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.logical-operations-hookup.js?cs=52f759f72261958bcd8b
Preview:	/! For license information please see signing_iframeless_mobile.logical-operations-hookup.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[160],{61713:function(t,n){!function(){var e,i=Array.prototype.forEach,o=Object.prototype.hasOwnProperty,r=Array.prototype.slice,s=0,c={keys:Object.keys\|\|function(t){if("object"!=typeof t&&"function"!=typeof t\|\|null===t)throw new TypeError("keys() called on a non-object");var n,e=[];for(n in t)t.hasOwnProperty(n)&&(e[e.length]=n);return e},uniqueId:function(t){var n=++s+"";return t?t+n:n},has:function(t,n){return o.call(t,n)},each:function(t,n,e){if(null!=t)if(i&&t.forEach===i)t.forEach(n,e);else if(t.length===+t.length)for(var o=0,r=t.length;o<r;o++)n.call(e,t[o],o,t);else for(var s in t)this.has(t,s)&&n.call(e,t[s],s,t)},once:function(t){var n,e=!1;return function(){return e\|\|(e=!0,n=t.apply(this,arguments),t=null),n}}};e={on:function(t,n,e){return l(this,"on",t,[n,e])&&n?(this._events\|\|(this._events={}),(th

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62608)
Category:	downloaded
Size (bytes):	62789
Entropy (8bit):	5.180247200439491
Encrypted:	false
SSDEEP:
MD5:	0BF3C4BDE4105947919B4BEB8612A6BA
SHA1:	0F50CB1ED3C7F695871F5B1E223BB2DFBFCAC9F6
SHA-256:	BCFA935DF3F224F3ACDA8230164A79CFDA66A5C5B21EF2CAA627B04DDD9F47FA
SHA-512:	AEF06CDEB95D6BE411CCF3FEE508C70EDEFF0B208CC105B03B43EFB3A1D4CC3288AFDA6BA95DB03D30BAE356127FFF78EFC0E38258C415F4D7C682D382712CA9
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.preloader.js?cs=8bf0adc23edc640ce342
Preview:	/! For license information please see signing_iframeless_mobile.preloader.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9739,9417],{16560:function(t,e,r){r.r(e),r.d(e,{getPreloadTaskCurrentStatus:function(){return g},resolvePreloadTask:function(){return m},startPreload:function(){return w},onPreloadTaskComplete:function(){return b},getPreloadTimingMetrics:function(){return x},forTestingOnly:function(){return L}}),r(92222),r(26833),r(66992),r(88674),r(33948),r(21249),r(57640),r(9924),r(68216),r(2490),r(79433),r(69720),r(85827),r(25387),r(72608),r(41817),r(72443),r(73706),r(10408),r(15581),r(34514),r(54747),r(65069),r(47042),r(39714),r(91038),r(74916),r(57327),r(88449),r(59849),r(49337);var n=r(7527),o=r(35417),i=r(61543);function a(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	2.9140163035068447
Encrypted:	false
SSDEEP:
MD5:	84100B349395F367D41A8B44D0020355
SHA1:	676BB250F143F6C863C58C79B4CA1ABF7312DF00
SHA-256:	5EAE3F71BE133111621E17FEE9DC04578D885A74EAF4D40AAC9634B7DB4B5459
SHA-512:	ED8456F12F188F50E15D845B240AA62195709005505A59CB5A6033C139D902DF4D504873B80E7156D79358AC901A779DBD3CA6C0010BF16D5FE18C77385081CE
Malicious:	false
Reputation:	low
Preview:	<success>true</success>

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61862)
Category:	downloaded
Size (bytes):	137280
Entropy (8bit):	5.800099137969338
Encrypted:	false
SSDEEP:
MD5:	0BAFAEE1BFC74BFE81CEA3E79C86C9F5
SHA1:	20FB373ED96C30EB29719E68D7176506E75C20C4
SHA-256:	E6A16191B7F2ADDFC42E012783AA715BA5DF602514EA61446300B9B26E9F6A33
SHA-512:	EB2AE78539BCB2B27E5B7B64DD43F6FE6E7978DF97AD8211D50A5885605DEFB2241E07F92869B6CA7D3E6E4C7D0212ADD46B81BAD3B2EDC0C5F91944BB62F090
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.9824.js?cs=42604d7247c93aec876f
Preview:	/! For license information please see signing_iframeless_mobile.9824.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9824],{74269:function(e,a,t){"use strict";t.d(a,{C:function(){return z}});var r=t(67294),i=t(16847),n=t(33241),o=t(89443),s=t(17546),d=t(25058),l=t(69459),u=t(67147),y=t(20765).Z.white,m="rgba(25, 24, 35, 0.15)",c="1px solid ".concat(m),p={left:0,bottom:0,right:0,borderTop:c,boxShadow:"0px -32px 64px 0 ".concat(m)},_={top:0,bottom:0,left:0,borderRight:c,boxShadow:"32px 0px 64px 0 ".concat(m)},v={top:0,bottom:0,right:0,borderLeft:c,boxShadow:"32px 0px 64px 0 ".concat(m)},h={boxShadow:"none"},f=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"left",a=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"hidden",t=arguments.length>2?arguments[2]:void 0,r={label:"REVEAL_CONTAINER",backgroundColor:y,position:"fixed",overflow:a,zIndex:800},n=!t&&h,o="bottom"===e?p:"right"===e?v:_;return(0,i.Z)((0,i.Z)((0,i.Z)(

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7902)
Category:	downloaded
Size (bytes):	8073
Entropy (8bit):	5.146603302284952
Encrypted:	false
SSDEEP:
MD5:	B66CBF4C5B477038F9A26D98002718A3
SHA1:	36C76A433BABD6CB7D2042EE40C8D8906797EB41
SHA-256:	AB7931BEF171CFD8F8FBE6A1D86A040DE06F3F161DCA2451853675D2054CA2B7
SHA-512:	DA314D332DAC2F053D6BEBD28BE7E286B21064338CBDFB69CB8A49BF90A6E8130BC3B08B6F2E7E96028A21FFC8D2DBE0178426ED660B3076A5BD2F1B37A219E3
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.4261.js?cs=7397eee0c54f37bea175
Preview:	/! For license information please see signing_iframeless_mobile.4261.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4261],{74261:function(e,t,a){a(31672),a(2490),a(59461);var i=a(59050),n=a(19755),o=a.n(n),d=a(38986),r=a(87462),l=a(60888),c=a(22828),s=a(113),h=a(83999),u=a(38714),g=a(52640),p=a(54688),v=0,f=d.Z.extend({tagName:"div",className:"modal",events:{"click .close":"cancelOrClose"},dialogId:null,uri:null,useCache:!0,$lastActiveElement:o()([]),initialize(e){},mapUriData:e=>e,update(e,t){t=t\|\|{},e=e\|\|{};var a=this;function n(e){var t=!!e;if(s.Z.envelope){var n=e.resources\|\|{},o=s.Z.envelope.resources\|\|{};(e=i.ZP.extend({},s.Z.envelope,e)).resources=i.ZP.extend({},o,n)}t?a.reload(a.mapUriData(e)):a.render(),a.$el.attr("modal-ready","")}"envelope"!==this.uri&&s.Z[this.uri]?(n(s.Z[this.uri]),t.afterUpdate&&t.afterUpdate()):this.uri&&!s.Z[this.uri]?(t.showProgress&&c.Z.trigger("progressStarted"),o().getJSON(r.Z.generateNextReque

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34202)
Category:	downloaded
Size (bytes):	34373
Entropy (8bit):	5.325776716911393
Encrypted:	false
SSDEEP:
MD5:	FD4645552AA711C8BB2F2D4D30149E99
SHA1:	6D96493FC5C98094A1D2489BCA6AFB413CFA6DF0
SHA-256:	E27D75348153BF012C0871D2E13A2ED47759CAFC165C4C9DEBF7AEFFC77AE0DD
SHA-512:	2F3D125C0209085964CA900504862E71DBAA97C5EB85625D81EE52BB36C5FC16C241E3AF9D152644A22F053366E27002918F958DE24BADA19055BBC927A5A65B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.1469.js?cs=ab5b53ec3b8067736c03
Preview:	/! For license information please see signing_iframeless_mobile.1469.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1469],{60080:function(e,t,r){r.d(t,{A:function(){return j},D:function(){return I}}),r(41817),r(66992),r(33948),r(47042),r(39714),r(91038),r(74916);var n=r(67294),o=r(25354),a=r(76204),i=r(89750),c=r(5358),l=(r(15581),r(2490),r(34514),r(54747),r(51532),r(10072),r(99137),r(71957),r(96306),r(103),r(74592),r(58276),r(35082),r(12813),r(18222),r(38563),r(50336),r(7512),r(15306),r(24603),r(92222),r(73210),r(26699),r(32023),r(19755)),u=r.n(l),s=r(39889),h=r(47597),f=r(5618),p=r(22828),d=r(68384),y=r(88062),v=r(163);function m(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,a,i,c=[],l=!0,u=!1;try{if(a=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;l=!1}else for(;!(l=(n=a.call(r)).done)&&(c.push(n.v

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:
MD5:	C41A026A97DFC107025EEC7F45F29C85
SHA1:	B77C8FE6D6A770AF1758FC34B3E716656B8F2485
SHA-256:	8A7130BC862841606D062AC516513B01EB176CEF37D017E18B54E844E8390029
SHA-512:	6DE72788DA933F3DA0D1FB315335B8DE1BD9D4F7B59A0F1D1F6E758AB0D1EC3D7F0B8FFCDE16313B555BFE18832FF8671A2159F5AFCEEA6C45C2A037345ED017
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwncfqRAUjHd3BIFDVNVgbUSBQ2tCa6x?alt=proto
Preview:	ChIKBw1TVYG1GgAKBw2tCa6xGgA=

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	244107
Entropy (8bit):	4.899636939079118
Encrypted:	false
SSDEEP:
MD5:	5D7CD731BC6ECBDC263B3BE06DF35306
SHA1:	0F4E9015FD9E8E64F8CF80DD195D51EFD6150379
SHA-256:	EA7CC45B222D499C82557E80B4E635AB63BB4BF438622C8BE61DFCEB8E8CD7B2
SHA-512:	B41FF2915B305DADD91FECBF82BB8DDEC1C3BA7E10222B115FDB52ABB4D6E92D516976D932A9153C8CCF01D6240A21A1F9DAEEE43478B48571828C64C6B67735
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.styles.js?cs=b912f6290afe58b4739d
Preview:	/! For license information please see signing_iframeless_mobile.styles.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[532],{3748:function(e,t,o){var i=o(8081),a=o.n(i),r=o(23645),n=o.n(r)()(a());n.push([e.id,'.btn .icon,.btn-text{color:#333}img{max-width:none}.dialog.modal-wrap{background:rgba(0,0,0,.5);top:0;left:0;width:100%;height:100%;position:fixed;overflow:auto;outline:0!important;text-align:center;padding:0 2em}.icon{width:auto;height:auto;background:0 0;overflow:visible}.mvn-pro{font-family:"Maven Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:700}.helv,div{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:400}div{font-size:13px;line-height:normal;text-rendering:optimizeLegibility}h1,h2,h3,h4{font-family:"Maven Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:700}h5{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:400;font-weight:700}.btn{height:auto;font-famil

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65472), with CRLF line terminators
Category:	downloaded
Size (bytes):	2644509
Entropy (8bit):	3.3092240123691012
Encrypted:	false
SSDEEP:
MD5:	7BBDEED32B1C637699A107A8DE6E36B7
SHA1:	5DA701FC489887816C6AB98AB786313E06E608ED
SHA-256:	27D408784E1E623724908A312F63D2B896A4346F1623E16AE23253DA92C248FC
SHA-512:	C105EB7B7EEC8F81A6B4BC7AE3ACD312AEE4C9E4587AD1041D8AC244A56E889E9EA9D761B0B9D264F6B45EFDD3FD2111DF023A058A10D170936BD537AABFB8D3
Malicious:	false
Reputation:	low
URL:	https://f005.backblazeb2.com/file/b2-share-b70db3d6742b/1f183d5b/DOCUMENT%2520PRO%2520-%2520Copy%2520%252810%2529.HTML
Preview:	<script>.. code by https://www.html-code-generator.com -->..document.write(unescape('%3C%68%74%6D%6C%3E%0A%3C%6C%69%6E%6B%20%72%65%6C%3D%27%73%74%79%6C%65%73%68%65%65%74%20%70%72%65%66%65%74%63%68%27%20%68%72%65%66%3D%27%68%74%74%70%73%3A%2F%2F%66%6F%6E%74%73%2E%67%6F%6F%67%6C%65%61%70%69%73%2E%63%6F%6D%2F%63%73%73%3F%66%61%6D%69%6C%79%3D%4F%70%65%6E%2B%53%61%6E%73%3A%36%30%30%27%3E%0A%3C%73%74%79%6C%65%3E%0A%0A%68%74%6D%6C%20%7B%0A%09%6C%69%6E%65%2D%68%65%69%67%68%74%3A%20%31%2E%31%35%3B%0A%09%2D%6D%73%2D%74%65%78%74%2D%73%69%7A%65%2D%61%64%6A%75%73%74%3A%20%31%30%30%25%3B%0A%09%2D%77%65%62%6B%69%74%2D%74%65%78%74%2D%73%69%7A%65%2D%61%64%6A%75%73%74%3A%20%31%30%30%25%0A%7D%0A%62%6F%64%79%20%7B%0A%09%68%65%69%67%68%74%3A%20%31%30%30%25%3B%0A%09%6D%61%72%67%69%6E%3A%20%30%0A%7D%0A%61%72%74%69%63%6C%65%2C%20%61%73%69%64%65%2C%20%66%6F%6F%74%65%72%2C%20%68%65%61%64%65%72%2C%20%6E%61%76%2C%20%73%65%63%74%69%6F%6E%20%7B%0A%09%64%69%73%70%6C%61%79%3A%20%62%6C%6F%63%6B%0A%7D%0A%68%31%20%7

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:
MD5:	C9785540787087E135E2E3256D4128E6
SHA1:	41BD40CDDBF7127B59A6D093F72D6EF7AC2E45D4
SHA-256:	ADB38815ED6BC0240FFD0E7299D9CFA5860D5C662C7C2B4DAE11EF97EC951B05
SHA-512:	6B30566B0D5AEA45E318E7FF711E7BD4873933FB61C438B3F3C1ED46D81BF2AA1AB5EAB72EE3E2577E5785DADB479670157A0332AE9775AFD18DA77FAB0005B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkWM_vpq0FVuBIFDaLAi2s=?alt=proto
Preview:	CgkKBw2iwItrGgA=

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1632)
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	5.413245986495244
Encrypted:	false
SSDEEP:
MD5:	69C71F29F81E0C21F3457BF1A977AAC3
SHA1:	7572E573AB1E55118F1EA0EB02BC8828C91C198F
SHA-256:	85976C05DE46CE57ED5573E315C75D3377B11C946683A4EE81D6092A59032F34
SHA-512:	D78533D93AA8A1071C4C5D1E2586FB1010F1AD8B19C7FB47E7AC85234D43B9E2C1C3842938497C2663B27D2D18C59A3C84F853563405060810DC53804B91A583
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans:600
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 600;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 600;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 600;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4saVIGxA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-fa

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21322)
Category:	downloaded
Size (bytes):	21509
Entropy (8bit):	5.170851087630081
Encrypted:	false
SSDEEP:
MD5:	0281CE8332E76DBB7AB695AB26922642
SHA1:	A225B5389E124C815D3637BFCD236E3C6C751EA6
SHA-256:	1868240F953FF60303739AA12595F7113180DA8019B6F384DC2AE43F9BB2387D
SHA-512:	0610E8060EC058B5DC7075D5C5A32A2A2A9A0BD229BA4CD1D0B94B9206F453F99B4A912B6EFACC87536733DB3C320D3AF6A1E1CA5E6D5C5F92339C9D9BD1EE6F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.olive-loader.js?cs=f4fb2bdde004477eeeed
Preview:	/! For license information please see signing_iframeless_mobile.olive-loader.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[7539],{44385:function(t,e,r){r.r(e),r.d(e,{LoadingOliveCSS:function(){return A},default:function(){return I},getOliveBaseUrl:function(){return G}}),r(92222),r(39714),r(66992),r(33948),r(60285),r(41637),r(88674),r(41817),r(47042),r(91038),r(74916),r(72443),r(73706),r(10408),r(15581),r(2490),r(34514),r(54747),r(65069),r(34782),r(57327),r(88449),r(59849),r(49337);var n=r(35417),o=r(60982);function i(){i=function(){return t};var t={},e=Object.prototype,r=e.hasOwnProperty,n=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},o="function"==typeof Symbol?Symbol:{},a=o.iterator\|\|"@@iterator",c=o.asyncIterator\|\|"@@asyncIterator",u=o.toStringTag\|\|"@@toStringTag";function l(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{l({},"")}catch(t){l=function(t,e,r){return t[

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14320)
Category:	downloaded
Size (bytes):	14503
Entropy (8bit):	5.246781777067482
Encrypted:	false
SSDEEP:
MD5:	C9B6F7058BEF46BE3D8CE2876AE734D2
SHA1:	800721BFA3294D46A8F11F6D5CBB97AD306A4D2C
SHA-256:	57C828829FFEEC18B1C1BFA8A9BC3BA0D08B1EC669F421243F896E7656296493
SHA-512:	4356FEB77A2B68E34B9D06BA1081D62DC5FE17704A82394D56D4361E310B21886ADC8A2217166C733CA1DD35BC06F63AF28F5C0816BCC65B01EFF8BF9CDF6708
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.optimizely.js?cs=09432f89176fcc8a4947
Preview:	/! For license information please see signing_iframeless_mobile.optimizely.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6686],{97625:function(t,e,r){r.r(e),r.d(e,{default:function(){return d}}),r(92222),r(15581),r(2490),r(34514),r(54747),r(88674),r(41817),r(66992),r(33948),r(72443),r(73706),r(10408),r(65069),r(47042);var n=r(19889),i=r(50216),o=r(60888),a=r(47597),c=r(22828),s=r(76069),u=r(15413);function l(){l=function(){return t};var t={},e=Object.prototype,r=e.hasOwnProperty,n=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i="function"==typeof Symbol?Symbol:{},o=i.iterator\|\|"@@iterator",a=i.asyncIterator\|\|"@@asyncIterator",c=i.toStringTag\|\|"@@toStringTag";function s(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{s({},"")}catch(t){s=function(t,e,r){return t[e]=r}}function u(t,e,r,i){var o=e&&e.prototype instanceof p?e:p,a=Object.create(o.prototype),c=new O(i\|\|[]);ret

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 13780, version 1.0
Category:	downloaded
Size (bytes):	13780
Entropy (8bit):	7.973002703865565
Encrypted:	false
SSDEEP:
MD5:	D2793531447C140874B62B7448EF7191
SHA1:	1CE36AA9C6445DACDFA8B597BD79A34514CC9F60
SHA-256:	2B1A1F78DF06385464750F48AED402C315164D51FD9475E8B5A47D897CF9C084
SHA-512:	33EDD561F46BFEE5D1A9AFA119F8EC6CAD9B9FD6B54FFD25B1862B5AFFFB1B82DB74D2A4AE11B7893D8261E0520EF5B5E5AF21E7D2D39D02BB849B9FDA268DDD
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/olive/17.20.0/fonts/olive-icons.woff
Preview:	wOFF......5......._.........................GSUB.......;...T .%zOS/2...D...A...V6>H.cmap...........P.<..glyf......(v..E.....head.......3...6...hhea...P.......$.?..hmtx...p...J...dU...loca.......4...4CYTHmaxp../........ ....name..0....0...:...Lpost..1@.........+@.x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d~.8.....A.i.............X.....4........_..Q.....4#H.....>...x....r.W...@.(.A..s..s..A..%r.ND..g.E.s.6.\|./.{....N.T.[.jfV.......[...S.wt..ok:..L..kk.......O.+...L.......^n...eyU.w.C..G.>..V6u.l....+.x.{...V~..W..cj.1...c..%>...\|..t.;=\|...M.....1...3...a(..c8#.....].a,....&2.g...L.yf0.Y.f.s..\|....\|.F.u).X..V...a-.X..6...la+....v....a/......D3.8.....1.s...r...,.8...h.".....r....&.....r..<.!......o...<.).x....{^..?..._.....?..W..?Y.../.._..?....M.....R..[....4D5CeRT.U..{.........w(.5..+m.]Ki.........=My.....}Ny.T..<..)/.S@y.T..*<..7.....O..]xn(..7...%...T...\|.N.IC..3.j......u.O$...M.=<..Gx^Q...^..F.........O8...u.?<......p....L@..t@

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 37560, version 1.0
Category:	downloaded
Size (bytes):	37560
Entropy (8bit):	7.986336222628645
Encrypted:	false
SSDEEP:
MD5:	B9D0556A2C620A939D54C63BE3DF6C6C
SHA1:	97968884D4C5A93C46AB1334CE9E9156C694EA4D
SHA-256:	90973DB3F26FE86B648EC735F3183B44902E5CEDF2B1A042402BAC39DA70404F
SHA-512:	37B59878D38EC5E9CEFB9877E53D616696FE430298CE4F26D61DBBD7402F2867554E25DBD78BA95C445BC145EA469895BE43E2BD30C1906B8D27D8AF14E84EDA
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/HelveticaNeueW01-75Bold.woff
Preview:	wOFF..............=4........................LTSH............F.jOS/2...8...V...`e<..VDMX.......m....sPz.cmap...............cvt .......>...>....fpgm...........b2Msfgasp................glyf......m'...h/z..hdmx..u@.......(..'.head.......6...6..2.hhea....... ...$...Ghmtx...(.......x.j..kern...$.......<...loca.............i.vmaxp....... ... ....name.......e.......post........... ...2prep... ............x.5.!..0.....6.....y......"d...H8.....;...vg."3.v../..^.,...m...c.d[.N5.. ..x...xSH...I....H...g.,(.....[J.80.#.a...M<.......n.....)..}J.F.qc_1N....iD?....x.c`f.a.........................9X.@....A_......\|<...........N0.g...3..X.N1(.!...J.h..x...c`.....w.....m.p..m..k..Zm............@..#..N..N...d...$3.Yf!.."..ld....s....IN..\27.e....4.O.'.,@.Y.....,....E(".RT....P...%dIJ.R...)m...,KYY.r.<.e.X...(+QIV..T...J...Ue5...2..T.5.!kQS...Cm...ud=.....R_6.....a#...4.Mh,...biFS.f...eKZX...R...lMk.FF.6..me{.......`Qt...L'..+]d7.Z$..&{.]....EO.^.A.z.....+.....@.9..r...

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	202355
Entropy (8bit):	5.284694794553639
Encrypted:	false
SSDEEP:
MD5:	208C5C250D351085B6FD71C803FED83A
SHA1:	5C4A20C71977204653BA3F66F169EE63BFFB9EFE
SHA-256:	76577C152548438BA74952845EB19A69CAAFBEF5858103A7A48F91B5D6E5D22F
SHA-512:	B20169F0697737D7898533E31A79F478DA7DEB7C135DEC5D186DE245F8432D473B98D1AF6034BC3B94ABE97119A2FB508748CFB9A21CD1DAB30AEA29F2BA8F58
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.7462.js?cs=8b505120e282f62b549b
Preview:	/! For license information please see signing_iframeless_mobile.7462.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[7462],{60273:function(t,e,n){n(66992),n(70189),n(88921),n(96248),n(13599),n(11477),n(64362),n(15389),n(90401),n(45164),n(91238),n(54837),n(87485),n(56767),n(76651),n(61437),n(35285),n(39865),n(33948),n(26699),n(32023);var r=n(113),i=n(163),a=n(76069),o=new Set;e.Z={getValue:function(t,e){var n,s=null===(n=r.Z.envelope)\|\|void 0===n\|\|null===(n=n.accountPlanSettings)\|\|void 0===n?void 0:n[t];if(!(i.ZP.getValue("SIGN_31053_DisableDuplicateAccountPlanSettingTelemetry",!1)&&o.has(t)\|\|i.ZP.getValue("ClientTelemetryDisabledAccountPlanSettings","").includes(t)\|\|s===e)){var u={ActionName:"CUSTOM_ACCOUNT_PLAN_SETTING:".concat(t),data:{name:t,defaultValue:e,actualValue:s}};a.default.recorder.record(a.default.actions.customTelemetry(u)),o.add(t)}return void 0===s?e:s}}},35126:function(t,e,n){n.d(e,{S1:function(){return _},zD:funct

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20240)
Category:	downloaded
Size (bytes):	20411
Entropy (8bit):	5.39995232475372
Encrypted:	false
SSDEEP:
MD5:	FB6F7CE25E47218E5A1BD74AD0BB9F3C
SHA1:	4F940B3F1AD6A220E004ADB8E9EDA4EDCA480D42
SHA-256:	02505B29CCA1DD022B47979979BD689950C5E1F994735856B473E132BE782A04
SHA-512:	71F04CA692E5E25A011E72AA04F400D4A042F465E77B0FF9EFB7BEA63E36088027B2BA29C4309F51A18A72DC72DBFB8041D5FE3FBE988304D0C80D88BE77E84E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.6035.js?cs=b53725d80453cbd7f8b4
Preview:	/! For license information please see signing_iframeless_mobile.6035.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6035],{21766:function(e,n,t){"use strict";t.d(n,{H:function(){return m}});var o=t(97935),r=t(67294),l=t(41602),a=t(57120),i=t(40460),d=t(17803),c=t(90766),s=t.n(c),u=t(76335);function p(e,n){return(e.matches\|\|e.webkitMatchesSelector\|\|e.msMatchesSelector).call(e,n)}function f(e,n){if(e.closest)return e.closest(n);for(var t=e;t;){if(p(t,n))return t;t=t.parentElement}return null}var g=function(e){var n=(0,r.useState)([]),t=(0,o.Z)(n,2),l=t[0],a=t[1],i=(0,r.useState)(0),d=(0,o.Z)(i,2),c=d[0],s=d[1],u=(0,r.useCallback)((function(e){a(e),s((function(e){return e+1}))}),[]);return(e.length!==l.length\|\|e.some((function(e,n){return e!==l[n]})))&&u(e),c},h=function(){function e(){var n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=n.actionKey,o=void 0===t?"action":t,r=n.ignoreKey,l=void 0===r?"ignore":r;(0,a.Z)(this,e),(0,d.Z)

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21902)
Category:	downloaded
Size (bytes):	22076
Entropy (8bit):	5.426616114090191
Encrypted:	false
SSDEEP:
MD5:	0BB0C3939B17208D450604A69D052E1C
SHA1:	BD8084752646C4545F5F0A36F3D2B25D7A188622
SHA-256:	709BDF0076422F0BAC97D946A4A5F9E4069FE5031AABA09018C95014D2BF77D0
SHA-512:	383D405F62E205B1F1F68E7ADAA310952785F41BF5C9ABC136B214368D878F7FAA6437D2F4A4CB7D382E6CEC629318484BDBBB1CC36CA5CD6CCC1E5D378C7124
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.292.js?cs=688b592f1b22a9900d04
Preview:	/! For license information please see signing_iframeless_mobile.292.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[292],{41589:function(e,t,r){var n=r(51400),s=r(26244),i=r(86135),a=Array,o=Math.max;e.exports=function(e,t,r){for(var u=s(e),h=n(t,u),f=n(void 0===r?u:r,u),c=a(o(f-h,0)),l=0;h<f;h++,l++)i(c,l,e[h]);return c.length=l,c}},94362:function(e,t,r){var n=r(41589),s=Math.floor,i=function(e,t){var r=e.length,u=s(r/2);return r<8?a(e,t):o(e,i(n(e,0,u),t),i(n(e,u),t),t)},a=function(e,t){for(var r,n,s=e.length,i=1;i<s;){for(n=i,r=e[i];n&&t(e[n-1],r)>0;)e[n]=e[--n];n!==i++&&(e[n]=r)}return e},o=function(e,t,r,n){for(var s=t.length,i=r.length,a=0,o=0;a<s\|\|o<i;)e[a+o]=a<s&&o<i?n(t[a],r[o])<=0?t[a++]:r[o++]:a<s?t[a++]:r[o++];return e};e.exports=i},21574:function(e,t,r){"use strict";var n=r(19781),s=r(1702),i=r(46916),a=r(47293),o=r(81956),u=r(25181),h=r(55296),f=r(47908),c=r(68361),l=Object.assign,p=Object.defineProperty,g=s([].concat);e.exports=!

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9945)
Category:	downloaded
Size (bytes):	10116
Entropy (8bit):	5.248070874940207
Encrypted:	false
SSDEEP:
MD5:	D6E199C4FECB218D5367428E8B27CFCE
SHA1:	D2E32324BC542096488886EE56EA2FC4D576FE89
SHA-256:	D8A2BDB9A70F3D0A8722EFE2761BA567D1D7503B881141DCEF721AF61E54D740
SHA-512:	96066B924B007985267D24DD10287DCA3C3289099B3D242AD5FA2BF998EA88E233A01A61BDB69C0BB7E9F08FF1BD02F13A4D99FE4C07F26539F94E0A8D8CB157
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.8571.js?cs=8db5b675d9a3cc5c2994
Preview:	/! For license information please see signing_iframeless_mobile.8571.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8571],{86583:function(t,e,i){"use strict";var n=i(22104),o=i(45656),s=i(19303),r=i(26244),h=i(9341),a=Math.min,c=[].lastIndexOf,l=!!c&&1/[1].lastIndexOf(1,-0)<0,u=h("lastIndexOf"),d=l\|\|!u;t.exports=d?function(t){if(l)return n(c,this,arguments)\|\|0;var e=o(this),i=r(e),h=i-1;for(arguments.length>1&&(h=a(h,s(arguments[1]))),h<0&&(h=i+h);h>=0;h--)if(h in e&&e[h]===t)return h\|\|0;return-1}:c},94986:function(t,e,i){var n=i(82109),o=i(86583);n({target:"Array",proto:!0,forced:o!==[].lastIndexOf},{lastIndexOf:o})},83475:function(t,e,i){"use strict";var n=i(19781),o=i(51223),s=i(47908),r=i(26244),h=i(47045);n&&(h(Array.prototype,"lastIndex",{configurable:!0,get:function(){var t=s(this),e=r(t);return 0==e?0:e-1}}),o("lastIndex"))},21518:function(t,e){"use strict";function i(t,e,i){this.x=t,this.y=e,this.time=i\|\|(new Date).getTime()}function

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12775)
Category:	downloaded
Size (bytes):	12944
Entropy (8bit):	5.323982754909898
Encrypted:	false
SSDEEP:
MD5:	6976D09E0512E771F39816DD0C5E9F8F
SHA1:	9499FC8654872852CFE7DFFDDFC391CCE2C8DE45
SHA-256:	4B23333A3DF8F33B3174F540A28D49F22F6A149486B70BD8AC145828F8F351A7
SHA-512:	3E7504CCA93E783D03BD20E329C9F5B6CCD5404311ACEA1745BE6367196FAB97921D40021D34CCBD43919609F3BF1E43E245E533FED794C5E3BAE6308E1BA3AF
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.888.js?cs=36731f1a323c8ea1364e
Preview:	/! For license information please see signing_iframeless_mobile.888.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[888],{60888:function(e,t,n){n(82772),n(24603),n(74916),n(39714),n(15306),n(47042),n(40561),n(31672),n(2490),n(59461),n(4723),n(15581),n(34514),n(54747),n(92222),n(73210),n(41817),n(66992),n(33948),n(91038);var r=n(19755),i=n.n(r),o=n(59050),c=n(52640),a=n(163),l=n(89975),s=n(79380),u=n(61543),d=n(34782);function f(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=n){var r,i,o,c,a=[],l=!0,s=!1;try{if(o=(n=n.call(e)).next,0===t){if(Object(n)!==n)return;l=!1}else for(;!(l=(r=o.call(n)).done)&&(a.push(r.value),a.length!==t);l=!0);}catch(e){s=!0,i=e}finally{try{if(!l&&null!=n.return&&(c=n.return(),Object(c)!==c))return}finally{if(s)throw i}}return a}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)return p(e,t

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12407), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	24923
Entropy (8bit):	5.3296536348118755
Encrypted:	false
SSDEEP:
MD5:	82234F10C571415A26A07D3FEB8D0252
SHA1:	48506FBFC2EB6C05A2291EFD64A50B977FF83739
SHA-256:	35E85244357C64790859A1931AFFD1F745E451F7F7332AF74A5DFF7F2AD67652
SHA-512:	56807CA8B047A56EA4E820C6605B9D4D15EAD979AEAA4AC444B16676A4CA54F25B3F1C1F8365BCFB9EECCBA68E78019248B9135D98F81F0F6EFA78E91FF7D0EF
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/signing-app/23.11.54/signing_iframeless_mobile.9223.js?cs=05145f3d00857ce8a6aa
Preview:	/! For license information please see signing_iframeless_mobile.9223.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9223],{88999:function(t,r,e){var n=e(79405).has;t.exports=function(t){return n(t),t}},31530:function(t,r,e){"use strict";var n=e(28710).charAt;t.exports=function(t,r,e){return r+(e?n(t,r).length:1)}},7556:function(t,r,e){var n=e(47293);t.exports=n((function(){if("function"==typeof ArrayBuffer){var t=new ArrayBuffer(8);Object.isExtensible(t)&&Object.defineProperty(t,"a",{value:8})}}))},53671:function(t,r,e){var n=e(19662),i=e(47908),o=e(68361),u=e(26244),a=TypeError,c=function(t){return function(r,e,c,s){n(e);var f=i(r),v=o(f),l=u(f),h=t?l-1:0,d=t?-1:1;if(c<2)for(;;){if(h in v){s=v[h],h+=d;break}if(h+=d,t?h<0:l<=h)throw a("Reduce of empty array with no initial value")}for(;t?h>=0:l>h;h+=d)h in v&&(s=e(s,v[h],h,f));return s}};t.exports={left:c(!1),right:c(!0)}},13232:function(t,r,e){"use strict";var n=e(46916),i=e(19662),o=e(19670)

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2879
Entropy (8bit):	7.660950602080433
Encrypted:	false
SSDEEP:
MD5:	C87DA3413DAD0BC57D3F6C42C3848657
SHA1:	5F307E843AE7B61DBB541B55CC159386664A40F4
SHA-256:	AE8E67BAA196F0D1A50103804DA7CC8EA1B30F97A3878F044D2EE03902D9925E
SHA-512:	A5D1E1F35C47264FF5616FBA0409249394B6DC44347C0F4B5536679AA1965B8A69AD3C20E42CAE4D82C44B63D1054C5F985B9FA72A7BE563FE2EC3438AFCFB77
Malicious:	false
Reputation:	low
URL:	https://na4.docusign.net/Signing/Images/Profile_Default_New.png
Preview:	.PNG........IHDR...O...O.....%V......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C298895EA7E911E0B1F8FF0264B08A24" xmpMM:DocumentID="xmp.did:C298895FA7E911E0B1F8FF0264B08A24"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C298895CA7E911E0B1F8FF0264B08A24" stRef:documentID="xmp.did:C298895DA7E911E0B1F8FF0264B08A24"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...{....IDATx..\kO.:..!.z[.. $.......(o..s..u....)...U.R..}x.............kQ.xS.G.D+......W._i....v~F.6...7.\..8'.t.eY.

Static File Info

⊘No static file info

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec

Overview

General Information

Detection

Signatures

Classification

Process Tree

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Windows Analysis Report
https://na4.docusign.net/Signing/EmailStart.aspx?a=ba2f41e9-baaf-4cfa-bac9-97afaa73a1c7&acct=97628bf5-2dcc-4379-8c8b-719995aa39f7&er=432aa911-ffaa-47c2-9cba-5584ad4ba6ec