Overview
overview
5Static
static
1assets/ima...rt.xml
windows7-x64
1assets/ima...rt.xml
windows10-2004-x64
1assets/ima...re.xml
windows7-x64
1assets/ima...re.xml
windows10-2004-x64
1assets/ima...ey.xml
windows7-x64
1assets/ima...ey.xml
windows10-2004-x64
1assets/ima...co.xml
windows7-x64
1assets/ima...co.xml
windows10-2004-x64
1assets/ima...bg.xml
windows7-x64
1assets/ima...bg.xml
windows10-2004-x64
5assets/js/...eme.js
windows7-x64
1assets/js/...eme.js
windows10-2004-x64
1assets/lib...cts.js
windows7-x64
1assets/lib...cts.js
windows10-2004-x64
1content-sc...ibe.js
windows7-x64
1content-sc...ibe.js
windows10-2004-x64
1filters/filter_1.js
windows7-x64
1filters/filter_1.js
windows10-2004-x64
1filters/filter_10.js
windows7-x64
1filters/filter_10.js
windows10-2004-x64
1filters/filter_11.js
windows7-x64
1filters/filter_11.js
windows10-2004-x64
1filters/filter_13.js
windows7-x64
1filters/filter_13.js
windows10-2004-x64
1filters/filter_14.js
windows7-x64
1filters/filter_14.js
windows10-2004-x64
5filters/filter_16.js
windows7-x64
1filters/filter_16.js
windows10-2004-x64
1filters/filter_2.js
windows7-x64
1filters/filter_2.js
windows10-2004-x64
1filters/filter_224.js
windows7-x64
1filters/filter_224.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
assets/images/alert.xml
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
assets/images/alert.xml
Resource
win10v2004-20230621-en
Behavioral task
behavioral3
Sample
assets/images/app-store.xml
Resource
win7-20230621-en
Behavioral task
behavioral4
Sample
assets/images/app-store.xml
Resource
win10v2004-20230621-en
Behavioral task
behavioral5
Sample
assets/images/arrow-down-grey.xml
Resource
win7-20230621-en
Behavioral task
behavioral6
Sample
assets/images/arrow-down-grey.xml
Resource
win10v2004-20230621-en
Behavioral task
behavioral7
Sample
assets/images/reload-ico.xml
Resource
win7-20230621-en
Behavioral task
behavioral8
Sample
assets/images/reload-ico.xml
Resource
win10v2004-20230621-en
Behavioral task
behavioral9
Sample
assets/images/toggler-bg.xml
Resource
win7-20230621-en
Behavioral task
behavioral10
Sample
assets/images/toggler-bg.xml
Resource
win10v2004-20230621-en
Behavioral task
behavioral11
Sample
assets/js/preload-theme.js
Resource
win7-20230621-en
Behavioral task
behavioral12
Sample
assets/js/preload-theme.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral13
Sample
assets/libs/scriptlets/redirects.js
Resource
win7-20230621-en
Behavioral task
behavioral14
Sample
assets/libs/scriptlets/redirects.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral15
Sample
content-script/subscribe.js
Resource
win7-20230621-en
Behavioral task
behavioral16
Sample
content-script/subscribe.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral17
Sample
filters/filter_1.js
Resource
win7-20230621-en
Behavioral task
behavioral18
Sample
filters/filter_1.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral19
Sample
filters/filter_10.js
Resource
win7-20230621-en
Behavioral task
behavioral20
Sample
filters/filter_10.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral21
Sample
filters/filter_11.js
Resource
win7-20230621-en
Behavioral task
behavioral22
Sample
filters/filter_11.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral23
Sample
filters/filter_13.js
Resource
win7-20230621-en
Behavioral task
behavioral24
Sample
filters/filter_13.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral25
Sample
filters/filter_14.js
Resource
win7-20230621-en
Behavioral task
behavioral26
Sample
filters/filter_14.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral27
Sample
filters/filter_16.js
Resource
win7-20230621-en
Behavioral task
behavioral28
Sample
filters/filter_16.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral29
Sample
filters/filter_2.js
Resource
win7-20230621-en
Behavioral task
behavioral30
Sample
filters/filter_2.js
Resource
win10v2004-20230621-en
Behavioral task
behavioral31
Sample
filters/filter_224.js
Resource
win7-20230621-en
Behavioral task
behavioral32
Sample
filters/filter_224.js
Resource
win10v2004-20230621-en
General
-
Target
4.1.56_0.crx
-
Size
22.7MB
-
MD5
46e1fbe90483166e7b066ab565e9675d
-
SHA1
e0907cf5dabff658f6ebdbd12f2389d0886438f3
-
SHA256
9c80f0885070ad37c7230f73fd0edf1d4e2465e31e82101ae65cbb510137ffaa
-
SHA512
5710e6c11544d049aa62da9f7259dd7bb42e3966c919ce3a69b63b134ee132bdc239cda6d777e03b22d41e66b401e848c1db1eb2a76f12d78b27a035c6a494b7
-
SSDEEP
393216:+KMMGb0k5uFy5lJdHY7S8XspS7WjmwhQmZ+OA9N9d5frSWNHmfhpaUQIuuuS:jMhT5BVefXklR+J9Nr56pFTuu5
Malware Config
Signatures
Files
-
4.1.56_0.crx.zip
-
4.1.56_0.crx.zip
-
_locales/ar/messages.json
-
_locales/be/messages.json
-
_locales/bg/messages.json
-
_locales/bn/messages.json
-
_locales/ca/messages.json
-
_locales/cs/messages.json
-
_locales/da/messages.json
-
_locales/de/messages.json
-
_locales/el/messages.json
-
_locales/en/messages.json
-
_locales/es/messages.json
-
_locales/es_419/messages.json
-
_locales/et/messages.json
-
_locales/fa/messages.json
-
_locales/fi/messages.json
-
_locales/fil/messages.json
-
_locales/fr/messages.json
-
_locales/he/messages.json
-
_locales/hi/messages.json
-
_locales/hr/messages.json
-
_locales/hu/messages.json
-
_locales/hy/messages.json
-
_locales/id/messages.json
-
_locales/it/messages.json
-
_locales/ja/messages.json
-
_locales/kn/messages.json
-
_locales/ko/messages.json
-
_locales/lt/messages.json
-
_locales/lv/messages.json
-
_locales/mk-MK/messages.json
-
_locales/ms/messages.json
-
_locales/nb/messages.json
-
_locales/nl/messages.json
-
_locales/pl/messages.json
-
_locales/pt_BR/messages.json
-
_locales/pt_PT/messages.json
-
_locales/ro/messages.json
-
_locales/ru/messages.json
-
_locales/sk/messages.json
-
_locales/sl/messages.json
-
_locales/sr-Latn/messages.json
-
_locales/sr/messages.json
-
_locales/sv/messages.json
-
_locales/ta/messages.json
-
_locales/te/messages.json
-
_locales/th/messages.json
-
_locales/tr/messages.json
-
_locales/uk/messages.json
-
_locales/vi/messages.json
-
_locales/zh_CN/messages.json
-
_locales/zh_TW/messages.json
-
_metadata/computed_hashes.json
-
_metadata/verified_contents.json
-
assets/css/alert-container.css
-
assets/css/alert-popup.css
-
assets/css/c3.css
-
assets/css/devtools/custom.css
-
assets/css/devtools/dark.css
-
assets/css/devtools/elementsPanel.css
-
assets/css/devtools/inspectorCommon.css
-
assets/css/devtools/inspectorStyle.css
-
assets/css/devtools/inspectorSyntaxHighlight.css
-
assets/css/devtools/sidebarPane.css
-
assets/css/fonts.css
-
assets/css/layout.css
-
assets/css/log.css
-
assets/css/main.css
-
assets/css/nanobar.css
-
assets/css/style.css
-
assets/css/update-iframe.css
-
assets/fonts/Roboto-Flex-Regular.woff2
-
assets/icons/bd14-off-19.png.png
-
assets/icons/bd14-off-38.png.png
-
assets/icons/bd14-on-19.png.png
-
assets/icons/bd14-on-38.png.png
-
assets/icons/gray-19.png.png
-
assets/icons/gray-38.png.png
-
assets/icons/green-128.png.png
-
assets/icons/green-16.png.png
-
assets/icons/green-19.png.png
-
assets/icons/green-38.png.png
-
assets/images/alert.svg.xml
-
assets/images/app-store.svg.xml
-
assets/images/arrow-down-grey.svg.xml
-
assets/images/arrow-down.svg.xml
-
assets/images/avatar.svg.xml
-
assets/images/birthday-14-promo.svg
-
assets/images/checked.svg.xml
-
assets/images/chrome.svg.xml
-
assets/images/cross.svg
-
assets/images/dropbox.svg.xml
-
assets/images/favicon.ico
-
assets/images/filters.svg.xml
-
assets/images/google-play.svg.xml
-
assets/images/hero-green.svg
-
assets/images/hero-red.svg
-
assets/images/link.svg
-
assets/images/logo-dark.svg
-
assets/images/logo-shield.svg.xml
-
assets/images/logo.svg
-
assets/images/logo_adguard.svg
-
assets/images/reload-ico-green.svg
-
assets/images/reload-ico.svg.xml
-
assets/images/shield.svg
-
assets/images/tick.svg
-
assets/images/toggler-bg.svg.xml
-
assets/images/trash.svg
-
assets/js/preload-theme.js.js
-
assets/libs/scriptlets/redirects.yml.js
-
content-script/subscribe.js.js
-
filters/filter_1.txt.js
-
filters/filter_10.txt.js
-
filters/filter_11.txt.js
-
filters/filter_12.txt
-
filters/filter_13.txt.js
-
filters/filter_14.txt.js
-
filters/filter_15.txt
-
filters/filter_16.txt.js
-
filters/filter_17.txt
-
filters/filter_2.txt.js
-
filters/filter_224.txt.js
-
filters/filter_3.txt.js
-
filters/filter_4.txt.js
-
filters/filter_5.txt.js
-
filters/filter_6.txt.js
-
filters/filter_7.txt.js
-
filters/filter_8.txt.js
-
filters/filter_9.txt.js
-
filters/filter_mobile_1.txt.js
-
filters/filter_mobile_10.txt.js
-
filters/filter_mobile_11.txt.js
-
filters/filter_mobile_12.txt
-
filters/filter_mobile_13.txt.js
-
filters/filter_mobile_14.txt.js
-
filters/filter_mobile_15.txt
-
filters/filter_mobile_16.txt.js
-
filters/filter_mobile_17.txt.ps1
-
filters/filter_mobile_2.txt.js
-
filters/filter_mobile_224.txt.js
-
filters/filter_mobile_3.txt.js
-
filters/filter_mobile_4.txt.js
-
filters/filter_mobile_5.txt.js
-
filters/filter_mobile_6.txt.js
-
filters/filter_mobile_7.txt.js
-
filters/filter_mobile_8.txt.js
-
filters/filter_mobile_9.txt.js
-
filters/filters.json
-
filters/filters_i18n.json
-
filters/local_script_rules.json.js
-
manifest.fingerprint
-
manifest.json
-
pages/ad-blocked.html.html
-
pages/ad-blocked.js.js
-
pages/assistant.js.js
-
pages/background.html.html
-
pages/background.js.js
-
pages/content-script-end.js.js
-
pages/content-script-start.js.js
-
pages/devtools-elements-sidebar.html.html
-
pages/devtools-elements-sidebar.js.js
-
pages/devtools.html.html
-
pages/devtools.js
-
pages/filter-download.html.html
-
pages/filter-download.js.js
-
pages/filtering-log.html.html
-
pages/filtering-log.js.js
-
pages/fullscreen-user-rules.html.html
-
pages/fullscreen-user-rules.js.js
-
pages/options.html.html
-
pages/options.js.js
-
pages/popup.html.html
-
pages/popup.js.js
-
pages/safebrowsing.html.html
-
pages/safebrowsing.js.js
-
pages/thankyou.js.js
-
runtime.js.js
-
shared/editor.js.js
-
vendors/lodash.js.js
-
vendors/mobx.js.js
-
vendors/react.js.js
-
vendors/tsurlfilter.js.js
-
vendors/xstate.js.js
-
web-accessible-resources/redirects/1x1-transparent.gif.gif
-
web-accessible-resources/redirects/2x2-transparent.png.png
-
web-accessible-resources/redirects/32x32-transparent.png.png
-
web-accessible-resources/redirects/3x2-transparent.png.png
-
web-accessible-resources/redirects/amazon-apstag.js.js
-
web-accessible-resources/redirects/ati-smarttag.js.js
-
web-accessible-resources/redirects/click2load.html.html .js
-
web-accessible-resources/redirects/didomi-loader.js.js
-
web-accessible-resources/redirects/fingerprintjs.js.js
-
web-accessible-resources/redirects/fingerprintjs2.js.js
-
web-accessible-resources/redirects/fingerprintjs3.js.js
-
web-accessible-resources/redirects/gemius.js.js
-
web-accessible-resources/redirects/google-analytics-ga.js.js
-
web-accessible-resources/redirects/google-analytics.js.js
-
web-accessible-resources/redirects/google-ima3.js.js
-
web-accessible-resources/redirects/googlesyndication-adsbygoogle.js.js
-
web-accessible-resources/redirects/googletagmanager-gtm.js.js
-
web-accessible-resources/redirects/googletagservices-gpt.js.js
-
web-accessible-resources/redirects/matomo.js.js
-
web-accessible-resources/redirects/metrika-yandex-tag.js.js
-
web-accessible-resources/redirects/metrika-yandex-watch.js.js
-
web-accessible-resources/redirects/naver-wcslog.js.js
-
web-accessible-resources/redirects/noeval.js.js
-
web-accessible-resources/redirects/noopframe.html.html
-
web-accessible-resources/redirects/noopjs.js.js
-
web-accessible-resources/redirects/noopjson.json
-
web-accessible-resources/redirects/noopmp3.mp3
-
web-accessible-resources/redirects/noopmp4.mp4
-
web-accessible-resources/redirects/noopvast02.xml
-
web-accessible-resources/redirects/noopvast03.xml
-
web-accessible-resources/redirects/noopvast04.xml
-
web-accessible-resources/redirects/noopvmap01.xml
-
web-accessible-resources/redirects/pardot-1.0.js.js
-
web-accessible-resources/redirects/prebid-ads.js.js
-
web-accessible-resources/redirects/prebid.js.js
-
web-accessible-resources/redirects/prevent-bab.js.js
-
web-accessible-resources/redirects/prevent-bab2.js.js
-
web-accessible-resources/redirects/prevent-fab-3.2.0.js.js
-
web-accessible-resources/redirects/prevent-popads-net.js.js
-
web-accessible-resources/redirects/scorecardresearch-beacon.js.js
-
web-accessible-resources/redirects/set-popads-dummy.js.js
-
_locales/ar/messages.json
-
_locales/be/messages.json
-
_locales/bg/messages.json
-
_locales/bn/messages.json
-
_locales/ca/messages.json
-
_locales/cs/messages.json
-
_locales/da/messages.json
-
_locales/de/messages.json
-
_locales/el/messages.json
-
_locales/en/messages.json
-
_locales/es/messages.json
-
_locales/es_419/messages.json
-
_locales/et/messages.json
-
_locales/fa/messages.json
-
_locales/fi/messages.json
-
_locales/fil/messages.json
-
_locales/fr/messages.json
-
_locales/he/messages.json
-
_locales/hi/messages.json
-
_locales/hr/messages.json
-
_locales/hu/messages.json
-
_locales/hy/messages.json
-
_locales/id/messages.json
-
_locales/it/messages.json
-
_locales/ja/messages.json
-
_locales/kn/messages.json
-
_locales/ko/messages.json
-
_locales/lt/messages.json
-
_locales/lv/messages.json
-
_locales/mk-MK/messages.json
-
_locales/ms/messages.json
-
_locales/nb/messages.json
-
_locales/nl/messages.json
-
_locales/pl/messages.json
-
_locales/pt_BR/messages.json
-
_locales/pt_PT/messages.json
-
_locales/ro/messages.json
-
_locales/ru/messages.json
-
_locales/sk/messages.json
-
_locales/sl/messages.json
-
_locales/sr-Latn/messages.json
-
_locales/sr/messages.json
-
_locales/sv/messages.json
-
_locales/ta/messages.json
-
_locales/te/messages.json
-
_locales/th/messages.json
-
_locales/tr/messages.json
-
_locales/uk/messages.json
-
_locales/vi/messages.json
-
_locales/zh_CN/messages.json
-
_locales/zh_TW/messages.json
-
assets/css/alert-container.css
-
assets/css/alert-popup.css
-
assets/css/c3.css
-
assets/css/devtools/custom.css
-
assets/css/devtools/dark.css
-
assets/css/devtools/elementsPanel.css
-
assets/css/devtools/inspectorCommon.css
-
assets/css/devtools/inspectorStyle.css
-
assets/css/devtools/inspectorSyntaxHighlight.css
-
assets/css/devtools/sidebarPane.css
-
assets/css/fonts.css
-
assets/css/layout.css
-
assets/css/log.css
-
assets/css/main.css
-
assets/css/nanobar.css
-
assets/css/style.css
-
assets/css/update-iframe.css
-
assets/fonts/Roboto-Flex-Regular.woff2
-
assets/icons/bd14-off-19.png.png
-
assets/icons/bd14-off-38.png.png
-
assets/icons/bd14-on-19.png.png
-
assets/icons/bd14-on-38.png.png
-
assets/icons/gray-19.png.png
-
assets/icons/gray-38.png.png
-
assets/icons/green-128.png.png
-
assets/icons/green-16.png.png
-
assets/icons/green-19.png.png
-
assets/icons/green-38.png.png
-
assets/images/alert.svg.xml
-
assets/images/app-store.svg.xml
-
assets/images/arrow-down-grey.svg.xml
-
assets/images/arrow-down.svg.xml
-
assets/images/avatar.svg.xml
-
assets/images/birthday-14-promo.svg
-
assets/images/checked.svg.xml
-
assets/images/chrome.svg.xml
-
assets/images/cross.svg
-
assets/images/dropbox.svg.xml
-
assets/images/favicon.ico
-
assets/images/filters.svg.xml
-
assets/images/google-play.svg.xml
-
assets/images/hero-green.svg
-
assets/images/hero-red.svg
-
assets/images/link.svg
-
assets/images/logo-dark.svg
-
assets/images/logo-shield.svg.xml
-
assets/images/logo.svg
-
assets/images/logo_adguard.svg
-
assets/images/reload-ico-green.svg
-
assets/images/reload-ico.svg.xml
-
assets/images/shield.svg
-
assets/images/tick.svg
-
assets/images/toggler-bg.svg.xml
-
assets/images/trash.svg
-
assets/js/preload-theme.js.js
-
assets/libs/scriptlets/redirects.yml.js
-
content-script/subscribe.js.js
-
filters/filter_1.txt.js
-
filters/filter_10.txt.js
-
filters/filter_11.txt.js
-
filters/filter_12.txt
-
filters/filter_13.txt.js
-
filters/filter_14.txt.js
-
filters/filter_15.txt
-
filters/filter_16.txt.js
-
filters/filter_17.txt
-
filters/filter_2.txt.js
-
filters/filter_224.txt.js
-
filters/filter_3.txt.js
-
filters/filter_4.txt.js
-
filters/filter_5.txt.js
-
filters/filter_6.txt.js
-
filters/filter_7.txt.js
-
filters/filter_8.txt.js
-
filters/filter_9.txt.js
-
filters/filter_mobile_1.txt.js
-
filters/filter_mobile_10.txt.js
-
filters/filter_mobile_11.txt.js
-
filters/filter_mobile_12.txt
-
filters/filter_mobile_13.txt.js
-
filters/filter_mobile_14.txt.js
-
filters/filter_mobile_15.txt
-
filters/filter_mobile_16.txt.js
-
filters/filter_mobile_17.txt.ps1
-
filters/filter_mobile_2.txt.js
-
filters/filter_mobile_224.txt.js
-
filters/filter_mobile_3.txt.js
-
filters/filter_mobile_4.txt.js
-
filters/filter_mobile_5.txt.js
-
filters/filter_mobile_6.txt.js
-
filters/filter_mobile_7.txt.js
-
filters/filter_mobile_8.txt.js
-
filters/filter_mobile_9.txt.js
-
filters/filters.json
-
filters/filters_i18n.json
-
filters/local_script_rules.json.js
-
manifest.fingerprint
-
manifest.json
-
pages/ad-blocked.html.html
-
pages/ad-blocked.js.js
-
pages/assistant.js.js
-
pages/background.html.html
-
pages/background.js.js
-
pages/content-script-end.js.js
-
pages/content-script-start.js.js
-
pages/devtools-elements-sidebar.html.html
-
pages/devtools-elements-sidebar.js.js
-
pages/devtools.html.html
-
pages/devtools.js
-
pages/filter-download.html.html
-
pages/filter-download.js.js
-
pages/filtering-log.html.html
-
pages/filtering-log.js.js
-
pages/fullscreen-user-rules.html.html
-
pages/fullscreen-user-rules.js.js
-
pages/options.html.html
-
pages/options.js.js
-
pages/popup.html.html
-
pages/popup.js.js
-
pages/safebrowsing.html.html
-
pages/safebrowsing.js.js
-
pages/thankyou.js.js
-
runtime.js.js
-
shared/editor.js.js
-
vendors/lodash.js.js
-
vendors/mobx.js.js
-
vendors/react.js.js
-
vendors/tsurlfilter.js.js
-
vendors/xstate.js.js
-
web-accessible-resources/redirects/1x1-transparent.gif.gif
-
web-accessible-resources/redirects/2x2-transparent.png.png
-
web-accessible-resources/redirects/32x32-transparent.png.png
-
web-accessible-resources/redirects/3x2-transparent.png.png
-
web-accessible-resources/redirects/amazon-apstag.js.js
-
web-accessible-resources/redirects/ati-smarttag.js.js
-
web-accessible-resources/redirects/click2load.html.html .js
-
web-accessible-resources/redirects/didomi-loader.js.js
-
web-accessible-resources/redirects/fingerprintjs.js.js
-
web-accessible-resources/redirects/fingerprintjs2.js.js
-
web-accessible-resources/redirects/fingerprintjs3.js.js
-
web-accessible-resources/redirects/gemius.js.js
-
web-accessible-resources/redirects/google-analytics-ga.js.js
-
web-accessible-resources/redirects/google-analytics.js.js
-
web-accessible-resources/redirects/google-ima3.js.js
-
web-accessible-resources/redirects/googlesyndication-adsbygoogle.js.js
-
web-accessible-resources/redirects/googletagmanager-gtm.js.js
-
web-accessible-resources/redirects/googletagservices-gpt.js.js
-
web-accessible-resources/redirects/matomo.js.js
-
web-accessible-resources/redirects/metrika-yandex-tag.js.js
-
web-accessible-resources/redirects/metrika-yandex-watch.js.js
-
web-accessible-resources/redirects/naver-wcslog.js.js
-
web-accessible-resources/redirects/noeval.js.js
-
web-accessible-resources/redirects/noopframe.html.html
-
web-accessible-resources/redirects/noopjs.js.js
-
web-accessible-resources/redirects/noopjson.json
-
web-accessible-resources/redirects/noopmp3.mp3
-
web-accessible-resources/redirects/noopmp4.mp4
-
web-accessible-resources/redirects/noopvast02.xml
-
web-accessible-resources/redirects/noopvast03.xml
-
web-accessible-resources/redirects/noopvast04.xml
-
web-accessible-resources/redirects/noopvmap01.xml
-
web-accessible-resources/redirects/pardot-1.0.js.js
-
web-accessible-resources/redirects/prebid-ads.js.js
-
web-accessible-resources/redirects/prebid.js.js
-
web-accessible-resources/redirects/prevent-bab.js.js
-
web-accessible-resources/redirects/prevent-bab2.js.js
-
web-accessible-resources/redirects/prevent-fab-3.2.0.js.js
-
web-accessible-resources/redirects/prevent-popads-net.js.js
-
web-accessible-resources/redirects/scorecardresearch-beacon.js.js
-
web-accessible-resources/redirects/set-popads-dummy.js.js