7d596245bc616352592e063798eb78b0b879cd3b8a47273f2057700ec4961bd9 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

ad-blocker...und.js

windows10-2004-x64

3

ad-blocker...und.js

windows11-ltsc_2024-x64

3

ad-blocker/content.js

windows10-2004-x64

3

ad-blocker/content.js

windows11-ltsc_2024-x64

3

content/an...ild.js

windows10-2004-x64

3

content/an...ild.js

windows11-ltsc_2024-x64

3

content/an...x.html

windows10-2004-x64

3

content/an...x.html

windows11-ltsc_2024-x64

3

content/co...ild.js

windows10-2004-x64

3

content/co...ild.js

windows11-ltsc_2024-x64

3

content/co...x.html

windows10-2004-x64

3

content/co...x.html

windows11-ltsc_2024-x64

3

content/content.js

windows10-2004-x64

3

content/content.js

windows11-ltsc_2024-x64

3

content/lo...ion.js

windows10-2004-x64

3

content/lo...ion.js

windows11-ltsc_2024-x64

3

content/sa...ild.js

windows10-2004-x64

3

content/sa...ild.js

windows11-ltsc_2024-x64

3

content/sa...x.html

windows10-2004-x64

3

content/sa...x.html

windows11-ltsc_2024-x64

3

content/te...ild.js

windows10-2004-x64

3

content/te...ild.js

windows11-ltsc_2024-x64

3

content/te...x.html

windows10-2004-x64

3

content/te...x.html

windows11-ltsc_2024-x64

3

content/vp...ild.js

windows10-2004-x64

3

content/vp...ild.js

windows11-ltsc_2024-x64

3

content/vp...x.html

windows10-2004-x64

3

content/vp...x.html

windows11-ltsc_2024-x64

3

executors/100.js

windows10-2004-x64

3

executors/100.js

windows11-ltsc_2024-x64

3

executors/101.js

windows10-2004-x64

3

executors/101.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
EPPIOCEMHMNLBHJPLCGKOFCIIEGOMCON_5_14_0_0.crx
Size 9.7MB
Sample260727-vtflmaxemg
SHA256 7d596245bc616352592e063798eb78b0b879cd3b8a47273f2057700ec4961bd9
MD5 ca6a80e37db977b957525acfb079f140
SHA1 b10e1b2f3a52fd849206102a8e4e5ea9f2f7c750
SHA512 7b718111c68821b22ea482f80cc22cd7d9aad4e69de25c7a9ea5d69dc44c61987774bd540d9cd5c01779dbbf7a0024e71633b4be764b58556edc27855536a03e
SSDEEP 196608:jiPp4qSRiQDMSnmtFp/pVjclOGs6Wp0tB8E8t3w6ORAnQ4EOToQ/7FJsmfa3:jIpXmjQ7jxG/nB8Vkmn5/ToQ/HlC3
TLSH
T139A6337E7BD9AF24D04AA874E151F15608830A8FF1696A5BF355FA02CCD1A874320DFB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution link qr

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ad-blocker/background.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

ad-blocker/background.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

ad-blocker/content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

ad-blocker/content.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

content/anti-male-ware-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

content/anti-male-ware-notification/build.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

content/anti-male-ware-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

content/anti-male-ware-notification/index.html

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

content/consent-reminder-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

content/consent-reminder-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

content/consent-reminder-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

content/consent-reminder-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

content/content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

content/content.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

content/location/location.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

content/location/location.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

content/safe-price-check-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

content/safe-price-check-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

content/safe-price-check-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

content/safe-price-check-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

content/terminated-connection-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

content/terminated-connection-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

content/terminated-connection-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

content/terminated-connection-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

content/vpn-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

content/vpn-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

content/vpn-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

content/vpn-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

executors/100.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

executors/100.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

executors/101.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

executors/101.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  ad-blocker/background.js
- Size 181KB
- SHA256 6ac335143050d276931ce578d36a63823024700c20c4858d8f4aaa94428898d7
- MD5 f626f5ae173a6d698d6734cfa1781830
- SHA1 23c0c8d3575ae730ef740aec9efbec342f1ab8f3
- SHA512 2ac7b55288a7204d23c0c2c902bf4ba99bc33bc9806ee798a6a380bb4f307dc1d406fe7f1a8590bb29343e6c3a2840f68dd36b77fa014e29651e155f526705e2
- SSDEEP 1536:Gat1jNKPn/xSBeZuImiGrd2i2G+LMKIbHC2Sey8JuLm+eMes06wwPi6g3gW4Fi5j:GkjNR2pG+LnQ6gP4Fi5Z0uJ1Nl
- TLSH
  T19804F8B2B28E996982BA4078203523E1DB244C75BAC5505DF52A6CEFBD55BC070FCBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ad-blocker/content.js
- Size 245KB
- SHA256 1a47a1d38c798a88f2b2cb845c043edee13c3b7a236856b8deaf36f45100d3f9
- MD5 19f10acd1b4846adfd484f56d41df771
- SHA1 0937bef10344d00c4c67e668f89d28fffb21cf6a
- SHA512 71a480d8539882c02e7049935caf831755489c28d83792350a7fbdc6bbd104f58f4c7f41cfb2fd67d5b3e7c50947923a3a7417527ba85d299b84bb770e4fffac
- SSDEEP 3072:wjlNpKGrZhRNzkrwI/iDG87qaIodnv6FwE6gP4Fi5Z0uX:iNpKGrZhRNRNObFwE6g/X
- TLSH
  T1CD341BA23156783B46AE01DE60311282FB5818FAB905505CF76CECE77C65D8263FDBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  content/anti-male-ware-notification/build.js
- Size 3.7MB
- SHA256 8c25aab6e7ee8238d5927815d6beb3f0a38e11165075f7bafd5ec4726ee217c4
- MD5 2b78d4b8ca0944d23a13e11a6d084d86
- SHA1 97403a588f57ef4e3d33bc5f1cc37d9ae818f55a
- SHA512 d01e965a491dc22acc37d4326a329d0ab5665368f83a4505ff51774266d2113116c24c08e70fcfb7389d754722f21a1f720124637ae7ae49799ad36b3e602959
- SSDEEP 49152:cOeNv5rMoYBSSbEiebjafqTJ/PGCk5S4IdXGWLOUIM++9I589N8TGxAxNAV8JrgJ:iaKZ
- TLSH
  T1F306E8D42730A3BC998EC7DDDF7EB8D8110B70EDAA3A41C860594AA4A192FCDF915DC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  content/anti-male-ware-notification/index.html
- Size 178B
- SHA256 3ddd4e089d1c2aed5eeb4f9128df3c333fe2a383ae11f9bbe88144e1b7bd77dc
- MD5 29f139022ad45ae293351e206db0590b
- SHA1 eeea705d53437fdcf4d65707b6a94ed154832c86
- SHA512 b20b81258e37a54b6b2c696f35c00711cd93044d9aae7dcb7355c78be1558e83758d58f2966cd469b61046e42de52fe6d933b7370ad82f48f33a36119727887e
- TLSH
  T138C0805F7C075051C51056542CE0F75C548BF658B1D2889444E361554DCD3FDCC4715C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  content/consent-reminder-notification/build.js
- Size 3.7MB
- SHA256 2c3e7a49a6197ffa02bb3503c9259685dc742860279fff998b7978b31f8e2f42
- MD5 697254243e83a5a442f72bf0565ff356
- SHA1 c19ad0d18d291dec3bd4650a7fcdb03ee5a21280
- SHA512 83fb093548c1432c5fe209f32bd5446b898a257e92bb0648a9b24b9d8a49b7dd8a5158618e64b64305025282df7cdb448f79ecfec629a11b35c07c46f9deaa28
- SSDEEP 49152:7GBSIk/El1sv9vXip/0va0a3TEKrELCj7t/kd5C4bwEuH0HKU:F
- TLSH
  T15306E9D42730A3BC598EC7DDDF7FB8D8110B70EDAA3A41C860594AA4A192FC9FA15DC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  content/consent-reminder-notification/index.html
- Size 180B
- SHA256 5e937c0eb3b98786649f5f9604885aac476059a3dff5fb713fe96061fdfa6dd0
- MD5 6c10d124c766b42b63fbe205f1a508dd
- SHA1 b90ee0cc4bd5b5445a60a5642fd055346f6dc715
- SHA512 327a1e668bc387596bf3d6266752b37e5e5bf8671e08401ba15db08f2c683b0deb1f861593df53cd7f23aee25c4ccf1ecbf171adb6bf257a3ff8bfd6115b283e
- TLSH
  T19AC0805F7D451142C56056542CF0B75D5487F758F1D5CD8094D3607549CD39DDC8B35C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  content/content.js
- Size 147KB
- SHA256 4e45a8932a6f5893868b01ac58c62c7fe41a7a9b008a5d5f9ca36266de50eb27
- MD5 6fbb0448b7a1434968aea20eb4d8ef77
- SHA1 de8ee9c4d1f1061818dc032f2573c66d522119b0
- SHA512 591f1ddef1f25c204b355a501fa374da57f7932a46e1088c4706a96780a9728925b73940aaf3466a9035162cba0819053e205fe402c5522727482ba780a5587c
- SSDEEP 3072:tsrnajtXmLNCi2Fa4YTpCjfYiYP6xBIQ/zN0lOiONFnH:trgNCi2uTX0SQxH
- TLSH
  T1C4E3D9CA3295F0B513D7A1F684770002F23A2464780E5054B7EDF8EA787A9DA9637F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  content/location/location.js
- Size 6KB
- SHA256 5822cfe41e79f2f831b38d46ff412614f2e4fc36226bbb8cfa8fe647bfe3d3a3
- MD5 ebb0ff7a4cfe7f567905b09450406d55
- SHA1 9de60acce65b5e8cd91090aeb30a8ade24fcb44b
- SHA512 0f5c1c34bb8023638ffbfc70e3bb94f028eebcb1ec3a93494740b706ff8f98d46bc18f68c729cdb10f2f03b99256fac2a63917cd8e8b5591c11f5c24e2bfd956
- SSDEEP 192:xfIl4RKyjkyk/fyhrhKOWr/hsXNNOEJHXyEaq7M5:xY4gTp7OWryHOqHXMq7M5
- TLSH
  T17DD195E6978B9C9407D9E145FD273601523275DF300AB048BA8C78DF2529E4DD22BF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  content/safe-price-check-notification/build.js
- Size 3.7MB
- SHA256 4182050821f470594fa3095e69ddcdd60e570764a729329ed080ce2c4fbe3541
- MD5 6d573e0d437e01c377d2f4c74cfda41e
- SHA1 0da877617f9b0d5b733a0c40d76a2250c47f4fa6
- SHA512 1c339b89ce6a48acb6d40ae574f70abf0b3119c27774d03f986677ee28e2002d24c710e12f100e09eb2aa83c795cb57ad0a48653cb82d96808ca7c018c6382b4
- SSDEEP 49152:UQZaNBd8ywWBPOia0AvLxo3u+QqELCj7io81bwaun0HRr:r
- TLSH
  T17E06E9D42730A3BC598EC7DDDF7FB8D8110B70EDAA3A41C861594AA4A192FC9FA15DC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  content/safe-price-check-notification/index.html
- Size 267B
- SHA256 c810783f54a6c57f41e1c4933b312d14a000c01c8f689f063b7464eb57f6d4f7
- MD5 679ca12cb8e2c20131def7da86e605ad
- SHA1 87e4d0bd8431dd3c6666412950f9a0777b3ef4a2
- SHA512 035fcc0fa9365e55e0d73717c9e04930d355345cefe59b88e6de7400e2ebb530abf6d5152512c913e0bf8432e823319b34ae2b7adab095a739287a086f6a52d9
- TLSH
  T173D02B1D98510042E12041645CE0B328198BE509E3AB4C4468FB30228F4835CDC47294
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  content/terminated-connection-notification/build.js
- Size 3.7MB
- SHA256 eaa42121536bbdd25464102ec104758cafbb59611d743f0f99ec89b8786830ca
- MD5 2214dcfebf82bce7b703911c3a6a5fb6
- SHA1 9a7af400f162cbfb6ca066321df0596fa6920c81
- SHA512 b06d9752f37dde491525ad432495d8e9ba793c0cec58acfcdac47cae589b8391aa66074d0f1f08f3371a86f6abf51f9430b9bfdafd062edd666249838d45889c
- SSDEEP 49152:GOeWfMKAQcIIv2QrMbj1LfCt/Jyvn3B613ylf0Dux2d+9dloAD6MuRAb06gmarDv:nFWB
- TLSH
  T18606E8D42730A3BC998EC7DDDF7EB8D8110B70EDAA3A41C860594AA4A192FCDF915DC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  content/terminated-connection-notification/index.html
- Size 281B
- SHA256 fa802e72d4aa4e235425bacbc72430be2d3d59ce6e9e40ffd6e8ee9d6471dec4
- MD5 9868f98aef0a2172af421437ce41442e
- SHA1 53d2142f4204bd14e6c080fdea9c457dd103febb
- SHA512 1168c7ecc97f8b7ce162fc917e2f52d88d505d28f191b8aaea41ec6a05d412b634d02350dff655d22322168756df2e88c205f050839461c679a77aac1dbd0535
- TLSH
  T167D02B5E28520181D61141B51DE177685457D94DE5974C5065FF20318F45388D88B3A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  content/vpn-notification/build.js
- Size 3.7MB
- SHA256 eec6e14eed8f57f08952fcb9a45c6bd80544159b257e454d4af2fd4739c2451e
- MD5 2b662df875d1ad99e6ef8e194c0e05f5
- SHA1 39e969ac625b3f030cca52e67c59459ae06013a0
- SHA512 75ab81fe3a32f306bbe5bfafb2c8f0405d744e96555c7d51f7ca182298e3426e0873900cb3f1bd4f23abed900d050b4262cf3761e32d81bd289d0fc65555262d
- SSDEEP 49152:UblaNZ/88aAF56iuOAZBJo3ucQDELCj7y4qFbwOun0HlM:e
- TLSH
  T16206E9D42730A3BC598EC7DDDF7FB8D8110B70EDAA3A41C861594AA4A192FC9FA15DC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  content/vpn-notification/index.html
- Size 160B
- SHA256 570506b4a013d9284529ee963fa1aea98199d9996c82fd42e290304367481973
- MD5 e3984780fadba26c16c73904cf1d5530
- SHA1 6da79c6e5bd7529bee36999f42143b43240cd57b
- SHA512 abc9d2c2407524e58ed475f24ccd8e982f94bebbb6e55d3c6d4303bec4321d5852609d2039be507b9856861c45d0036c5b82d32240ac0192989326b8138de084
- TLSH
  T1EAC08C8B7802404189505A882CE2B31C8453BB9CB4838C0006E2E0A119C93B9DC47198
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  executors/100.js
- Size 4KB
- SHA256 18c253387b03b86ca31e197e43615dbe8545d3a53eb3129c86a9fa0381fe4845
- MD5 2451ee3831b8fb2d53784d89907c8a32
- SHA1 af40a501b0e69e110904e10429cc3bd47dd45fff
- SHA512 6fc1c290191c0c4e7e3d45e2c2cfaa235556ca2976dce4a5619c4f4a4c3f4fd25b63dc6e9fb0cbcbe8c6057ea1d082e8943575ba0afc976c382dbdd0e3df33f7
- SSDEEP 96:BIcY4eD0xZseXhuFuWm9m9vaDa2yLpLK6Wav2ARfuXcr15O1T+OBzDLwHCcs9d:O54kjh9KyOIr1fOBzPw4
- TLSH
  T12BA19528B381359D419914D9A1BBF108B1679D9532D70C1DC69A28933A2CEBFE09AFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  executors/101.js
- Size 3KB
- SHA256 863af19f0602d419ebcf4d8f55e46ecdab444891c1893e1372e17c6e5c61ed8e
- MD5 a8f74d5e1f3693b1ea77cf2df8ddad46
- SHA1 d1f7b1834b261fbe30ca5282e30b5ed7a0ae1af8
- SHA512 369a30b90ed4eff114d3d53a20700e199fe2f9c80b98ea80aa9072fba7bffb3354eb725bb0f16584ca85fbfa9e5fbf5b64b6261aa6788c34c7fd5c372ea055a1
- TLSH
  T12E7187383581233779E707DEA5F4E148BA686674712784D2E2CDEC163B96D823976F0C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy