hxxps://www[.]googleadservices[.]com/pagead/aclk?sa=L&ai=CN3MUa3i9aqqpIvmh7L4PpcvD8QPrzJ34iQGB07TNtBawkB8QAiAAYMn2pozQpOQPggEXY2EtcHViLTYyMTk4MTE3NDcwNDkzNzGgAZirhc5CqAMEyAMKqgScAk_QlOkl7_LPHyihFKLClVMBZETNfoHb-RQmMm7xBORkqWJTMKU929AgzzbSD5UUHVSn27qTzbtQxTR9WZOSa7aAIXtYb_Wlf6cnCtsDsk74uHmpI5MCAeaamqqhwRmPlx0-quYUB31nIFDdfEVQxMeljuNzjpb8P1QUQgE0lqI4pV0YXH71Vlp7Av8y-mzmygfx3Kf5px_HwRqmqs0tZXd2wW1r8bRQUAFHqEorXoU2wYreyvFbqZv1EPEt82EuZ_yhJ1OE8K3aBHj5eQQkeiDBbNS0sEbBTa6Jx_qejRIYx5fTzQ7J4Nh8ZXLCUYapML09yMRPrldLKrXxtW1jnUdgy4RP5eONSwTJhj2GIkyqcZpjLY_FRkt6lr0TiAWjl4jGWpIFCAgTeMuvns4doAZugAeY49WtHZAHBKgH8sCxAqgHuMSxAqgH4baxAqgHpc-xAqgH552xAqgH6J2xAqgH-dOxAqgHydqxAqgHqeCxAqgHptSxAqgHqNIbqAex3BuoB7CbsQKoB66xsQKoB_2ysQKoB8jPsQKoB8nPsQKoB83HsQKoB_HRsQKoB_zVsQKoB_vVsQKoB4zWsQKoB4vWsQKoB5risQKoB5visQKoB53XsQKoB53UsQKoB4HGG6gH_K-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___________8BiBQBsBQDwBWBgIBA0BUB2BUBmBYB4hYCCAGAFwGKFxgIAxgBIAEoATABOAFAAUgBUAFYAWACaAGgFwGpFxfsx-tJXB_muhcGKAAwADgB0BgB8BgBwhkCCAE&gclid=EAIaIQobChMI6ordtZmXlwMV-RDbAR2l5TA-EAEYAiAAEgJN4PD_BwE&num=2&cid=CAASwwHkaKvqOsoeYDintrq5jh4NqlBU12Gzxs1kow-bQN5Wmg7fYUCtxTUfZr0BzLK44yABJNOaQ0NN1jc2gOEN7xxduhSx8HlykUj4bN6VEg_pW9haf_lYWBbK9LklFn82TXHsiQ94caYr1WP2a3P6fXUk137H5j0m1Y4ivZH9kY3sqVrKTI6UhYVjMyNMMsguwnL4u9pi3pNDPtCPOsNLlritjMZbzn9YwykUAr1OlmpVQeY1L9Vy7O4lqEN4Zqa6XgCW77g&sig=AOD64_3792L7A7pt6xKWXVJ8LNLVQ-nF3w&ms=%5BCLICK_MS%5D&nb=0&nx=%5BNX%5D&ny=%5BNY%5D&dim=%5BDIM%5D

Sharing

Behavioral task

behavioral1

Sample

https://www.googleadservices.com/pagead/aclk?sa=L&ai=CN3MUa3i9aqqpIvmh7L4PpcvD8QPrzJ34iQGB07TNtBawkB8QAiAAYMn2pozQpOQPggEXY2EtcHViLTYyMTk4MTE3NDcwNDkzNzGgAZirhc5CqAMEyAMKqgScAk_QlOkl7_LPHyihFKLClVMBZETNfoHb-RQmMm7xBORkqWJTMKU929AgzzbSD5UUHVSn27qTzbtQxTR9WZOSa7aAIXtYb_Wlf6cnCtsDsk74uHmpI5MCAeaamqqhwRmPlx0-quYUB31nIFDdfEVQxMeljuNzjpb8P1QUQgE0lqI4pV0YXH71Vlp7Av8y-mzmygfx3Kf5px_HwRqmqs0tZXd2wW1r8bRQUAFHqEorXoU2wYreyvFbqZv1EPEt82EuZ_yhJ1OE8K3aBHj5eQQkeiDBbNS0sEbBTa6Jx_qejRIYx5fTzQ7J4Nh8ZXLCUYapML09yMRPrldLKrXxtW1jnUdgy4RP5eONSwTJhj2GIkyqcZpjLY_FRkt6lr0TiAWjl4jGWpIFCAgTeMuvns4doAZugAeY49WtHZAHBKgH8sCxAqgHuMSxAqgH4baxAqgHpc-xAqgH552xAqgH6J2xAqgH-dOxAqgHydqxAqgHqeCxAqgHptSxAqgHqNIbqAex3BuoB7CbsQKoB66xsQKoB_2ysQKoB8jPsQKoB8nPsQKoB83HsQKoB_HRsQKoB_zVsQKoB_vVsQKoB4zWsQKoB4vWsQKoB5risQKoB5visQKoB53XsQKoB53UsQKoB4HGG6gH_K-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___________8BiBQBsBQDwBWBgIBA0BUB2BUBmBYB4hYCCAGAFwGKFxgIAxgBIAEoATABOAFAAUgBUAFYAWACaAGgFwGpFxfsx-tJXB_muhcGKAAwADgB0BgB8BgBwhkCCAE&gclid=EAIaIQobChMI6ordtZmXlwMV-RDbAR2l5TA-EAEYAiAAEgJN4PD_BwE&num=2&cid=CAASwwHkaKvqOsoeYDintrq5jh4NqlBU12Gzxs1kow-bQN5Wmg7fYUCtxTUfZr0BzLK44yABJNOaQ0NN1jc2gOEN7xxduhSx8HlykUj4bN6VEg_pW9haf_lYWBbK9LklFn82TXHsiQ94caYr1WP2a3P6fXUk137H5j0m1Y4ivZH9kY3sqVrKTI6UhYVjMyNMMsguwnL4u9pi3pNDPtCPOsNLlritjMZbzn9YwykUAr1OlmpVQeY1L9Vy7O4lqEN4Zqa6XgCW77g&sig=AOD64_3792L7A7pt6xKWXVJ8LNLVQ-nF3w&ms=%5BCLICK_MS%5D&nb=0&nx=%5BNX%5D&ny=%5BNY%5D&dim=%5BDIM%5D

Resource

win10v2004-20260911-en

windows10-2004-x64

9 signatures

150 seconds

discovery

General

Target
https://www.googleadservices.com/pagead/aclk?sa=L&ai=CN3MUa3i9aqqpIvmh7L4PpcvD8QPrzJ34iQGB07TNtBawkB8QAiAAYMn2pozQpOQPggEXY2EtcHViLTYyMTk4MTE3NDcwNDkzNzGgAZirhc5CqAMEyAMKqgScAk_QlOkl7_LPHyihFKLClVMBZETNfoHb-RQmMm7xBORkqWJTMKU929AgzzbSD5UUHVSn27qTzbtQxTR9WZOSa7aAIXtYb_Wlf6cnCtsDsk74uHmpI5MCAeaamqqhwRmPlx0-quYUB31nIFDdfEVQxMeljuNzjpb8P1QUQgE0lqI4pV0YXH71Vlp7Av8y-mzmygfx3Kf5px_HwRqmqs0tZXd2wW1r8bRQUAFHqEorXoU2wYreyvFbqZv1EPEt82EuZ_yhJ1OE8K3aBHj5eQQkeiDBbNS0sEbBTa6Jx_qejRIYx5fTzQ7J4Nh8ZXLCUYapML09yMRPrldLKrXxtW1jnUdgy4RP5eONSwTJhj2GIkyqcZpjLY_FRkt6lr0TiAWjl4jGWpIFCAgTeMuvns4doAZugAeY49WtHZAHBKgH8sCxAqgHuMSxAqgH4baxAqgHpc-xAqgH552xAqgH6J2xAqgH-dOxAqgHydqxAqgHqeCxAqgHptSxAqgHqNIbqAex3BuoB7CbsQKoB66xsQKoB_2ysQKoB8jPsQKoB8nPsQKoB83HsQKoB_HRsQKoB_zVsQKoB_vVsQKoB4zWsQKoB4vWsQKoB5risQKoB5visQKoB53XsQKoB53UsQKoB4HGG6gH_K-xAqgHvtmxAqgHq8UbqAe3obECqAfVqbECqAfn2rECqAfetbEC0gguCIBBEAEYXjICggI6D4BCgMCAgICAgIACqoCAEEjZoNI1UBRYoNnctZmXlwNgAZoJMmh0dHBzOi8vaXJvbmNsb3Vkem9uZS5jb20vc2FmZS9hbnRpdmlydXMtc29mdHdhcmUvsQlzvAmLxvpUbsgJAMgJigKYCwG6C0EIAxAFGAQgCCgBMBxAAUgAWE5gAGgAcAGIAQCYAQGiAQgKAKgCAdgCAqgBAdgBAYACAYgCBroDCXZpYXRsemFhYdALEtIMAhABmg0BEqoNAlVTyA0B0g3hAmh0dHBzOi8vaXJvbmNsb3Vkem9uZS5jb20vc2FmZS9hbnRpdmlydXMtc29mdHdhcmUvP2djbGlkPXtnY2xpZH0md2JyYWlkPXt3YnJhaWR9JmdicmFpZD17Z2JyYWlkfSZjYW1wYWlnbmlkPTI0MzA2MTI1NzMxJmFkZ3JvdXBpZD0xOTg0MDYzNjcyNTcmbG9jX3BoeXNpY2FsbF9tcz05MTkzMTgzJmxvY19pbnRlcmVzdF9tcz05MTkzMTgzJm1hdGNodHlwZT0mbmV0d29yaz0mY3JlYXRpdmU9ODI2MzYwNzIwNDcxJmtleXdvcmQ9JnBsYWNlbWVudD0mdGFyZ2V0aWQ9JmNwaWQ9NmFiYjg0YzhlYWMyODMwMDExMzRjMDhlJnN1YmlkND1HLTRZSDFXTEM5QjkmZ2FkX3NvdXJjZT0yJmdhZF9jYW1wYWlnbmlkPTI0MzA2MTI1NzMxuBP___________8BiBQBsBQDwBWBgIBA0BUB2BUBmBYB4hYCCAGAFwGKFxgIAxgBIAEoATABOAFAAUgBUAFYAWACaAGgFwGpFxfsx-tJXB_muhcGKAAwADgB0BgB8BgBwhkCCAE&gclid=EAIaIQobChMI6ordtZmXlwMV-RDbAR2l5TA-EAEYAiAAEgJN4PD_BwE&num=2&cid=CAASwwHkaKvqOsoeYDintrq5jh4NqlBU12Gzxs1kow-bQN5Wmg7fYUCtxTUfZr0BzLK44yABJNOaQ0NN1jc2gOEN7xxduhSx8HlykUj4bN6VEg_pW9haf_lYWBbK9LklFn82TXHsiQ94caYr1WP2a3P6fXUk137H5j0m1Y4ivZH9kY3sqVrKTI6UhYVjMyNMMsguwnL4u9pi3pNDPtCPOsNLlritjMZbzn9YwykUAr1OlmpVQeY1L9Vy7O4lqEN4Zqa6XgCW77g&sig=AOD64_3792L7A7pt6xKWXVJ8LNLVQ-nF3w&ms=%5BCLICK_MS%5D&nb=0&nx=%5BNX%5D&ny=%5BNY%5D&dim=%5BDIM%5D
Sample260930-zvfegavset

Sharing

General

Malware Config

Signatures

File Explorer