d5dab1486618fc914fd62c6ad55c8eff8cb1ffa12210cd4ea8069975c694abaa

Sharing

Copy URL Twitter E-mail

General

Target
Kryoto-Desktop_0.2.27_x64-setup.exe
Size 11.9MB
Sample261020-nfcjgsbc29
SHA256 d5dab1486618fc914fd62c6ad55c8eff8cb1ffa12210cd4ea8069975c694abaa
MD5 b7e4d2e167eb77c6d6fe2253040c8657
SHA1 e6129e44e87e114cbf67e6d63d701ddd13fc96b1
SHA512 33e1e3d11b6339bcf530ac2ab40bf6318dfdb59bf55eca041b43aaa955d1ac7a2d9b2f5b4248024c4cf1e2b2e9a0f177e7447b6d82872e6d1bbb79a88bd0b07a
SSDEEP 196608:fNRB0x3wERJ/FgtJiny4+VoetKPbxRdPdx9Pu1nMey1dMg0QlhSevbcmMF2:f10xnRh+Tiny8etKj/Z9PuZMxMg0Qloo
TLSH
T182C63342DF52AF3BF2C2EEB930384755749DBF1857A6A1CB1114BEB4888812057DACF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Kryoto-Desktop_0.2.27_x64-setup.exe
- Size 11.9MB
- SHA256 d5dab1486618fc914fd62c6ad55c8eff8cb1ffa12210cd4ea8069975c694abaa
- MD5 b7e4d2e167eb77c6d6fe2253040c8657
- SHA1 e6129e44e87e114cbf67e6d63d701ddd13fc96b1
- SHA512 33e1e3d11b6339bcf530ac2ab40bf6318dfdb59bf55eca041b43aaa955d1ac7a2d9b2f5b4248024c4cf1e2b2e9a0f177e7447b6d82872e6d1bbb79a88bd0b07a
- SSDEEP 196608:fNRB0x3wERJ/FgtJiny4+VoetKPbxRdPdx9Pu1nMey1dMg0QlhSevbcmMF2:f10xnRh+Tiny8etKj/Z9PuZMxMg0Qloo
- TLSH
  T182C63342DF52AF3BF2C2EEB930384755749DBF1857A6A1CB1114BEB4888812057DACF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution persistence privilege_escalation ransomware spyware trojan
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Downloads MZ/PE file
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
behavioral1
- Target
  extensions/ublock/img/material-design.svg
- Size 513B
- SHA256 5527a6e5d815522d5ab2d2152a0db57e74e6f52a1dd54b439183b5dc89cab7f5
- MD5 ae7d9b8de371954ad68d8a88fbf2f1de
- SHA1 306628818beb0ce6d9fecd332245fa3a548c7aa5
- SHA512 466b2a844fcb5e549f2c3a7c89395739138e4caf9f34aae2a94481d02d643eed424e2dd3b91f267c26b33f3157b882ac54897f5643c6882bd608590ef0b0962b
- TLSH
  T16BF00E2B40684202866486B048F8B58BE87AD45BECC780FCF4CC0A809B8F180A41B358
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral2
- Target
  extensions/ublock/img/photon.svg
- Size 4KB
- SHA256 0b82e3ed86eab3889e08027e045ec9a9acff7fcac7be5e001ac6e436643bac0d
- MD5 77f24f279b9d6cbdc6ad1461746a5c12
- SHA1 f3018ab1d7e7d0255aa8eac20f7b324a93dedeb3
- SHA512 9dc4323417709fb9b795fe144482b4fe0b2c5bbed662a5ce5e101c31994f87351823518fb75388fcff01c8fb1d7fee37611a2939a603814bfd3cc5c5b0b5cbcf
- SSDEEP 96:sja5X+3hac8tRxrDJ+tS13r5e4QBCW74EhkmRi7Joo:sh3rk7/rA7piV5
- TLSH
  T1FA91BEAE4BAD46EC2FD74E64D3231596336E90727171FCE16F4EA814C527D88E227C20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  extensions/ublock/img/ublock-defs.svg
- Size 1KB
- SHA256 4ec29d3c40515cae50cb3fd5e38244e4f034d1406d0860066623cf4ab109ac5a
- MD5 54c0a6c3955bd046341b31e5352c3618
- SHA1 e57535ae602a9abd04a75d3acee2e8b5b3640c48
- SHA512 3db15fa77cb43bcdeb060d6f1d93c99db39aade9ba4f2d16633cd258f94e339a2346cbd8d841dc3a3d471f2f987fbd05060319424ce6be59b1a1341ce3793895
- TLSH
  T13F31870F4054C7BA89882BB17C9E12DAD522FA6721FD9865B9C5524C8F0DF3E2C57ACC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral4
- Target
  extensions/ublock/img/ublock.svg
- Size 2KB
- SHA256 05c39ebd5881bf4de1ad2d5f04c1dbfdeeb9e132be63ad6d6e341252f18a4afd
- MD5 0339b5f78cab4a9a9388c7d1e29c58ed
- SHA1 166660841a9b7bc72ca5b8a4293d810c4e0edbd4
- SHA512 b6306fe647fab8e030f8271473f8245d11a1dadf8f3da68d916f34aa948390bac870be4f37e3f154e9cdd0bed18f796ba317ed0b5cfcc7bb9bf149b482d38def
- TLSH
  T10251C018E7850677805D814897F2FA000637A9632B512A6BF5AE8B73AF0A5D131B72CF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  extensions/ublock/is-webrtc-supported.html
- Size 169B
- SHA256 527e884a44a860dac4737f0ee4790e5689342568874a0bad5db45c9d917669b3
- MD5 d4fb64aa0d27ac0710b6218ab501a2be
- SHA1 211cd18bf969f451febdfc87c4ab52dad3df2ce4
- SHA512 204d4792632d690fe0a484b87f7d9cfee96aad79eebb9df0df676c2ab7591d5cc45a656b8e229a1e9d941296c6fef5ca8f073afae969c72447cac7fd45d3e43b
- TLSH
  T14AC08C8A1815A502D6306E806CD0BB981CDBFB9460D2C8400AD6F1779466796DC03AE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral6
- Target
  extensions/ublock/js/1p-filters.js
- Size 11KB
- SHA256 a81a0f7a5897d802996c687a7d8c62636425ace500ebc05eeeb1cafaa3cbf22a
- MD5 468dfa9ff29a77f57b4357be05fe9249
- SHA1 e03a9dfd0b66bc56b7564cc8498f63aa1c664192
- SHA512 d8ce91f43817be14ad7603566442c4ed8dd8158fdad2a4f4e837ae2a6459dcc71855435d74fb7e88247a9683c2e432933619da5a7ee8a81eb45169e10d68b964
- SSDEEP 192:g7wWN9IjSRbh7XnW68K0CC4j32uad+1vNevMvd4f/4/QtSCbAnixC8QfiW7A8Hra:g7wWN9ImTWM8uLjH4/zc0
- TLSH
  T1AB42739E21B71E1048A330ACA68F61C4213550837A1AFC5D7B6EB7644F9F11C97BAFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  extensions/ublock/js/3p-filters.js
- Size 33KB
- SHA256 294a35562383e4021922ade4c2091329a9b94186b61ba6297c403de81a1b20be
- MD5 dac83d9be0b88d28a8e5dedeb7537f9a
- SHA1 b6292c1cf85e4662bf669e42846ed7694bac1a99
- SHA512 f6caa2ce7b6cc2e6fa931a41ac97671275f44c4938c5b1cd496b177b214f4db897ebf9177762264d3dd4b5253d96f5672d8f944e9231ab47cd694b5cbefa8152
- SSDEEP 384:g7NX72O24bJ3KrBzOlEEpbol7HuHjwOa6lAg:g7NXqZ49KrBzOKEpbgWwOb
- TLSH
  T16FE21209D1B72E7A21FB70AB5A4FC4C06234C4137144D87C7A4CB394AF8D29DD2BA7A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  extensions/ublock/js/about.js
- Size 1KB
- SHA256 95f8227e8ad78181c90888bc9808d5b4d0012873f71da1dec7a26b3a40337131
- MD5 ea9b2e3e8f769772584506519b2fbc8c
- SHA1 5747cac3ece19f9a6a100c3b8aa3ede8f442a379
- SHA512 88e552292ffec42a3c7b023a3e4cccc3c1c5af11484bddba6140d4973acad5ea33d2e4dd813821d6202f4b10b0cd0adaa1107a74bf8527d2d9aca1b5a0b9cc21
- TLSH
  T1AF211F1E04E4CF764C001698A9CA61CEA226A76736CED484770EB35ECF4FE3531A66D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  extensions/ublock/js/advanced-settings.js
- Size 5KB
- SHA256 a644f095ccd9f99d7f716b82f4fb1226d2f3e8fc23c5252e19d64143e2615a07
- MD5 b03d16e49a073851057cf4a8c95ea4d9
- SHA1 55493bbdb0eca61fd91e3d83c4c774c7af79bf7c
- SHA512 bb6199d8616d951f0edf05b5f79a60668e3bab10200f9a12eca1b46ff979b2f8def01216f841d19fdfe85fe5f719a29912ac46a5d7dc7c0f84c6c0055d43450f
- SSDEEP 96:2N26cTsF1+b1+cV/ClhFjVwJHUXQEM2GrQonDBTNBQCiHiehirtrj4:27+bQcV/ClfjIHUXQf2GrQonDBvQCiHT
- TLSH
  T1C0C1419858F74C68406330AC9A4B42C96529A553750CECECBB0DF7188F5E5A84BFAFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  extensions/ublock/js/arglist-parser.js
- Size 4KB
- SHA256 57dbdf89705f59d79bb20189c8b1c784ea4105323d0bcd07eec74e818cc8c106
- MD5 62bd752c8c37955259eeedf395a827a7
- SHA1 074c45f917e1d05de1b80d9c92090f796952549b
- SHA512 408dd5e8c5c00f53fd9fd657b8893ffb87b72e54ca89cda2d771c3ec4d4bacc29ecc775b4955cf90409cc58b33a8af12ea8c69aa232b74d980cca9d0e18d8ba2
- SSDEEP 96:BN26cTm80CNiTVim84MKCyVyyVGhSn0E8zgZe64v2TSiOy6zOHHL:B7y0CNihim8RKCyVyy4hW8zgZL4v2+iH
- TLSH
  T1DFA1D19B97D60C14D15D34BA8E8B01E5A135901B8D2FCA4DBE0C32C4AF8D0BA57D6FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  extensions/ublock/js/asset-viewer.js
- Size 3KB
- SHA256 184e1ee90ce6a6c0d808284c71af2a627dfb79eaf70d941a0eff345377831a85
- MD5 87b46c3f5eba4cb14e7466e9689f2aaa
- SHA1 c82a111890fb2aef89645e976c7015bfbdf73e1b
- SHA512 402158f4acede9662c779c4660f4beef3fd9d9fd8e731213d38db77df5c04bea93b99fec663407b6613c0d347825ab8adbf6015375930765458bb6639de9ffe8
- TLSH
  T10F71859E44B98E55016320684EDFD0CA2115A6033548F8983BEDF3106FDF72D99B37C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  extensions/ublock/js/assets.js
- Size 50KB
- SHA256 dca451cfa586c2b7784afa14446d7a0cdd1b1648be08f3bff6b9051b952d6ffb
- MD5 3dd6d00f75409eb36f0d6118e96f54ea
- SHA1 00c60246cb04419ec03e3c0b039f5aa8095ae2c5
- SHA512 0aabad07679dea6f4d589f3ae354f44b0f88ad5a49e06046d226dc2d5b6be2d309001fdbc06d7d1859d9f1cc7794bb422f994dd633b0856eb5be84b2d6ab986f
- SSDEEP 384:g742Zx2D1OeJC/4kRY6061GeeWpZc8Ruwr0cUP168+irNj9XVesjx3PjZcgQMNkk:g7FZx2vMvY6X1G1AyV+MlfjVN6ycskY
- TLSH
  T13533425B54E30D1745A7707C0B4BA0C4A235A3136409C848BA2EB7547FDE664AAFBFBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  extensions/ublock/js/background.js
- Size 12KB
- SHA256 46470fa3ec5d3b1a2767b168d421e3c5b422664a462a6ac54f9942f77eb37936
- MD5 cb3b1d69fc353fd73399e0e6505e8761
- SHA1 82d69f3f7979f5350dda8b6e62243f9ec779fb7e
- SHA512 709647df7190a0a4237faeabf05326fec203d460b2838526ac43ba63912a3941f9ed703e5748589770cb5632261a16b20bb663588831d3b219ed7e581d8d083d
- SSDEEP 192:g7yd8ikBc2yB5CY9TrVM4EAYo+c1qJm+ljlksmjdfHmdBFYspx7/EEQW/zxmD:g7jINKa+cIU+R8OxGa/z6
- TLSH
  T18D42745A05BB4DA956022578FE5FA1C27211D1236D0AF8B87D0CB3C81F8E62C91B1EF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  extensions/ublock/js/base64-custom.js
- Size 5KB
- SHA256 92d57fc8f32492fc1d824a7d9b0f5fdc2cbc400f99ff29f1888d04af340cd299
- MD5 ff27a91d5e67aa8eb335654083e7d1df
- SHA1 cb6e59e36b2be81784d72ddcd22bc7616afd6527
- SHA512 9b4738f58d89538128bcda6f8e88b09009b1e594636372459d7e36593b8a782ead6b103dc86163a8a6180a67c6688942b8c667007e0b87a6a660940ffd2d584a
- SSDEEP 96:gN26cTZB2+DVaZ57Xb2eyTielyYYCy9yNJpuaS:g7Kw+GxXVKtlyYM9yNJ5S
- TLSH
  T1B0B1DD880B730D58896330B46A8B70C9663A7423B549E89C7A1E77804F5F964CBF6EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  extensions/ublock/js/benchmarks.js
- Size 15KB
- SHA256 3ac55d7487d8796f7fb769ff478c238874cb30f1054366ebe87687d774717cdb
- MD5 9047c478039c518bc51fcad982ecd2f1
- SHA1 229306672851b5d597be8b26781257a36437aa26
- SHA512 7e2be14a891c8e727dc6f72d4d6148fe0d1dff14742fc3d35b1a5636e24a4e29078024dc91906f28f25eb777335f60451bc94a06a6a168eb8e92c210266d08b0
- SSDEEP 192:g7UTxb4a+XOvOJ5b/giqHRWlFtHJWzjSNf7UEqnx8Xetkw3jVxSY9O1wLRQpYCto:g7qxbev+ncWMuHpR
- TLSH
  T19162128699F62D26902320A87F4F95E57221F2133645F978B94CB3AC8F4D424C6B6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  extensions/ublock/js/biditrie.js
- Size 33KB
- SHA256 cc0e454a45462a69eb30d61b5a94c0b6304fcc12792229af43057d27c99a5953
- MD5 75571e6ffa9ca245ba885a7a56736544
- SHA1 40daba5ca398034192964675ff2bbd7255dba099
- SHA512 a16cec3b09033a542a92503bfdf36d141f7b7e06d7b6578d682b36aaaf0fd48186e641bf77ca167bc671dd720a23226c4d35732535e9197bf02d4bfd4db25511
- SSDEEP 384:R71CukChiA1iruqCI4aiDS9vDHPjXD0CgHJ5IJy:R7ovCmrufIPvDH/0Co5IJy
- TLSH
  T11DF2CC896EA3DA268667F13E1F8B7081E629C52B2609D92D3C5D33C0DF1D06086FDF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  extensions/ublock/js/broadcast.js
- Size 2KB
- SHA256 83bcfb9679ff8be58e13891b1d172e4c75da9fbe9b643804397f2451f0a0f84f
- MD5 4e3565829a892f7df3d6ca3e4cfc689a
- SHA1 883805eafb98d7af7dce2fa3ef14ca50d6388bca
- SHA512 1f22ed42a1ec715495246ab5c95df0336cb7d8494038fec4cdb9a43c5752d9d9cd96ac7adfd69d7223c6504e5857078dda1f2197aaf171f36b705ddaff70077e
- TLSH
  T17651123894D18CBA085631B9B80770DE7214B287A65EE459324DB3088F8D638D6B5BC4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  extensions/ublock/js/cachestorage.js
- Size 23KB
- SHA256 2fe7ae8f73c5bb55b897e78da7df5843dec0806b0e8985beae05fd0a9f10987f
- MD5 e6baf3c77a0f8e1e89b16b64d4e655ba
- SHA1 f45b41530b278e1fc311add40f6427ec95559499
- SHA512 2e6c3ae61f2f329d3dc6cd45ae6711f6d3f1483e05eb195d815fe42dc25ea72a5fb3c9df9bbb3a5d32ef3f443a7f1363c30075761a02f80338730b216487d3fc
- SSDEEP 384:O7e+u6sNJsRC10RTGPNnRUbasnwEYb66k:O7vu1N+EaR2LUbVwEYb66k
- TLSH
  T11EB2EA9B28F72C15456770BD2A8BA0C0B23A9413355CCEACBF0DB6245F9E16487F5BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  extensions/ublock/js/click2load.js
- Size 1KB
- SHA256 56c6cc8f64cba39932d9d8c3b945060591616a628bef24e6b9a21694426fe14b
- MD5 deebf35d90bec645ee732eb163a3ffe5
- SHA1 ff9d4ce90269dfba4011842ad92b886c3275f7bc
- SHA512 c798e5217d05cbab87f277b835d1fa2511a7e91ec1809f5d5ff3bc8a342056996f9ea3796c866b0a1101ac010ea848abe2da78bdbd493195858524614cdc5948
- TLSH
  T1714110DF10A09E7608E062A46CD6B1CD71375D17358DB0A8B80DB2458F6EE6959B3BCC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  extensions/ublock/js/cloud-ui.js
- Size 7KB
- SHA256 995581e80fc36143f362f748504ae43eb736a7ad662a8d3944caf778c25109a7
- MD5 0443df8d765083c8badb481687ed78de
- SHA1 b99cf2d59129c77ea38a95525773addbeeb37483
- SHA512 44b2164d9a41c6f058d1097ee1f75289c729bb393d79f9e980225cda69f3698208018043f04e2131ffc4352e7ddb562ff866bb66b63bd264a04483aaa5c96cb3
- SSDEEP 96:pN26cTdZ4ktXOP9w+OIO/2yJld9sfdBvVKOCCrJuugdhqGMkedvlSXlCL9o16W:p7ew4IO/jhOCCNRgdhqbv9o16W
- TLSH
  T1E5F1FA8922B69F2164B3B0A95A5FA1C53435812B350DDD2C3B4FB7922F4E558E0B2FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  extensions/ublock/js/code-viewer.js
- Size 9KB
- SHA256 ce822033f4f579fdf3694faadcef086b8204cb934e49c0b877320adc49cf8c57
- MD5 9c782c7dc107101f49440e11f279d178
- SHA1 135e67451f17e017fb2f3def63a3f21cb0304648
- SHA512 cc6b59fb0320568da5bc2fa5fc3c6cffcf2ade51a80c976a8bd081fa2d193397bdf9254e739476554511016974b499cfb22ea9e8081ab73d3cad755423e60d82
- SSDEEP 192:S76HPGAWqgN0APbqg1yRnxvAPXIQjXgGra2Wqu4eSbnbT3HTom6EVn0iEk8CUagV:S76HPGAm0AOZRnFW0ZW6nT
- TLSH
  T1891223CA49FA1D6241B7303D4B9BA0C4B23681173444EE68BD4DF6045F9EA58C6F2FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  extensions/ublock/js/codemirror/search-thread.js
- Size 5KB
- SHA256 e744e5170b7b074dd02629047779746988198708f3cc43d9e23a5e7685f8d823
- MD5 d06588e633fc9a4cd0be8e6f0acfb6ca
- SHA1 5a3c4f4012f4aeef37c55fe0aaaae3aeb1320779
- SHA512 aa85bcc3e8c257bfd37e63218b87372f3cf704b9f55b53241a5bb0c9ca4de80e1a4d6849d974066d3de4d64adaef37f6e9bcf6a642ac046d0bb6d6bf44640f11
- SSDEEP 96:BN26cTTJ7Wzz/F9W3IMt4HHWf/xU5etgpAiAR+igR/bushCrXvcLCI:B7yJ7sd9W7t4H2f/xUQtgmiAR+igR/bt
- TLSH
  T1F4C1215D18B20C150123B0B9D78B76C66A3694033288D598BF5CF3588FEF69992F2BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  extensions/ublock/js/codemirror/search.js
- Size 18KB
- SHA256 4fcd4ffb56442b950e422d87f5ca65fe0462c7b5cbbdf84ce2a8140bb1eb6e60
- MD5 3aec65bce0ad5254c1473a25eb1b53f5
- SHA1 27634bbb6cd2bf27a9a5f7cc77673aaec4b42227
- SHA512 eb81e846a8cbd79249b026b6734df42b69ad1de6272c224384a0d713ba7cff29182030c25fbcc71261eff9b7a299e90ebec98b95be68544b42fdc2f61f374bab
- SSDEEP 384:5+Q4oZAqREXfYKH8jf2K9LZznHh0zqqCk:koZAqGXgKHUd9tznHh0zqJk
- TLSH
  T1B18241CE20FB10160577307ADBDFA0942675901B7108DE8CBE6D93143FA28A996F9F9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  extensions/ublock/js/codemirror/ubo-dynamic-filtering.js
- Size 7KB
- SHA256 b0a921f14f50fb9c0b7595dbc926b5db742f2af213997319138aa7e41c585317
- MD5 9fc7299e0a1e851c8231d06f8618efb8
- SHA1 f03ee0856900517cc0513248eb25071170490618
- SHA512 15607208aed3fd23f8c2fffe326c3c0295362a11d1716cf7c0e0c4ccd30d909d585bd09d95e4fd441d3e08c1270f73aff3c5519cfc179e32329097186d37b3d2
- SSDEEP 192:R7LFU32nqkpPssIzttVzF1CQG0bspMy1U0EZQIssehSroln4eR6Q:R7LFUmn/MTse05WMZX
- TLSH
  T1D1F114BA94F708100D3230A98BCF44D15967F4233E6EE494FA4D62542F9D5B886F7BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  extensions/ublock/js/codemirror/ubo-static-filtering.js
- Size 46KB
- SHA256 dfcc1c85935d3a915b79e93b5ef164569f9a1a5a6abc697a76188d40f4849cb8
- MD5 c850bf85523e721663265d64e556da04
- SHA1 82a3f52ae7f12a89eef9d3db5efae0097a0a9b8e
- SHA512 6e492d793e3eee17fac811fde7d155ee2d8e775d79bb5cf9faee20478e860aa2dcdea4cfe9a824e829bdffe4409e1e5c1ac301501f138a284388098363bf937d
- SSDEEP 768:87DtpjPBvMqHRH15VDHnXaoljcj7GgFogAxjglvIqZOIe:WtpTJb1Eqx8/O
- TLSH
  T1E8233F88B4F71C46452230BC1B9F54C66135A4133488DEA9BEACF350AF8D858D5F6BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  extensions/ublock/js/commands.js
- Size 5KB
- SHA256 7492c00223f7e79cad3c4a21e4a9f363d9e305d333b2d53369838ee5f3626fe7
- MD5 2130e4ed8cef985eca326b57ff338809
- SHA1 c4abc155e2b3cb7b07b82d451ad29dc5c1bd08c7
- SHA512 b0c5128819b067998be1d81dbc69d94b8aa6e5c72c53ed9fe8ea9a406610709b6b5e1440b9388a8593cd8f97964b82056cb6c2cda1715fb06b33ff6043061d6e
- SSDEEP 96:XTN26cTYf8uscfpFrqv3YqvXo3cxsykQcL4F5MoBOOR2K5:D758uscfpFrqv3YqvXIcxBkt4FWNOR20
- TLSH
  T1B5C123AB49F25D6B453234342A4F31D6222077072499DD6A7E8DB7188F0E4AC41F1FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  extensions/ublock/js/console.js
- Size 1KB
- SHA256 da87b3b0d1e2d2b453dd8ac593e767220bdf994703231463cd772a1e9dfdd719
- MD5 57e638a411663dad18eefa2f48b2f3ed
- SHA1 1844cf4ff400232e2b3e721763ef257db8174e73
- SHA512 782dea6a7edc8a771af378d76343cbfeba2373d516ad920bcabe0231c8d824c731f961ee63c8225fbf98d6df5677cb638aed28a9dbb773d3a5fbbe9a24db59c0
- TLSH
  T10A31520D14F89D750901387CB90B20DE3B66A123324D9528710FB39C8F2EA341AF6BCC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  extensions/ublock/js/contentscript-extra.js
- Size 22KB
- SHA256 8457cd7c87cf618b478c9fcf3e9716e120f3a469a530a22c951bc6f7c79e3d73
- MD5 6b22447a5b585df69fafd6ca457ad7bd
- SHA1 7eff16d772590f59072bde4322626c85737ef9e5
- SHA512 cd1bf0a6c77fbb222ac0d816154c88bbcb8b93ff136c010a09516f7dd5d90a02182e1eed413bf3eb44708feaffc606959e80311f80a73153d82b49444d892267
- SSDEEP 384:g7bAOWx6Vyl0goyLNOANLi7ScwOOUophNyEzDDCE9/np8zqo98xZgP9nLnO03dKz:g7bAOWxO9GNvU7ScwOOUophY0DDCE9/j
- TLSH
  T16BA23E5A54F7083194673ABB4ECB50C0F174905BA41ECC9C7E1CA2A88F5D4684BF6FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  extensions/ublock/js/contentscript.js
- Size 44KB
- SHA256 9a4405fc2fa2a7c7c1564f60927b403db9aec5853900f384378996c10fcd6f76
- MD5 1c8ad048a6bbfc962b39dc4bed8cce4f
- SHA1 b9c69b327bd53a39ee804584dac2f0a2f9d6b8e6
- SHA512 48062e586aa3187c5a2fa90fd3c6a6fb599c753b4ed0d96bf74ba8c514fc773a75337bb92e49143f91f16aa1e52886dc587c702ee58338139deb6dc47e0ec926
- SSDEEP 768:g75Yl8k0J7E/l6isAOJ5DLwTBSMJAgU6JrfSVvIfjVAw4a4XzdjdDFHjYVq:r8k0JQt61AOQxscfSVvIfjVATa4XzH4q
- TLSH
  T10F23648946FA0C2559A3317A6F9B51C1B23080033109D9ACBE5DF3989F5E86583F6FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  extensions/ublock/web_accessible_resources/adthrive_abd.js
- Size 139B
- SHA256 1a67bea76e55dc17057fae81f47ea478cd35e0c60aa101b57e76c73769931e35
- MD5 7463cc3aca415c98e0a7293f9dc89ed1
- SHA1 f0da9274d927ec55beb0a036af80a5dc15a19f53
- SHA512 c01f50b52d4dbc98ce3ebe0c465bd8b52fc2c6e395705b033e0bf2fd84e138739f37ed91785f849031fc6fbb4b2948854354632b6ebc24b5cf7c46527b587114
- TLSH
  T18AC02B1D20B8509CB33311412F1BC3B02C30303936D2C16DD11C654127CE800C1FA799
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  extensions/ublock/web_accessible_resources/amazon_ads.js
- Size 2KB
- SHA256 41901805f575d9d06608682999cf588b12c318face2ed04e8566ec8cbec4c610
- MD5 0fbd08fe78ead78eec7bc326a6f4f2f8
- SHA1 dbf8b7085621081c731dc3cc017487340a783fc3
- SHA512 67a417c1ccf6c0d17ad8069b089d35f1fd8827e55996cfd812fc578c64308692e654c4802c165d4305cb46d0f11b1ec34bcab929b17de33b530ecb65b15cfc95
- TLSH
  T13B410D0AEC3FBDF94840A456147791EB211F41239F5CB4403DAFB28B0F2D1EC06A9EA4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32