Edit tour
Windows
Analysis Report
http://freeprosoftz.com
Overview
General Information
| Sample URL: | http://freeprosoftz.com |
| Analysis ID: | 1391977 |
| Infos: |  |
 | |
Detection
| Score: | 76 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Antivirus / Scanner detection for submitted sample
Antivirus detection for URL or domain
Multi AV Scanner detection for domain / URL
Multi AV Scanner detection for submitted file
Blob-based file download detected
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Form action URLs do not match main URL
HTML body contains password input but no form action
HTML title does not match URL
Invalid 'forgot password' link found
May sleep (evasive loops) to hinder dynamic analysis
Queries the volume information (name, serial number etc) of a device
Sigma detected: DNS Query To MEGA Hosting Website
Stores files to the Windows start menu directory
Suspicious form URL found
Tries to load missing DLLs
Classification
- System is w10x64_ra
chrome.exe (PID: 1104 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t http://f reeprosoft z.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 4812 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2192 --fi eld-trial- handle=196 4,i,603376 6366277865 085,986470 5840166183 589,262144 --disable -features= Optimizati onGuideMod elDownload ing,Optimi zationHint s,Optimiza tionHintsF etching,Op timization TargetPred iction /pr efetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 4332 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= audio.mojo m.AudioSer vice --lan g=en-US -- service-sa ndbox-type =audio --m ojo-platfo rm-channel -handle=57 40 --field -trial-han dle=1964,i ,603376636 6277865085 ,986470584 0166183589 ,262144 -- disable-fe atures=Opt imizationG uideModelD ownloading ,Optimizat ionHints,O ptimizatio nHintsFetc hing,Optim izationTar getPredict ion /prefe tch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
OpenWith.exe (PID: 612 cmdline: C:\Windows \system32\ OpenWith.e xe -Embedd ing MD5: E4A834784FA08C17D47A1E72429C5109)
- OpenWith.exe (PID: 2084 cmdline:
C:\Windows \system32\ OpenWith.e xe -Embedd ing MD5: E4A834784FA08C17D47A1E72429C5109) 
firefox.exe (PID: 6872 cmdline: C:\Program Files\Moz illa Firef ox\firefox .exe" -osi nt -url "C :\Users\us er\Downloa ds\Setup_8 4481_Passw rod.rar MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)
- firefox.exe (PID: 7144 cmdline:
"C:\Progra m Files\Mo zilla Fire fox\firefo x.exe" -os int --atte mpting-dee levation - url C:\Use rs\user\Do wnloads\Se tup_84481_ Passwrod.r ar MD5: C86B1BE9ED6496FE0E0CBE73F81D8045) - firefox.exe (PID: 3292 cmdline:
"C:\Progra m Files\Mo zilla Fire fox\firefo x.exe" -os int -url C :\Users\us er\Downloa ds\Setup_8 4481_Passw rod.rar MD5: C86B1BE9ED6496FE0E0CBE73F81D8045) - firefox.exe (PID: 6860 cmdline:
"C:\Progra m Files\Mo zilla Fire fox\firefo x.exe" -co ntentproc --channel= 2272 -pare ntBuildID 2023092723 2528 -pref sHandle 22 16 -prefMa pHandle 22 00 -prefsL en 25250 - prefMapSiz e 237879 - win32kLock edDown -ap pDir "C:\P rogram Fil es\Mozilla Firefox\b rowser" - {a1afab82- c57d-49a6- a90c-23759 65f4378} 3 292 "\\.\p ipe\gecko- crash-serv er-pipe.32 92" 1f62fd 6f910 sock et MD5: C86B1BE9ED6496FE0E0CBE73F81D8045) - firefox.exe (PID: 688 cmdline:
"C:\Progra m Files\Mo zilla Fire fox\firefo x.exe" -co ntentproc --channel= 2880 -chil dID 1 -isF orBrowser -prefsHand le 2872 -p refMapHand le 2868 -p refsLen 21 837 -prefM apSize 237 879 -jsIni tHandle 12 48 -jsInit Len 234236 -parentBu ildID 2023 0927232528 -appDir " C:\Program Files\Moz illa Firef ox\browser " - {75bcc 44d-ce77-4 34f-a066-3 0d2604a28a 9} 3292 "\ \.\pipe\ge cko-crash- server-pip e.3292" 1f 63fdf6850 tab MD5: C86B1BE9ED6496FE0E0CBE73F81D8045) - firefox.exe (PID: 4616 cmdline:
"C:\Progra m Files\Mo zilla Fire fox\firefo x.exe" -co ntentproc --channel= 3784 -chil dID 2 -isF orBrowser -prefsHand le 3776 -p refMapHand le 3764 -p refsLen 26 224 -prefM apSize 237 879 -jsIni tHandle 12 48 -jsInit Len 234236 -parentBu ildID 2023 0927232528 -appDir " C:\Program Files\Moz illa Firef ox\browser " - {961f0 383-41a4-4 340-b10e-c 646e5bdc18 d} 3292 "\ \.\pipe\ge cko-crash- server-pip e.3292" 1f 63bd3e850 tab MD5: C86B1BE9ED6496FE0E0CBE73F81D8045) - firefox.exe (PID: 900 cmdline:
"C:\Progra m Files\Mo zilla Fire fox\firefo x.exe" -co ntentproc --channel= 4060 -pare ntBuildID 2023092723 2528 -pref sHandle 37 64 -prefMa pHandle 39 40 -prefsL en 26265 - prefMapSiz e 237879 - appDir "C: \Program F iles\Mozil la Firefox \browser" - {3cf4116 b-ceac-489 f-8f61-a3f d8a72eac3} 3292 "\\. \pipe\geck o-crash-se rver-pipe. 3292" 1f64 1ce9b10 rd d MD5: C86B1BE9ED6496FE0E0CBE73F81D8045) - firefox.exe (PID: 2296 cmdline:
"C:\Progra m Files\Mo zilla Fire fox\firefo x.exe" -co ntentproc --channel= 2748 -chil dID 3 -isF orBrowser -prefsHand le 4540 -p refMapHand le 4536 -p refsLen 31 035 -prefM apSize 237 879 -jsIni tHandle 12 48 -jsInit Len 234236 -parentBu ildID 2023 0927232528 -appDir " C:\Program Files\Moz illa Firef ox\browser " - {4356b 72c-74d3-4 1e4-948c-4 2de8d41db6 3} 3292 "\ \.\pipe\ge cko-crash- server-pip e.3292" 1f 6404c2310 tab MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)
- cleanup
⊘No yara matches
System Summary |   |
|---|
| Source: | Author: Aaron Greetham (@beardofbinary) - NCC Group: | ||
⊘No Snort rule has matched
- • AV Detection
- • Phishing
- • Compliance
- • Software Vulnerabilities
- • Networking
- • System Summary
- • Boot Survival
- • Hooking and other Techniques for Hiding and Protection
- • Malware Analysis System Evasion
- • HIPS / PFW / Operating System Protection Evasion
- • Language, Device and Operating System Detection
Click to jump to signature section
Show All Signature Results
AV Detection | |
|---|
| Source: | Avira URL Cloud: | ||
| Source: | Avira URL Cloud: | ||
| Source: | Virustotal: | Perma Link | ||
| Source: | Virustotal: | Perma Link | ||
| Source: | Virustotal: | Perma Link | ||
| Source: | Virustotal: | Perma Link | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Memory has grown: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
System Summary | |
|---|
| Source: | File download: | ||
| Source: | File created: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Classification label: | ||
| Source: | File created: | ||
| Source: | Mutant created: | ||
| Source: | Mutant created: | ||
| Source: | File created: | ||
| Source: | File read: | ||
| Source: | Key opened: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Key value queried: | ||
| Source: | Window detected: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Thread sleep count: | ||
| Source: | Process created: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 11 Process Injection | 11 Masquerading | OS Credential Dumping | 1 Virtualization/Sandbox Evasion | Remote Services | Data from Local System | 2 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | 1 Virtualization/Sandbox Evasion | LSASS Memory | 1 File and Directory Discovery | Remote Desktop Protocol | Data from Removable Media | 2 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 Registry Run Keys / Startup Folder | 11 Process Injection | Security Account Manager | 11 System Information Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | 3 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | 1 Extra Window Memory Injection | 1 DLL Side-Loading | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 1 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 1 Obfuscated Files or Information | LSA Secrets | Internet Connection Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
| Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 Extra Window Memory Injection | Cached Domain Credentials | Wi-Fi Discovery | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
No bigger version
No bigger version
No bigger version
No bigger version
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Avira URL Cloud | malware | ||
| 11% | Virustotal | Browse |
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 11% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 13% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 1% | Virustotal | Browse | ||
| 1% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse | ||
| 0% | Virustotal | Browse |
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Avira URL Cloud | malware | ||
| 11% | Virustotal | Browse | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| jsdelivr.map.fastly.net | 151.101.193.229 | true | false |
| unknown |
| example.org | 93.184.216.34 | true | false | high | |
| gfs214n123.userstorage.mega.co.nz | 185.206.27.33 | true | false |
| unknown |
| prod.detectportal.prod.cloudops.mozgcp.net | 34.107.221.82 | true | false |
| unknown |
| freeprosoftz.com | 104.21.20.94 | true | true |
| unknown |
| contile.services.mozilla.com | 34.117.237.239 | true | false | high | |
| stats.g.doubleclick.net | 74.125.136.157 | true | false | high | |
| i.ibb.co | 104.243.38.202 | true | false | high | |
| prod.content-signature-chains.prod.webservices.mozgcp.net | 34.160.144.191 | true | false |
| unknown |
| code.jquery.com | 151.101.130.137 | true | false | high | |
| x455brorg.click | 172.67.209.87 | true | false | unknown | |
| eu.static.mega.co.nz | 66.203.124.37 | true | false |
| unknown |
| ipv4only.arpa | 192.0.0.171 | true | false |
| unknown |
| gkegw.prod.ads.prod.webservices.mozgcp.net | 34.117.188.166 | true | false |
| unknown |
| www.google.com | 173.194.219.99 | true | false | high | |
| prod.balrog.prod.cloudops.mozgcp.net | 35.244.181.201 | true | false |
| unknown |
| a.nel.cloudflare.com | 35.190.80.1 | true | false | high | |
| accounts.google.com | 172.217.215.84 | true | false | high | |
| prod.remote-settings.prod.webservices.mozgcp.net | 34.149.100.209 | true | false |
| unknown |
| mega.nz | 31.216.144.5 | true | false | high | |
| zrqcv8p6j.cfd | 104.21.93.78 | true | false | unknown | |
| analytics.google.com | 142.250.9.113 | true | false | high | |
| lu.api.mega.co.nz | 66.203.125.16 | true | false |
| unknown |
| clients.l.google.com | 74.125.138.138 | true | false | high | |
| lzdevgl1c.click | 172.67.192.91 | true | false | unknown | |
| resbreatfl.com | 172.67.193.106 | true | true |
| unknown |
| cdn.jsdelivr.net | unknown | unknown | false | high | |
| spocs.getpocket.com | unknown | unknown | false | high | |
| content-signature-2.cdn.mozilla.net | unknown | unknown | false | high | |
| clients2.google.com | unknown | unknown | false | high | |
| firefox.settings.services.mozilla.com | unknown | unknown | false | high | |
| push.services.mozilla.com | unknown | unknown | false | high | |
| clients1.google.com | unknown | unknown | false | high | |
| g.api.mega.co.nz | unknown | unknown | false |
| unknown |
| detectportal.firefox.com | unknown | unknown | false | high | |
| shavar.services.mozilla.com | unknown | unknown | false | high |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | high | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| true |
| unknown | |
| false |
| low | |
| false | high | ||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 104.21.93.78 | zrqcv8p6j.cfd | United States | 13335 | CLOUDFLARENETUS | false | |
| 74.125.138.138 | clients.l.google.com | United States | 15169 | GOOGLEUS | false | |
| 172.217.215.101 | unknown | United States | 15169 | GOOGLEUS | false | |
| 64.233.176.95 | unknown | United States | 15169 | GOOGLEUS | false | |
| 172.67.192.91 | lzdevgl1c.click | United States | 13335 | CLOUDFLARENETUS | false | |
| 64.233.176.94 | unknown | United States | 15169 | GOOGLEUS | false | |
| 151.101.193.229 | jsdelivr.map.fastly.net | United States | 54113 | FASTLYUS | false | |
| 185.206.27.33 | gfs214n123.userstorage.mega.co.nz | France | 205809 | MEGAFR | false | |
| 173.194.219.99 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 104.21.20.94 | freeprosoftz.com | United States | 13335 | CLOUDFLARENETUS | true | |
| 34.117.237.239 | contile.services.mozilla.com | United States | 139070 | GOOGLE-AS-APGoogleAsiaPacificPteLtdSG | false | |
| 172.67.193.106 | resbreatfl.com | United States | 13335 | CLOUDFLARENETUS | true | |
| 151.101.130.137 | code.jquery.com | United States | 54113 | FASTLYUS | false | |
| 34.117.188.166 | gkegw.prod.ads.prod.webservices.mozgcp.net | United States | 139070 | GOOGLE-AS-APGoogleAsiaPacificPteLtdSG | false | |
| 66.203.124.37 | eu.static.mega.co.nz | United States | 11922 | RBNUS | false | |
| 142.250.9.94 | unknown | United States | 15169 | GOOGLEUS | false | |
| 35.190.80.1 | a.nel.cloudflare.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.9.113 | analytics.google.com | United States | 15169 | GOOGLEUS | false | |
| 74.125.138.95 | unknown | United States | 15169 | GOOGLEUS | false | |
| 64.233.177.94 | unknown | United States | 15169 | GOOGLEUS | false | |
| 172.253.124.97 | unknown | United States | 15169 | GOOGLEUS | false | |
| 172.67.209.87 | x455brorg.click | United States | 13335 | CLOUDFLARENETUS | false | |
| 1.1.1.1 | unknown | Australia | 13335 | CLOUDFLARENETUS | false | |
| 104.243.38.177 | unknown | United States | 23470 | RELIABLESITEUS | false | |
| 142.250.9.138 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.105.95 | unknown | United States | 15169 | GOOGLEUS | false | |
| 173.194.219.102 | unknown | United States | 15169 | GOOGLEUS | false | |
| 34.107.221.82 | prod.detectportal.prod.cloudops.mozgcp.net | United States | 15169 | GOOGLEUS | false | |
| 66.203.125.13 | unknown | United States | 11922 | RBNUS | false | |
| 35.244.181.201 | prod.balrog.prod.cloudops.mozgcp.net | United States | 15169 | GOOGLEUS | false | |
| 66.203.127.13 | unknown | United States | 11922 | RBNUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 66.203.125.16 | lu.api.mega.co.nz | United States | 11922 | RBNUS | false | |
| 34.160.144.191 | prod.content-signature-chains.prod.webservices.mozgcp.net | United States | 2686 | ATGS-MMD-ASUS | false | |
| 74.125.136.157 | stats.g.doubleclick.net | United States | 15169 | GOOGLEUS | false | |
| 52.12.189.203 | unknown | United States | 16509 | AMAZON-02US | false | |
| 104.243.38.202 | i.ibb.co | United States | 23470 | RELIABLESITEUS | false | |
| 172.217.215.84 | accounts.google.com | United States | 15169 | GOOGLEUS | false | |
| 31.216.144.5 | mega.nz | Luxembourg | 24611 | DCLUX-AS4rueGrahamBellLU | false |
| IP |
|---|
| 192.168.2.16 |
| 127.0.0.1 |
| Joe Sandbox version: | 40.0.0 Tourmaline |
| Analysis ID: | 1391977 |
| Start date and time: | 2024-02-14 09:21:37 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Sample URL: | http://freeprosoftz.com |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 27 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | stream |
| Analysis stop reason: | Timeout |
| Detection: | MAL |
| Classification: | mal76.win@38/93@83/371 |
- Exclude process from analysis
(whitelisted): svchost.exe - Excluded IPs from analysis (wh
itelisted): 64.233.176.94, 34. 104.35.123, 142.250.9.94, 64.2 33.176.95, 74.125.138.95, 142. 250.9.138, 142.250.9.101, 142. 250.9.139, 142.250.9.102, 142. 250.9.113, 142.250.9.100, 74.1 25.136.95, 142.250.105.95, 172 .253.124.95, 172.217.215.95, 6 4.233.185.95, 64.233.177.95, 1 42.251.15.95, 173.194.219.95, 142.250.9.95, 173.194.219.102, 173.194.219.113, 173.194.219. 101, 173.194.219.100, 173.194. 219.139, 173.194.219.138, 172. 253.124.97 - Excluded domains from analysis
(whitelisted): fonts.googleap is.com, edgedl.me.gvt1.com, co ntent-autofill.googleapis.com, fonts.gstatic.com, ajax.googl eapis.com, www.googletagmanage r.com, clientservices.googleap is.com, www.google-analytics.c om - Not all processes where analyz
ed, report is missing behavior information - Report size getting too big, t
oo many NtOpenFile calls found . - Report size getting too big, t
oo many NtOpenKeyEx calls foun d. - Report size getting too big, t
oo many NtProtectVirtualMemory calls found. - Report size getting too big, t
oo many NtQueryValueKey calls found.
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 13004 |
| Entropy (8bit): | 6.045027321470574 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D119A9C188839EF487F5A3E9566B15EE |
| SHA1: | AC1E5F9D43BE7A9F7DD84E253E65CCB04DF7C82C |
| SHA-256: | 35213A66C7D4A7AAD72490180F683B9EF584E1EFFF4B32A71D535DA015E41C39 |
| SHA-512: | 2D0EBD643A4A273ABEFA19F8FD43475CD113C5A5BAB936A04B7438B323DC30E1AECFDC548E561FE82A7B588F62F5A8969FD1150B532B766392A87AAA0CD12F80 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 8866 |
| Entropy (8bit): | 6.657495509477466 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 1B00E1EF9CD077B887FF01E6D5B20D13 |
| SHA1: | 22125804016B1B0610D08319C97FD2406F63F4C4 |
| SHA-256: | 81A6A35488B0CF1C92355C4902A71AF59C0CC1A5BB6507AF7B07F5A07347F580 |
| SHA-512: | E06AE612246B7657891F6C82E4074553403F40DD03E915F5A58B688ACBBED491749E8CBBEF062F4800E0F99271CB67BBBB91E105F69B973534A8DDD95F1EB267 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 38720 |
| Entropy (8bit): | 5.258152251840614 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4BF74376FDE1872CD72B7EC7F04BDA54 |
| SHA1: | 19EB464F16A9292E53F66AB55B3C5A452C1052F4 |
| SHA-256: | 746E1CDEDEB545C3ACEB3A82FD774710B3EABAD7025E453CEBC70BA7108DED4F |
| SHA-512: | A88D36B4ABA81062007FAAC6E543BEDEE07414366ED2CFECF935283148AFF39FE8A8F235A3F0FEBF39A63DB485085F12A2B0AC5D15797554BFF49BB802BCF236 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | modified |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.4593089050301797 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D910AD167F0217587501FDCDB33CC544 |
| SHA1: | 2F57441CEFDC781011B53C1C5D29AC54835AFC1D |
| SHA-256: | E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81 |
| SHA-512: | F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2673 |
| Entropy (8bit): | 3.992077567794637 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E5BB072184C10B5EDC722E41F572BC88 |
| SHA1: | 64871FE71803424522DE88439D130FB6623F7BA3 |
| SHA-256: | 0121503ADB89A35D26037D0283BE03F996B0737C8B7DBC8854D5BE3F041F4873 |
| SHA-512: | D812FE0158604FC157DED31D6D8BA36D8349A4AACD9B7FEC493067E9C59150E062FE680B4D9FECD8977A859C6E46BE3206B97D3BEB923E5CE4681898A7C77D2A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2675 |
| Entropy (8bit): | 4.0075075558204425 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7CCA002ABF4BBCFFCD3D23A500C6E2D3 |
| SHA1: | 02BD9934CD21253F5568B90013FF2B947C851CCC |
| SHA-256: | E51957D25C7D76221A1436D6C731707CB0DC8013F1B6A06C19836A3EFDD664A8 |
| SHA-512: | CA2AD17ADCB199F539433038A39AF0AE46FC9CE72E38A96873B432CFC5A027FE84DC41E8485A6396A8560A3B513A30524AB3A639B7ECC5CEAEC8EF23EC8DBDDB |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2689 |
| Entropy (8bit): | 4.015531418261511 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 482E0FB449B533B51948ABC206445BFC |
| SHA1: | 3B6DA0D7E1242F27DC439FE08A0609CED31F662B |
| SHA-256: | 68B3B5087187D8DA5F40E288B68AB00C7FB3C318E3EB864EDCD55FA5245A6612 |
| SHA-512: | F0AD6D8C9A6DE35220C96C177997BB0796A0C40A52296B21B79EEE1C71264ACAB0A09C465B3C69D3137DBB48AB2807EF1B06F5A67D91E956DC55436959D0AD1D |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 4.007741957798611 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 396E29231B1045077735C40F8480C0B3 |
| SHA1: | D5C452BCA6B8AA1AD366BE1048E9B67C683AC7AD |
| SHA-256: | 6812C2932F521A3824382D86FAD42AC3A90792797166DAB6EFF6F3760101FE8A |
| SHA-512: | 99B1F297E1F14D2E4BC2E8866DFCC38027C120E43F4C0DBB02DC4689A3934651BAA298629B8F06D0BAB6EE529E32A04DB0ADBB01AA0E8128C2D6450827E44121 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9960065381563017 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F0FA3BBFF8AA06A4340BF19CADCE705A |
| SHA1: | 8E321E127178BEB9CCA3D01292F215B1B76AACC8 |
| SHA-256: | 1C2942A2BE74016F45A22689CD95C09B421F4A1D1A50AFD8666E369613771B27 |
| SHA-512: | 421E3252C14A09F28D428FBADEB2084D8BF74053C67CBD961FCD504976DB30D58C902EF7FC7CD3C5B31A552ECA8EB8C86564FB7ADE491840EB8802FF0AB4416C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 4.004643071031203 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 078969C6D60F28198122B369764A541D |
| SHA1: | 9A504E31B2224C6E05C3BE4D2CE4C1DAC270A838 |
| SHA-256: | 7F4712FAD645875B1859021A97BC3809E383FA7D6EBB45C6CC204659157940D2 |
| SHA-512: | FD61513AC5FC4F532C02C7F818C461B0DC5FCD644D91FC91535EF7796D205B7ACC36B51CAAFC44794E31729F3E2778B07BB3F1EB5DD0D77B55824E547027B7CC |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 262144 |
| Entropy (8bit): | 0.04905141882491872 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8736A542C5564A922C47B19D9CC5E0F2 |
| SHA1: | CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A |
| SHA-256: | 97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077 |
| SHA-512: | 99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 33288 |
| Entropy (8bit): | 0.3093920692372757 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6B649B62FC66A378D92627ECB5E54A65 |
| SHA1: | EA07449D24A337422FFFF4A57554888476C20B67 |
| SHA-256: | EC4C9FB7E792D90B5D502611563BC16F3335ECB562BEDD9465C9480F6826DA85 |
| SHA-512: | DE71EE6A1BDACD03A99A71F9FA8634A5AA102014C060B205F25BE40808A48354C73DC40761D878B55287281752B0EFDAC021578FA795F9D47B777AA4FB59BF2D |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2511 |
| Entropy (8bit): | 4.253800919644475 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 95815292396B3DF0DF79D56BADCACE9A |
| SHA1: | 8EAD8AAFBBF1E9E7B2062B7F8B15D50414B920A9 |
| SHA-256: | D0B43067D205C7280656B0954125CA47D1D40B7F02DF112C6FC2044CCF249849 |
| SHA-512: | A7162B821009461543B4B8A97AE0BCE54D71C6E3FB4FCE00B0148EDCA410C0FCC0BABEB73090451CCE8E1C20E610B327ADF7A93E2B3660DC446504C1CFE9C1B4 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2501 |
| Entropy (8bit): | 4.947802809140636 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F00348AB531234F837112B2D1DAA0FED |
| SHA1: | 9C5FD24AB832B707DB180AC8EAB55616D193F202 |
| SHA-256: | 84F3AC193C485E32CB0A307CE9431C53C80783F6FD0109BE73129FA179D45FB2 |
| SHA-512: | 6F147B66E3B38DA82BE8661F01CA4021CD2C6CF9035BB3C92F096650FC8F502DFD72750AB8E022C04BFF31590B5B4AC682E8C3723EA2B0AE1A2AF96F67D53DCC |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11505 |
| Entropy (8bit): | 4.669531051011826 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B80193BD515866E10CC0E6C0261E8DEC |
| SHA1: | B81A82699DCCA3F67C76673FA2971CB923CDC640 |
| SHA-256: | 07FD9908F1D800CDCBEF21A42CF0A45FA5E7523C0559B180CD8FFE833C65B93D |
| SHA-512: | 33AA504D905427016FF6D30F6AD5F2E7B457E459B8187F15C651ECC2CCCA857CDBD08BE82C64362DE1DCB9DED88BD515906B9CB2F3E72AEA71D600235997A35D |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.017262956703125623 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B7C14EC6110FA820CA6B65F5AEC85911 |
| SHA1: | 608EEB7488042453C9CA40F7E1398FC1A270F3F4 |
| SHA-256: | FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB |
| SHA-512: | D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.034757609438718286 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5CFDB8B461DF44EA490526D4B6D0F31E |
| SHA1: | 3D85418C5E6313818B7D581F7F77EB469CD7D077 |
| SHA-256: | C8DD1A1F768251FB6EE3E6D1FE5004500A9E958FB4DD2136F729A0B540456F8C |
| SHA-512: | E3147EDB797FA2BCBDF65D63533CA84F9365946F7BB33EFDB7D4C2840C419FCC291EA67A4D0C282660590F0BEBB9D2ED80BB519D4B9B567D186B0735FF9B58FF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32824 |
| Entropy (8bit): | 0.03939261518832426 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 77732F3963439F2F691129B659439B28 |
| SHA1: | 9DFC79B9066C17EA42162E83808DA3492BA4CA81 |
| SHA-256: | 87DA635D96C45679DD298F65C8A7E83D17870776394033951BC8904058F41176 |
| SHA-512: | 9A50D2322F9C869E918A5E7B6FF61CEDA888770F90BF99CC2310B60A1634C3AA2E06AD42A00F8BFC6D01FF70CE64C2197B67D9827DA1F9F4F5DCC4D5E756A4AA |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11721 |
| Entropy (8bit): | 5.481284902261477 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D8CAD48D956A1758E72B167E90933DCD |
| SHA1: | 5F4A980BC84E7834A10280C3626F0FCA7C949C00 |
| SHA-256: | E022A534EACF41590AB6E2D41F2D4D71EBAE4BA153FBB3B3D4775B1D97768D51 |
| SHA-512: | 37DA48BF23C30B2E2623FFA5C67C29DEE2EDFAFD4362C48CB9E7D767F410899EBE4159FF6E61CDC471839941408505A73A3BCD9250B9797E04213752023D89C4 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 0 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D8CAD48D956A1758E72B167E90933DCD |
| SHA1: | 5F4A980BC84E7834A10280C3626F0FCA7C949C00 |
| SHA-256: | E022A534EACF41590AB6E2D41F2D4D71EBAE4BA153FBB3B3D4775B1D97768D51 |
| SHA-512: | 37DA48BF23C30B2E2623FFA5C67C29DEE2EDFAFD4362C48CB9E7D767F410899EBE4159FF6E61CDC471839941408505A73A3BCD9250B9797E04213752023D89C4 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 65536 |
| Entropy (8bit): | 0.04062825861060003 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 60C09456D6362C6FBED48C69AA342C3C |
| SHA1: | 58B6E22DAA48C75958B429F662DEC1C011AE74D3 |
| SHA-256: | FE1A432A2CD096B7EEA870D46D07F5197E34B4D10666E6E1C357FAA3F2FE2389 |
| SHA-512: | 936DBC887276EF07732783B50EAFE450A8598B0492B8F6C838B337EF3E8A6EA595E7C7A2FA4B3E881887FAAE2D207B953A4C65ED8C964D93118E00D3E03882BD |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 33288 |
| Entropy (8bit): | 0.083261787890173 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 35BF4FA9456F2CFF3FE1EBA64B7DEBB9 |
| SHA1: | CAF3B1BDC52968FBCCDCB63D02AE9852FF9ABB70 |
| SHA-256: | 9D0E323D248584D120BAD4439E420E8DDA880B17EE13B0C86ECABD4785A96F94 |
| SHA-512: | DF3648C1F0E9D9EFA40F564B3C090BA1F0F799F9D32682CEFAC688917804DAA002F717B953DB4E14711F94B9BF7EFC93BFFD89F6EE731E32CCB5202832A92564 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 0 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C4AB2EE59CA41B6D6A6EA911F35BDC00 |
| SHA1: | 5942CD6505FC8A9DABA403B082067E1CDEFDFBC4 |
| SHA-256: | 00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2 |
| SHA-512: | 71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 90 |
| Entropy (8bit): | 4.194538242412464 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C4AB2EE59CA41B6D6A6EA911F35BDC00 |
| SHA1: | 5942CD6505FC8A9DABA403B082067E1CDEFDFBC4 |
| SHA-256: | 00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2 |
| SHA-512: | 71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Mozilla Firefox\firefox.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.02036431332101122 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 10B31AEBD48EF84B7C6AD32F40F2A991 |
| SHA1: | A7F8A81AE1880ABDC48A4E428454B9E4F9813605 |
| SHA-256: | 5039DC772C2DF92C653EA18AD86D16F390753355BC71C59C05D962417922DC2B |
| SHA-512: | 5710314F73CD4A527E9A375DF650ACE32FA60692097D6884F1D3A88FA666ED981811512551DAD45182D5190F8CCA79F4AADC5FF2553BC25335C3A6D0C1EFE58A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7350606 |
| Entropy (8bit): | 7.999975650617442 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | F83501C1E3821174DABFDE30CFD9E3AA |
| SHA1: | C2077F7DE5E660251CB17B3C711B9B2B88225C6B |
| SHA-256: | 3A608B0B0702FB7493124F2FA951F09B8FD885D7BDE39FE2B145920899A8A012 |
| SHA-512: | 44A55BD76CA3825718BF313350EC7091473D3748CABACE2AAEBFB0BF620D3A09AA6BBD2412EEFF1823AF97F69B98657F4718954A7F60A7B242E7150CD0FD6181 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 0 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F83501C1E3821174DABFDE30CFD9E3AA |
| SHA1: | C2077F7DE5E660251CB17B3C711B9B2B88225C6B |
| SHA-256: | 3A608B0B0702FB7493124F2FA951F09B8FD885D7BDE39FE2B145920899A8A012 |
| SHA-512: | 44A55BD76CA3825718BF313350EC7091473D3748CABACE2AAEBFB0BF620D3A09AA6BBD2412EEFF1823AF97F69B98657F4718954A7F60A7B242E7150CD0FD6181 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 0 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F83501C1E3821174DABFDE30CFD9E3AA |
| SHA1: | C2077F7DE5E660251CB17B3C711B9B2B88225C6B |
| SHA-256: | 3A608B0B0702FB7493124F2FA951F09B8FD885D7BDE39FE2B145920899A8A012 |
| SHA-512: | 44A55BD76CA3825718BF313350EC7091473D3748CABACE2AAEBFB0BF620D3A09AA6BBD2412EEFF1823AF97F69B98657F4718954A7F60A7B242E7150CD0FD6181 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 507387 |
| Entropy (8bit): | 4.462121885195489 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CF522537E1DFAD5993E21107D52C9CEC |
| SHA1: | 3C9B135BFA56F5991C90F5660DB488B17022EF0A |
| SHA-256: | 3E0343AD5674EDDE09C78C7D3E08ABDEFC74166AD4C6C04914BEF1C881E27F5C |
| SHA-512: | 39B1BFEEE1CE4721561BE8959806F6952983499F4D982846166D071188FF23BE24B06AC42601A18D95240A8B001B3C507D197E8C0A48A82A3B5461EB219076E4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-10_3e0343ad5674edde09c78c7d3e08abdefc74166ad4c6c04914bef1c881e27f5c.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 433720 |
| Entropy (8bit): | 4.432875358357152 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 599724958C893C016454457CE47EA49D |
| SHA1: | DE3484A8BA3A8F9518511209E683CC6F317B5247 |
| SHA-256: | 1698F00EB3E0559E31D2A05509A5677B8D759AC993306DFE41B800FE846FA9C2 |
| SHA-512: | 215A6497CD7FB8447BB64B9CC8100F416714F9414CE8BDC132F1C9F2E264FF176E9DF79353C71BDCE403ECC825716BADFF3EB73BDEDDA7A0783AF7369714751B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-8_1698f00eb3e0559e31d2a05509a5677b8d759ac993306dfe41b800fe846fa9c2.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 52916 |
| Entropy (8bit): | 5.51283890397623 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 575B5480531DA4D14E7453E2016FE0BC |
| SHA1: | E5C5F3134FE29E60B591C87EA85951F0AEA36EE1 |
| SHA-256: | DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD |
| SHA-512: | 174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.google-analytics.com/analytics.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6518 |
| Entropy (8bit): | 4.789786856591123 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 72F13FA5F987EA923A68A818D38FB540 |
| SHA1: | F014620D35787FCFDEF193C20BB383F5655B9E1E |
| SHA-256: | 37127C1A29C164CDAA75EC72AE685094C2468FE0577F743CB1F307D23DD35EC1 |
| SHA-512: | B66AF0B6B95560C20584ED033547235D5188981A092131A7C1749926BA1AC208266193BD7FA8A3403A39EEE23FCDD53580E9533803D7F52DF5FB01D508E292B3 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 337452 |
| Entropy (8bit): | 4.319652749161333 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 512FFB62D31FD4C0376D224D6B5FD80A |
| SHA1: | 2EF8E718325C8D253A40AD48B41DB102A1E8237C |
| SHA-256: | 872C7FF54F6E847E62BFA426AA6B14C0D3E89BD4D898B405796031298CDFE866 |
| SHA-512: | 386A92807E5A47F5DEFAECA89209185A6530C54C071E57A26C2A6F28E28B6A9670E7009D7F88BF7E66509FDF2E7D66BA0CBA458C7CCDC51ACCEED6D7768616ED |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 182708 |
| Entropy (8bit): | 7.990125398423896 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | BD03A2CC277BBBC338D464E679FE9942 |
| SHA1: | CBFF48BCE12E71565156BB331B0C9979746A5680 |
| SHA-256: | 983B0CAF336E8542214FC17019A4FC5E0360864B92806CA14D55C1FC1C2C5A0F |
| SHA-512: | A8FBC47ACA9C6875FC54983439687323D8E8DB4CA8F244ED3C77CA91893A23D3CFBD62857B1E6591F2BC570C47342EED1F4A6010E349EF1AC100045EF89CBFD0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/fonts/Lato-Regular.woff2?v=6343dd45044b0726 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 37471 |
| Entropy (8bit): | 4.279754569727676 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 996910C8887AAFAE0C4B91DC7C61026E |
| SHA1: | B29D3E9EC060E5A7CD38D3F52B7D43B549E74BDB |
| SHA-256: | ED9DC57F008D4CB04416885987187605FFE7A269D739192DC5C0EFBE0F6EA52E |
| SHA-512: | 8F0655648CCA18F417A90634C08351A3ADF7B3BAADFE8EE065905525383387F71A8EEB2376E657BEACA7079B316B9416C8C32397CB2000B8AEE9A5298BE4AC50 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/html/js/download_ed9dc57f008d4cb04416885987187605ffe7a269d739192dc5c0efbe0f6ea52e.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 118009 |
| Entropy (8bit): | 7.9619236041122 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0C84425225CE575AA5D7DA38B5A448F5 |
| SHA1: | E16CFED98DCC4BBD8CECFE3C2ADE5A09F392DFCB |
| SHA-256: | 3F5CEF20C00263DCDE826647567A7B54E912C34B08F88BD5A7E1E4FECD342BD3 |
| SHA-512: | CBA9F8A5BFC20EFD4A54665EF7392E822CC8087998295D0C80E241EA37AE3F4CC936E8F041E244DD9226CE07A9A6A838DD8B352DF5EC569A6698E5CAB332CF01 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 519907 |
| Entropy (8bit): | 4.540443320991328 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 50F0BF09DF0C8AD2459CADCB941A1175 |
| SHA1: | DAFD6068B2E647B3A00E6201C24AAE8801DDF3BB |
| SHA-256: | FF5A55C19E4B3CF287556D95131F98983E6FD46E395D63FF61EC0B4BC8B1C461 |
| SHA-512: | EFBFB9D0F0953CA11B15D725871ADC43835DF5F365CE91015B4EEAA8D1AFA3F57E7D7680A904476D8F9384E8802216F757EAA545F8E59D6C7BD2CB7556838526 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-9_ff5a55c19e4b3cf287556d95131f98983e6fd46e395d63ff61ec0b4bc8b1c461.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 21008 |
| Entropy (8bit): | 5.320333284169983 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C0EC074AC593D3AD5140DC242F6EFDD0 |
| SHA1: | 6E1935E74FD0B96E1C67B7671096A5FB61E21B73 |
| SHA-256: | DCFC06EB378F05884977BF0B6783DC74470A286602FCE0628C5F6A8DF7763FC3 |
| SHA-512: | 7EB8A089C601040AED08FB40850AE5EEE157B1F2926B0FBD6D47356142BFD914B884525BAD39808A3303024BBD2C391EDA6773FDB37AB7CD7E1589759D156E2F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/wp-content/cache/minify/6e2b6.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 359317 |
| Entropy (8bit): | 4.915090986957094 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 75A931C845CF139028C31C08517F4DF4 |
| SHA1: | 36F852A249F048CDAFBF78146A40F5A923047D62 |
| SHA-256: | 0BEB9330F357BA5D53AD37A589BC02238EECA4B4DB29CF7896791FDEFBE3217E |
| SHA-512: | 81B1D427CDD89B3DFF118E732608E6C3BDE276B16FABAB3DA6A30D64AC0BE2A5AE0588455D0BE23400759E1D0AB463F02DBB5F135D66809CB686E766C4FCA1F8 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/lang/en_0beb9330f357ba5d53ad37a589bc02238eeca4b4db29cf7896791fdefbe3217e.json |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 459007 |
| Entropy (8bit): | 4.408518046084602 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 58E875764884FE88CB350350A5DBE3B4 |
| SHA1: | F0FDA614EF6CE3629FFDF3EB775BAEEC72A81614 |
| SHA-256: | A5EB6F39CBAC22A08205F410B1F6FA5EA0D06451DED24AFFF2A29DE1245E6525 |
| SHA-512: | FA3C158E2A238DB3D389E595151607028AF55CA9E0F59C89D33547F545513FD45AE5B642D240C165042E9F9C925D83CC96809EE8962FAECD2D7635A7F8D7A8E2 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 68811 |
| Entropy (8bit): | 4.833256971201498 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 770B69C3DF131F0EBC4B0CE308D1EF33 |
| SHA1: | 67F2E3F1036B6BA9CF541175C98C7503A308A517 |
| SHA-256: | A5169BC493A31B5513E7FB9357BB189E053F76A9C7D4A45232C145554BBEB075 |
| SHA-512: | E0D5A259401D3EB73A344941DE3CF61D809A498743F3C687A0ABA50AA3FE1489B55E88C76AA756404999F0EB9F4B9DE22CB00DC4DD34DBC310A3F329392108D3 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/imagery/sprites-fm-illustration-sprite-wide.e397e234dc118de4.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 22116 |
| Entropy (8bit): | 7.9905296610047385 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | 53EEDB1E2D7C79582F367EC102C12681 |
| SHA1: | B2E1888E4EC623E14D173712BD2881459BA3DC7F |
| SHA-256: | 1F03B3082883C94DE09EA4C0B38092A45F2F7CA60C14889818A3E19057DA34B8 |
| SHA-512: | AD6516A4BFA70A4EBE4573E54109D156CFDB0F10E471213825610FDB47DF464F7519527DAE622D8FCF588A2D9CDDF77B985729189994E107CD2928C9D194C525 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/wp-content/themes/merlin/fonts/roboto-v18-latin-ext_latin-700.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 232764 |
| Entropy (8bit): | 5.565038799821833 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FA4D34EC8CD6AC88DF66D0A8BC1CBDCE |
| SHA1: | BBDB9DF96F952E9301B3C20E2992978669047916 |
| SHA-256: | D213A89527AB36F920D0284E119F3526E3C71DBEED51B7183812F0AFA716D863 |
| SHA-512: | 8E4CEFDEFB0D051BE09BCA1A409457748C955C34E4F022966C85D46B7746548D6DDC5787FEC69E4504951407FC7754B26FB8D9DD8A0E5988BAA85BA3A5CC26A4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/gtag/js?id=G-EBBP73YGPY&cx=c&_slc=1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 747459 |
| Entropy (8bit): | 4.939049676536296 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0CD7BBA1C5BD271E34D601410CEB51D2 |
| SHA1: | 3F77FAF47BA9E43312326741CCA807DE2117822A |
| SHA-256: | F7B8F4A664D17CDAE67EF40F3327D28D9D85825F15E4C4DD92F976CA8C5085C1 |
| SHA-512: | 712ECE458EB0832CDF37C01FBC7CDA87329EF798FEDEE173D58B8A6C8710BD5B856D24739F613C21310DC144BD80F022554022DCF4BCFEEBF753F0A05CC3C944 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 460627 |
| Entropy (8bit): | 5.020069039569668 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E46F35EF7FCA0088E611EA0044793E4A |
| SHA1: | 19EB587F3524D32C050F43564562B884D7D38851 |
| SHA-256: | F781E629660D8CB1FB4CFEEA91F46C4CCDA5789D46B730565018AA0A0D66C82E |
| SHA-512: | 7F367E4B2298CA899FF627E96DC96AAD80D67E38056A64268A1DE05823F06300BD5A8D6C3232B43532F5797EE40FD826AAD772CBE263C9ED017CC7275BA885A2 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-2_f781e629660d8cb1fb4cfeea91f46c4ccda5789d46b730565018aa0a0d66c82e.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 446330 |
| Entropy (8bit): | 4.2158602590310394 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 572E9BDC6E76D3C54A428872ACD8EF80 |
| SHA1: | F76ACF28CF7421C9442B46671CBB755D7D9727B7 |
| SHA-256: | 51A2FD25F91930483EAA6B14F3799786F2F6E149DBFA113B47885441D4ADBA0A |
| SHA-512: | 244405400C292F6F1E1F03DC71EE127BA045126A43C198F1877C6ACE5FD1B925BB3943DC6543C19EF52EA540F8951031826F1CAD1A8EEE1E6F052EB82724D186 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-14_51a2fd25f91930483eaa6b14f3799786f2f6e149dbfa113b47885441d4adba0a.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 384875 |
| Entropy (8bit): | 4.684546357925762 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | DCEA54CCDB1584C380CB382949759BA1 |
| SHA1: | 5D5DCEACFF70F5639D43390C352DC77BBEBE1D41 |
| SHA-256: | 368C4F1CF33E31FD50BEB6DE7BAE089CA8905D564DC2715B1C757E190D7D8A3D |
| SHA-512: | D5DBA9C01EFC7172A5ACE895ACDC6F0A23F1E70898BC0E62301D923730C348FD729C2A72D0CD8152F9E0E474E82997F1D737E435E40D0CDB73A430554A3EAE9E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-7_368c4f1cf33e31fd50beb6de7bae089ca8905d564dc2715b1c757e190d7d8a3d.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 518942 |
| Entropy (8bit): | 4.5096671841404135 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 286CD86A16F7F82BEEA8B0A43D9B23CC |
| SHA1: | CDFCB815B0DF3489F2820091E4D1EC9023613E22 |
| SHA-256: | 49F16675E02386FBA9DD33C9C69AD43AB2A769EB61D11B47CAAF6DE65596B531 |
| SHA-512: | E3F1CFA36BF95D77FC85F5F5E57001948B576D90415935E063290CE52B501D77FDCD9163492C91D542BF867D4AC380CC1504C6656E731F34D5524971C4D1D2DC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-3_49f16675e02386fba9dd33c9c69ad43ab2a769eb61d11b47caaf6de65596b531.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 21920 |
| Entropy (8bit): | 7.990539130472955 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | E5D046DD2C38F8E9A1F2F1130E4EC9FC |
| SHA1: | EE3D9449D668DA1BBEAF63F9C738D240B5340C29 |
| SHA-256: | F9BC132980C62433DFD76631F5A602FD1BF318141D67EBB6B70B4D3CC92555B0 |
| SHA-512: | AD4746277611E4A66C01B3C544E388E36CD73F88F561E02C8AC210F19FE81C136DA1BB204EFAEF9C3CB2117F51ACD28E359867EB99570B53A5D12B4100CDA277 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/wp-content/themes/merlin/fonts/roboto-v18-latin-ext_latin-regular.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 62712 |
| Entropy (8bit): | 7.996231237143954 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | 3A726FE986AD64D04204F168C4744837 |
| SHA1: | 6266A7F12E11387DEC7DD75D4F4F88F9D9BBB27D |
| SHA-256: | CE393F8A696F96A2E1FE8D2F2FAE5769D515842E3665670CF184251F3D6CE9F6 |
| SHA-512: | 3BD219B584DD994BC9E7958FC6768490307349984F9CA79509F922A8F22BB8E27DA4114AFF1E8447CB31465011FBB70E849573549303B75F21994A48DEBB3B07 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/imagery/sprites-fm-mono.7f20799585227921.woff2?t=1705956699888 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16 |
| Entropy (8bit): | 3.75 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FA9C17CE126A76733ACA269345EB7D47 |
| SHA1: | F1D8AA71F281509D55041F671B1A7BD94524AAD8 |
| SHA-256: | 15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8 |
| SHA-512: | DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkLEDFdah8RjRIFDRM0Cs4=?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 28072 |
| Entropy (8bit): | 7.992213083566003 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | FFB656DF59F776086BA6174E3787D856 |
| SHA1: | 9D5E3852439BC1FD65CA93DF5FEEA45E9E5FFEA7 |
| SHA-256: | CF45BC2363CE9144DC849274B6A81FFFF57B70FAC86103E9982CAE5B6306D38C |
| SHA-512: | 6CF3F549AD4DB4FD3EBE1AA7537FDD2FA9DC0355AF143F06DFE9D49EE2E8248DEB3B4FAA36C05541CF5A9C6494BB5D1ABF3353519FF2B55DB0C72D9941D0FD5B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/wp-content/themes/merlin/fonts/hammersmith-one-v8-latin-ext_latin-regular.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 496443 |
| Entropy (8bit): | 4.475935902947191 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C1BE18D7FD16A274E417955E2ED598D5 |
| SHA1: | 9C547C2FC2B3A1A1436C936231322A114A0EECDF |
| SHA-256: | 4A49FD10B4F147F6C5EB87933C9129DA84AAB3D6C3D8549EB76D790BF174EEE3 |
| SHA-512: | 14D12FE4F4DC956C62F3F0CBA0B7DFCAD807EBA88B4C2C51ED7FF260D7EA1ED348D89BA23CCFC3A9E6A61C17A1B00B04298B4E50EF65AE61942FD021204A74E2 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 76 |
| Entropy (8bit): | 4.930309546503882 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B64B9819A16E6E5F307E4B9E2088AA27 |
| SHA1: | 12B591EAC61D30AD80203C2FCED8A266BC70C2DB |
| SHA-256: | 34C5AF583454884097A84FFBBA8EC466795F715DC05928085FA30668E4827D6C |
| SHA-512: | 37C9DA836800F60F1FD448DF7A27FC0E36DD1B2EE8F322E7A256BECDAAB93AFA4EDCABF4997D061682C324C61287D00B9F8FC07850E0520B2464A4553CF501B0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQlu3GVaf07-fBIFDTE9lDASBQ2jG53KEgUNg6hbPRIFDW7dSdkSEAkLEDFdah8RjRIFDRM0Cs4=?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 780832 |
| Entropy (8bit): | 5.058731933612324 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 48A480D2415765C426ECC14FB4C9C3A8 |
| SHA1: | 37E6CFC697185A2AE1C0234FB86C859F5433DF40 |
| SHA-256: | 41E2E309277E57073FB6E4DF2E62D034E2390DD2762DC194A8E3D5C61FD1DC2A |
| SHA-512: | EFAD7F9A06B3351C30790CDEAE02FB01DAFAD51F20C1F4D38AEC1DB4E96002E86F24608BBAB6FC74D7639313BE1908694C2766A12D7BE37735DDD19E35A1B403 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 480439 |
| Entropy (8bit): | 5.1648134106365235 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 54F9C8A4533936E4940C3824C63D4016 |
| SHA1: | 1CFEF76B86622D8DFD1AFD80E2D26E2D259ABBAA |
| SHA-256: | EEE99E860D5F13B39C098C34B82B145F3E93AB4EF4CB05085E06BCCF84CFE59F |
| SHA-512: | 3B9779B405CD111FD4ED79F228B6BB996ECD3C26562A76FB9C34C5339FD166B7A8C16C129BD58024ED1A3F1215BBF636E9AE2AD3D6B98B10AB5CFBD0D0347B29 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 11225 |
| Entropy (8bit): | 4.773427694734279 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 21048AE45FF3E65CADA03F4B3CFEDFAB |
| SHA1: | 907F7565C09DA6F1344A928142C5C20DE2E73DC3 |
| SHA-256: | 39A68DC795F6C634D669C0A954F0D4AB38D7AD3CC58EBCE9D0FEC9C89ABA9E71 |
| SHA-512: | 8F941C03FC98C6C45B5418E8E157B84515751424ADD76CE470A8D7D2BB3FFBCBA6EAEB2D8E49C35428B4980F40BB1C230A3B9C306991270358060B0126D97FE3 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/html/download.html-postbuild_39a68dc795f6c634d669c0a954f0d4ab38d7ad3cc58ebce9d0fec9c89aba9e71.html |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 408057 |
| Entropy (8bit): | 5.051824883974952 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 44405846203481C7F27C5A4CA304854A |
| SHA1: | FBA9EA400AF3FD83D0361971DCF4B2928F554583 |
| SHA-256: | C50E3DCD069699707A529EFFAF74C51009F25D8BCD430A1B009705C1604335AC |
| SHA-512: | 79CAAB9197393A60AE2F1204A22BE5900B5F1DAA4086B58F0850866C538EE0763B81DFC60F9E2C43DAC28A389B60E6DE59D8B8F1E0F628AEFFAA741D9E4151B5 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-1_c50e3dcd069699707a529effaf74c51009f25d8bcd430a1b009705c1604335ac.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 358471 |
| Entropy (8bit): | 5.122522610750941 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 114C9771C97FB101984F1E02914DC089 |
| SHA1: | 76EABB568B685D352958194DC00B45FA2F6CEAAD |
| SHA-256: | 241ABD76C2107623274D250A9197DED345F75EF2E44CAFA374A1D6EE3935134B |
| SHA-512: | 4298854189DCC5232F07B56CAE301AD803DD722EA8CED3E5DF2F31EC3C51B559E025482DB1148DBA276B3530A6D0895874A01D2E6547BCB6A53C085F00431EE4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/ |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 388896 |
| Entropy (8bit): | 5.420145104894249 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C18824053DC6B315BE5B3C4A0B67008F |
| SHA1: | E7EF418D1CBA8146108AD2925DFF5002BC7FC2B8 |
| SHA-256: | 1E792EA288B2479DD4542F286AC3E8CB390BE456F026011FDB6B01B0232B9D60 |
| SHA-512: | 093A3335C9AAA7295E9A14EB55A8B262CEE3D708CD88B64440D0A077602F5BC30947CBD9C0433F2F48C67D4C0C9832DE499E97C66873061D82097C0B68B5BD6B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/express-vpn-crack-2024-code/ |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 307454 |
| Entropy (8bit): | 4.425484539701373 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 91B48301F0EFA8AB099ED95190DAA9A3 |
| SHA1: | 7765F416DC1BFA168F644733D4EECE76CF3615B2 |
| SHA-256: | 637B4F561E60C826238B415CF32D72AF9CC3EC827C1083B673178634368AF91A |
| SHA-512: | 1062A042802F435D1F5D1A411CE08277D9F967F817C5B5CB5A58894B446D83B328E119E7B78867E1809AE20D6EB76F4A899E9B42BB91D6220303C0467DF8CBBE |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 18030 |
| Entropy (8bit): | 5.31647779144946 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 37AF9570996B54DAC151E1C3680707AC |
| SHA1: | 1567E613BAA19DFD5800A420F4AB41170D1945E3 |
| SHA-256: | 827A364CB71B1B12BBD26396FB9B1D0074090972CA2797CA0827C26EF1E20D79 |
| SHA-512: | A372D42C25168623E8F57AC45B6E29D263B4DB9D2CC452E1F304EA6E9D63D5A87241F10248F7537E5998F9C5D505FD2D195AE49F358773AC64FD9BE47361D55E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/wp-content/cache/minify/26c8f.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 392680 |
| Entropy (8bit): | 5.029918574838267 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4B4DBB1A799C7D70406BDAC3B018E3CC |
| SHA1: | ED0E5C90E864DD0C3AF12506F6C8398235BD7289 |
| SHA-256: | 85B0DE29D36011EEF01AEC88CE45B7CAAC07BF0DD24E0FE7148C0AEFD65BBD76 |
| SHA-512: | 499768DF35F037D41E8420FF0BCA3520747A23FEAAA1BE5B2B004CF847E8C6FDE315DC6AB99B81C836AD6618C0D48EE0EB7C5BA7BC721729E030EC9CE2229913 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2221 |
| Entropy (8bit): | 5.099274409488561 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 094C0CD2778688FF3442B490B864599B |
| SHA1: | 46C1C45E8580CF223A829C854E14CDD36CCDEEA8 |
| SHA-256: | 7A9EDB901822A4287769EC55E5EF6A36E67CCAB4F3F64EF47B7BAE90F396DD4B |
| SHA-512: | C0D3792AC765AB39A0B5CF5A31FB2EEC30874F049D40E1F94B32B99775616DDCD16AD324BAC0FA19BF90BC5D4F25828D22F6DAAD03623ABE248FB7DF6857DB1A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://mega.nz/file/VSc1mJ4I |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 90132 |
| Entropy (8bit): | 7.997485616617977 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | 94676E314A869CEA8B70FC6698CB2C48 |
| SHA1: | C681F9EA637011A45FA30E4750098DEE378880D5 |
| SHA-256: | 92090A2FC2EE13F67411A5E5778E3265E7401163C87BEFFA8E0392CCC765A8E8 |
| SHA-512: | 59BBFE9127E937271E5AC8443681DD48C7BFA882BDBFE3E340EA145EE8B6852D9A612D67F51252985FB0E11B37CAFB42EB3A7E33B39C3AF9AECDCE3C5BD98E37 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/fonts/SourceSansPro-Regular.woff2?v=f71f612f60d5bb7e |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 184076 |
| Entropy (8bit): | 7.989270025983529 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8B4F872C5DE19974857328D06D3FE48F |
| SHA1: | 32092EFBD7938AF900E99D63CF25DB246C6BFF26 |
| SHA-256: | 30F77A5FF0BCBA46D4E760B0C939A5FF112DA0D3DDD13A261834134E00CC21C7 |
| SHA-512: | C7B87B142CEF8E1B31E5561593DB2AC5ECA2C578A724204464E9EDE977C8107F3D6748E9B52D072AFF04EEF07B232B8F19286AA2267BC325C57926DB1A2A3E9D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/fonts/Lato-Semibold.woff2?v=7194963095272d0e |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4021 |
| Entropy (8bit): | 3.9426624793616702 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B17E401B89BBB91133F1C2DB8C35F8CF |
| SHA1: | 65D5633DBA90B96F1FEE2D763CCA88209289405B |
| SHA-256: | 921C05C83E6E3874FEB7174FD79D7F772B89EA38B28EB8706A385454D064E076 |
| SHA-512: | 8E80BDF860A436D11C11EB2BCE5781072E11641DD55E8AA7F52BD0E5DA35EFC2449C3BC2C86CBEEED7AFA4491CFC3F8B9F89805BA7D7DC7A3AF6C6AA04B1CAB2 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://lzdevgl1c.click/?aD0yOGZkYzk0MzI0NjkyM2YwNGY5YzgxYTU5ZjYxNTkzZiZ1c2VyPTE3MSZzaWQ9NjkmdHlwZT1jJnRtcD01JmFkY29kZT0x |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 443062 |
| Entropy (8bit): | 4.479255582865319 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 057852173E958810F1DE0E8ADBC9D462 |
| SHA1: | BD05E51244966615A9DC2B0119F7E8CFA64F22B5 |
| SHA-256: | 9C90F27443FBDB85519985333A8B00C3CFF0E10A2753955F41890342D64362F7 |
| SHA-512: | 230EC42DFCEA740B4FB37E3C7559DA2289B7BF2025C465BF055DB75659C7F9F05EDE374792B046FFB3365F8FA5DC34E23F1312984C195C32A6D42147959EFC86 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/vendor/asmcrypto_9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 87533 |
| Entropy (8bit): | 5.262536918435756 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2C872DBE60F4BA70FB85356113D8B35E |
| SHA1: | EE48592D1FFF952FCF06CE0B666ED4785493AFDC |
| SHA-256: | FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A |
| SHA-512: | BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://code.jquery.com/jquery-3.7.1.min.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3414 |
| Entropy (8bit): | 7.671549953375806 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D2AAE9F202C03E46C66D8319203BB480 |
| SHA1: | 242AC3ECB0C1A0AF0E8049E1BFAB919A110F4E7A |
| SHA-256: | C5FE532B638805CE8673CF9967EC017C1C197CC3027038CAA7951A3CFB45B070 |
| SHA-512: | FA7A743192ED7A6E054C78A56A7F117771002FBF356693EE14614B7332D47E80CEB449F7851AAF2E64992D7B0CBB615EE5539CF036D80AE71E88DBCDD8FEDA6D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://mega.nz/loading-sprite_v4.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 437597 |
| Entropy (8bit): | 4.359911506826916 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D75FD225571D3FC7C8B0AADE85D62F73 |
| SHA1: | BF49D82B0ED022407D80CAE6DC87152B0FEDA589 |
| SHA-256: | A9E02F07A133445BA0DC2960CF438CF5FBD65C14D3FCB0DD627B1A21CC92AB61 |
| SHA-512: | 57EB8EE470E9F7B72DC4816B1012D92B1755722F798B3D814F554E1E25125D22133A283C2C760AC4176E8A71D827BB72B7F7EBC603140DE9AFA6FCC884E20773 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 232948 |
| Entropy (8bit): | 4.9772469761951434 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CD822B7FD22C8A95A68470C795ADEA69 |
| SHA1: | 1F139981B9B47A766EFA0A61BB78ADA351F16C4B |
| SHA-256: | 3017DF4A76DB5F01C2B99B603D88B03106DF13BCFE18E67B7C13C2341D3A67DF |
| SHA-512: | 6F641C4B94AC03CB59A1D703B464442E21AFE5268A4A4D6F0C70DA41175AD21B4F61667AD38EA5AF7909E5B00041DA55DA6980FF8BF4C1017D33253AFE90C802 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16 |
| Entropy (8bit): | 3.875 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7AD75F12C897D16014885FE2418FC04B |
| SHA1: | 1F7B3F403E734E401BCC4A603620A2B1A65A92F5 |
| SHA-256: | 912271353D384A2FC941CB7705A5BD68519DF7E2D6788C82883A4E620EB3B2FF |
| SHA-512: | B326492F68D33379AC154382A538266B64040E7BE3EE5052AE26E764BF320ED23BC6F2BBA2C4FF44D6D020BC87833ED8A4957E115981363BF373D32B3D7BE541 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlDRIlp68IzZBIFDThta24=?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 496 |
| Entropy (8bit): | 7.328539097915939 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 24FB96B92115CF268620684F2D887368 |
| SHA1: | 35E27DAED039E3D75399B8602EA5BD3995D3010F |
| SHA-256: | CF47B0F430E0A4839A193143C06A00540403765AA8D39E1B014CD43C965B1FCD |
| SHA-512: | F5F25F416FDDC73BCE5A1390D3C9D7E7F61373696428C61E1DCA8917C7C27CEB0E91CEDDCC215E719B21D15C2F8BD52D65C879BFBB482C5D4881A9E70A0035E9 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7315 |
| Entropy (8bit): | 5.792607825622914 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 083052F8C016795D6DEECC60A71FDD29 |
| SHA1: | 1879CCBDB9943B05C779C0972FC0556D09B342F7 |
| SHA-256: | 660786E2243AF8B9BF283860582D90143E6E8861A85284290B4856787BA90815 |
| SHA-512: | 9B0663B6731CCA8A89C3E0DF6EE119414EAD70BD4063EA9F8DCE046AF9D40C87F8AC6607BE42B7581DC07E76496A1DBBB474695006E2E973116DCB3308FD8A55 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://resbreatfl.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/a990e557/main.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 476725 |
| Entropy (8bit): | 4.470066081804343 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 800C72518535E03061CE4D3725A809B5 |
| SHA1: | AE11EFB0225C9595BDA124CC1FFB723D02B133F1 |
| SHA-256: | 5E85C46ACD4C60F3786B9B5C8BA04379A35D0DAE33F9764D2B989ED17B06006A |
| SHA-512: | BB0237C621B939E983B8ED2C53D4BD87994E715A72E9E15339850710687A4ED8750C77EAC1D847584833D2CBC74D619AACB22D53B9E02305EE99814E7D5CECBF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2190 |
| Entropy (8bit): | 5.1271431036965796 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C15968651D5491AE4942C597A39E5C6A |
| SHA1: | 5027770E5BEACBBED1326CDFC13D327AC690C274 |
| SHA-256: | 8FCFA7C6C05DF120FE4910190491EDC95BD2A9DE49D71EDAAA0BEEDC7B64757A |
| SHA-512: | 7BACEBF77671C0BBF1850E5134B6D6AA5A0B2E719F3F05A43E722F336956FE49135DCF78345BB17F1BEEE893A0EFA10AC334E85C18C8698C619CC46A610AB972 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://zrqcv8p6j.cfd/?65CC784DADD42 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 14578 |
| Entropy (8bit): | 7.97716724233694 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B6DC87C1EC3C6AA6FD406D4B585A3F48 |
| SHA1: | 4B65F31815FB926A83B95553A17EBBEE0FD71ECE |
| SHA-256: | 946CB0330B5C237D994AE7EB76C69BD1E69E1E837EA425A8B9A6DB1F3760FCD3 |
| SHA-512: | FCD3586CB10BDE37D9894397A9A8F0E70EE12C84E2869F7687ADBD79FC842F9F354F3A51921EC5A0BF30C045B681CC745B36CBBED23D474F2F4A349952F33A57 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 261074 |
| Entropy (8bit): | 4.99678758891579 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 80E563CAAB56FEBEFD103D0B4904D427 |
| SHA1: | 543EC5BCC90BCD51A509CD4D283B5F69A7E2670A |
| SHA-256: | 0599254F6C8B997112A80D4B5DC255582844E3944EBE849A6D20FA14DD1EA90F |
| SHA-512: | D58AC32F9C8C90EEB1EDF2AABC5B5B411AF1521929B5B59E5F46CA4C2C470B73937E0C19980BF229AA60509AD3650844C39AA5E35EBAA687927CBA843BC42C71 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/css/mega-4_0599254f6c8b997112a80d4b5dc255582844e3944ebe849a6d20fa14dd1ea90f.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 70369 |
| Entropy (8bit): | 7.968201503862259 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D74C0EFAC1A9C59152B0325932D399F1 |
| SHA1: | A472EADB5B431A4EF40E78ED79EAED9BB8FC8135 |
| SHA-256: | E8BEDFBC203B2D09457D44A4DDFAADFB770D637E332F41487438FA9A7F5352F5 |
| SHA-512: | 8B54060E0A7FA219FB96ADA3C4BEAE832727540D8872A231F71C2A0CDDC3ABAF061EB2687595BE3F4FBFD996BBE0488F44E1E042B28C2AAA45D51F03D0B4E689 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 235548 |
| Entropy (8bit): | 4.950425294801768 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E9CC1CA8190D0AA45ECACB2E7E24031B |
| SHA1: | 19FA954F4F01616F01C4851541BA76841FFD16E1 |
| SHA-256: | BA99001DC1BC99C75F4DD30D1B63B36C1C5584AE06346A22674D61FD63387596 |
| SHA-512: | 022A4C30943B32E6AD091CC1D8780EA7DC431BA5BDA8DB2BA2C33D883B8EBD67B3FA0A4209DA84E5D19E09F16DCA0B90EE0197FD77A57EB685E527CF66400548 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 8787 |
| Entropy (8bit): | 7.532028713005772 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3F788625BBC4F87885B982ED70876DCB |
| SHA1: | D4155B22D2E63B149B42E238AB5C2788199A2F99 |
| SHA-256: | 741F05BCA4428E5880A44222F68A2F50172860F43B09ABB57E3DC12D3CE5766D |
| SHA-512: | 80FCE5A6FE9AFCEBC834B8F324BBABB368AAF5BD4CB4753CD4B675B18D657A988F91806119844AB68AB58FFDC25B2F27E6F8728487E6CCDFEA82FA6F0115CCD8 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 109786 |
| Entropy (8bit): | 7.886234155912067 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 26C0770685349AD6BC47FEF24D5C9D4B |
| SHA1: | 9A77F9B2F578EB3CF2C999E5A808AC2C84E4FE80 |
| SHA-256: | 90B96DC86C550B8AA664C7A82F61411ACE0834C3F59F024A2C57541954ED137D |
| SHA-512: | 9DB888D176D30BF6FE62A31258A6C9CC600D49596172214EA7647F04E2EC18643E0D81B2EF4E718DD3E2E6C52E0A5A2077458FE2E305F609ED2A334344AAD45B |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 515126 |
| Entropy (8bit): | 4.721441355882313 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EA4E3424B49B214FE0164215863BC790 |
| SHA1: | 34AC14B8095FD3072584FA9174CBD24151A40B1F |
| SHA-256: | 43A325A480602FA429366C9DEC15DDE729A796851E896D5B338CE418610B778E |
| SHA-512: | D2E3631ABB7335A1B506D17F99DB2DC345C1BE55C93577F7B8D54CDBE56A3FF0880E0D5DAFBEA259A27FF87813D66DF4DF6A883B74AB37FA6FE81E7F6245D5BD |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2039 |
| Entropy (8bit): | 5.153971958624431 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EB261C1B3DDAFC3A78652DC6036E2A66 |
| SHA1: | E25FE9ADB999932ED47D5504EE3EF6F36863B9BC |
| SHA-256: | E9F9D35C7C0906DD2AA24F1451ADF7876DDFD1DA5B5AC10910FB4A816D11FDF1 |
| SHA-512: | 80478FF3658B9015A77366789CA09B945F2B92E882403D1329B81F49BFFE87FA324E8B6D3F60AB5AAAE39F7A2BA1FD180D9412C943B5DCB1E041BCDE952FF7B5 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://mega.nz/decrypter.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 30699 |
| Entropy (8bit): | 7.955262660398151 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C53C4B781F53B21562990926425ABFD3 |
| SHA1: | FFF91C4ACD5D0C187AD634B79B2619DAE9AF58AD |
| SHA-256: | 1692F9C36F3AAA9D3E251A92FD2615B55D6F8E8E0BB286FA87184ECB4E20525C |
| SHA-512: | 85041E7DD1EFF82DB0355A471ED64114D214BBF5D9B6B54F5F741E7A83B56F38DD591C854DC16C748DB806FFEDF896076C8A31AF7664429C373497F68323C7B6 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/imagery/mega-dialog-sprite.57a6bd1346996955.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 42711 |
| Entropy (8bit): | 4.974007118641717 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EDECF05D945421999AEEFE49158EE026 |
| SHA1: | E6861399CDE3D9AE24BAAFA1C90A57A373047CFB |
| SHA-256: | 289D5DA5A0346475062230668E174896960DD23B9EC5A144400C37E66E07A71E |
| SHA-512: | 1E6D76DC3EEBF0F40908752F0A85702B0CB886A367EF93EA5261BDB98B138D046EA6ABCB8EF9136246C9C85C8A261B5237AFA0B74ADF7030E3F1E2F5A1D84D01 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/css/mega-7_289d5da5a0346475062230668e174896960dd23b9ec5a144400c37e66e07a71e.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 87549 |
| Entropy (8bit): | 5.262335970841445 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | DB2877B267D7685A9D731AF2B7A0D072 |
| SHA1: | 79CEDD613731A6D43FBB6D6691D7CAAEE4CAEAB8 |
| SHA-256: | 486824E668564F24555733AC5F077C159846AC8496EEC9EB6768366D5940C03F |
| SHA-512: | 9AEB24FFBB175B4264EBD87F4922E642F2166DCD6F1DBD285065BDBA2DE33ADE7212B48B4120FBB1F8B930C0382214E0C261C701B168BD984AA2F7DEA0EADFFB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/wp-content/cache/minify/d52ed.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5333 |
| Entropy (8bit): | 7.920362826437995 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 61338D296ACD5E945FD3BA24761AACDD |
| SHA1: | A3C0931113A679588B52634177B1756457E8700F |
| SHA-256: | 929FE9368EC1F3DB7BB9F8400C094CDDC0341E84ECF0E746EF6E2A5857A20FF0 |
| SHA-512: | DDA61B5035202D4D156DCE8498EF6D8295A99C815EE8A248F87AF9B579E1815B33740980CC32E326FC72B54FAF686316D60A1DF787710A908F7AC6A5FF81B585 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4021 |
| Entropy (8bit): | 3.9456802872227845 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E480A72C2262D4ED17A67CBE07B719C2 |
| SHA1: | BDF79DB38AED8A6BCC913DCB4AB42EA84B551893 |
| SHA-256: | CEB9E1AF5134EE3FA64A7345385C345B6EA2B59D58FDB9936AC30104136D028F |
| SHA-512: | 759868CB60B8A00046F128345C67D9C499ABA442C249EA4EDF5CECF7A133B47212F4E3B44F2E739FEF23EC3CA94222CBEA3DFB60FF370C477D9588D67FA2431F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://x455brorg.click/?aD02ZGQ4MGE4YmI5NTIzNzI0YzkwYzk4YjQ5N2FhNzJmMyZ1c2VyPTE3MSZzaWQ9NzAmdHlwZT1jJnRtcD01JmFkY29kZT0x |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 806 |
| Entropy (8bit): | 4.881989476761858 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A90CDBED12B825144B39A748C940F8B2 |
| SHA1: | 93A8E3A9CF544A74DDE64269DF4117C0B98EBC39 |
| SHA-256: | ED13CB17F33954435D951100B53C15FDCF7B4D7377FD6219E83EFBD902FCE630 |
| SHA-512: | 2D48773EA13CABCA7BE03635A2CBA46E597E6D11B3AEB4BFC52AD0F023F5BBFDD0B13C2F9798B8D7EDCA72C96EFFF9D39B1C7F29AF76D8C2AFB7C3E788255242 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://mega.nz/manifest.json |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7353 |
| Entropy (8bit): | 5.788812751004654 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 411F4F14C9C595FFDBF875F8DD9B8083 |
| SHA1: | 515F342941E230ED7CFBA839B9EF10C5F5F3A971 |
| SHA-256: | F112CE8B35FD60CD4EA13BDAC91DE9F4D0BF547B6FD9EED42580679A75273ECC |
| SHA-512: | CD4E428959543F232822473F8DD01BD8BD410F10C8B0132A89B7ADAEEE14C05290999A99FF5B34E0F3F204EEF3DE0B5904C5FD749F9299893E23F14815F5F95D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://zrqcv8p6j.cfd/cdn-cgi/challenge-platform/h/b/scripts/jsd/a990e557/main.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3573 |
| Entropy (8bit): | 4.342488338633969 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4BB6D0B01C05E8A99339173297E0E515 |
| SHA1: | 1B15A37A43847C943570912313B0EF072CCF7029 |
| SHA-256: | 374CE9BDD50242D5CD0486250B532B65449D563A953F1FA2239212685E24CB43 |
| SHA-512: | 92499FCB0F0A619C20512E027524AFBA39AFF061DC1EA3508C588A999E8629608B5D8DEF51BE9DAD1EE72DBE1C70A165430F9C12A24147B048207800DB6A986F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://mega.nz/sw.js?v=1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 10481 |
| Entropy (8bit): | 4.800788216992434 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 557CD937349AE1DA46670E4451F63337 |
| SHA1: | 0E8BE736D89B0C3CDDF772597F9701E0FBEE4F2D |
| SHA-256: | 47F7D58D40F84E7FA878532D05A625C2B9700C9300276DECEC0CBC374C0A5644 |
| SHA-512: | 033CEA8EF248B866DEFD6780E021910BBD0753EE60335DC19EBC71ADC116AEB236EDE2D932BB3B855D8337A324A870064A262631FBF0725C230C49C89C948377 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 126274 |
| Entropy (8bit): | 4.501172302463666 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A60D20C0CB2FFC5058FF87D62A4F198F |
| SHA1: | 41E67C7ECFB2D648575AC8DFAE68C447F10C98DD |
| SHA-256: | EF6F148AE55723B5BB5D2BDE5261E4F132CF4C49267AD27CC45CFDCE1C2C35B6 |
| SHA-512: | 2951FC47674A72FF4BC26E219F3258C0012535A41717B389AC37712A8389C413ADA5F9A0D8444905A036B1FF9A308C93D0AEBAFCE6829A78C123B540A69E7C61 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://mega.nz/aesasm.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 520780 |
| Entropy (8bit): | 4.473581081668722 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5DBF127ECAAA12756B4707EA1E209F45 |
| SHA1: | 3C06AD211449A24AD574A9F51C2FED1CCB59E7F7 |
| SHA-256: | 25AE83DFFAA8FAD237E9A9F4ECC3C38C5DECEF94E6B701433DA0FAD907217876 |
| SHA-512: | D44471FBB81C940FB83F5B3DD4980C03A2217AE57F1D26EB614E429A12AF678B07AC2D9921D9D235A62DBFD0EF213D03758242053A5FD1E364FD15C0BB29E370 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://eu.static.mega.co.nz/4/js/mega-15_25ae83dffaa8fad237e9a9f4ecc3c38c5decef94e6b701433da0fad907217876.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 9808 |
| Entropy (8bit): | 5.315587548129397 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 50B9FBE56469E478F35F0396D5180934 |
| SHA1: | 8F3D4B845CA840575168868B0043E0AAF8628C4F |
| SHA-256: | 4B6FED0DECF4C083AD399D1F944174046C587FF069ADF21C1FCB6D20E4923143 |
| SHA-512: | 27BB9E3747E88E88D565867D9792E93640176AF0C0A1F782E2BB490E52A57A2800A523C2253D6E3C28D152F1B24C528FF58E7F51250AB5A1E38604C21A60431E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://freeprosoftz.com/wp-content/cache/minify/f9fb9.js |
| Preview: |
⊘No static file info
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node