← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Browser Hijacker Campaign Targeting Chrome and Edge
WHITE ESFBSOCTCR 2025-08-19 Modified: 2025-08-19
113
IOCs
HIGH VOLUME
Indicators of Compromise (113)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 037ef89fc6863c3e434ffcbd93623dd5 — 2025-08-19
FileHash-MD5 212fe329daca0b5953440d9164bac8cc — 2025-08-19
FileHash-MD5 23393357ac05b7780739197436885d4f — 2025-08-19
FileHash-MD5 2898918ac527b4b2e8670f8faafaaadc — 2025-08-19
FileHash-MD5 78456ac0e0fb12a417baf967678cf458 — 2025-08-19
FileHash-MD5 85ac5d8fa76c1bc6469ac8b36de002dc — 2025-08-19
FileHash-MD5 cd5e6cb06c91821841c784ac1c93f2e7 — 2025-08-19
FileHash-MD5 d1784be75c8acf7c38e39382e58b44d5 — 2025-08-19
FileHash-MD5 d3203ef56b806837ba30fad67144a79b — 2025-08-19
FileHash-MD5 e00a7b8c1d9d385508c196a6f2f93ead — 2025-08-19
FileHash-MD5 e24f525e138e69314b0563b6ed9644f0 — 2025-08-19
FileHash-MD5 e718d4e37dd65550c18475a2afc4ec48 — 2025-08-19
FileHash-MD5 ffd74fbae43feb2e1756bb6833ef9234 — 2025-08-19
FileHash-SHA1 165df2e6b8779500b3201b72876466ca436a2593 — 2025-08-19
FileHash-SHA1 27bb7c33f86ef4241c9c3d4cbf74f221ee560da8 — 2025-08-19
FileHash-SHA1 6044ff765e1d1fe924b2f34cf32a6e2bb0bc07b2 — 2025-08-19
FileHash-SHA1 bf278803cc2321f84fd71e9d85c8eb49f608f93a SHA1 of e718d4e37dd65550c18475a2afc4ec48 2025-08-19
FileHash-SHA1 cd6a4300842327f70c460fc621986afbd42d2074 — 2025-08-19
FileHash-SHA1 f395891863963d9c522faf02ad53803f975823c1 — 2025-08-19
FileHash-SHA1 f764e1f9a41cbdace1db75ffdaae424bd2730f54 — 2025-08-19
FileHash-SHA256 20d6a68de3a3e0fb5ff922ed1a6ad77dc22084bfa0085656257ef3cbd82a920a SHA256 of e718d4e37dd65550c18475a2afc4ec48 2025-08-19
FileHash-SHA256 8868f8524e9fb1f3cfadf4329388b1eb2e38708fbdce465c5aecc2245176af66 — 2025-08-19
URL http://arch.me/edge/ — 2025-08-19
URL http://doserp1.com/le/9.8/devtools.html — 2025-08-19
URL http://dows.com/localExt/9.6/extensions_page.js — 2025-08-19
URL http://h.me/ — 2025-08-19
URL http://kondoserp1.com/le/9 — 2025-08-19
URL http://kondoserp1.com/le/9. — 2025-08-19
URL http://kondoserp1.com/le/9.8/analytics.js — 2025-08-19
URL http://kondoserp1.com/le/9.8/bg.js — 2025-08-19
URL http://kondoserp1.com/le/9.8/config.js — 2025-08-19
URL http://kondoserp1.com/le/9.8/crypto-js.min.js — 2025-08-19
URL http://kondoserp1.com/le/9.8/crypto.js — 2025-08-19
URL http://kondoserp1.com/le/9.8/devtools.j — 2025-08-19
URL http://kondoserp1.com/le/9.8/version.txt — 2025-08-19
URL http://mize.com/localExt/9.8/content.js — 2025-08-19
URL http://ncloudservice.com/localExt/9.5/devtools.html — 2025-08-19
URL http://nvoptimize.com/loc — 2025-08-19
URL http://nvoptimize.com/localExt/9.8/analytics.js 153dc9d786c912c0cd4d28bf7f46ad4d77234fe5b0d357646e8d1d554fa1efbd 2025-08-19
URL http://nvoptimize.com/localExt/9.8/crypto.js — 2025-08-19
URL http://nvoptimize.com/localExt/9.8/devt — 2025-08-19
URL http://nvoptimize.com/localExt/9.8/devtools.html — 2025-08-19
URL http://nvoptimize.com/localExt/9.8/extensions_page — 2025-08-19
URL http://nvoptimize.com/localExt/9.8/icon.png — 2025-08-19
URL http://nvoptimize.com/localExt/9.8/manifes — 2025-08-19
URL http://nvoptimize.com/localExt/9.8/version.txt — 2025-08-19
URL http://nvoptimize.com/updaterTask/ — 2025-08-19
URL http://ondoserp1.com/le/9.8/background.html — 2025-08-19
URL http://optimize.com/localExt/9.8/bg.js — 2025-08-19
URL http://serp1.com/le/9.8/content.js — 2025-08-19
URL http://serp1.com/le/9.8/icon.png — 2025-08-19
URL http://sslwindows.com/a — 2025-08-19
URL http://sslwindows.com/l — 2025-08-19
URL http://sslwindows.com/localEx — 2025-08-19
URL http://sslwindows.com/localExt/9. — 2025-08-19
URL http://sslwindows.com/localExt/9.6/analytics.js — 2025-08-19
URL http://sslwindows.com/localExt/9.6/background.html — 2025-08-19
URL http://sslwindows.com/localExt/9.6/crypto-js.min.js — 2025-08-19
URL http://sslwindows.com/localExt/9.6/exte — 2025-08-19
URL http://sslwindows.com/localExt/9.6/icon.png — 2025-08-19
URL http://udservice.com/localExt/9.5/devtools.js — 2025-08-19
URL http://vesearchbar.me/ — 2025-08-19
URL http://wincloudservice.com/ — 2025-08-19
URL http://wincloudservice.com/localE — 2025-08-19
URL http://wincloudservice.com/localExt/ — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/analytics.js — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/bg.js — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/bg_fallback.js — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/content.js — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/crypto-js.min.js — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/extensions_ — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/extensions_page.css — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/extensions_page.js — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/icon.png — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/manifest.json — 2025-08-19
URL http://wincloudservice.com/localExt/9.5/vers — 2025-08-19
URL http://ws.com/localExt/9.6/config.js — 2025-08-19
URL http://ze.com/localExt/9.8/background.html — 2025-08-19
URL https://laxsearch.com/ — 2025-08-19
URL https://microsearch.me/ — 2025-08-19
URL https://nvoptimize.com/ — 2025-08-19
URL https://nvoptimize.com/updaterTask/91716dcd-4255-4d21-ac87-e34 — 2025-08-19
URL https://nvoptimizer.com/edll — 2025-08-19
URL https://securedatacorner.com/rem/94f013fc — 2025-08-19
URL https://sslwindows.com/ — 2025-08-19
URL https://sslwindows.com/rem/f2b5150e-2d0d-4273-bb8e-c78f003a47e2 — 2025-08-19
domain activesearchbar.me — 2025-08-19
domain arch.me — 2025-08-19
domain doserp1.com — 2025-08-19
domain dows.com — 2025-08-19
domain kondoserp1.com — 2025-08-19
domain laxsearch.com — 2025-08-19
domain microsearch.me — 2025-08-19
domain mize.com — 2025-08-19
domain msf-edge.com — 2025-08-19
domain ncloudservice.com — 2025-08-19
domain nvoptimize.com — 2025-08-19
domain nvoptimizer.com — 2025-08-19
domain ondoserp1.com — 2025-08-19
domain optimize.com — 2025-08-19
domain securedatacorner.com — 2025-08-19
domain serp1.com — 2025-08-19
domain sslwindows.com — 2025-08-19
domain udservice.com — 2025-08-19
domain vesearchbar.me — 2025-08-19
domain voptimizer.com — 2025-08-19
domain wincloudservice.com — 2025-08-19
URL http://ice.com/localExt/9.5/config.js — 2025-08-19
domain h.me — 2025-08-19
domain ice.com — 2025-08-19
domain ws.com — 2025-08-19
domain ze.com — 2025-08-19
hostname www.bing.com — 2025-08-19
References (1)
↗ Cyber Threat Advisory - Browser Hijacker Campaign Targeting Chrome and Edge.pdf