Malicious Facebook profiles
facebook[.]com/info[.]ai[.]google
facebook[.]com/googlebardAI112
facebook[.]com/AI[.]Marketing[.]io

URL shorteners
rebrand[.]ly/648284648
Rebrand[.]ly/ggbard-ai

Delivery websites
sites[.]google[.]com/view/marketing-robotai
sites[.]google[.]com/view/intellithinkhub
sites[.]google[.]com/view/update-ai-marketing-setup
sites[.]google[.]com/view/bardaihome
sites[.]google[.]com/view/aimarketing99
sites[.]google[.]com/view/ai-marketing-com-setup
sites[.]google[.]com/view/aiintellithink
sites[.]google[.]com/view/aimeta-home
sites[.]google[.]com/view/aimeta-info
sites[.]google[.]com/view/aihubexperience
gbard-ai[.]info
online-chatbot[.]com
meta-fb-ads[.]com
meta-business-manager[.]com
ads-manager-meta[.]com
gg-bard-ai[.]com
bard-ai-gg[.]com
gpt4-ai[.]org
 
Password-protected RAR archives
1e279d0d1357438334524017c0823e72f6a27af70ff76cb0685e4455872564ae
38995c85f311fa25cfade2a883fb1e6ba33a99dfae575341a5b4198c0a264522
43a6e8629d2ac1e9fed6aaac988c2a0996462557614de6516b05540f2396d8f6
db7e7d41f260662fad550247cbb6dac9c6cf718be528e493024e67c93ca39844

MSI installers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Batch extension loaders
0f84200047a9232f939d2994916105050afccc72ab3b7be9fdde5559647297f3
05c3fce53868d6fd937d0c2ed006f9e078d9e903b46a231b719cae67a0cbf8f3
1a0bb7595ee9bf9f6598a2fe7d8bc6ec783e929f686f09c74921fe2f00aff88d

Extension service worker scripts
6304217e12f38cd070f85273ebec50b9281702162ab66c47092119c6768a8421
1101b5f05e5dc5a545b06911bf03769d6cad4a62841a542e872d8b7b88ff9443
75295e6cdd4504b49b00b911502f154322cfd5feff5ec18c990184ea2b95d577
cbe6922b41033122fc0ff1467051e2caa0c991b52ca4e24183959e0c2ed3a2fa
492ee66bec92b52bcc16a1e7da538ee9a3d5e486c36a032ec00763b6bdf7104b
acc06e9f627dec62b345a6b1288947ce316c0e9ab799e0c58f1f334d1be1606c
9405bb90d2d496676799ce0d3796882666804f1bc3388ce3007ff1d6f1c1c124
2fb49c93b154433d491e2d572887e9571bddf96d3653a9dc31f6a59217b675c5
1b724ebdb40fcceaa32dfb409dc862dca4b93c353ef890551a993c54e25465e8
78f8b562804e73ef40b72942e949b4a1cddb0fbf13fbd4be58aeec8430d62699
d925522178d880b0f09d6954edaf6ddb9141fd6e5d07c14be46c692089c1a65d

Extension manifest
f7ae9888bbfb60d6598fe9247fef9edebc8928593f4e4032292d846e40b50254

C&C
managedkv[.]com