d5cdc14feac6c099b6e3558f1b7046319d8abf54e0ccc559ffa3d39e944048a5

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 09:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 82.9MB
Sample260922-laa3cssfqf
SHA256 d5cdc14feac6c099b6e3558f1b7046319d8abf54e0ccc559ffa3d39e944048a5
MD5 ea0adbae866065dca014250267f228a9
SHA1 97bf8da53277c6c2c8215be8af40a31bd63b8ee7
SHA512 44046d0a8a08695d57d441fb0561d021e263698d3724c52741e00445a0d7da2665346ece53392e90f92b3e69a78b97473e5f472d262c26765596e30582865579
SSDEEP 1572864:11F+FAlMLj7b2h8lMLj7b2hpzLxjXkO/hkoE:BMbqGMbqpzLxuoE
TLSH
T18E18E167A2A110FCC069D1BCDA8B5963F2B1781807759ACF57D00A421F7B7E4867EB23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 61 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_566242243\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_566242243\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-te.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-el.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-da.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-et.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_547003939\protocols.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_566242243\crl-set	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_547003939\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-es.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-or.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_547003939\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-be.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-af.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-it.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-la.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-as.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-sk.hyb	msedgewebview2.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345424587639535"	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3180	msedgewebview2.exe
3180	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3964	msedgewebview2.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 2560 wrote to memory of 4060	2560	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe	88
PID 2560 wrote to memory of 3964	2560	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe	94
PID 3964 wrote to memory of 3820	3964	msedgewebview2.exe	95
PID 3964 wrote to memory of 4264	3964	msedgewebview2.exe	96
PID 3964 wrote to memory of 4264	3964	msedgewebview2.exe	96
PID 3964 wrote to memory of 4264	3964	msedgewebview2.exe	96
PID 3964 wrote to memory of 3956	3964	msedgewebview2.exe	97
PID 3964 wrote to memory of 4872	3964	msedgewebview2.exe	98
PID 3964 wrote to memory of 4872	3964	msedgewebview2.exe	98
PID 3964 wrote to memory of 3516	3964	msedgewebview2.exe	99
PID 3964 wrote to memory of 3516	3964	msedgewebview2.exe	99
PID 3964 wrote to memory of 3516	3964	msedgewebview2.exe	99
PID 3964 wrote to memory of 3212	3964	msedgewebview2.exe	119
PID 3964 wrote to memory of 3212	3964	msedgewebview2.exe	119
PID 3964 wrote to memory of 1616	3964	msedgewebview2.exe	123
PID 3964 wrote to memory of 1616	3964	msedgewebview2.exe	123
PID 3964 wrote to memory of 3180	3964	msedgewebview2.exe	124
PID 3964 wrote to memory of 2484	3964	msedgewebview2.exe	128
PID 3964 wrote to memory of 2484	3964	msedgewebview2.exe	128

C:\Users\Admin\AppData\Local\Temp\2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Checks whether UAC is enabled
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:2560
- C:\Windows\SYSTEM32\tar.exe
  tar -xf "C:\Users\Admin\AppData\Roaming\AKMenu\assets\_ak_embedded_assets.zip" -C "C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web"
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=2560.1668.5371337689782522869
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3964
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x168,0x16c,0x170,0x144,0xf0,0x7ffa89f9b078,0x7ffa89f9b084,0x7ffa89f9b090
    3⤵
    PID:3820
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1708,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2
    3⤵
    PID:4264
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2016,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:3
    3⤵
    PID:3956
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1712,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3620,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:3516
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4376,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
    3⤵
    PID:3212
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2236,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
    3⤵
    PID:1616
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4468,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3180
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3812,i,10411853423014584467,4312505545483761114,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:8
    3⤵
    PID:2484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

hyph-as.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-as.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-hi.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-hi.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nb.hyb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\hyph-nb.hyb
Size 141KB
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
TLSH
T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3964_182286417\manifest.json
Size 82B
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
TLSH
T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3964_547003939\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

crl-set

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3964_566242243\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3964_566242243\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

_ak_embedded_assets.zip

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_ak_embedded_assets.zip
Size 14.9MB
SHA256 8e79956bc59dc727636145f2fdfdd5b2892ea9fb24343fc083666e2b0773af06
MD5 9f9e7aabef084b98304621fdc6fc8f58
SHA1 b753bdef88c285dfdbbf8b989ce0b0c55472961b
SHA512 2440a2f6c4f472f8c70cbfd0d8b1406142157ff65e0d8fe7a694979daaaf2553fa9d8f2afbeb1d78d48fa2cdac5db8d9bc96f95548e814e17b234d8e40123a47
SSDEEP 393216:WzrpJxjOZka87y6TXscvt5BPh1z8+W8zt/gJus0:WzdJxjXJyO/vTpnhyor
TLSH
T17FF633DA71A39502C15AF63EB8CA2E740719AE58F4D4F1A7474D018CF8FEB8BCB42558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Animation.lua

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\Animation.lua
Size 732KB
SHA256 7a388bf6c418fd9c7371c828ee991a38f785381aaae07132137b46867ed58f48
MD5 89cae7658df96d0f3643ee30682fd26f
SHA1 a01225d4d0e79d51bb29fa3f73d6437e4582a390
SHA512 bc2eedd441676b55e890a31af04327b54781c3b0cd23751ef82ba3028f93cc589a7dfa65d557585e3e7282ea3d8dbe3e92e001c20f4ecf358816916f82037eb0
SSDEEP 6144:UgYf9aVBFBeUcwpz1o3vSsx/xa96TE+y10bhmP9MKNPSDXBHjf+uBRxQIv9Gtq5u:/eaVDt
TLSH
T113F445B69B901456C3BA47667BD50B03ECA04707E75E6672BBFD048C8F3A44B90D7A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

discord_presence_logo.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\discord_presence_logo.png
Size 328KB
SHA256 e5ec61eb3847130381b8d37828d020794a124e93ae27f16687a29514727213da
MD5 3e0384fa4ae3fed5101e8ec7667111ed
SHA1 9bda1198925ce7db6b3ce156fdc0be2c536c81de
SHA512 fe78f8e475595a0dca66e85e63751c98bf7d46f4dc951f4e5fb1f166a45ebfe6d022b60a755f9e1344c3f7108f5f9297a928ce0270b68635a0d7ae29ae5e7e62
SSDEEP 6144:A571aceKe220dVwLpJhNYxOZ2FL3ipJ7U+24MedFOQm9:Op6VjTpiFL3ipR243FC9
TLSH
T16D6423C4E443BFB98F1D0ABE924C965708A2780CB0BAA02D45D5F0A15CBF95C725F99D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

emote_pack.json

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\emote_pack.json
Size 377KB
SHA256 e91872e7d46a22c9ae0f24b2027209aabdd334aca2237ee4e6b2715490e7d1c8
MD5 0a5a83bcd7c1ce5700f9e67b8f2357b2
SHA1 c56a19d76b41c7bca5e799c973df0ab700422f07
SHA512 8d7b9e0564977e583c385ce76caeaf836123744ac16959114bdd1e3f1c851bf0841f2ebd0b688514e0d635ee4e28e5e0575979499f4f8ae4601b01991dd6fc9e
SSDEEP 1536:0dl1QUU4XTTYljCczw+SLY+8r0WVBj98GkceiDav9rzY67rK9:lDjCcz0S0WLjmiDaJzn7O
TLSH
T1D584F737D6284DFF41FA93695DB45616F8B0032F52416E6B7ABC4ACC0F3752B990AB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loader_logo.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_logo.png
Size 264KB
SHA256 f8401d9b395b117806671b69eadd8bab02a0c4fc3349114e9dc24eb3fd4414cb
MD5 727b0d204a86eff2bd985f8126dac14b
SHA1 454b26cba66611591afb6de9808524d203fd7405
SHA512 06169f061d25f70146b6b5c457c67a44dcfabf27fb58533c1e9e8eca67708aee136c506dedacaf2ac1380ebbc2e40729eccd080418cdb60afa1d6c8d975caed5
SSDEEP 6144:BehzlR/JZDwimwpuFMAsM6EKjtJUjesr3Bv7:BYLzm26F6H+jeszBv7
TLSH
T1F844F151CD47DFD0D86278B8D8BE1F94337640BB01701B631B79A8BEAFCFA988196461
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

catalog.json

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\catalog.json
Size 35KB
SHA256 efafe52d63a6af21822cc7e6a7538d79c181cc96e6d395e2d08c166dc24c2523
MD5 8c7ee7fb4c8eaebd091248521f5a46db
SHA1 b7900b16e015896bea8a9f1ed8689ffe548ae235
SHA512 2f36441e97b0beb080b3a8095405ddd886f453b4fdb1918f6eee6d59b3ffb85a7518f1b1247afa0dce178a557987923e4e9813288ef04c1f1db9e7eb07d416ea
SSDEEP 384:JzSuwS+nMmMn98EgZvbjgvWkBCTm2Gw9MAhWy4F464FAUUgN4fv1j3+XSREOZpIQ:T9Oe3DcbbCgAsAyt0
TLSH
T189F2F816C8774C8B0177D5AB9C84A25DF49E832F82802F67B1B5C19C9FF6E5B9084CB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Beach Garage.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Beach Garage.xml
Size 634KB
SHA256 7cffca6ae849c5cc665b436de1ea4971ec4df97e711933d25b2767381afbfa7d
MD5 82ca8319dbf49edcf2f11c25e123396b
SHA1 ddf04424a81683f338dd60ce3c1143d4b6f23089
SHA512 51d2aeae1c68d721026a8f5baa16048bf543f6a77ab7656211725a89bcf48ed45ddd98c9c7d2dc8e6467d903a8953da956736f3318307ed8e2b479d654a3683d
SSDEEP 6144:86w2yiv684sdHFByWFhR/oupbbUVvKI/OuWyZqrF6cloqJ31w15qmNrt8gVCytNi:ngw/Wc
TLSH
T1D0D4CE202E4CFFBCC4DC40BB38216EDA66AFDCA8C2653529E947F175B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Chiliad House .xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Chiliad House .xml
Size 447KB
SHA256 4d0e4f76c75f1cd72647e802966b5cae5c493ace119d1388cf2a3afc47e1e765
MD5 bc1c2bc7bdad8f50e6c49d869bd7f6d7
SHA1 8fcaf6c2584cc951907570e434d1af9f0e9f612c
SHA512 b9f72fed31e252541e643f5aa6c32fd132809e363a600d1a2771b422703f31b970f9ed3c15f9c6ded2f92057d4c8f1bd16ac0e6ec9f66c3d159289e42a65d71a
SSDEEP 6144:l4T/bDQV9G/8UEb98GkhIKz80HiHdzLOjg6A3RIqPoqfeQB+iPVu8332KOc5yy1a:jkXEq
TLSH
T162A4CE103E8CFFECC4DC40BA38216EDB65BBD8A8C265352DE947F166B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Downtown Stunt.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Downtown Stunt.xml
Size 661KB
SHA256 3b27fe84ee27340ec3793a6fe3e9bcc16ce026161dabb187048484367e81d14c
MD5 aead4faa254a9988ea3d284c39c0cc94
SHA1 f9f8f001ce4e30995a4ae109eff133d885971b6b
SHA512 eb6c9529a5c84a64f13d4d38e3dc8a850a78f8799721ce8780792f0e724fc36983597a2bd18fa49c875f81c09d680861deb6bac6d2f038178ca9404478d41b74
SSDEEP 6144:8YG5EHJ3pHN765vprx81aZAXJDSSmVFyjiqYvTnpkNa4Vdf4YMfYUq4CHwDOCYbO:sRtFgu6UJaNKJr
TLSH
T169E4DD603E8CFFFCC4CC40BA38116EDB65ABD868C669352DE983F165B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fame or Shame Concert.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Fame or Shame Concert.xml
Size 2.4MB
SHA256 88faf9ef836ce1d60178422a1ea2b1bab8871297c73f1f32f76504714ca99e57
MD5 21390ca87116c2d01858e2bfb54b3c78
SHA1 361f83b6c56a378f64fa19f83ac2d927e3260f4a
SHA512 d933afcf97dcc029195a5ba981db6723a00d56f0ed3a7da66f2e4c626d601c88f4734450f03431125a350ffa9d55b5f395acd068ab63b3f8b523470e4a80a952
SSDEEP 49152:2EU5s7QuVP5ryZ1t1QGICxtwihfU6pZ1+J8R5Tcg3VL/ZR9qIja:h
TLSH
T1CCC5CC602E4CFFBCC4DC40FB38116EDB65AFECA8C2693159E947F126B05652839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Flying Apartment.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Flying Apartment.xml
Size 430KB
SHA256 191ef119f9abda1fdf2685b94eddc9489337e6368377668e53f37429ba65f84e
MD5 cb947db93f5579ad6b523e949627895e
SHA1 1c3ef45a07a4a0fb035d71f18678872fd180e3fb
SHA512 26d55f5c25ca4c299be7ebf4d6cec5964d4498c679a5606e833a2e5af203268bedea9352dbb70d7f53416d13a7f5c7fcac36c2dd1049e7c9db77cf0377187b54
SSDEEP 6144:BcEIQ5Hx+Tq4N8l4xgpZxRWI0B8COvKd7kfovxa80ZO0AJw3NzCrX1Z3OmYl3b0Z:662pRvdh5aBQ
TLSH
T10394CC503A8CBFFCC1CD14BA3D202EDB65AFEDA8C6A93159E587F06270465382D8DC95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Glass Bridge.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Glass Bridge.xml
Size 455KB
SHA256 1a52b3b2bbd1c9da6377d3b5611060ea60df1b68542f9c70dcfe0bcdac279e90
MD5 9d7448bbcb84aff22473edb5e37e92ae
SHA1 7c1e718f189d73551e889759cf3254c8728b0a64
SHA512 835f3a5c1a4fd5a8d03736a67a7aca8c3237e7fbbf0271c7785a88c728424841fd58156d9b5fdf40f35f4a5319f1aff9dfe80f141137f788614f457cf10a296c
SSDEEP 6144:SPEd4PRiNgTMK2yZjGdRAw0I48hSSFrFcSVBUgAKqqdTaTJFpwsDPZBkNF/Gtqpg:SXJj1F
TLSH
T1ADA4DE503E8CFFEC84CD10BA39216EDB66AFECA8C6653119F587E162705653839CD8E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Holy Beach Mosque.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Holy Beach Mosque.xml
Size 299KB
SHA256 ebd1c9920976928663e2c1044a554ec93ca22ffd927fac248b513e555c8a8181
MD5 a4eda24d813ad199ea258e39bba55d49
SHA1 1f5140ca6462585ff0f4ce838b1a9639e65a9f30
SHA512 64f91ab6caac1de2c8dc775ed9fd3f92a439905628eefa85c241691f343a3cbf6875c6dcf7c83b7118e96354d8607d69fe3c823a4e6ba2a857aed32188b70efe
SSDEEP 6144:tJith/7JvI4G94aOIDpwCjyj6kuy9lsXRvOr/MIF12qihMqbtFI5Hxm0+KmAsmU8:9biD
TLSH
T1FB541F102E4CFFBCC0DC40FB28216E9A65AFEDA8C6693159E997F135B0864283DDDD94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jail.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Jail.xml
Size 585KB
SHA256 8f669e7f1a4ec69d2de53c8ea3f303cf05a3c73eda9546ad231f73972739bb2a
MD5 ede9f97f0cc90084afbf3bd32bdce5a1
SHA1 dbcd17386a571594b39c93018860c4cef38572fe
SHA512 88cee1723ca9f4aba7214f984d418c867c2283d6ab1897d967e7dcf315e428f44fdaeee137038b9808370b616edf04f9b61d32749ae3022980576803a5fde3cb
SSDEEP 3072:UnT5i3pNt7xT1xu4hrpCec7VdY/K12V+kp6:UnT5i3pNt7Q4hrpCec7VdY/K12V+kp6
TLSH
T1BFD423A090C871E7F43BD1A51368D39FFE64A9D38E943039F18C8B9B0F7A46E5A07255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LS Speed Ring.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\LS Speed Ring.xml
Size 526KB
SHA256 2c30daa1d5993639fdd30ed1893a5433f2f2795f60dae815383d0eaa75f6188b
MD5 2ec61d105e3e93e422cbfd21d1f33872
SHA1 3f02782ad3d1ce4710d4d79010a30fb1839da6a0
SHA512 f8c55c6c63a4c3cabc531b9fcf2e68aa328f0247f4676613ea2dace0180b3f2915d2057dd74eb5ee83278b43dfc9d973c18d1c5312e88ed72f4ac2f58d0f38d1
SSDEEP 6144:NgaYnpvBURNvyJcB1a0LQLNN4vcKmlu67jxHnUVRNJw7CvUW+lYNOpHWP76mzs35:n4/Z
TLSH
T1D4B4BD603F4CFFECC4CC00BA38216EDB66ABD868C6753519EA47F166B0565383D9D8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lost Angel Festival.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Lost Angel Festival.xml
Size 434KB
SHA256 1ce35d493e6957fb1ccd2b6555dc57cf4d6e651b2151254b34ff2ce97d5263e9
MD5 e958bf9dbb834bd43f19f1438a07d75d
SHA1 eaf9993420706624b59aba4b25d7e86ee7c9b84b
SHA512 ebf73f2a7b77e9bf9bddd6ae38096a9a6b5a304f49c1e2216807d53ddb7bf864864b752c3aaa0653dfbbfb62c862a0e49c3c3ab7efabb66be9f99b1a5b6b9efb
SSDEEP 12288:jw4W13U+BZ6XxdT7BvR5eMQDjig5jAuXwpODb+rhqCSTkxD:jw4W13U+BZ6XxdT7BvR5eMQDjig5jAuI
TLSH
T1D994EB502E0CBFBCC1CC00FF24516DCB65AFADA587692198EA97F136708616838DDEE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Loud Apartment.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Loud Apartment.xml
Size 414KB
SHA256 8669ccca4540c123334c22da87c3a96bfad18f917d90240e4771425a01c44847
MD5 98234c2965a400d197b502bf27c68cbb
SHA1 01f6435b09889526700182687dfc5ecd213991f6
SHA512 3a39771f5779a5a0cd9748ca8e23bcf6fc3be4133c6c1ad7ca1d21df86b20d6897ce040d31ee42ea747dbf16a4f84ccf60b59926ca7a91b22d3812c6dd1bf7c9
SSDEEP 6144:ByXHbLOTGTR7ymVT8URH2HRdo48N3BYyY2ynfXQV81xddK8FbUmLx/G/tcxpd59p:LL
TLSH
T10A945A603E8CFFECC0DC54B639657E9B56AB9CB8C2A62119F947F016701292C39DD8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Maze Jump.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Maze Jump.xml
Size 209KB
SHA256 c873a191a965d3f58e4360f93dfca68cd5f04cae0d548d9f6e55f2cdf3d75859
MD5 aadcc1303467268b3f76ebc27e2c0e5f
SHA1 8e69f946ab25ca02b58366b2d50e6b0e8b24c4ea
SHA512 a0b5036489f2a1c64e6f9f17318b1924e926669d9d9353945997da11c2ea96c53476b28dde3c8b3fd8e7db73d9488a64b304fa384a08416c6e144707b693d2ec
SSDEEP 6144:XwKS35wRAFjmakMMWT3z3nFrHSKXfRs2t/Vn288LjH4fZubs3QLLRj+PXejK1dDX:Zw
TLSH
T12E240F102E4CFFFCC4DD40BB38156FDA65AFEC68C6683529E957F139B08642839D98A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mega Nega Ramp.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Mega Nega Ramp.xml
Size 290KB
SHA256 bbe92399c464a9b31ae98e96917bfc691c753a10bf015a78302648b2e14edfdc
MD5 db33ed1af4a8764c0acc40a470d629f7
SHA1 6497aa723f6097ea4b2bb21c28a08721a358f04d
SHA512 0ff50ee5b879948363dae708e74e2e8192fd0892272a212e4eef54d68e16f5e2ffd236a906a69f546eaef039e105bd83007a63c0ea42725d8b1fe645fd1e3b83
SSDEEP 6144:8l0QQLH9cj2GzRqz5iScKV5w7UCd2H7IuJxlNsheXZ6EuTfITUam3RRNGEC0y7gR:9k
TLSH
T18354CD603F4CFFECC4DD40BA38116EDBA5ABD8A8C2A53119F947F166B05643839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oil Rig.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Oil Rig.xml
Size 804KB
SHA256 393b757d272d07abeef95cde42b32f2ac7a76328236d83a22c2837b8332667a7
MD5 43c13b3135a162f4faeb6bcefb519dc1
SHA1 951e9a74892d0461a9f23fc84ddf5ecf0b5866e4
SHA512 81e5d49a22353cec700ed08812ce70676802c5e7e8d97cbbe7448910aaa15d793c9f70421b74c230836a777b1188bc938c21989003b5f11093d2366e87c4780d
SSDEEP 24576:/MP2O1navCjv94tAeb3UJrnER3X7TPyE0TsW3ikup:/MP2O1navCjv94tAeb3UJrnER3X7TPys
TLSH
T1D40506A090C961E3F43BC5E91769D3AFFE64A5D38E90303AF14C8B9B0F7A46D1A07255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Airport.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Airport.xml
Size 866KB
SHA256 975da78cd4452f4211e54596840879923e96c370d255a3775bddc1d808ad87d1
MD5 6b2333f1fa55a401f911943b4d516903
SHA1 a9a213465c64d5bf85613fe032a76cabb104c704
SHA512 ff8eca0e8737257bb0e518140ba3c8da66ed173b96e7fa4d6798abccb2018e3dca1fd0e7048322c744a19c280b5a806c5e508423ab0a3f6cbf6e44dfc7ecb29a
SSDEEP 6144:Gcn0xXSsZr5DEFONwDGShRn95MKq6+IbIln5bFHov/Fx8DPxlt4smMBztePGZm/3:0s2jpT0IWILEc1E
TLSH
T1D015EC602E4CFFBCC4DC40BA38216FDA65AFECA8C2643529E947F175B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Parkour.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Parkour.xml
Size 405KB
SHA256 a3120ff898587d421ae7392d04deb1f21d79e144d80a71e486002101fc030656
MD5 2d5cc4eea3c47ade86afaae85d2c1c9b
SHA1 b848cca26b318df532ec417a7eac325f65cb8aea
SHA512 6fee190b06987cfed4d5531683a6dfac055e0f5aed7ea0ffeed77bc8eae84c28e4d7802a052fb2fb0cfb2c1b31045088fbddca83ea98c095043a4e6667f6211c
SSDEEP 6144:HiN3WK+I8QiVVfpgWu1kp4mPSVY4Io9Rs6LHN6IdKfEmmKJei/gTVQ+wIyev3TaW:aG4
TLSH
T17394FE201E4CFFBC88DE44BF15191FED25AFACA891647565DC73F13DB08A1A438A9878
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Stunt Race.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Stunt Race.xml
Size 211KB
SHA256 0a22d9b8f416a63cd0de0fd12111f3997224527a6002780b6241009788065479
MD5 6a3a26c7b828b1ffded19c4bf8d65d38
SHA1 fa3542612785aee1207484ee1e4f52376666ac0e
SHA512 b28c0bf03b3e640ffe265c2bc2cef7781e683d594ab3f5b17cc412e1a4de605dae9588c219fac433983bcd25e84b7fca2b5439f67987370f6fe9ad8b7a046b1c
SSDEEP 6144:k5jBWL4FbSIATDdBhsO+Hw+KUKURSyOBYeVX3m+m9ORmGEVB5qcWD8o9pkN3jPqu:e+Ez
TLSH
T19324CE503E4CFFECC4DC40BA38216EDB65ABD8A8C2A5311DEA47F166B0565383DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Skyscraper to heaven.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Skyscraper to heaven.xml
Size 542KB
SHA256 bd1e88e915e183285699e2436b42cea70601029c7c10d4e3ba70dec59cf38ddd
MD5 ad492d2e0edc5c0b0908ce5e32a503c3
SHA1 5f8561277385b64c079e3979ef0a82d8c605f748
SHA512 01f4f69c429294c6b04a96b173c27f4c9482ff982350c238293eeba654f388e02aee36eab2bc98decb7460975cf0b373b8ae890a1ebc05a99f189e067f6c75b7
SSDEEP 6144:xMAXYPmc9u08OhW9hEhVmgiqMqVVKBi8jx8faArF4N19q8Zsm6xEe+Nc8oHb58po:xe
TLSH
T1CFC4BC503E8CFFECC4DD00BA38216EDB65ABD8A8C2A5351DE947F166B0564383DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ultra Ramp.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Ultra Ramp.xml
Size 202KB
SHA256 17d2f340ab0827161bf97024882e88f90e66566ec1b28745aebfb76b694396c2
MD5 606e1767e1811389ab026dcf207cff24
SHA1 549faf31d5cff113fbdf44c86eb5da3fdeff9e3b
SHA512 df5fec920ec7346cd5662ff8ecb40a6481fb4f85d86367564f19e4ff1acfd248b5f42676c1c75e437150eb484433a7fd85d2cd7a129c872752e264ebf3a32ff2
SSDEEP 6144:AcrQrnjsx9zO/YH65JYL0KLIhDaB2oZRab3DIZ45fQ87dw/Yg55hbrElH7+MUyWQ:u
TLSH
T1CC14EC201E4CBFBC88EE88BF15191FED259FBCA895547565D873F13CB0CA1A434A8879
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Yacht Party.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Yacht Party.xml
Size 2.2MB
SHA256 cb61cbed74b5435b79c072feb142115b4e5d06c8687bd9aed87a7380deff2cf0
MD5 cf75cb70c05c91099077154286ecf615
SHA1 b65fef3aa517714fecb7ebc0d9fea79aacc32096
SHA512 fedbf337a6b91694a418ff24f4b2c7e4019df346234a53623f7a3bc0a3ab077b49e38ff59af8a93a9629c6ede3d30cf3d99c976c04177eb823c53e710c117032
SSDEEP 49152:9xWusrS2cKlg9fQfgExKJLHA5o1Td6jQkwLFZjHkCX8Vn6sGtvJ:7
TLSH
T1CAA5CB202E4CFFFCC4DC40BA38217EDB65AFD8A8C6653159EA47F126B0565283DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apocalypse_bus.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\apocalypse_bus.png
Size 128KB
SHA256 d9782b9e200b0637e01556e7c392f428a26ffdd464bffcc6c1149106098ae924
MD5 9188327ecd3840ac8a4827d078b5ce85
SHA1 3ac233d39dd3a5361bafb2b1e94e89596a406cdb
SHA512 23e3f263fd6474a2ecbbe6e7e828638f083f082e1badc249bb6602a9d519d8061a80cc9bc76e70afc0d7d89b124e9958f3b2bc6774d05ac7c87c37b573a03a7f
SSDEEP 3072:kJWCBwf/U4iqNr7FN4ybumxcTmzdmiL6fZ0nf:kJRBw3XiqNr7r46D6qzgfZM
TLSH
T1D3D312A05C20FD3B0255B15476345A2D2CF02B63DA992E791FE918D6CE5BEEF8C08A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apocalypse_truck.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\apocalypse_truck.png
Size 142KB
SHA256 f1a9aeb37e94b8ffd7f4e4936512649edaa5fc950a28c6fdb26456f73b7a5b00
MD5 c0bc0f5c62d7fba423f5c0c6c93f8801
SHA1 a03c61ce52852dbf22c927908696c37d3295cbdb
SHA512 eafd34db63e49031c2d0ea81cecffdbdeecd36ba1ed4a7c963019f1846fb56393b43bc9637739f2cc110e3a9ff442796afa7c9333bb187998192c7dd94ec54f8
SSDEEP 3072:fFhSL4V867MbFRXAGbAFpXkMz5JBSljEOeOH5jJXKwAhRCPgSlj96L:TkiGABkMzz0JEO55KCPgSNIL
TLSH
T18AE31211865D967988BF74FBA880350DB0C95BAE72ED870DC8360CD9A52D280DFF19F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autistic_hooker_destroyer_robot.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\autistic_hooker_destroyer_robot.png
Size 183KB
SHA256 52e10a55b59255b6b0ed707987ec47d9a5e9d3341bacbe0aff5dead1f96885b0
MD5 20ff07a672b33d3772839eacb92c1170
SHA1 f72fa7233e7aba55a8bf0d80649eda917c0d306c
SHA512 ba5d72c15dabba3262012c2254857428bfda586fe3ef467f94b70e2216244cb29029f1c5fced896a80f10e793040b25dda662333c51fa85b0a961ab8d54b94d7
SSDEEP 3072:PqJ6HAYLHnqUtvI2jGvv1auGvGBX+IKar7HqrGePPR98Kf69L3iVU:yJ6gYLqUtvC17RBX+Itr7Hqde3iK
TLSH
T1C0041293D5F49CA10ECA6DB814807E297E5B64FC38B6D0B45D39CA96DE06F300D93A93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beach_garage.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\beach_garage.png
Size 227KB
SHA256 ef44b47a336731b26f5bd57ba62ea5ef925c67a82037fc14d13048e93ba641d7
MD5 b80561d9cd9f170fb6c451f9afceab7a
SHA1 6ea36952a4257d7d293564ba18434a71f022583d
SHA512 7be83b355bba63bf68e2c0877c357796a742aed6a1c24a93e6696100d9527a4976e09005e8c9741642310baeaca9f64fd74cf969cf4bcb58f44ad1d9dfd01abb
SSDEEP 6144:f+WZeAtLJ9em1ELqtk/BbG1j6BVAPvzOVfdLgmJIIgT2BCK8x19tn:fvztLJ9oqC/xG1eBcOVfhTJIq9Ypn
TLSH
T119341222667E46375AAB7BC72E85CE3B11DEA247DCCD48F4424E51B23A08D6D035A3DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

better_festival_bus.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\better_festival_bus.png
Size 142KB
SHA256 e8ccdb42c2158b02971de036c5c95d9ad3a9994b44543ae9760f7ba4465b858c
MD5 bc0cc7f18b8240603f9d7e26013a8ff3
SHA1 20a182184515859daa2476e0860e3a0fc57605c0
SHA512 62531aea4db4f6d567b01b651657d78062d7cbbb58779abe82c2762895328513e03748890deda7dfd89bb287bb75b3c423359b063d688548cbbc96f24c804cff
SSDEEP 3072:NT1QsQMt+/cYN+eonVCUXL0GEKbOz43H43SC3SPMGpiIRz1OxsY:91QsQMt+kaXLUXnt+43HtCwMGdzUxsY
TLSH
T1DAE3137B005D98CA01EC3F4148FFEABA1F4472386AED51959012FBE8EBBD54D4C2547A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bighead_angrydog.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\bighead_angrydog.png
Size 1KB
SHA256 5e9d03d358ed5f176493a6f8e3b3256958261fa31c56653b6ec896244dd4afde
MD5 1e5ff9bed061ca6fa47e2afefdcdd042
SHA1 0058201760d1b4bb426d76fc5d8632592f74abeb
SHA512 a7567bfe2c072a264c8032c3ee85b168eb54399cc5a341064d924c3c78b898cd6b7e95cd23bb08fb3d0a9721054d022b0c3f90a9ac8e776ae9a7b6e1f4c60f0e
TLSH
T171311A73664376D262FFFDC882D720CC9C127D26086B15A602D8DD624322773925B6BC
MD5 SHA1 SHA512 TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\app.js
Size 15KB
SHA256 ae17960ccba0553025fdc43629beab2aa0da7bc6f4ae5b703aa85f31c68f79a7
MD5 2fd04ddbd4904d5c54b2f684568629a8
SHA1 b73b5b5338147f60cc0b29082f1583a26975d064
SHA512 5032751e8ea64b746927298c7763f33540bdca8959be14d8f73e329de03a2d0142edfd1d5b4dcf7f44d4073d3e5c5fd7515d0368483c257038a4c61a07b0b7ee
SSDEEP 192:KU1I1S2j2aUqVCNsD6qln7bgAo19b0wXOhEkEOQK4Dey/ngLAne1X6R6c3PD7CrA:lI8zangr/QEkEfKGnyAe02dax
TLSH
T12C62A4EAB5F52439083B40B1D39FA5257B7A404A1286D96076BCC85C2FD0AB1B0BFDD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\index.html
Size 8KB
SHA256 c2f20d4008b969ec1d15831eeb1d9a5aac9cb18924a3bbd2bc77f99785c79bb9
MD5 501d6c22d537a17ecc2ab446e6001ab9
SHA1 ab1ca6649b04b6b7dab6a54c07145d0e72f4ce68
SHA512 5f9920f04f69b411e4fa120f1af958e008837402008cd279d6f0fc03150afadf1a3784f75a951dc1b6179a2cd6056b35e39f5b670a7b013272dbe4adc0db3a02
SSDEEP 96:gplnOELrw6CYcKa+efzj1JG7POMwspWneyOcOcO3A48N4MmAEin5EdXD+dvqdukg:gphLTcpvLG7mEbNffwxMU5eKdCUH
TLSH
T1F8027871A4F46933429B81C67AA15B1B3BE4EB47CA9B220072FD0BE44FC7C91EC1B452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

style.css

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\style.css
Size 20KB
SHA256 63c2ba52fa5e29e615fc6dcf4c89748fcf8186e0529bc9587d082ae12281597d
MD5 966691c45440094e11caa1e9380022c6
SHA1 4e4659eca40a675da609bb4bbc3cc14c2577dd83
SHA512 f067ed67fcbc4066bc9d02b06563b1192494282cb41dba594dc76fa6d51ccd061ba4336105dafdf6898fa18b8294a6b8b8d5f33b8d8c2432568b862e36fce467
SSDEEP 192:Dbiv/CZHWtalH/bfJ0f9jE3ZmD1iPSJw0RF6N5FQMTMkDOFJHidvrG8ttCQ6kRqz:XEKJos+fVEUhk+JH+1cTUmvS0SxSf
TLSH
T17E92D97633255214B42BDBA83E1BEF8BB31CD6139008A77C6EE0101CC3CD365A97A799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

update.log

Path C:\Users\Admin\AppData\Roaming\AKMenu\update.log
Size 783B
SHA256 dd99f100598bdead31f3f515fd9c287e42a0bdae5716eedea27cc7f7a116cdc5
MD5 2b38ee1d59a676b380ca6fe318d10dce
SHA1 3ce7994e46f40eb9b57075b716a765ad38766d55
SHA512 9af70fc3179fd05973380128f91de4b7da13336f7341780ca7df6c620c1655bcc1ba3c60e21f72b354dd6bf76ed64d7fdf4b16932860af5040499fb4475234dd
TLSH
T1A20161EA74F4842924294350C09ADFA9B40637180BBBC711767BA6CB6C657285EFE347
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a3e97ce43afd68262726f84ec232abab11df7efc394d093385538cf17716241f
MD5 8ed3f079ca6301da4304c94754c1ed37
SHA1 512173d8d8f8375c6a8283491bc5d27f6508030e
SHA512 c5fa9c655c8787672bd073a9266cad3b1603ba09c2081056356cf815b42c1357959584c28f0205c1c7e9b4879845e2d03a0302127d85b073d579036ab1314435
TLSH
T1D3D0112B3B020A38CA30B2330002AA082800E20B830A8200A82CCE2E2F280A00A038A2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 36df584d67a5222403c00c7372bf3093fb8cd89f2ea439ff9c7c0ab974d9abf3
MD5 fa2614a4e9a18076783466241faef8fb
SHA1 1389752edaebc66e7dee465fbe5c0255c0eed767
SHA512 cad2e713f45de6c236955c7fe5a8c0e5d858a754566f2256d2fa8c222173c09a6d4a838bd8679ccc9bb2075b628405e3b89b80dc1162b0a2bdc9271b1205b1b6
TLSH
T1CBA0025557810067D780177130C5A95536345A69D60B560192D565F5D8A43B06909419
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5952aa.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5952aa.TMP
Size 48B
SHA256 08182da224bdcd5af47e1c6dbf6a5645cb86a13b9c7aaf704e4d99c062124cad
MD5 91e64da26eca0b5be765c45c716352c2
SHA1 603a118800bc16f041bd85ac74bc61e5df2ef92d
SHA512 fa0c20e9816994e0dabadf9812a3dd205aae0a8bb5ee57e20f65923a869e3cd09bb2b586eb3115389d6bea476d58a94c9d4198605923e9208437d139c592b7ea
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 b7a2be95b210b0bb85049de94a9a46da70e77a0f679b0757afde5faf107fc312
MD5 7f8e2caa271417d3a25c4fea227f729e
SHA1 cc1f8ece7c7fb76aa33538169a0a27e02ebf92ee
SHA512 0e08cd1d46ac4a659d11c0afb39fab894870ff94090ee9d287392527a7c4fc75943bbe7c2236e8de2dea065b407e6ee003ab5a9238be1d8c4cccaefd5655a958
SSDEEP 3:LstlNllkll/llADGl/:LsX3lEtOGl
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a23b6.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\Network Persistent State~RFe5a23b6.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 79921c495bf360ef3a4708c8f5ea092946b4e000b4ce9c159d02679dac95cefd
MD5 c6a36273adaf474a4624d8598694b3d4
SHA1 a89ecabbf3997a1c100959b9e5f148e82c509abf
SHA512 d8618bb512a22bd8e4aa5ad89a5fc032165fdc5894ec3ad1534a9f218e83122f9bcd2e444c16016b29c71426cfac5fa614fa2fa34f5f127a24469f0d7203fe51
SSDEEP 96:sty054sUfdb9hffHZ8i0vhE7kxJm/7qx+WVHMSm+uecMDA1idQjf+glPMOB:sty0lSfPZ8pauM/S+WiuDAwdOLPMC
TLSH
T192E1C7029E6879778CC7F6197A25BF12E2F5507365D10E58ABFC861C08DA6CD620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 6dc187d5a655303713830c04e63a98d224d7bfd835c3c172f2896d1ce93ace43
MD5 92eda37e5307c2413adee2daacdce23f
SHA1 2438c10b2ec2f62d2939341c17f7d375f4c55e3c
SHA512 4052c45a2d7cc20f022529e8617be91cef64b8ce9fa4fc86d1cf79b7b08d702ce898b5a8aa03ca37558c32e134775f6eb440abfec0a16efe1e0c16bd44d11b42
SSDEEP 96:sty054sUfdb9lffTdZ8i0oE7kxJm/7qx+WVHMSm+uecMDA1idQjf+gU9PMEB:sty0l+fhZ8pFuM/S+WiuDAwdOaPM8
TLSH
T1A8D1B7029E68797B4CC7E20C7A35BF12D2F6507266D10E58EBFC866C08DA6CC620790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 db0b5ce883ec8b1d50e16b131958e78ef30690dae3d71d9ce11db9c374c27cff
MD5 ce7da362a573cbca2c4f0173f774d38b
SHA1 0bd78af5ce448714b110410745bd730d4719a37b
SHA512 9ea97d9ff673dcf76b13da21e558f548005fa1abd8de164e9ef9290bdb2be391f2559efc3bba1364cc469e5704f0e6bdd87a8cd7f85cc280065b17bdb484f09a
SSDEEP 96:sty054sUfdb9hffTdZ8i0oE7kxJm/7qx+WVHMSm+uecMDA1idQjf+gSPMEB:sty0lSfhZ8pFuM/S+WiuDAwdOIPM8
TLSH
T193D1B7069E6879778CC7E2087A35BF12D2F6507266C50E58EBFD875C08DA5CD620790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5954bd.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences~RFe5954bd.TMP
Size 6KB
SHA256 2c6c35f6cec7000f280a1a4b3bcec571a3179bf163d36fb52a1f13a82b98e9cb
MD5 e74f744147fc07aea82d1448746a1bf9
SHA1 f113084ec2b4d55e17efddb3791dba5bf5b63a68
SHA512 3001ac14570cb68f2c1dd7de2855e4ae0726841147bb5a4b4ff9e01b8d8227c7d5359606463f278f7f34f7583eb7ec76457822f40294ff62c5bb5d9d3f1ae01b
SSDEEP 96:sty054sUfdb9lff7dZ8i0oE7kxJm/7qx+WVHMSm+uecMDA1idQjf+gU9PMEB:sty0l+fZZ8pFuM/S+WiuDAwdOaPM8
TLSH
T1A4D1B7029E6879774CC7E21C7A35BB12D2F6507266D10E58EBFD866C08D95CC620790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 1KB
SHA256 d1524a33ba87c94991bc9bf56a7d5e9395db1968eba443d15e9276faf4e181b9
MD5 e9bac854abaa698e353d5c12749f7d58
SHA1 61ec1ef6d95ec4d40acd142f81d542a5041e09b4
SHA512 a14595ad8db5a90329eebb298af3aff881451897dd40a23fc3ed6761511ae89e1b7497ddb61762471918dcb96ff649511e4ca46aa457de78714e9ac58ec584f0
TLSH
T1243165B3E4903E326DD1A641B252AE677F202137C1504E88A2FD4B1D41D669C5222C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 2KB
SHA256 1cf8f2445bbe633c800a3501e401f999d1bfe5e43b2b866c606521f160f506fd
MD5 ccfd526c7e4b5563b412a4246fa0659b
SHA1 3b1281287ee8b6ef4ac9a231b5872dbee9c553b1
SHA512 9b059d0053b9ff2368d9b00e3be78b7c865bbeb2ee59cf5918cf5c86d39fa503beed87eb905f971f499a4270f636a2c32fafaf2f35529b0af6a7c91e324b3d6b
TLSH
T13251C773F854BE378DE29644B6063F22EB346166C5522FA496FD0B0D01CB65C2312C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 3KB
SHA256 5a42852f46ab97e670051bad089bf1688b943469864d92f56ffb6623122b74e9
MD5 52a5b33d22b6dd40dec1f1ee60b7eb8b
SHA1 ff34328b423447d2a40c538082839121c037f597
SHA512 38f42fe1587c957579b287b1d0884703d2329247998516e360f6899e9882d6a53613f85b9b89ba739b0620ded151b6aeeeaf7f747961902751f2c4970b7e7cdf
TLSH
T1D6718467A8A4BD374DE29944B9862F16B7646137D5913FA8DAFC0F0D01DB3981312C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 4KB
SHA256 7a380c690fc1cf6a8a257b78d18f2eb03aae33f3bc799faff5d4eabe2813992a
MD5 7d5fa18ffdf83bb4b6bd166ea7a4bf5b
SHA1 a9f19686121a4840b986b6b47510e48002821502
SHA512 02995ad3d8c9032ab2753e9d96b87dea74482ffd0e6fb3d9e46cbd1b655d53ebd91aa0827e1d2d6eea1eddedd4df63a17c0d851da854f3798662108ffb297c79
SSDEEP 96:zu5bNkCErfUozep58Frh/cInURoDotoiagaD0BzZ36Gt0Z3LHZ4Tyl8a:zUbNbPozJooDUD5c4zZ3AL5gk
TLSH
T11581922BA964BE274DF2D944B9463F16B7646027D5952FE8DAEC0F0D01DB3981312C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 4KB
SHA256 ded2b4c3afb587d8d0f9a7b400872fa7c54a633ae80d2373e4f0ba0cdeed3bc2
MD5 ed8201e85a33e6565a327f4b1eda46a8
SHA1 9f913d40caed72a928ef87bf067c2683d48098f4
SHA512 aa5afd713653d2e753686e413f88a5c63eb357acacf17a7dd3e4eb32dd6b95e7abf5b78f4872244b259c1283e6a1ba035cc4b06d06f9df2391dfeadad1d62b7c
SSDEEP 96:zu5bNkCb1rfUozep58Frh/cInURoDotoiagaD0BzZ36Gt0Z3LHZ4Tyl8a:zUbNbCozJooDUD5c4zZ3AL5gk
TLSH
T176819227A564BE274DF2E944B9463F16B7646027D4952FE8DAFC0F0D01DB3981302C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 17KB
SHA256 53a0fd7bfd2aac220f368f985bedc06e2b3e3c980a47d83de3eeb8d683a37e83
MD5 1d1f4a2e3e355c2dcc4828e8a37698eb
SHA1 bf2d12cadc5f3d31ff7436649290a40c33f65529
SHA512 0d8908a7cffe701bdb1b816b60cc30a458cc680cabedd4665eb9fd78fb192d874cdad06adb0aaff0c264c0570aec63490a42c9b4c932ce21b89717bee871e8e0
SSDEEP 384:zE+aQikB+z/xvxjg/qhEwNbv3olctXOSP3B2UV9zt:n/UxvxjgC+vcOSP3B2UVFt
TLSH
T155827D3BD469BE2368F3A641765A6B9BDBB4556251C12EF88EFD1F0D06CB79C0302C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe58fc9b.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State~RFe58fc9b.TMP
Size 1KB
SHA256 d9ff10c247b197de6536c406702958e9b86d932146531becb4f74123e2254cf0
MD5 14a869326f08b04d517abf21905d7b98
SHA1 c24a8ae2289e9f606569d60a7a16f5f706ccec1a
SHA512 7bad8e40ab51983e6c6b5e77550a27b7c5b4a30b2a2816a8a32382c454ee5b051f84c2a54919b324bd02043d1be4204be4efec05529a45142d6069bef2ac9cbc
TLSH
T1C62140B7D4943E326D919981B112AE9A3F60613781504E9CA2EE0B1E02CBAAC4333C37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3180-1174-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1171-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1170-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1165-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1164-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1163-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1169-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1172-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1175-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3180-1173-0x00000288C1550000-0x00000288C1551000-memory.dmp

Download

memory/3516-719-0x00007FFAA6AD0000-0x00007FFAA6AD1000-memory.dmp

Download

memory/4264-618-0x00007FFAA6AD0000-0x00007FFAA6AD1000-memory.dmp

Download

memory/4264-821-0x0000022FE6860000-0x0000022FE6975000-memory.dmp

Download

memory/4872-689-0x00007FFAA6830000-0x00007FFAA6831000-memory.dmp

Download

memory/4872-690-0x00007FFAA6EA0000-0x00007FFAA6EA1000-memory.dmp

Download