d5cdc14feac6c099b6e3558f1b7046319d8abf54e0ccc559ffa3d39e944048a5

Analysis

max time kernel
151s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/09/2026, 09:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 82.9MB
Sample260922-laa3cssfqf
SHA256 d5cdc14feac6c099b6e3558f1b7046319d8abf54e0ccc559ffa3d39e944048a5
MD5 ea0adbae866065dca014250267f228a9
SHA1 97bf8da53277c6c2c8215be8af40a31bd63b8ee7
SHA512 44046d0a8a08695d57d441fb0561d021e263698d3724c52741e00445a0d7da2665346ece53392e90f92b3e69a78b97473e5f472d262c26765596e30582865579
SSDEEP 1572864:11F+FAlMLj7b2h8lMLj7b2hpzLxjXkO/hkoE:BMbqGMbqpzLxuoE
TLSH
T18E18E167A2A110FCC069D1BCDA8B5963F2B1781807759ACF57D00A421F7B7E4867EB23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 60 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1728990510\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_173206722\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_173206722\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-da.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1728990510\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-as.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-or.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_1728990510\crl-set	msedgewebview2.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4380	msedgewebview2.exe
4380	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2980	msedgewebview2.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2692 wrote to memory of 3356	2692	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe	91
PID 2692 wrote to memory of 2980	2692	2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe	93
PID 2980 wrote to memory of 1932	2980	msedgewebview2.exe	94
PID 2980 wrote to memory of 3832	2980	msedgewebview2.exe	95
PID 2980 wrote to memory of 3832	2980	msedgewebview2.exe	95
PID 2980 wrote to memory of 3832	2980	msedgewebview2.exe	95
PID 2980 wrote to memory of 3832	2980	msedgewebview2.exe	95
PID 2980 wrote to memory of 5896	2980	msedgewebview2.exe	96
PID 2980 wrote to memory of 4904	2980	msedgewebview2.exe	97
PID 2980 wrote to memory of 4904	2980	msedgewebview2.exe	97
PID 2980 wrote to memory of 4904	2980	msedgewebview2.exe	97
PID 2980 wrote to memory of 3000	2980	msedgewebview2.exe	98
PID 2980 wrote to memory of 3000	2980	msedgewebview2.exe	98
PID 2980 wrote to memory of 3000	2980	msedgewebview2.exe	98
PID 2980 wrote to memory of 3000	2980	msedgewebview2.exe	98
PID 2980 wrote to memory of 3000	2980	msedgewebview2.exe	98
PID 2980 wrote to memory of 2536	2980	msedgewebview2.exe	102
PID 2980 wrote to memory of 2536	2980	msedgewebview2.exe	102
PID 2980 wrote to memory of 2536	2980	msedgewebview2.exe	102
PID 2980 wrote to memory of 4912	2980	msedgewebview2.exe	103
PID 2980 wrote to memory of 4912	2980	msedgewebview2.exe	103
PID 2980 wrote to memory of 4912	2980	msedgewebview2.exe	103
PID 2980 wrote to memory of 4380	2980	msedgewebview2.exe	104
PID 2980 wrote to memory of 6108	2980	msedgewebview2.exe	105
PID 2980 wrote to memory of 6108	2980	msedgewebview2.exe	105
PID 2980 wrote to memory of 6108	2980	msedgewebview2.exe	105

C:\Users\Admin\AppData\Local\Temp\2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Checks whether UAC is enabled
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:2692
- C:\Windows\SYSTEM32\tar.exe
  tar -xf "C:\Users\Admin\AppData\Roaming\AKMenu\assets\_ak_embedded_assets.zip" -C "C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web"
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2692.4120.361571423738662976 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:2980
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView /prefetch:4 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x110,0x194,0x7ffdc6f15fd8,0x7ffdc6f15fe4,0x7ffdc6f15ff0
    3⤵
    PID:1932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:3832
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2140 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:5896
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2420 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:4904
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3428 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b /prefetch:1
    3⤵
    PID:3000
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4508 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:2536
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4080 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:4912
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4648 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4380
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-21_ea0adbae866065dca014250267f228a9_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4132 --field-trial-handle=1760,i,7276064464944973586,17472004354046815304,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:6108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

_ak_embedded_assets.zip

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_ak_embedded_assets.zip
Size 14.9MB
SHA256 8e79956bc59dc727636145f2fdfdd5b2892ea9fb24343fc083666e2b0773af06
MD5 9f9e7aabef084b98304621fdc6fc8f58
SHA1 b753bdef88c285dfdbbf8b989ce0b0c55472961b
SHA512 2440a2f6c4f472f8c70cbfd0d8b1406142157ff65e0d8fe7a694979daaaf2553fa9d8f2afbeb1d78d48fa2cdac5db8d9bc96f95548e814e17b234d8e40123a47
SSDEEP 393216:WzrpJxjOZka87y6TXscvt5BPh1z8+W8zt/gJus0:WzdJxjXJyO/vTpnhyor
TLSH
T17FF633DA71A39502C15AF63EB8CA2E740719AE58F4D4F1A7474D018CF8FEB8BCB42558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Animation.lua

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\Animation.lua
Size 732KB
SHA256 7a388bf6c418fd9c7371c828ee991a38f785381aaae07132137b46867ed58f48
MD5 89cae7658df96d0f3643ee30682fd26f
SHA1 a01225d4d0e79d51bb29fa3f73d6437e4582a390
SHA512 bc2eedd441676b55e890a31af04327b54781c3b0cd23751ef82ba3028f93cc589a7dfa65d557585e3e7282ea3d8dbe3e92e001c20f4ecf358816916f82037eb0
SSDEEP 6144:UgYf9aVBFBeUcwpz1o3vSsx/xa96TE+y10bhmP9MKNPSDXBHjf+uBRxQIv9Gtq5u:/eaVDt
TLSH
T113F445B69B901456C3BA47667BD50B03ECA04707E75E6672BBFD048C8F3A44B90D7A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

discord_presence_logo.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\discord_presence_logo.png
Size 328KB
SHA256 e5ec61eb3847130381b8d37828d020794a124e93ae27f16687a29514727213da
MD5 3e0384fa4ae3fed5101e8ec7667111ed
SHA1 9bda1198925ce7db6b3ce156fdc0be2c536c81de
SHA512 fe78f8e475595a0dca66e85e63751c98bf7d46f4dc951f4e5fb1f166a45ebfe6d022b60a755f9e1344c3f7108f5f9297a928ce0270b68635a0d7ae29ae5e7e62
SSDEEP 6144:A571aceKe220dVwLpJhNYxOZ2FL3ipJ7U+24MedFOQm9:Op6VjTpiFL3ipR243FC9
TLSH
T16D6423C4E443BFB98F1D0ABE924C965708A2780CB0BAA02D45D5F0A15CBF95C725F99D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

emote_pack.json

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\emote_pack.json
Size 377KB
SHA256 e91872e7d46a22c9ae0f24b2027209aabdd334aca2237ee4e6b2715490e7d1c8
MD5 0a5a83bcd7c1ce5700f9e67b8f2357b2
SHA1 c56a19d76b41c7bca5e799c973df0ab700422f07
SHA512 8d7b9e0564977e583c385ce76caeaf836123744ac16959114bdd1e3f1c851bf0841f2ebd0b688514e0d635ee4e28e5e0575979499f4f8ae4601b01991dd6fc9e
SSDEEP 1536:0dl1QUU4XTTYljCczw+SLY+8r0WVBj98GkceiDav9rzY67rK9:lDjCcz0S0WLjmiDaJzn7O
TLSH
T1D584F737D6284DFF41FA93695DB45616F8B0032F52416E6B7ABC4ACC0F3752B990AB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loader_logo.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_logo.png
Size 264KB
SHA256 f8401d9b395b117806671b69eadd8bab02a0c4fc3349114e9dc24eb3fd4414cb
MD5 727b0d204a86eff2bd985f8126dac14b
SHA1 454b26cba66611591afb6de9808524d203fd7405
SHA512 06169f061d25f70146b6b5c457c67a44dcfabf27fb58533c1e9e8eca67708aee136c506dedacaf2ac1380ebbc2e40729eccd080418cdb60afa1d6c8d975caed5
SSDEEP 6144:BehzlR/JZDwimwpuFMAsM6EKjtJUjesr3Bv7:BYLzm26F6H+jeszBv7
TLSH
T1F844F151CD47DFD0D86278B8D8BE1F94337640BB01701B631B79A8BEAFCFA988196461
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

catalog.json

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\catalog.json
Size 35KB
SHA256 efafe52d63a6af21822cc7e6a7538d79c181cc96e6d395e2d08c166dc24c2523
MD5 8c7ee7fb4c8eaebd091248521f5a46db
SHA1 b7900b16e015896bea8a9f1ed8689ffe548ae235
SHA512 2f36441e97b0beb080b3a8095405ddd886f453b4fdb1918f6eee6d59b3ffb85a7518f1b1247afa0dce178a557987923e4e9813288ef04c1f1db9e7eb07d416ea
SSDEEP 384:JzSuwS+nMmMn98EgZvbjgvWkBCTm2Gw9MAhWy4F464FAUUgN4fv1j3+XSREOZpIQ:T9Oe3DcbbCgAsAyt0
TLSH
T189F2F816C8774C8B0177D5AB9C84A25DF49E832F82802F67B1B5C19C9FF6E5B9084CB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Beach Garage.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Beach Garage.xml
Size 634KB
SHA256 7cffca6ae849c5cc665b436de1ea4971ec4df97e711933d25b2767381afbfa7d
MD5 82ca8319dbf49edcf2f11c25e123396b
SHA1 ddf04424a81683f338dd60ce3c1143d4b6f23089
SHA512 51d2aeae1c68d721026a8f5baa16048bf543f6a77ab7656211725a89bcf48ed45ddd98c9c7d2dc8e6467d903a8953da956736f3318307ed8e2b479d654a3683d
SSDEEP 6144:86w2yiv684sdHFByWFhR/oupbbUVvKI/OuWyZqrF6cloqJ31w15qmNrt8gVCytNi:ngw/Wc
TLSH
T1D0D4CE202E4CFFBCC4DC40BB38216EDA66AFDCA8C2653529E947F175B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Chiliad House .xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Chiliad House .xml
Size 447KB
SHA256 4d0e4f76c75f1cd72647e802966b5cae5c493ace119d1388cf2a3afc47e1e765
MD5 bc1c2bc7bdad8f50e6c49d869bd7f6d7
SHA1 8fcaf6c2584cc951907570e434d1af9f0e9f612c
SHA512 b9f72fed31e252541e643f5aa6c32fd132809e363a600d1a2771b422703f31b970f9ed3c15f9c6ded2f92057d4c8f1bd16ac0e6ec9f66c3d159289e42a65d71a
SSDEEP 6144:l4T/bDQV9G/8UEb98GkhIKz80HiHdzLOjg6A3RIqPoqfeQB+iPVu8332KOc5yy1a:jkXEq
TLSH
T162A4CE103E8CFFECC4DC40BA38216EDB65BBD8A8C265352DE947F166B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Downtown Stunt Course.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Downtown Stunt Course.xml
Size 661KB
SHA256 3b27fe84ee27340ec3793a6fe3e9bcc16ce026161dabb187048484367e81d14c
MD5 aead4faa254a9988ea3d284c39c0cc94
SHA1 f9f8f001ce4e30995a4ae109eff133d885971b6b
SHA512 eb6c9529a5c84a64f13d4d38e3dc8a850a78f8799721ce8780792f0e724fc36983597a2bd18fa49c875f81c09d680861deb6bac6d2f038178ca9404478d41b74
SSDEEP 6144:8YG5EHJ3pHN765vprx81aZAXJDSSmVFyjiqYvTnpkNa4Vdf4YMfYUq4CHwDOCYbO:sRtFgu6UJaNKJr
TLSH
T169E4DD603E8CFFFCC4CC40BA38116EDB65ABD868C669352DE983F165B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fame or Shame Concert.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Fame or Shame Concert.xml
Size 2.4MB
SHA256 88faf9ef836ce1d60178422a1ea2b1bab8871297c73f1f32f76504714ca99e57
MD5 21390ca87116c2d01858e2bfb54b3c78
SHA1 361f83b6c56a378f64fa19f83ac2d927e3260f4a
SHA512 d933afcf97dcc029195a5ba981db6723a00d56f0ed3a7da66f2e4c626d601c88f4734450f03431125a350ffa9d55b5f395acd068ab63b3f8b523470e4a80a952
SSDEEP 49152:2EU5s7QuVP5ryZ1t1QGICxtwihfU6pZ1+J8R5Tcg3VL/ZR9qIja:h
TLSH
T1CCC5CC602E4CFFBCC4DC40FB38116EDB65AFECA8C2693159E947F126B05652839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Flying Apartment.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Flying Apartment.xml
Size 430KB
SHA256 191ef119f9abda1fdf2685b94eddc9489337e6368377668e53f37429ba65f84e
MD5 cb947db93f5579ad6b523e949627895e
SHA1 1c3ef45a07a4a0fb035d71f18678872fd180e3fb
SHA512 26d55f5c25ca4c299be7ebf4d6cec5964d4498c679a5606e833a2e5af203268bedea9352dbb70d7f53416d13a7f5c7fcac36c2dd1049e7c9db77cf0377187b54
SSDEEP 6144:BcEIQ5Hx+Tq4N8l4xgpZxRWI0B8COvKd7kfovxa80ZO0AJw3NzCrX1Z3OmYl3b0Z:662pRvdh5aBQ
TLSH
T10394CC503A8CBFFCC1CD14BA3D202EDB65AFEDA8C6A93159E587F06270465382D8DC95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Glass Bridge.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Glass Bridge.xml
Size 455KB
SHA256 1a52b3b2bbd1c9da6377d3b5611060ea60df1b68542f9c70dcfe0bcdac279e90
MD5 9d7448bbcb84aff22473edb5e37e92ae
SHA1 7c1e718f189d73551e889759cf3254c8728b0a64
SHA512 835f3a5c1a4fd5a8d03736a67a7aca8c3237e7fbbf0271c7785a88c728424841fd58156d9b5fdf40f35f4a5319f1aff9dfe80f141137f788614f457cf10a296c
SSDEEP 6144:SPEd4PRiNgTMK2yZjGdRAw0I48hSSFrFcSVBUgAKqqdTaTJFpwsDPZBkNF/Gtqpg:SXJj1F
TLSH
T1ADA4DE503E8CFFEC84CD10BA39216EDB66AFECA8C6653119F587E162705653839CD8E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Holy Beach Mosque.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Holy Beach Mosque.xml
Size 299KB
SHA256 ebd1c9920976928663e2c1044a554ec93ca22ffd927fac248b513e555c8a8181
MD5 a4eda24d813ad199ea258e39bba55d49
SHA1 1f5140ca6462585ff0f4ce838b1a9639e65a9f30
SHA512 64f91ab6caac1de2c8dc775ed9fd3f92a439905628eefa85c241691f343a3cbf6875c6dcf7c83b7118e96354d8607d69fe3c823a4e6ba2a857aed32188b70efe
SSDEEP 6144:tJith/7JvI4G94aOIDpwCjyj6kuy9lsXRvOr/MIF12qihMqbtFI5Hxm0+KmAsmU8:9biD
TLSH
T1FB541F102E4CFFBCC0DC40FB28216E9A65AFEDA8C6693159E997F135B0864283DDDD94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jail.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Jail.xml
Size 585KB
SHA256 8f669e7f1a4ec69d2de53c8ea3f303cf05a3c73eda9546ad231f73972739bb2a
MD5 ede9f97f0cc90084afbf3bd32bdce5a1
SHA1 dbcd17386a571594b39c93018860c4cef38572fe
SHA512 88cee1723ca9f4aba7214f984d418c867c2283d6ab1897d967e7dcf315e428f44fdaeee137038b9808370b616edf04f9b61d32749ae3022980576803a5fde3cb
SSDEEP 3072:UnT5i3pNt7xT1xu4hrpCec7VdY/K12V+kp6:UnT5i3pNt7Q4hrpCec7VdY/K12V+kp6
TLSH
T1BFD423A090C871E7F43BD1A51368D39FFE64A9D38E943039F18C8B9B0F7A46E5A07255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LS Speed Ring.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\LS Speed Ring.xml
Size 526KB
SHA256 2c30daa1d5993639fdd30ed1893a5433f2f2795f60dae815383d0eaa75f6188b
MD5 2ec61d105e3e93e422cbfd21d1f33872
SHA1 3f02782ad3d1ce4710d4d79010a30fb1839da6a0
SHA512 f8c55c6c63a4c3cabc531b9fcf2e68aa328f0247f4676613ea2dace0180b3f2915d2057dd74eb5ee83278b43dfc9d973c18d1c5312e88ed72f4ac2f58d0f38d1
SSDEEP 6144:NgaYnpvBURNvyJcB1a0LQLNN4vcKmlu67jxHnUVRNJw7CvUW+lYNOpHWP76mzs35:n4/Z
TLSH
T1D4B4BD603F4CFFECC4CC00BA38216EDB66ABD868C6753519EA47F166B0565383D9D8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lost Angel Festival.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Lost Angel Festival.xml
Size 434KB
SHA256 1ce35d493e6957fb1ccd2b6555dc57cf4d6e651b2151254b34ff2ce97d5263e9
MD5 e958bf9dbb834bd43f19f1438a07d75d
SHA1 eaf9993420706624b59aba4b25d7e86ee7c9b84b
SHA512 ebf73f2a7b77e9bf9bddd6ae38096a9a6b5a304f49c1e2216807d53ddb7bf864864b752c3aaa0653dfbbfb62c862a0e49c3c3ab7efabb66be9f99b1a5b6b9efb
SSDEEP 12288:jw4W13U+BZ6XxdT7BvR5eMQDjig5jAuXwpODb+rhqCSTkxD:jw4W13U+BZ6XxdT7BvR5eMQDjig5jAuI
TLSH
T1D994EB502E0CBFBCC1CC00FF24516DCB65AFADA587692198EA97F136708616838DDEE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Loud Apartment.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Loud Apartment.xml
Size 414KB
SHA256 8669ccca4540c123334c22da87c3a96bfad18f917d90240e4771425a01c44847
MD5 98234c2965a400d197b502bf27c68cbb
SHA1 01f6435b09889526700182687dfc5ecd213991f6
SHA512 3a39771f5779a5a0cd9748ca8e23bcf6fc3be4133c6c1ad7ca1d21df86b20d6897ce040d31ee42ea747dbf16a4f84ccf60b59926ca7a91b22d3812c6dd1bf7c9
SSDEEP 6144:ByXHbLOTGTR7ymVT8URH2HRdo48N3BYyY2ynfXQV81xddK8FbUmLx/G/tcxpd59p:LL
TLSH
T10A945A603E8CFFECC0DC54B639657E9B56AB9CB8C2A62119F947F016701292C39DD8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Maze Jump.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Maze Jump.xml
Size 209KB
SHA256 c873a191a965d3f58e4360f93dfca68cd5f04cae0d548d9f6e55f2cdf3d75859
MD5 aadcc1303467268b3f76ebc27e2c0e5f
SHA1 8e69f946ab25ca02b58366b2d50e6b0e8b24c4ea
SHA512 a0b5036489f2a1c64e6f9f17318b1924e926669d9d9353945997da11c2ea96c53476b28dde3c8b3fd8e7db73d9488a64b304fa384a08416c6e144707b693d2ec
SSDEEP 6144:XwKS35wRAFjmakMMWT3z3nFrHSKXfRs2t/Vn288LjH4fZubs3QLLRj+PXejK1dDX:Zw
TLSH
T12E240F102E4CFFFCC4DD40BB38156FDA65AFEC68C6683529E957F139B08642839D98A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mega Nega Ramp.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Mega Nega Ramp.xml
Size 290KB
SHA256 bbe92399c464a9b31ae98e96917bfc691c753a10bf015a78302648b2e14edfdc
MD5 db33ed1af4a8764c0acc40a470d629f7
SHA1 6497aa723f6097ea4b2bb21c28a08721a358f04d
SHA512 0ff50ee5b879948363dae708e74e2e8192fd0892272a212e4eef54d68e16f5e2ffd236a906a69f546eaef039e105bd83007a63c0ea42725d8b1fe645fd1e3b83
SSDEEP 6144:8l0QQLH9cj2GzRqz5iScKV5w7UCd2H7IuJxlNsheXZ6EuTfITUam3RRNGEC0y7gR:9k
TLSH
T18354CD603F4CFFECC4DD40BA38116EDBA5ABD8A8C2A53119F947F166B05643839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oil Rig.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Oil Rig.xml
Size 804KB
SHA256 393b757d272d07abeef95cde42b32f2ac7a76328236d83a22c2837b8332667a7
MD5 43c13b3135a162f4faeb6bcefb519dc1
SHA1 951e9a74892d0461a9f23fc84ddf5ecf0b5866e4
SHA512 81e5d49a22353cec700ed08812ce70676802c5e7e8d97cbbe7448910aaa15d793c9f70421b74c230836a777b1188bc938c21989003b5f11093d2366e87c4780d
SSDEEP 24576:/MP2O1navCjv94tAeb3UJrnER3X7TPyE0TsW3ikup:/MP2O1navCjv94tAeb3UJrnER3X7TPys
TLSH
T1D40506A090C961E3F43BC5E91769D3AFFE64A5D38E90303AF14C8B9B0F7A46D1A07255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Airport.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Airport.xml
Size 866KB
SHA256 975da78cd4452f4211e54596840879923e96c370d255a3775bddc1d808ad87d1
MD5 6b2333f1fa55a401f911943b4d516903
SHA1 a9a213465c64d5bf85613fe032a76cabb104c704
SHA512 ff8eca0e8737257bb0e518140ba3c8da66ed173b96e7fa4d6798abccb2018e3dca1fd0e7048322c744a19c280b5a806c5e508423ab0a3f6cbf6e44dfc7ecb29a
SSDEEP 6144:Gcn0xXSsZr5DEFONwDGShRn95MKq6+IbIln5bFHov/Fx8DPxlt4smMBztePGZm/3:0s2jpT0IWILEc1E
TLSH
T1D015EC602E4CFFBCC4DC40BA38216FDA65AFECA8C2643529E947F175B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Parkour.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Parkour.xml
Size 405KB
SHA256 a3120ff898587d421ae7392d04deb1f21d79e144d80a71e486002101fc030656
MD5 2d5cc4eea3c47ade86afaae85d2c1c9b
SHA1 b848cca26b318df532ec417a7eac325f65cb8aea
SHA512 6fee190b06987cfed4d5531683a6dfac055e0f5aed7ea0ffeed77bc8eae84c28e4d7802a052fb2fb0cfb2c1b31045088fbddca83ea98c095043a4e6667f6211c
SSDEEP 6144:HiN3WK+I8QiVVfpgWu1kp4mPSVY4Io9Rs6LHN6IdKfEmmKJei/gTVQ+wIyev3TaW:aG4
TLSH
T17394FE201E4CFFBC88DE44BF15191FED25AFACA891647565DC73F13DB08A1A438A9878
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Stunt Race.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Stunt Race.xml
Size 211KB
SHA256 0a22d9b8f416a63cd0de0fd12111f3997224527a6002780b6241009788065479
MD5 6a3a26c7b828b1ffded19c4bf8d65d38
SHA1 fa3542612785aee1207484ee1e4f52376666ac0e
SHA512 b28c0bf03b3e640ffe265c2bc2cef7781e683d594ab3f5b17cc412e1a4de605dae9588c219fac433983bcd25e84b7fca2b5439f67987370f6fe9ad8b7a046b1c
SSDEEP 6144:k5jBWL4FbSIATDdBhsO+Hw+KUKURSyOBYeVX3m+m9ORmGEVB5qcWD8o9pkN3jPqu:e+Ez
TLSH
T19324CE503E4CFFECC4DC40BA38216EDB65ABD8A8C2A5311DEA47F166B0565383DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Skyscraper to heaven.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Skyscraper to heaven.xml
Size 542KB
SHA256 bd1e88e915e183285699e2436b42cea70601029c7c10d4e3ba70dec59cf38ddd
MD5 ad492d2e0edc5c0b0908ce5e32a503c3
SHA1 5f8561277385b64c079e3979ef0a82d8c605f748
SHA512 01f4f69c429294c6b04a96b173c27f4c9482ff982350c238293eeba654f388e02aee36eab2bc98decb7460975cf0b373b8ae890a1ebc05a99f189e067f6c75b7
SSDEEP 6144:xMAXYPmc9u08OhW9hEhVmgiqMqVVKBi8jx8faArF4N19q8Zsm6xEe+Nc8oHb58po:xe
TLSH
T1CFC4BC503E8CFFECC4DD00BA38216EDB65ABD8A8C2A5351DE947F166B0564383DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ultra Ramp.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Ultra Ramp.xml
Size 202KB
SHA256 17d2f340ab0827161bf97024882e88f90e66566ec1b28745aebfb76b694396c2
MD5 606e1767e1811389ab026dcf207cff24
SHA1 549faf31d5cff113fbdf44c86eb5da3fdeff9e3b
SHA512 df5fec920ec7346cd5662ff8ecb40a6481fb4f85d86367564f19e4ff1acfd248b5f42676c1c75e437150eb484433a7fd85d2cd7a129c872752e264ebf3a32ff2
SSDEEP 6144:AcrQrnjsx9zO/YH65JYL0KLIhDaB2oZRab3DIZ45fQ87dw/Yg55hbrElH7+MUyWQ:u
TLSH
T1CC14EC201E4CBFBC88EE88BF15191FED259FBCA895547565D873F13CB0CA1A434A8879
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Yacht Party.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Yacht Party.xml
Size 2.2MB
SHA256 cb61cbed74b5435b79c072feb142115b4e5d06c8687bd9aed87a7380deff2cf0
MD5 cf75cb70c05c91099077154286ecf615
SHA1 b65fef3aa517714fecb7ebc0d9fea79aacc32096
SHA512 fedbf337a6b91694a418ff24f4b2c7e4019df346234a53623f7a3bc0a3ab077b49e38ff59af8a93a9629c6ede3d30cf3d99c976c04177eb823c53e710c117032
SSDEEP 49152:9xWusrS2cKlg9fQfgExKJLHA5o1Td6jQkwLFZjHkCX8Vn6sGtvJ:7
TLSH
T1CAA5CB202E4CFFFCC4DC40BA38217EDB65AFD8A8C6653159EA47F126B0565283DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apocalypse_bus.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\apocalypse_bus.png
Size 128KB
SHA256 d9782b9e200b0637e01556e7c392f428a26ffdd464bffcc6c1149106098ae924
MD5 9188327ecd3840ac8a4827d078b5ce85
SHA1 3ac233d39dd3a5361bafb2b1e94e89596a406cdb
SHA512 23e3f263fd6474a2ecbbe6e7e828638f083f082e1badc249bb6602a9d519d8061a80cc9bc76e70afc0d7d89b124e9958f3b2bc6774d05ac7c87c37b573a03a7f
SSDEEP 3072:kJWCBwf/U4iqNr7FN4ybumxcTmzdmiL6fZ0nf:kJRBw3XiqNr7r46D6qzgfZM
TLSH
T1D3D312A05C20FD3B0255B15476345A2D2CF02B63DA992E791FE918D6CE5BEEF8C08A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apocalypse_truck.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\apocalypse_truck.png
Size 142KB
SHA256 f1a9aeb37e94b8ffd7f4e4936512649edaa5fc950a28c6fdb26456f73b7a5b00
MD5 c0bc0f5c62d7fba423f5c0c6c93f8801
SHA1 a03c61ce52852dbf22c927908696c37d3295cbdb
SHA512 eafd34db63e49031c2d0ea81cecffdbdeecd36ba1ed4a7c963019f1846fb56393b43bc9637739f2cc110e3a9ff442796afa7c9333bb187998192c7dd94ec54f8
SSDEEP 3072:fFhSL4V867MbFRXAGbAFpXkMz5JBSljEOeOH5jJXKwAhRCPgSlj96L:TkiGABkMzz0JEO55KCPgSNIL
TLSH
T18AE31211865D967988BF74FBA880350DB0C95BAE72ED870DC8360CD9A52D280DFF19F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autistic_hooker_destroyer_robot.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\autistic_hooker_destroyer_robot.png
Size 183KB
SHA256 52e10a55b59255b6b0ed707987ec47d9a5e9d3341bacbe0aff5dead1f96885b0
MD5 20ff07a672b33d3772839eacb92c1170
SHA1 f72fa7233e7aba55a8bf0d80649eda917c0d306c
SHA512 ba5d72c15dabba3262012c2254857428bfda586fe3ef467f94b70e2216244cb29029f1c5fced896a80f10e793040b25dda662333c51fa85b0a961ab8d54b94d7
SSDEEP 3072:PqJ6HAYLHnqUtvI2jGvv1auGvGBX+IKar7HqrGePPR98Kf69L3iVU:yJ6gYLqUtvC17RBX+Itr7Hqde3iK
TLSH
T1C0041293D5F49CA10ECA6DB814807E297E5B64FC38B6D0B45D39CA96DE06F300D93A93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beach_garage.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\beach_garage.png
Size 227KB
SHA256 ef44b47a336731b26f5bd57ba62ea5ef925c67a82037fc14d13048e93ba641d7
MD5 b80561d9cd9f170fb6c451f9afceab7a
SHA1 6ea36952a4257d7d293564ba18434a71f022583d
SHA512 7be83b355bba63bf68e2c0877c357796a742aed6a1c24a93e6696100d9527a4976e09005e8c9741642310baeaca9f64fd74cf969cf4bcb58f44ad1d9dfd01abb
SSDEEP 6144:f+WZeAtLJ9em1ELqtk/BbG1j6BVAPvzOVfdLgmJIIgT2BCK8x19tn:fvztLJ9oqC/xG1eBcOVfhTJIq9Ypn
TLSH
T119341222667E46375AAB7BC72E85CE3B11DEA247DCCD48F4424E51B23A08D6D035A3DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

better_festival_bus.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\better_festival_bus.png
Size 142KB
SHA256 e8ccdb42c2158b02971de036c5c95d9ad3a9994b44543ae9760f7ba4465b858c
MD5 bc0cc7f18b8240603f9d7e26013a8ff3
SHA1 20a182184515859daa2476e0860e3a0fc57605c0
SHA512 62531aea4db4f6d567b01b651657d78062d7cbbb58779abe82c2762895328513e03748890deda7dfd89bb287bb75b3c423359b063d688548cbbc96f24c804cff
SSDEEP 3072:NT1QsQMt+/cYN+eonVCUXL0GEKbOz43H43SC3SPMGpiIRz1OxsY:91QsQMt+kaXLUXnt+43HtCwMGdzUxsY
TLSH
T1DAE3137B005D98CA01EC3F4148FFEABA1F4472386AED51959012FBE8EBBD54D4C2547A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bighead_angrydog.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\bighead_angrydog.png
Size 1KB
SHA256 5e9d03d358ed5f176493a6f8e3b3256958261fa31c56653b6ec896244dd4afde
MD5 1e5ff9bed061ca6fa47e2afefdcdd042
SHA1 0058201760d1b4bb426d76fc5d8632592f74abeb
SHA512 a7567bfe2c072a264c8032c3ee85b168eb54399cc5a341064d924c3c78b898cd6b7e95cd23bb08fb3d0a9721054d022b0c3f90a9ac8e776ae9a7b6e1f4c60f0e
TLSH
T171311A73664376D262FFFDC882D720CC9C127D26086B15A602D8DD624322773925B6BC
MD5 SHA1 SHA512 TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\app.js
Size 15KB
SHA256 ae17960ccba0553025fdc43629beab2aa0da7bc6f4ae5b703aa85f31c68f79a7
MD5 2fd04ddbd4904d5c54b2f684568629a8
SHA1 b73b5b5338147f60cc0b29082f1583a26975d064
SHA512 5032751e8ea64b746927298c7763f33540bdca8959be14d8f73e329de03a2d0142edfd1d5b4dcf7f44d4073d3e5c5fd7515d0368483c257038a4c61a07b0b7ee
SSDEEP 192:KU1I1S2j2aUqVCNsD6qln7bgAo19b0wXOhEkEOQK4Dey/ngLAne1X6R6c3PD7CrA:lI8zangr/QEkEfKGnyAe02dax
TLSH
T12C62A4EAB5F52439083B40B1D39FA5257B7A404A1286D96076BCC85C2FD0AB1B0BFDD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\index.html
Size 8KB
SHA256 c2f20d4008b969ec1d15831eeb1d9a5aac9cb18924a3bbd2bc77f99785c79bb9
MD5 501d6c22d537a17ecc2ab446e6001ab9
SHA1 ab1ca6649b04b6b7dab6a54c07145d0e72f4ce68
SHA512 5f9920f04f69b411e4fa120f1af958e008837402008cd279d6f0fc03150afadf1a3784f75a951dc1b6179a2cd6056b35e39f5b670a7b013272dbe4adc0db3a02
SSDEEP 96:gplnOELrw6CYcKa+efzj1JG7POMwspWneyOcOcO3A48N4MmAEin5EdXD+dvqdukg:gphLTcpvLG7mEbNffwxMU5eKdCUH
TLSH
T1F8027871A4F46933429B81C67AA15B1B3BE4EB47CA9B220072FD0BE44FC7C91EC1B452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

style.css

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\style.css
Size 20KB
SHA256 63c2ba52fa5e29e615fc6dcf4c89748fcf8186e0529bc9587d082ae12281597d
MD5 966691c45440094e11caa1e9380022c6
SHA1 4e4659eca40a675da609bb4bbc3cc14c2577dd83
SHA512 f067ed67fcbc4066bc9d02b06563b1192494282cb41dba594dc76fa6d51ccd061ba4336105dafdf6898fa18b8294a6b8b8d5f33b8d8c2432568b862e36fce467
SSDEEP 192:Dbiv/CZHWtalH/bfJ0f9jE3ZmD1iPSJw0RF6N5FQMTMkDOFJHidvrG8ttCQ6kRqz:XEKJos+fVEUhk+JH+1cTUmvS0SxSf
TLSH
T17E92D97633255214B42BDBA83E1BEF8BB31CD6139008A77C6EE0101CC3CD365A97A799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f5967f291cb019c2c83f0e91d2ab17a235aa5633825a9de8bc62082a4048a4db
MD5 26c4f98bf46cd2ba2c461788e881a633
SHA1 6781541fc11e9ca78967018863889e04f440af25
SHA512 8e98890cfba7e4f57ee21135b8162e55e09d3e31e31ed2882665570d16587b9a6b8e9613d925302097eef0958f7a45e5a4c8c8769a986bd2a1662b32594d085d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1e7d6ae72145828af6252d2ff202da41cd38dbf8d89462e6a732f92c83dbf801
MD5 522fb17e5d0fd42cc7e75797036297a8
SHA1 1cad2fa4f85759482ae47d26350951e7dfa8c740
SHA512 1220cfc9d8f1e6b433396c1abe9cee7bf05d1213faac3247161b9d31467d9344f3fdf724fded7c7342c3f4b3c3d8874ea522e4dea5071074438dbe7f208d0588
TLSH
T118D0121232111134C0503037100366082C40D11F404581045838C96D1F140601A824E1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 41ebe649d2b8535872a4f47e77ab89ec85707ce8b46c24162dd60fae830082d1
MD5 ee8502b13a0d326e40e46dc15f6222a8
SHA1 87e087f0b95e45671bf9d40fbba335cbbd6e2f82
SHA512 a70f4a388b5aa70c7ad6342455f70c399c00c848b675e5d9e51da0c7b424fee37cd843b3a51ef46fd136fea9d69a5b20ddf4e622402e5b073763970f2582340b
TLSH
T163A0025012441423C5C017B034C521403235EA1D9723860187A56578ED503847D41551
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a04a5.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a04a5.TMP
Size 48B
SHA256 2e694c2061ed23c7a88cdfd1b4f288521f2198c0187170a49331402364ef779f
MD5 1e8f90f9654c2361e623ecbaaeef759e
SHA1 b40812b5e59a9e7dbdedbc04216b2607750ac107
SHA512 8a4b4f3e823174388b57f09e2cebfa1f306d2ca5686f030dca3d2f486e22166e0f6561a9c190efb1374c96985affcdb2b06d494033695ac7b43c65b41e53a392
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5ad9e6.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\Network Persistent State~RFe5ad9e6.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 9850a10257adc6eabd894b9a3d8d2cfeea3e2183eb9e5b63d7edf82e32e3bf6a
MD5 06b02240d6ee26895365507a518554e0
SHA1 bf7dc26eb3a257f517e7df4e2db8f3f8db917506
SHA512 7df2e702cce382dde2d378539827f7471963b620398796531f406aa55c47c55fdbccdf578dbd25607b497703877b9701ea8c9cc653f41c6990c289d8223808f7
SSDEEP 96:sth/das37Urb97kVo5h16ZMSs7/x+6MhmuecMDJ1ejeZK+gtj28XM1C7K:stV/U6o7SsV+FADJQjXrjG6K
TLSH
T13BD1C8165E68797B4CC7E209BA257F03E2F9603265D52E58E7F8466C04DB6DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 5KB
SHA256 6f0164240414624d2eb70761276baea2ec0354a96ef576a2e0a05e7b4fe4d52c
MD5 75cce66a4491ee1e07c037aa0339d506
SHA1 bf5aefbdf660d13b6fceee6b66160f4a5358d331
SHA512 e06ab47a58cc02808e1105cff3a9022331feac09c9c4be17ca210495bb5d22b0dd1ccb1a4139395c1a54202af8d0959492c82e683e97054c492dba7731966124
SSDEEP 96:rh/das37Urb97kJdo616ZMSs7/x+6MhmuecMDJ1ejeZK+gdj28XM1C7K:rV/UaoKSsV+FADJQjX3jG6K
TLSH
T1FEC1A7165E64797F4CC6E108BA297F03D2FAA43265D62E58E7F8466C08DB6DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 c785ffc7f6960f8ad0bca4f8fe6c30bbcf2fd17da047635e068ad5108506268f
MD5 0e377882cd4bbd69a078af2a250315fe
SHA1 5b09cc8672529bfe5ce21db1931a6402b5df93a9
SHA512 8f92b85cdf0dbd5173de59e62995b21876dbb174727d045b2ad81f166f004765faa9d4a8881e5c2bcb47a8938011044d9adf247f06812775f5ee10ef44dd23dd
SSDEEP 96:sth/das3qGUrb97kVo5h16ZMSs7/x+6MhmuecMDJ1ejeZK+gtj28XM1C7K:stV/W6o7SsV+FADJQjXrjG6K
TLSH
T141D1B7165E68787B4CC7E218BA297F03E2F9603265D52E58E7F8466C04DB6DC6303C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a0725.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences~RFe5a0725.TMP
Size 5KB
SHA256 ee22bb4b7fc3478fd8f5df5a183db3390fe1c42e72ddd1506111ec01d7342162
MD5 a29860b18cef66c6223d267b977bc800
SHA1 58b3c8b9f17aeb3df65b6d6b84ab691c86c8cd22
SHA512 e790ade7a1446655c4dfaae14b0e56092d5bb8aac58c06886047089d161c75cb52e997f7515d85f20205dc383315195f81dff5497488df86e2b78148f939d7d8
SSDEEP 96:rh/das37Urb97kxdo616ZMSs7/x+6MhmuecMDJ1ejeZK+gdj28XM1C7K:rV/UkoKSsV+FADJQjX3jG6K
TLSH
T133C1B8165E24797B4CC6E108BA297F03D2F9A43275D62E58E7F8466C08DB6DC6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 2KB
SHA256 7ac78cd38d8a8264df62aee9db7e8b98e24837527dc04a1ca9e6393a4713a125
MD5 74fcdd3ff3f399d9ea300aef66dcf1e6
SHA1 c434558d531ec8e70bd9d1dfd88007e88bd33310
SHA512 b4a1b01d1d3276c98e8d390a91054f73c027f53e454a28416eb44c8d19c1d4ead395bdacf2026b32c0bfb826c8968684b0e12c16fe1066b0706cb24cfbdcea2f
TLSH
T105518573A814BB7799E38608BD467E239A7A8065AE431F50AAEC0B0D41CF65C2347C33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 3KB
SHA256 db10ddbc6bf1c96f8c0ee7177d3259a652ef91d7a130cf35d03ecfe92cd40c79
MD5 b958551932efce7d817c8c059295aa1e
SHA1 013df7e8e9566955abcc85ab3b88bbf146492236
SHA512 a93cc1dcf5474220ab3c5ac931135d04f76260b15efacd8a08e5431a961daa952f8f42bc06e3e3cc52b20747b7e73d20433623226524feca782644db83a2da1f
TLSH
T18971757AA964B97B4DE39A04BD863E16A7A54037E9863F94DAFC0F0D01CB2981352C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 3KB
SHA256 139463f33f64c4dcdcaee946bb20e17cf6f88cde5b31239a65447907a52d3c86
MD5 f87077c677cf013613615fba60b8ab5d
SHA1 e6e5f5a16c150e47f90d634f31baf12b5edd019f
SHA512 482dc8190e82dd9fb6b429129d0b4fa41bcb70ace42955cc3e7d9a4b81cd0dde11f09825caa1cf323fa0d23829c4aa1ff306f7b7046eaf9e4a99679898440f96
TLSH
T1A481533AA974B93B4DF39508BD863F17A7A58027E9867F94DAFC0B0D41CB2991352813
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 17KB
SHA256 b7430f278151e7c57703aa3d8b9013439b8c03fcdc8d000b342882dc8b481cb5
MD5 c745a43b9bfe12130cd36c9ad648883f
SHA1 1182cf3b4a34892fba19e63eefdf36ecc3f3fc70
SHA512 54213009cefa6b9c5de82844e025b148abe6e377fa869ea4a2d53f6b8d9e65fdb6915dfa868bb793c1bc8fcf14f7bfa774f6e495577b21e004117f9d9bd9af40
SSDEEP 384:o+aQikB+z/xvxjg/qhEwNBSoPwV+4YeLA49zZ:n/UxvxjgC+H4ek4FZ
TLSH
T199728D3ED4A9BE27A5F3E2443A0A6B8BCBB8847255C21AE44DEC1F0D06C73DD1306C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe59b220.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State~RFe59b220.TMP
Size 1KB
SHA256 37df7ececa3ccad2e69fb033a0bccf016d8aefce8b53fad9c08d3bff880efb39
MD5 6937ec85bd78386ac7e364d36f1b1b69
SHA1 61869f59688323f0cb1c23c8c467df6c72986bf0
SHA512 bdee07a80591e3a0414b9d64c0b08d92e70099b9cf25c150b8663af08ff0ef1abe0241852aa85dc535a7f9179861e00a45021df48e48b9bbbac9fd1e79919928
TLSH
T15E31C6B6C4A47732AD92520A7A02BEA75FB2407E95024F4076EC470E02CF54C666FC32
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2980_338318995\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2536-848-0x00007FFDE5EA0000-0x00007FFDE5EA1000-memory.dmp

Download

memory/2536-847-0x00007FFDE4DB0000-0x00007FFDE4DB1000-memory.dmp

Download

memory/3000-691-0x00007FFDE6310000-0x00007FFDE6311000-memory.dmp

Download

memory/3832-616-0x00007FFDE6310000-0x00007FFDE6311000-memory.dmp

Download

memory/3832-781-0x000001FD07F10000-0x000001FD07F3F000-memory.dmp

Download

memory/4380-1047-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download

memory/4380-1049-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download

memory/4380-1057-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download

memory/4380-1054-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download

memory/4380-1059-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download

memory/4380-1058-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download

memory/4380-1056-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download

memory/4380-1055-0x0000019F0D780000-0x0000019F0D781000-memory.dmp

Download