4b84792e34055d12f1108ec7651e3fe810dfc4eb4331ab9dbb49596db162aa08

Analysis

max time kernel
150s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 23:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe
Size 76.9MB
Sample260925-3wpajszbma
SHA256 4b84792e34055d12f1108ec7651e3fe810dfc4eb4331ab9dbb49596db162aa08
MD5 8005f361e15838c18be8d4baa6d9f8c0
SHA1 13b732c562f54b85f612541a1a33ef8b1db6dae5
SHA512 940898217e99985316f5b5a5f3e8963e970b5b078c7b321efa48ed4417fc91f28a231584647a547be831a7481c8c232c983e4d810d71e5e0fad9f08e8722d9d1
SSDEEP 1572864:8Tl1F2l1FulMLj7b2h8lMLj7b2hpzLxjXkO/h2o:eMbqGMbqpzLxso
TLSH
T1E708F16792A111FCC06AD0BCDA875822E2B0385947749ADB17E00E525F7B7E4C67FB23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 61 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_889250579\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_655484467\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-da.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-or.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_655484467\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_889250579\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-as.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_889250579\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_655484467\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-ml.hyb	msedgewebview2.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3032	msedgewebview2.exe
3032	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
860	msedgewebview2.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 1448 wrote to memory of 4572	1448	2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe	89
PID 1448 wrote to memory of 860	1448	2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe	91
PID 860 wrote to memory of 1108	860	msedgewebview2.exe	92
PID 860 wrote to memory of 1160	860	msedgewebview2.exe	93
PID 860 wrote to memory of 1160	860	msedgewebview2.exe	93
PID 860 wrote to memory of 1160	860	msedgewebview2.exe	93
PID 860 wrote to memory of 1160	860	msedgewebview2.exe	93
PID 860 wrote to memory of 4540	860	msedgewebview2.exe	94
PID 860 wrote to memory of 3128	860	msedgewebview2.exe	95
PID 860 wrote to memory of 3128	860	msedgewebview2.exe	95
PID 860 wrote to memory of 3128	860	msedgewebview2.exe	95
PID 860 wrote to memory of 5448	860	msedgewebview2.exe	96
PID 860 wrote to memory of 5448	860	msedgewebview2.exe	96
PID 860 wrote to memory of 5448	860	msedgewebview2.exe	96
PID 860 wrote to memory of 5448	860	msedgewebview2.exe	96
PID 860 wrote to memory of 5448	860	msedgewebview2.exe	96
PID 860 wrote to memory of 1444	860	msedgewebview2.exe	101
PID 860 wrote to memory of 1444	860	msedgewebview2.exe	101
PID 860 wrote to memory of 1444	860	msedgewebview2.exe	101
PID 860 wrote to memory of 5804	860	msedgewebview2.exe	102
PID 860 wrote to memory of 5804	860	msedgewebview2.exe	102
PID 860 wrote to memory of 5804	860	msedgewebview2.exe	102
PID 860 wrote to memory of 3032	860	msedgewebview2.exe	103
PID 860 wrote to memory of 2696	860	msedgewebview2.exe	104
PID 860 wrote to memory of 2696	860	msedgewebview2.exe	104
PID 860 wrote to memory of 2696	860	msedgewebview2.exe	104

C:\Users\Admin\AppData\Local\Temp\2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:1448
- C:\Windows\SYSTEM32\tar.exe
  tar -xf "C:\Users\Admin\AppData\Roaming\AKMenu\assets\_ak_embedded_assets.zip" -C "C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web"
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=1448.760.4150862760204844131 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:860
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView /prefetch:4 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x50,0x194,0x7ffaef905fd8,0x7ffaef905fe4,0x7ffaef905ff0
    3⤵
    PID:1108
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1760 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:1160
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2228 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:4540
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2448 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:3128
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3384 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b /prefetch:1
    3⤵
    PID:5448
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4352 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:1444
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=832 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:5804
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=352 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3032
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView" --webview-exe-name=2026-09-25_8005f361e15838c18be8d4baa6d9f8c0_glassworm_icedid_luca-stealer_njrat_stealc.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4256 --field-trial-handle=1768,i,17155607805883348316,6542290331179431827,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:959f5bc15775d360284d45e2b8ff60efef533e0b
    3⤵
    PID:2696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

_ak_embedded_assets.zip

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_ak_embedded_assets.zip
Size 14.9MB
SHA256 da45a9dfdf63b8a44d1246db768bf427d7710a2c1ac182e63d730d242056dc09
MD5 a9948d8532d701d6dacc79855432839b
SHA1 c51dfe85453e6dcb16d08eb4e5857a0e308e4932
SHA512 2eec8a534ac60667eb9963405b5210fec74b0204666e122a9f368fc0a8142284a7f430c7e25868f1f5a4d8fea4532ca81736e7d8f3c8f644f7563e1d17b65d62
SSDEEP 393216:WzrpJxjOZka87y6TXscvt5BPh1z8+E8zt/gJusB:WzdJxjXJyO/vTpnTyoq
TLSH
T120F633DA31A39502C15AF63AB8CA2E740715AE58F4D4F1EB474D019CF8FEB8BCB42558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Animation.lua

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\Animation.lua
Size 732KB
SHA256 7a388bf6c418fd9c7371c828ee991a38f785381aaae07132137b46867ed58f48
MD5 89cae7658df96d0f3643ee30682fd26f
SHA1 a01225d4d0e79d51bb29fa3f73d6437e4582a390
SHA512 bc2eedd441676b55e890a31af04327b54781c3b0cd23751ef82ba3028f93cc589a7dfa65d557585e3e7282ea3d8dbe3e92e001c20f4ecf358816916f82037eb0
SSDEEP 6144:UgYf9aVBFBeUcwpz1o3vSsx/xa96TE+y10bhmP9MKNPSDXBHjf+uBRxQIv9Gtq5u:/eaVDt
TLSH
T113F445B69B901456C3BA47667BD50B03ECA04707E75E6672BBFD048C8F3A44B90D7A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

discord_presence_logo.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\discord_presence_logo.png
Size 328KB
SHA256 e5ec61eb3847130381b8d37828d020794a124e93ae27f16687a29514727213da
MD5 3e0384fa4ae3fed5101e8ec7667111ed
SHA1 9bda1198925ce7db6b3ce156fdc0be2c536c81de
SHA512 fe78f8e475595a0dca66e85e63751c98bf7d46f4dc951f4e5fb1f166a45ebfe6d022b60a755f9e1344c3f7108f5f9297a928ce0270b68635a0d7ae29ae5e7e62
SSDEEP 6144:A571aceKe220dVwLpJhNYxOZ2FL3ipJ7U+24MedFOQm9:Op6VjTpiFL3ipR243FC9
TLSH
T16D6423C4E443BFB98F1D0ABE924C965708A2780CB0BAA02D45D5F0A15CBF95C725F99D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

emote_pack.json

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\emote_pack.json
Size 377KB
SHA256 e91872e7d46a22c9ae0f24b2027209aabdd334aca2237ee4e6b2715490e7d1c8
MD5 0a5a83bcd7c1ce5700f9e67b8f2357b2
SHA1 c56a19d76b41c7bca5e799c973df0ab700422f07
SHA512 8d7b9e0564977e583c385ce76caeaf836123744ac16959114bdd1e3f1c851bf0841f2ebd0b688514e0d635ee4e28e5e0575979499f4f8ae4601b01991dd6fc9e
SSDEEP 1536:0dl1QUU4XTTYljCczw+SLY+8r0WVBj98GkceiDav9rzY67rK9:lDjCcz0S0WLjmiDaJzn7O
TLSH
T1D584F737D6284DFF41FA93695DB45616F8B0032F52416E6B7ABC4ACC0F3752B990AB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loader_logo.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_logo.png
Size 264KB
SHA256 f8401d9b395b117806671b69eadd8bab02a0c4fc3349114e9dc24eb3fd4414cb
MD5 727b0d204a86eff2bd985f8126dac14b
SHA1 454b26cba66611591afb6de9808524d203fd7405
SHA512 06169f061d25f70146b6b5c457c67a44dcfabf27fb58533c1e9e8eca67708aee136c506dedacaf2ac1380ebbc2e40729eccd080418cdb60afa1d6c8d975caed5
SSDEEP 6144:BehzlR/JZDwimwpuFMAsM6EKjtJUjesr3Bv7:BYLzm26F6H+jeszBv7
TLSH
T1F844F151CD47DFD0D86278B8D8BE1F94337640BB01701B631B79A8BEAFCFA988196461
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

catalog.json

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\catalog.json
Size 35KB
SHA256 efafe52d63a6af21822cc7e6a7538d79c181cc96e6d395e2d08c166dc24c2523
MD5 8c7ee7fb4c8eaebd091248521f5a46db
SHA1 b7900b16e015896bea8a9f1ed8689ffe548ae235
SHA512 2f36441e97b0beb080b3a8095405ddd886f453b4fdb1918f6eee6d59b3ffb85a7518f1b1247afa0dce178a557987923e4e9813288ef04c1f1db9e7eb07d416ea
SSDEEP 384:JzSuwS+nMmMn98EgZvbjgvWkBCTm2Gw9MAhWy4F464FAUUgN4fv1j3+XSREOZpIQ:T9Oe3DcbbCgAsAyt0
TLSH
T189F2F816C8774C8B0177D5AB9C84A25DF49E832F82802F67B1B5C19C9FF6E5B9084CB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Beach Garage.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Beach Garage.xml
Size 634KB
SHA256 7cffca6ae849c5cc665b436de1ea4971ec4df97e711933d25b2767381afbfa7d
MD5 82ca8319dbf49edcf2f11c25e123396b
SHA1 ddf04424a81683f338dd60ce3c1143d4b6f23089
SHA512 51d2aeae1c68d721026a8f5baa16048bf543f6a77ab7656211725a89bcf48ed45ddd98c9c7d2dc8e6467d903a8953da956736f3318307ed8e2b479d654a3683d
SSDEEP 6144:86w2yiv684sdHFByWFhR/oupbbUVvKI/OuWyZqrF6cloqJ31w15qmNrt8gVCytNi:ngw/Wc
TLSH
T1D0D4CE202E4CFFBCC4DC40BB38216EDA66AFDCA8C2653529E947F175B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Chiliad House .xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Chiliad House .xml
Size 447KB
SHA256 4d0e4f76c75f1cd72647e802966b5cae5c493ace119d1388cf2a3afc47e1e765
MD5 bc1c2bc7bdad8f50e6c49d869bd7f6d7
SHA1 8fcaf6c2584cc951907570e434d1af9f0e9f612c
SHA512 b9f72fed31e252541e643f5aa6c32fd132809e363a600d1a2771b422703f31b970f9ed3c15f9c6ded2f92057d4c8f1bd16ac0e6ec9f66c3d159289e42a65d71a
SSDEEP 6144:l4T/bDQV9G/8UEb98GkhIKz80HiHdzLOjg6A3RIqPoqfeQB+iPVu8332KOc5yy1a:jkXEq
TLSH
T162A4CE103E8CFFECC4DC40BA38216EDB65BBD8A8C265352DE947F166B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Downtown Stunt.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Downtown Stunt.xml
Size 661KB
SHA256 3b27fe84ee27340ec3793a6fe3e9bcc16ce026161dabb187048484367e81d14c
MD5 aead4faa254a9988ea3d284c39c0cc94
SHA1 f9f8f001ce4e30995a4ae109eff133d885971b6b
SHA512 eb6c9529a5c84a64f13d4d38e3dc8a850a78f8799721ce8780792f0e724fc36983597a2bd18fa49c875f81c09d680861deb6bac6d2f038178ca9404478d41b74
SSDEEP 6144:8YG5EHJ3pHN765vprx81aZAXJDSSmVFyjiqYvTnpkNa4Vdf4YMfYUq4CHwDOCYbO:sRtFgu6UJaNKJr
TLSH
T169E4DD603E8CFFFCC4CC40BA38116EDB65ABD868C669352DE983F165B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fame or Shame Concert.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Fame or Shame Concert.xml
Size 2.4MB
SHA256 88faf9ef836ce1d60178422a1ea2b1bab8871297c73f1f32f76504714ca99e57
MD5 21390ca87116c2d01858e2bfb54b3c78
SHA1 361f83b6c56a378f64fa19f83ac2d927e3260f4a
SHA512 d933afcf97dcc029195a5ba981db6723a00d56f0ed3a7da66f2e4c626d601c88f4734450f03431125a350ffa9d55b5f395acd068ab63b3f8b523470e4a80a952
SSDEEP 49152:2EU5s7QuVP5ryZ1t1QGICxtwihfU6pZ1+J8R5Tcg3VL/ZR9qIja:h
TLSH
T1CCC5CC602E4CFFBCC4DC40FB38116EDB65AFECA8C2693159E947F126B05652839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Flying Apartment.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Flying Apartment.xml
Size 430KB
SHA256 191ef119f9abda1fdf2685b94eddc9489337e6368377668e53f37429ba65f84e
MD5 cb947db93f5579ad6b523e949627895e
SHA1 1c3ef45a07a4a0fb035d71f18678872fd180e3fb
SHA512 26d55f5c25ca4c299be7ebf4d6cec5964d4498c679a5606e833a2e5af203268bedea9352dbb70d7f53416d13a7f5c7fcac36c2dd1049e7c9db77cf0377187b54
SSDEEP 6144:BcEIQ5Hx+Tq4N8l4xgpZxRWI0B8COvKd7kfovxa80ZO0AJw3NzCrX1Z3OmYl3b0Z:662pRvdh5aBQ
TLSH
T10394CC503A8CBFFCC1CD14BA3D202EDB65AFEDA8C6A93159E587F06270465382D8DC95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Glass Bridge.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Glass Bridge.xml
Size 455KB
SHA256 1a52b3b2bbd1c9da6377d3b5611060ea60df1b68542f9c70dcfe0bcdac279e90
MD5 9d7448bbcb84aff22473edb5e37e92ae
SHA1 7c1e718f189d73551e889759cf3254c8728b0a64
SHA512 835f3a5c1a4fd5a8d03736a67a7aca8c3237e7fbbf0271c7785a88c728424841fd58156d9b5fdf40f35f4a5319f1aff9dfe80f141137f788614f457cf10a296c
SSDEEP 6144:SPEd4PRiNgTMK2yZjGdRAw0I48hSSFrFcSVBUgAKqqdTaTJFpwsDPZBkNF/Gtqpg:SXJj1F
TLSH
T1ADA4DE503E8CFFEC84CD10BA39216EDB66AFECA8C6653119F587E162705653839CD8E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Holy Beach Mosque.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Holy Beach Mosque.xml
Size 299KB
SHA256 ebd1c9920976928663e2c1044a554ec93ca22ffd927fac248b513e555c8a8181
MD5 a4eda24d813ad199ea258e39bba55d49
SHA1 1f5140ca6462585ff0f4ce838b1a9639e65a9f30
SHA512 64f91ab6caac1de2c8dc775ed9fd3f92a439905628eefa85c241691f343a3cbf6875c6dcf7c83b7118e96354d8607d69fe3c823a4e6ba2a857aed32188b70efe
SSDEEP 6144:tJith/7JvI4G94aOIDpwCjyj6kuy9lsXRvOr/MIF12qihMqbtFI5Hxm0+KmAsmU8:9biD
TLSH
T1FB541F102E4CFFBCC0DC40FB28216E9A65AFEDA8C6693159E997F135B0864283DDDD94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Jail.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Jail.xml
Size 585KB
SHA256 8f669e7f1a4ec69d2de53c8ea3f303cf05a3c73eda9546ad231f73972739bb2a
MD5 ede9f97f0cc90084afbf3bd32bdce5a1
SHA1 dbcd17386a571594b39c93018860c4cef38572fe
SHA512 88cee1723ca9f4aba7214f984d418c867c2283d6ab1897d967e7dcf315e428f44fdaeee137038b9808370b616edf04f9b61d32749ae3022980576803a5fde3cb
SSDEEP 3072:UnT5i3pNt7xT1xu4hrpCec7VdY/K12V+kp6:UnT5i3pNt7Q4hrpCec7VdY/K12V+kp6
TLSH
T1BFD423A090C871E7F43BD1A51368D39FFE64A9D38E943039F18C8B9B0F7A46E5A07255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LS Speed Ring.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\LS Speed Ring.xml
Size 526KB
SHA256 2c30daa1d5993639fdd30ed1893a5433f2f2795f60dae815383d0eaa75f6188b
MD5 2ec61d105e3e93e422cbfd21d1f33872
SHA1 3f02782ad3d1ce4710d4d79010a30fb1839da6a0
SHA512 f8c55c6c63a4c3cabc531b9fcf2e68aa328f0247f4676613ea2dace0180b3f2915d2057dd74eb5ee83278b43dfc9d973c18d1c5312e88ed72f4ac2f58d0f38d1
SSDEEP 6144:NgaYnpvBURNvyJcB1a0LQLNN4vcKmlu67jxHnUVRNJw7CvUW+lYNOpHWP76mzs35:n4/Z
TLSH
T1D4B4BD603F4CFFECC4CC00BA38216EDB66ABD868C6753519EA47F166B0565383D9D8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lost Angel Festival.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Lost Angel Festival.xml
Size 434KB
SHA256 1ce35d493e6957fb1ccd2b6555dc57cf4d6e651b2151254b34ff2ce97d5263e9
MD5 e958bf9dbb834bd43f19f1438a07d75d
SHA1 eaf9993420706624b59aba4b25d7e86ee7c9b84b
SHA512 ebf73f2a7b77e9bf9bddd6ae38096a9a6b5a304f49c1e2216807d53ddb7bf864864b752c3aaa0653dfbbfb62c862a0e49c3c3ab7efabb66be9f99b1a5b6b9efb
SSDEEP 12288:jw4W13U+BZ6XxdT7BvR5eMQDjig5jAuXwpODb+rhqCSTkxD:jw4W13U+BZ6XxdT7BvR5eMQDjig5jAuI
TLSH
T1D994EB502E0CBFBCC1CC00FF24516DCB65AFADA587692198EA97F136708616838DDEE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Loud Apartment.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Loud Apartment.xml
Size 414KB
SHA256 8669ccca4540c123334c22da87c3a96bfad18f917d90240e4771425a01c44847
MD5 98234c2965a400d197b502bf27c68cbb
SHA1 01f6435b09889526700182687dfc5ecd213991f6
SHA512 3a39771f5779a5a0cd9748ca8e23bcf6fc3be4133c6c1ad7ca1d21df86b20d6897ce040d31ee42ea747dbf16a4f84ccf60b59926ca7a91b22d3812c6dd1bf7c9
SSDEEP 6144:ByXHbLOTGTR7ymVT8URH2HRdo48N3BYyY2ynfXQV81xddK8FbUmLx/G/tcxpd59p:LL
TLSH
T10A945A603E8CFFECC0DC54B639657E9B56AB9CB8C2A62119F947F016701292C39DD8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Maze Jump.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Maze Jump.xml
Size 209KB
SHA256 c873a191a965d3f58e4360f93dfca68cd5f04cae0d548d9f6e55f2cdf3d75859
MD5 aadcc1303467268b3f76ebc27e2c0e5f
SHA1 8e69f946ab25ca02b58366b2d50e6b0e8b24c4ea
SHA512 a0b5036489f2a1c64e6f9f17318b1924e926669d9d9353945997da11c2ea96c53476b28dde3c8b3fd8e7db73d9488a64b304fa384a08416c6e144707b693d2ec
SSDEEP 6144:XwKS35wRAFjmakMMWT3z3nFrHSKXfRs2t/Vn288LjH4fZubs3QLLRj+PXejK1dDX:Zw
TLSH
T12E240F102E4CFFFCC4DD40BB38156FDA65AFEC68C6683529E957F139B08642839D98A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mega Nega Ramp.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Mega Nega Ramp.xml
Size 290KB
SHA256 bbe92399c464a9b31ae98e96917bfc691c753a10bf015a78302648b2e14edfdc
MD5 db33ed1af4a8764c0acc40a470d629f7
SHA1 6497aa723f6097ea4b2bb21c28a08721a358f04d
SHA512 0ff50ee5b879948363dae708e74e2e8192fd0892272a212e4eef54d68e16f5e2ffd236a906a69f546eaef039e105bd83007a63c0ea42725d8b1fe645fd1e3b83
SSDEEP 6144:8l0QQLH9cj2GzRqz5iScKV5w7UCd2H7IuJxlNsheXZ6EuTfITUam3RRNGEC0y7gR:9k
TLSH
T18354CD603F4CFFECC4DD40BA38116EDBA5ABD8A8C2A53119F947F166B05643839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oil Rig.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Oil Rig.xml
Size 804KB
SHA256 393b757d272d07abeef95cde42b32f2ac7a76328236d83a22c2837b8332667a7
MD5 43c13b3135a162f4faeb6bcefb519dc1
SHA1 951e9a74892d0461a9f23fc84ddf5ecf0b5866e4
SHA512 81e5d49a22353cec700ed08812ce70676802c5e7e8d97cbbe7448910aaa15d793c9f70421b74c230836a777b1188bc938c21989003b5f11093d2366e87c4780d
SSDEEP 24576:/MP2O1navCjv94tAeb3UJrnER3X7TPyE0TsW3ikup:/MP2O1navCjv94tAeb3UJrnER3X7TPys
TLSH
T1D40506A090C961E3F43BC5E91769D3AFFE64A5D38E90303AF14C8B9B0F7A46D1A07255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Airport.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Airport.xml
Size 866KB
SHA256 975da78cd4452f4211e54596840879923e96c370d255a3775bddc1d808ad87d1
MD5 6b2333f1fa55a401f911943b4d516903
SHA1 a9a213465c64d5bf85613fe032a76cabb104c704
SHA512 ff8eca0e8737257bb0e518140ba3c8da66ed173b96e7fa4d6798abccb2018e3dca1fd0e7048322c744a19c280b5a806c5e508423ab0a3f6cbf6e44dfc7ecb29a
SSDEEP 6144:Gcn0xXSsZr5DEFONwDGShRn95MKq6+IbIln5bFHov/Fx8DPxlt4smMBztePGZm/3:0s2jpT0IWILEc1E
TLSH
T1D015EC602E4CFFBCC4DC40BA38216FDA65AFECA8C2643529E947F175B05653839DD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Parkour.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Parkour.xml
Size 405KB
SHA256 a3120ff898587d421ae7392d04deb1f21d79e144d80a71e486002101fc030656
MD5 2d5cc4eea3c47ade86afaae85d2c1c9b
SHA1 b848cca26b318df532ec417a7eac325f65cb8aea
SHA512 6fee190b06987cfed4d5531683a6dfac055e0f5aed7ea0ffeed77bc8eae84c28e4d7802a052fb2fb0cfb2c1b31045088fbddca83ea98c095043a4e6667f6211c
SSDEEP 6144:HiN3WK+I8QiVVfpgWu1kp4mPSVY4Io9Rs6LHN6IdKfEmmKJei/gTVQ+wIyev3TaW:aG4
TLSH
T17394FE201E4CFFBC88DE44BF15191FED25AFACA891647565DC73F13DB08A1A438A9878
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sandy Shores Stunt Race.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Sandy Shores Stunt Race.xml
Size 211KB
SHA256 0a22d9b8f416a63cd0de0fd12111f3997224527a6002780b6241009788065479
MD5 6a3a26c7b828b1ffded19c4bf8d65d38
SHA1 fa3542612785aee1207484ee1e4f52376666ac0e
SHA512 b28c0bf03b3e640ffe265c2bc2cef7781e683d594ab3f5b17cc412e1a4de605dae9588c219fac433983bcd25e84b7fca2b5439f67987370f6fe9ad8b7a046b1c
SSDEEP 6144:k5jBWL4FbSIATDdBhsO+Hw+KUKURSyOBYeVX3m+m9ORmGEVB5qcWD8o9pkN3jPqu:e+Ez
TLSH
T19324CE503E4CFFECC4DC40BA38216EDB65ABD8A8C2A5311DEA47F166B0565383DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Skyscraper to heaven.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Skyscraper to heaven.xml
Size 542KB
SHA256 bd1e88e915e183285699e2436b42cea70601029c7c10d4e3ba70dec59cf38ddd
MD5 ad492d2e0edc5c0b0908ce5e32a503c3
SHA1 5f8561277385b64c079e3979ef0a82d8c605f748
SHA512 01f4f69c429294c6b04a96b173c27f4c9482ff982350c238293eeba654f388e02aee36eab2bc98decb7460975cf0b373b8ae890a1ebc05a99f189e067f6c75b7
SSDEEP 6144:xMAXYPmc9u08OhW9hEhVmgiqMqVVKBi8jx8faArF4N19q8Zsm6xEe+Nc8oHb58po:xe
TLSH
T1CFC4BC503E8CFFECC4DD00BA38216EDB65ABD8A8C2A5351DE947F166B0564383DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ultra Ramp.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Ultra Ramp.xml
Size 202KB
SHA256 17d2f340ab0827161bf97024882e88f90e66566ec1b28745aebfb76b694396c2
MD5 606e1767e1811389ab026dcf207cff24
SHA1 549faf31d5cff113fbdf44c86eb5da3fdeff9e3b
SHA512 df5fec920ec7346cd5662ff8ecb40a6481fb4f85d86367564f19e4ff1acfd248b5f42676c1c75e437150eb484433a7fd85d2cd7a129c872752e264ebf3a32ff2
SSDEEP 6144:AcrQrnjsx9zO/YH65JYL0KLIhDaB2oZRab3DIZ45fQ87dw/Yg55hbrElH7+MUyWQ:u
TLSH
T1CC14EC201E4CBFBC88EE88BF15191FED259FBCA895547565D873F13CB0CA1A434A8879
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Yacht Party.xml

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\maps\Yacht Party.xml
Size 2.2MB
SHA256 cb61cbed74b5435b79c072feb142115b4e5d06c8687bd9aed87a7380deff2cf0
MD5 cf75cb70c05c91099077154286ecf615
SHA1 b65fef3aa517714fecb7ebc0d9fea79aacc32096
SHA512 fedbf337a6b91694a418ff24f4b2c7e4019df346234a53623f7a3bc0a3ab077b49e38ff59af8a93a9629c6ede3d30cf3d99c976c04177eb823c53e710c117032
SSDEEP 49152:9xWusrS2cKlg9fQfgExKJLHA5o1Td6jQkwLFZjHkCX8Vn6sGtvJ:7
TLSH
T1CAA5CB202E4CFFFCC4DC40BA38217EDB65AFD8A8C6653159EA47F126B0565283DDD8A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apocalypse_bus.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\apocalypse_bus.png
Size 128KB
SHA256 d9782b9e200b0637e01556e7c392f428a26ffdd464bffcc6c1149106098ae924
MD5 9188327ecd3840ac8a4827d078b5ce85
SHA1 3ac233d39dd3a5361bafb2b1e94e89596a406cdb
SHA512 23e3f263fd6474a2ecbbe6e7e828638f083f082e1badc249bb6602a9d519d8061a80cc9bc76e70afc0d7d89b124e9958f3b2bc6774d05ac7c87c37b573a03a7f
SSDEEP 3072:kJWCBwf/U4iqNr7FN4ybumxcTmzdmiL6fZ0nf:kJRBw3XiqNr7r46D6qzgfZM
TLSH
T1D3D312A05C20FD3B0255B15476345A2D2CF02B63DA992E791FE918D6CE5BEEF8C08A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

apocalypse_truck.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\apocalypse_truck.png
Size 142KB
SHA256 f1a9aeb37e94b8ffd7f4e4936512649edaa5fc950a28c6fdb26456f73b7a5b00
MD5 c0bc0f5c62d7fba423f5c0c6c93f8801
SHA1 a03c61ce52852dbf22c927908696c37d3295cbdb
SHA512 eafd34db63e49031c2d0ea81cecffdbdeecd36ba1ed4a7c963019f1846fb56393b43bc9637739f2cc110e3a9ff442796afa7c9333bb187998192c7dd94ec54f8
SSDEEP 3072:fFhSL4V867MbFRXAGbAFpXkMz5JBSljEOeOH5jJXKwAhRCPgSlj96L:TkiGABkMzz0JEO55KCPgSNIL
TLSH
T18AE31211865D967988BF74FBA880350DB0C95BAE72ED870DC8360CD9A52D280DFF19F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autistic_hooker_destroyer_robot.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\autistic_hooker_destroyer_robot.png
Size 183KB
SHA256 52e10a55b59255b6b0ed707987ec47d9a5e9d3341bacbe0aff5dead1f96885b0
MD5 20ff07a672b33d3772839eacb92c1170
SHA1 f72fa7233e7aba55a8bf0d80649eda917c0d306c
SHA512 ba5d72c15dabba3262012c2254857428bfda586fe3ef467f94b70e2216244cb29029f1c5fced896a80f10e793040b25dda662333c51fa85b0a961ab8d54b94d7
SSDEEP 3072:PqJ6HAYLHnqUtvI2jGvv1auGvGBX+IKar7HqrGePPR98Kf69L3iVU:yJ6gYLqUtvC17RBX+Itr7Hqde3iK
TLSH
T1C0041293D5F49CA10ECA6DB814807E297E5B64FC38B6D0B45D39CA96DE06F300D93A93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

beach_garage.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\beach_garage.png
Size 227KB
SHA256 ef44b47a336731b26f5bd57ba62ea5ef925c67a82037fc14d13048e93ba641d7
MD5 b80561d9cd9f170fb6c451f9afceab7a
SHA1 6ea36952a4257d7d293564ba18434a71f022583d
SHA512 7be83b355bba63bf68e2c0877c357796a742aed6a1c24a93e6696100d9527a4976e09005e8c9741642310baeaca9f64fd74cf969cf4bcb58f44ad1d9dfd01abb
SSDEEP 6144:f+WZeAtLJ9em1ELqtk/BbG1j6BVAPvzOVfdLgmJIIgT2BCK8x19tn:fvztLJ9oqC/xG1eBcOVfhTJIq9Ypn
TLSH
T119341222667E46375AAB7BC72E85CE3B11DEA247DCCD48F4424E51B23A08D6D035A3DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

better_festival_bus.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\better_festival_bus.png
Size 142KB
SHA256 e8ccdb42c2158b02971de036c5c95d9ad3a9994b44543ae9760f7ba4465b858c
MD5 bc0cc7f18b8240603f9d7e26013a8ff3
SHA1 20a182184515859daa2476e0860e3a0fc57605c0
SHA512 62531aea4db4f6d567b01b651657d78062d7cbbb58779abe82c2762895328513e03748890deda7dfd89bb287bb75b3c423359b063d688548cbbc96f24c804cff
SSDEEP 3072:NT1QsQMt+/cYN+eonVCUXL0GEKbOz43H43SC3SPMGpiIRz1OxsY:91QsQMt+kaXLUXnt+43HtCwMGdzUxsY
TLSH
T1DAE3137B005D98CA01EC3F4148FFEABA1F4472386AED51959012FBE8EBBD54D4C2547A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bighead_angrydog.png

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\loader_xml_catalog\previews\bighead_angrydog.png
Size 1KB
SHA256 5e9d03d358ed5f176493a6f8e3b3256958261fa31c56653b6ec896244dd4afde
MD5 1e5ff9bed061ca6fa47e2afefdcdd042
SHA1 0058201760d1b4bb426d76fc5d8632592f74abeb
SHA512 a7567bfe2c072a264c8032c3ee85b168eb54399cc5a341064d924c3c78b898cd6b7e95cd23bb08fb3d0a9721054d022b0c3f90a9ac8e776ae9a7b6e1f4c60f0e
TLSH
T171311A73664376D262FFFDC882D720CC9C127D26086B15A602D8DD624322773925B6BC
MD5 SHA1 SHA512 TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\app.js
Size 14KB
SHA256 0b07e78d841fe9d328a1174a1e63489c1ad443c19abcab03a84b464354e31149
MD5 e2088abc8c6d2d8d73c7972c350a950b
SHA1 c8b4d6d5e7c42a1034aa2121365ebb08b98c47b7
SHA512 2108c4b46898d09a382e27a0afa29b0ca147b9a2c76b33492cfc99b097da19a1f5433bd9d0e4fe3deb3ded96080b5a645b0eb391d96b9e136a0362b9fea86491
SSDEEP 192:KU8I1S2HaUqVCNsD6qln7bgAo19b0wXOhEkEOQK4Dey/ngLAne1X6R6c3PD7Crd8:MI8yangr/QEkEfKGnyAe02dJ6
TLSH
T13462C7EAB1F52439083B41B1A35FA5257F6A404B1287D96076BC885C3FD0AB1A0BFDD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\index.html
Size 7KB
SHA256 7030a4df24547e9e323ee1f52c11bf61c125dd997aae7ac219ace8a7b3d4884b
MD5 701a9a76763a6a042cdf7a8bb2c4c0af
SHA1 8120b3f5e327df2504665ceaea06478cdbb097b7
SHA512 8ca881d7cbf1b40fc9d735b76c8c2dd9245bcf85f98f5adb87bea11edd46948729c2193ebe1a18b406725ed4d82f9c0e810c57692e23a9ee265f287787fe5025
SSDEEP 96:gplnOELrw6CYcKa+efzj1JGuspWneyOcOcO3A48N4MmAEin5EdXD+dvqdukg:gphLTcpvLGjbNffwxMU5eKdCUH
TLSH
T1B0F17871A4F46933529B81C67AA16B1B3BE5E747C69B220072FD0BE44FC7C91EC2B452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

style.css

Path C:\Users\Admin\AppData\Roaming\AKMenu\assets\_unpack_web\web\style.css
Size 19KB
SHA256 5719cd354aea45445ac13df2250b25b8af274bd4add47f7f72c9f39eae13c050
MD5 5da25fb9b6804db45a67c26edde482a4
SHA1 5f192f3a75d80d8ec6256d6122c3943b21327847
SHA512 cef4a30ce40165d78183a40202339858893a4b704da8b50a5e84d77c0f1e97172f2183f5627cd6da7fde41a98ea91606fdb137e25e9d708cf1a4d50b194e248a
SSDEEP 192:Dbiv/CZHWtalH/bfJ0f9jE3ZmD1iPSJw0RF6N5FQMTMkDOFJHidvrG8ttCQ6kRqp:XEKJos+fVEUhk+JH+1cTFvS0SxSf
TLSH
T13392D87637256214B42BDBA83E1BEF8AB31CD6139008A77C5EE0101CC3CD365597A799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

update.log

Path C:\Users\Admin\AppData\Roaming\AKMenu\update.log
Size 831B
SHA256 e45aee75cb0dd6581616d603cbbbd764a5ddf469ce36b284efd3f80c3f479d4c
MD5 6def8d85665240804525715c6c92933f
SHA1 3aac8869466f81f0e3a6710fc8e211408f35cc01
SHA512 0bacd9db9dcb49dcad2ecfad52710bdd5eafed5dd1540cb6324206dc0bf48ea440e0d6e9382863f763425bd24d79ea3398f729eefa914d13515e496dad301cf3
TLSH
T1CF01ECBEAAF9D6250612034AC02DEFD954063B2A0B57C71032B51489ACF1A5C4FF635B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 00c5740352a5ee194fe9d6b5e7092fbc445db3027b3c9882fcba5d6ff3a6e09a
MD5 9ce70fc6026ab326d7358aa9338ac9a7
SHA1 3bc2c0a46522cc562f56e390b2e8576bbc4c01a6
SHA512 aa9ba4268adfe5c9f3191e25598fa0fe75b477471464d7c8778b2cda18fe1375aef55f0218fd0a69b58e833b521a76bf1ebeedbace1737141b216f5e4dbcb4c9
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 caf7161d941218cc56bbe12b457e48a4269d4951ec203f0aa89416b7547db336
MD5 40f855c680ab54d8a472da15a11560f1
SHA1 cb900f6f4f784ce0cbd9dd4327bbc3e74938f1a9
SHA512 2a0f9a86cfe1760314067871bc1388f030d8ba31faffef7095f24b9249f21c78e32ab3cabf04dc812c1e7356bffeae56d741506d8d7351f41f8507df94bbee8e
TLSH
T1A0D01212B3C201B4D01021331813A50D4802C50B500D81005C2DC66D3A440501E02451
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 da742cd1a282f33a42a943767b22438b8f31745bddf47f7aeee37bd554c96cbb
MD5 fb4473be5767623c90bed2eb84b939cb
SHA1 8c6bcbd38fbde1d46b22cdae72dfb60aafba3502
SHA512 04baebb21ceee75ca5472e7edf9bcab02f98f5ce4ce8bb25499410214db09ddcbaffef47adff0b03a5d0dcf5fdc82777cb577050bf848e9143256018a532faf0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 58391345c616ed3e741d7d966198964e9a9f3c5051d2e2a0c906cada8939a8f4
MD5 106dcd52daf431fe4a064b47fee304ae
SHA1 2746071e873fed4e46b7914f3c53feb5dcc28fcd
SHA512 0e0a8e50e4a6048053441691e0e1b2022243e6e8d8e70c5264294a3a79ca6d430c26a598fdcbb2a25d841ea926de57b8fcc3470304b9b68bfd7f2ee26ae9ab28
TLSH
T1ECA0025802564113C775137520C571587330991F9A370F01D0B6D57989917B2F512629
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5bb34f.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\Network Persistent State~RFe5bb34f.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 c01e5309d8370183244ec8be3775faca6c2e7005ad48fd4d275328d3e45c8ad8
MD5 085df7d13275a4e3ba005c5c44e2e6eb
SHA1 fd7e617bed23aefeb2fef5f44df0b753b89efe3c
SHA512 175027841a7e08467bcaa4104e34def82a3533066214d125c9be6c89629a6cae6f7414ed671d17bd276eb2d14f8d05b24147b5034cd45b41a24ffd49a60a508c
SSDEEP 96:stv/dasoYSTb94kmo5h16ZMVs7/x+6MhmuecMJgS1ejekK+gUJ/+28XM1C7K:st3/jpo7VsV+FAJ/Qj4y/+G6K
TLSH
T100D195065A34797B4CCBE219BA257E12D2F9503265D52E5CE7FC4A2C08DB6DC6207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 6KB
SHA256 8e83e2e584e46a88c95a8a82028c5b2740b4ac7bf6ec154c653b8e43082612f0
MD5 12a9703050c5b1abe10a75cea2809408
SHA1 70c89e800bd1c1366767c705f85efcfe3abbc5da
SHA512 6475c6f045bb24be7521db609b65967f26d0333394b5cf047e52fa90ea6d6bfd859419c99b461ae8348ea660d8d59d59efcf5ede01b6ff905027476991d1277e
SSDEEP 96:stv/dasoYpGTb94kmo5h16ZMVs7/x+6MhmuecMJgS1ejekK+gUJ/+28XM1C7K:st3/xpo7VsV+FAJ/Qj4y/+G6K
TLSH
T147D195065A34797B8CCBE219BA297E12D2F9503265D51E5CE7FC4A2C08DB6DC6207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences
Size 5KB
SHA256 a66a4412594daae369c4180cb8d75dbe61403a15d466a8218650202481aab3af
MD5 fb7ce1a18168a111010a8277d96fb12e
SHA1 88932d67a118956dcb334ab27d43c231cde99c7c
SHA512 bf48efc91655b0307f3b55f0387e206b3694314f0f4031d444dac34bfd0f35e7e437f8b35b9e565a7d7dc2094ab02d4c1df18a403a8ccd8d9d2b28b7ed79d164
SSDEEP 96:rv/dasoYSTb94k4do616ZMVs7/x+6MhmuecMJgS1ejekK+gUFJm+28XM1C7K:r3/jvoKVsV+FAJ/Qj44Jm+G6K
TLSH
T1ACC194065A38797B4CCBE209BA297E16D2F9503265D52E5CE7F84A2C08DB6DD7307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5ae0bc.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Preferences~RFe5ae0bc.TMP
Size 5KB
SHA256 e63b846d13611a0cac8f37170b30da56521e4899a8d662ab45fc1a5f1431d101
MD5 649ac9a84a79833775974979ed1e8ccf
SHA1 467a557815af8094a25588059979b2fe3c20c51d
SHA512 27cbeeb2e898218722efee5b2a3f5a86c5097f52aa2e61ca57b4f70f9819d5899157e2f681491ae94662fcce541cfbe4b66ef8638971081bab72d61ee9436148
SSDEEP 96:rv/dasoYSTb94kQdo616ZMVs7/x+6MhmuecMJgS1ejekK+gUFJm+28XM1C7K:r3/jBoKVsV+FAJ/Qj44Jm+G6K
TLSH
T14AC194065A38797B4CCBE209BA297E16D2F9503265D52E5CE7F84A2C08DB5DD7307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 2KB
SHA256 6bf8bc6a5d12842e2513eaf9ada61bf8b71785710edd754d7ed8a5dd7288b1c2
MD5 f405b44c46e954ff293ed58454fc9a0b
SHA1 e60cf2ad32cbe945cab2a9ce9a77c0ac6ff035a7
SHA512 a372a6f7ff9527f15d495b0291b23d244c5c9670545116f401baf8778b6e83f6b6743495483483bdb04adfa24974bb9c6ba10be00076237f6337f4ff1e621ba7
TLSH
T17751853B6960663B89E355487D5A3F529E7980B5AAC21F6496DD0B0C00DB54C2343C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 3KB
SHA256 20411382595c9d16ebafca3a74f98d6950b0372ae397253d8e0d3e2820e6af20
MD5 2e2be1f94bfd81f2f03b7a385c0657fe
SHA1 f9eee7f4fcd48692900b4bb94eab24ff985ee322
SHA512 7846a9dc169fa582848aeb641ad0b9ad554facba1f5c2663b20a569879bffc8bc5c597ad4de0b311651ed7cae8535ed655b83dabad407aab33ca78a61801998f
TLSH
T16471637E69B0A93B8DE3990478862F06A7A54036E5C57FA8D6EC0F0C11DB6882353C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 3KB
SHA256 508e0aca63d1d6405dea06cc644dfe5c5bd4437155905b029510d903639dc915
MD5 cf1084b35e272b2ed29bfc2a26b2524f
SHA1 8a4441255e5fb2c96b8a8ea5c5abc40bc31e83b5
SHA512 d7e2b39589f84ed07ab0f9dc527455d575b697adecf843f6fabb2c575009946e36e478d5e8e3ed83b26479afbcb5660b89efe60c628da79a3005f6b7fd68b9d6
TLSH
T1A481633E69B4A93B49F799047C463F06ABA48037A5C57FA8DAEC0F0D11DB6882353C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State
Size 17KB
SHA256 fd532dda2f71d5709059861d940bdcafb29ad5accf606f10fcdd08754db869f4
MD5 9c2e97131b82c1ff9690b8ab7ed08a2b
SHA1 8a875ebd754e8b2ad0901f2495855bcd0d5020d0
SHA512 ed78adc271a57ce5467622bebb0c8addfc0bb9f9d7711c2e01881c909ab0221bea1b8fdaddff79586419ccafb9d86ffd062b7195043d4d2995e827ca56f9133b
SSDEEP 384:I+aQikB+z/xvxjg/qhEwNBSsaQXdSS+Yy0+HNIw9zF:H/UxvxjgC+UBXSYy0+HtFF
TLSH
T17E729E3ED965AA2799F7E6847A0A6B8BCBF4446251C65DF84EEC1F0C0AC36DC1343C02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5a8be6.TMP

Path C:\Users\Admin\AppData\Roaming\AKMenu\webview2\EBWebView\Local State~RFe5a8be6.TMP
Size 1KB
SHA256 97a4181564b51c73eecfc108ab5e8e4858480e65fc20ebe8991e115b1b4d8039
MD5 bbd4861596ead5e70ef4f3fb1a896142
SHA1 e3bd1b1ad4dfbee0184a1a1f32f29ac392a3e6ab
SHA512 3348f0c10a82ff4b89e60a97c9fdfc4409713eacba44d6f203ea4b2e3cad481f6c988bca9a31cfbf6d95ab4a32f35b35a73fc741ed64cedfc7d6b6bcef64ac08
TLSH
T16231C67A96F026369C8764452917BF8B6F31407AD2C14E1422CD0B0C21DF40C367BC33
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping860_1112154380\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1160-690-0x00007FFB11630000-0x00007FFB11631000-memory.dmp

Download

memory/1444-859-0x00007FFB11630000-0x00007FFB11631000-memory.dmp

Download

memory/1444-860-0x00007FFB10390000-0x00007FFB10391000-memory.dmp

Download

memory/3032-900-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/3032-910-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/3032-907-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/3032-906-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/3032-908-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/3032-911-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/3032-909-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/3032-902-0x000001DF51370000-0x000001DF51371000-memory.dmp

Download

memory/5448-691-0x00007FFB11630000-0x00007FFB11631000-memory.dmp

Download