[Lecomzolo]

cheeks in my fart fart in my cheeks

[fritz]

No VT report... But I get why
@mothered archive is infected, it contains a fake "chromedriver.exe" : https://www.virustotal.com/gui/file-anal.../detection

[T3chnobyte]

Nice "chromedriver.exe" and "Hax" folder. Whilst programs using proxy's do get detected as false positives, this is not one of them. The main logs your ip, scans the local net (using arp -a), disables windows defender and task manager, changes windows certs (probably for a mitm attack, although I haven't done enough tests to prove that), and exfiltrates personal data (mostly browser passwords and hardware info) to a 000webhost domain. It actually bsod'ed my malware testing vm lol. I'd post links with my testing results (sandbox results, pcaps, etc), but I cant currently post links due to being new

[mothered]

No VT report... But I get why
@mothered archive is infected, it contains a fake "chromedriver.exe" : https://www.virustotal.com/gui/file-anal.../detection

Indeed It Is Infected.

The OP has removed the link, but I've taken action accordingly.