Browser Downloads a Fake Hardware Utility Archive
Detects a browser creating a ZIP archive whose name impersonates a GPU, disk, temperature, codec, or PDF utility associated with high-performance systems. This activity is often associated with poisoned search results leading to cryptojacking campaigns.
Microsoft Sentinel (KQL)
