Overview

overview

6

Static

static

1

WIN_STB-5....2).exe

windows10-2004-x64

6

WIN_STB-5....2).exe

windows11-ltsc_2024-x64

6

Resubmissions

30/09/2026, 04:24

260930-e1gjhasw8m6

30/09/2026, 03:50

260930-eedkqazzht6

Analysis

  • user interaction
    yes
  • max time kernel
    1800s
  • max time network
    1784s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/09/2026, 04:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    WIN_STB-5.4.442.0.exe_PROD (2).exe
  • Size 93.8MB
  • Sample260930-e1gjhasw8m
  • SHA256 b7847398eaea7ac1be2a9c234dfd6ecf07543c76813668a8fac77957605c3cd0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoverypersistenceprivilege_escalationransomware

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 47 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Indicator Removal: File Deletion 1 TTPs

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion
  • Network Service Discovery 1 TTPs 31 IoCs

    Attempt to gather information on host's network.

    discovery
  • Checks computer location settings 2 TTPs 8 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 14 IoCs
  • Executes dropped EXE 34 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Accessibility Features 1 TTPs

    Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.

    persistenceprivilege_escalation
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 12 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 39 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 36 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 38 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\WIN_STB-5.4.442.0.exe_PROD (2).exe
    "C:\Users\Admin\AppData\Local\Temp\WIN_STB-5.4.442.0.exe_PROD (2).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:6056
    • C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}\WIN_STB-5.4.442.0.exe_PROD (2).exe
      "C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}\WIN_STB-5.4.442.0.exe_PROD (2).exe" /q"C:\Users\Admin\AppData\Local\Temp\WIN_STB-5.4.442.0.exe_PROD (2).exe" /tempdisk1folder"C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}" /IS_temp
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3244
      • C:\Windows\SysWOW64\MSIEXEC.EXE
        "C:\Windows\system32\MSIEXEC.EXE" /i "C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}\NWEA Secure Testing Browser.msi" /l*v C:\Users\Admin\AppData\Local\Temp\LockdownBrowser.log SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp" SETUPEXENAME="WIN_STB-5.4.442.0.exe_PROD (2).exe"
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3836
        • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
          "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe"
          4⤵
          • Checks computer location settings
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:5816
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=gpu-process --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADgABAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2116,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2188 --mojo-platform-channel-handle=2176 /prefetch:2 --host-process-id=5816
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:340
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=2324,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2248 --mojo-platform-channel-handle=2192 /prefetch:3 --host-process-id=5816
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:4516
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=2488,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2508 --mojo-platform-channel-handle=2504 /prefetch:8 --host-process-id=5816
            5⤵
            • Network Service Discovery
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:5776
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3988,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4016 --mojo-platform-channel-handle=4012 --host-process-id=5816 /prefetch:1
            5⤵
            • Network Service Discovery
            • Checks computer location settings
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:5764
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4020,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4040 --mojo-platform-channel-handle=4032 --host-process-id=5816 /prefetch:1
            5⤵
            • Network Service Discovery
            • Checks computer location settings
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:4652
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4356,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5144 --mojo-platform-channel-handle=5140 /prefetch:8 --host-process-id=5816
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:1132
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5548,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5584 --mojo-platform-channel-handle=5536 /prefetch:8 --host-process-id=5816
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:3812
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5536,i,14818417183332543755,5223472529036755838,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5584 --mojo-platform-channel-handle=5520 /prefetch:8 --host-process-id=5816
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:4552
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\system32\cmd.exe" /c rmdir /s /q "C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5212
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3060
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 5B02A32075015AA2FBFAA829160EE57C C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:2244
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      2⤵
        PID:5452
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding BDC2A59CF9DE455847DE20578FEF45C6
        2⤵
        • System Location Discovery: System Language Discovery
        PID:1708
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Checks SCSI registry key(s)
      PID:4836
    • C:\Windows\system32\sethc.exe
      sethc.exe 11
      1⤵
        PID:4184
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
        1⤵
          PID:2284
        • C:\Windows\system32\sethc.exe
          sethc.exe 11
          1⤵
            PID:3416
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe"
            1⤵
            • Checks computer location settings
            • Drops file in Program Files directory
            • Executes dropped EXE
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Enumerates system info in registry
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:3480
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=gpu-process --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADgABAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2260,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2268 --mojo-platform-channel-handle=2252 /prefetch:2 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:3140
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=2352,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2360 --mojo-platform-channel-handle=2320 /prefetch:3 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              PID:5040
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=2516,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2536 --mojo-platform-channel-handle=2532 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Checks computer location settings
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:3312
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3940,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4000 --mojo-platform-channel-handle=3996 --host-process-id=3480 /prefetch:1
              2⤵
              • Network Service Discovery
              • Checks computer location settings
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5196
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3944,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4016 --mojo-platform-channel-handle=4004 --host-process-id=3480 /prefetch:1
              2⤵
              • Network Service Discovery
              • Checks computer location settings
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4748
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4772,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4848 --mojo-platform-channel-handle=4844 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              PID:5608
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=2380,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5268 --mojo-platform-channel-handle=5140 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4616
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5268,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=792 --mojo-platform-channel-handle=5288 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4832
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5316,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5108 --mojo-platform-channel-handle=5080 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4500
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5080,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5336 --mojo-platform-channel-handle=5328 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4468
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADoABAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=5420,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5412 --mojo-platform-channel-handle=5360 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4212
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5360,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5452 --mojo-platform-channel-handle=5448 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:3692
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5300,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=840 --mojo-platform-channel-handle=3936 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5612
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5068,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5416 --mojo-platform-channel-handle=5436 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:4708
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5464,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=3936 --mojo-platform-channel-handle=5476 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5700
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5500,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5520 --mojo-platform-channel-handle=3936 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:176
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5596,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5580 --mojo-platform-channel-handle=5504 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:2308
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5504,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5640 --mojo-platform-channel-handle=5600 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:5020
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5672,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5668 --mojo-platform-channel-handle=5640 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:2712
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5656,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5620 --mojo-platform-channel-handle=5624 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:1672
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5640,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5660 --mojo-platform-channel-handle=5592 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:636
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5608,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5628 --mojo-platform-channel-handle=5580 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:2972
            • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5580,i,5954259973366978716,12815028677233528978,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5564 --mojo-platform-channel-handle=5648 /prefetch:8 --host-process-id=3480
              2⤵
              • Network Service Discovery
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              PID:1128
          • C:\Windows\system32\sethc.exe
            sethc.exe 11
            1⤵
              PID:5660

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  e59045c.rbs
                  • Path C:\Config.Msi\e59045c.rbs
                  • Size 15KB
                  • SHA256 a166a5d14160c5799bd5d646ac90fb980c94f449f03a8bfbfc705b765916d960
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CefSharp.BrowserSubprocess.Core.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.BrowserSubprocess.Core.dll
                  • Size 900KB
                  • SHA256 8c1422aa566f7b69ced8d698e809a9b7afd3d666e96bdd5af07e95039cc3d284
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CefSharp.Core.Runtime.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.Core.Runtime.dll
                  • Size 1.3MB
                  • SHA256 1a119ea448104c2e4a84be588e8ac75df74ab6c5e540fb9c8b7cbe576bce5e15
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CefSharp.Core.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.Core.dll
                  • Size 947KB
                  • SHA256 af249fe8e9f63911a2b1e7fa44ff9bac2427f75beee359911c49819047300ce1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CefSharp.WinForms.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.WinForms.dll
                  • Size 53KB
                  • SHA256 b8dbba2250cbb52b85b0c523e349098bac9800ef759f36952d792b50be78a390
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CefSharp.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.dll
                  • Size 275KB
                  • SHA256 6eb82c2edc4a62658d74cc6f49a978f7e34838b2ad390e51694162529f147efd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  NWEA Secure Testing Browser.exe
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
                  • Size 309KB
                  • SHA256 3baf19269b2c5bbe514a55dc2b030924365bc7103e545f00e29b095ca4877acd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  NWEA Secure Testing Browser.exe.config
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe.config
                  • Size 169B
                  • SHA256 788f20c6dd16c7d1785b2707d431e03f7568a838ebd639593f4dbaada791be9a
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  chrome_100_percent.pak
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\chrome_100_percent.pak
                  • Size 663KB
                  • SHA256 67feeb5b8d5bd0af4ce9abe2e3a4361ca6ab64a269904f20a9d5ac8c28d5ab93
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  chrome_200_percent.pak
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\chrome_200_percent.pak
                  • Size 1.0MB
                  • SHA256 a51f7015b4732a0553856e3e6db20c428f3f2245165278f73cba3367647d3ba3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  chrome_elf.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\chrome_elf.dll
                  • Size 1.1MB
                  • SHA256 5a765831ba7fe0ff113703514380168f6169e7fa00b475904a247973bc922b2f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  icudtl.dat
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\icudtl.dat
                  • Size 10.0MB
                  • SHA256 9192f5453665fcfde180f1283f2fbccc477f4daa0081e3903ec02d9242721860
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  en-US.pak
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\locales\en-US.pak
                  • Size 510KB
                  • SHA256 897f387622523f7fd8cf13d2caf2a2b3c7da735fe0ea7a653882ea2518c81853
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  msvcp140.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\msvcp140.dll
                  • Size 427KB
                  • SHA256 fc4a623bb0ab791e98ac304e6d39c2282901d265431820b9406bbfa1098921df
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  resources.pak
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\resources.pak
                  • Size 8.5MB
                  • SHA256 42132d240416a48443e1a269a83f6db4e81ee5aa0fdeab2472e87b65ea07cfac
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  vcruntime140.dll
                  • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\vcruntime140.dll
                  • Size 75KB
                  • SHA256 85258bbad2864c04b84e60f8db2bab5d4e179aced06cde23e5f57548ffa029d1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  LICENSE
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1170218148\LICENSE
                  • Size 1KB
                  • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1170218148\manifest.json
                  • Size 95B
                  • SHA256 c8afcac6d18769a07be1d87fa52c3861c210525cf7de195f09489dfea947306b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.fingerprint
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1196865812\manifest.fingerprint
                  • Size 66B
                  • SHA256 f48c9d93cc216af13bbfad15dd5e6d1679cd35d318e664029ddf61efc6e51a5d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1196865812\manifest.json
                  • Size 76B
                  • SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_137554209\manifest.json
                  • Size 985B
                  • SHA256 052de1145ee2003bc29958ee122d431ec6cfd50688dc6d7eb20f3783b0654dd3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1494220430\manifest.json
                  • Size 114B
                  • SHA256 3cf4bdd23d314f45538d4db80cc5a30dbe7b546ffc488a24cfe9dad08a461dcd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1542841565\manifest.json
                  • Size 97B
                  • SHA256 d42f3640c57d4324e6882ca1c746d770b7796121811697547c51a697894de3a4
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1571075853\manifest.json
                  • Size 78B
                  • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1644199632\manifest.json
                  • Size 69B
                  • SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1744937551\manifest.json
                  • Size 72B
                  • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_179424249\manifest.json
                  • Size 108B
                  • SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_1923993227\manifest.json
                  • Size 73B
                  • SHA256 59cac6a0fc316bd8b00a65120176bff4352bb507a4b46b0a6b5f33c9ecf5e670
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_2129081576\manifest.json
                  • Size 85B
                  • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_543632074\manifest.json
                  • Size 110B
                  • SHA256 b94d975ff3ac7e2713171c519ee2726e365abc857eb99960822eebc55c9ef6f1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_671051578\manifest.json
                  • Size 108B
                  • SHA256 6ed022b10fef41956878ca2b9f9ee1ed1973c9c0dc5bf3adeb658d2c73ac8737
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  hyph-as.hyb
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_802781030\hyph-as.hyb
                  • Size 703B
                  • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  hyph-hi.hyb
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_802781030\hyph-hi.hyb
                  • Size 687B
                  • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  hyph-nb.hyb
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_802781030\hyph-nb.hyb
                  • Size 141KB
                  • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_802781030\manifest.json
                  • Size 82B
                  • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3480_809079706\manifest.json
                  • Size 202B
                  • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping5816_1631136051\manifest.json
                  • Size 86B
                  • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.fingerprint
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping5816_367347788\manifest.fingerprint
                  • Size 66B
                  • SHA256 8bd84b96078f657a23ff655f42ace98fa2b7d95b1d14ce9830c241e462150b33
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  manifest.json
                  • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping5816_367347788\manifest.json
                  • Size 97B
                  • SHA256 335b1566f2a398f764be95e60ea16352e087262dfffa2616576bb22947d7e4bc
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  NWEASecureTestingBrowser.log
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
                  • Size 287B
                  • SHA256 31a91115f397481482e7797e238a988bbf305124e6681d47c6848d6edfa19217
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  NWEASecureTestingBrowser.log
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
                  • Size 2KB
                  • SHA256 7e549a0cf9f1ea18d0d973d4d3827d2a666abec2f9afefaf8f65baef0875f42e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  NWEASecureTestingBrowser.log
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
                  • Size 2KB
                  • SHA256 e29c8b68958902139c721b90f6855ce8531d3c6eafd090708e943841cc795486
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  NWEASecureTestingBrowser.log
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
                  • Size 2KB
                  • SHA256 703cf02b8eda95b9cf1363009b4f9112a4899773e78599c4c96d8fc9a72fe626
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  NWEASecureTestingBrowser.log
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
                  • Size 2KB
                  • SHA256 9d629bdbad3e9d8c592e29215dd21b583118ad697791a567cc9627cc3ab4181e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  crl-set
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\CertificateRevocation\10809\crl-set
                  • Size 1.3MB
                  • SHA256 4910855d45f4279eda4e80047309644163263a093dca44b6684722ae55d403cd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Preload Data
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Crowd Deny\2026.9.28.1389\Preload Data
                  • Size 329KB
                  • SHA256 13b934fc6ec19511f46791087075512af7021e74bf9761a0ffd5f0cdaa07adb2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  28fcb01e-6c87-409c-aedd-6b8168282c84.tmp
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\28fcb01e-6c87-409c-aedd-6b8168282c84.tmp
                  • Size 38B
                  • SHA256 f7d5893372edaa08377cb270a99842a9c758b447b7b57c52a7b1158c0c202e6d
                  • MD5 SHA1 SHA512
                  Submit Download

                  the-real-index
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
                  • Size 312B
                  • SHA256 5a766a2dc65f579d37acef5ea37c1bde0db7f60a8188ae73ef9996a987aa2e9b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  the-real-index
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
                  • Size 552B
                  • SHA256 6bfc7c30beaedc94d1cbb63dc95aa7a152e67fdb11b18a7074f294ef06ed8574
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  the-real-index
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
                  • Size 216B
                  • SHA256 c231a8333882b3d335878b652692888d653904f6cfbde418fd908754509d8e99
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  the-real-index
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
                  • Size 240B
                  • SHA256 1102f1eeff1c74afc0c4bd146ea0597715d48aa8d1c92b2952a9bdd017aa09de
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  the-real-index
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
                  • Size 312B
                  • SHA256 6a341100a4f885c997681f323b7fb071f410361758eab09fa08e24134a2fe017
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  the-real-index~RFe59b22f.TMP
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index~RFe59b22f.TMP
                  • Size 48B
                  • SHA256 6569d767ddc0d1866bd92e53d796f68816f3d0e2f8cdeb93a816020b1c7a0732
                  • MD5 SHA1 SHA512
                  Submit Download

                  Network Persistent State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
                  • Size 2KB
                  • SHA256 a5e4bff06b0cd4bc8a373aac6d4228f236b01a44fd93ca52638df3d0dc631373
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Network Persistent State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
                  • Size 2KB
                  • SHA256 70cdf67a6133b3b492858845da072a541ef9d675916f0406906c9cffedb4109e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Network Persistent State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
                  • Size 2KB
                  • SHA256 58ccd4276cf8cccf1c664d2b5ab0838ed737c7992170b038581e1335da574c9e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Network Persistent State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
                  • Size 1KB
                  • SHA256 a4d9133519e71af81f2641f5cc5c6c5301ad7233b873501465b7f8ba21b71c58
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Network Persistent State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
                  • Size 2KB
                  • SHA256 24b8e3fba515e4f749d5c4c8110489f05d27f8fab121f58aa4ee49e135a4d9a8
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Network Persistent State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
                  • Size 1KB
                  • SHA256 d6111375c118f806e8e3681d376b37f7f5c460470532df309b84ec9ad42a40f9
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Network Persistent State~RFe5a6a35.TMP
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State~RFe5a6a35.TMP
                  • Size 59B
                  • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  SCT Auditing Pending Reports
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\SCT Auditing Pending Reports
                  • Size 2B
                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                  • MD5 SHA1 SHA512
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 038ff898a3edf67fec2ec0595abaa67e801675e19a11e05b74245c8921525be3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 83e6d2d524f3c5ccbf89eaea7571a0e698e884ff1af5d24d15d960aedd834255
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 b44f426530b9970430fade9e2d1957afba3193e9ec4b221251109cd8f75c0a01
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 62ef95f6bab72a6bbe6635620a5f8d9502aeb5553235783491bc7aaa332dd650
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 95521782c24b38b4debb538e68c510b4d38f5352baa0c7a71a2c9f1f670e6ef3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 0771fadc99fe8420e55bc4bf97fefe52e780253f98d61ad814c950dfc05b9f73
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 978e00419ca5fa358e3454182cccc8774be45dbbdbfed36d92f3f98cd06f1041
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 e2ad3313a84c218db31f78bed809a1ca292ddd5111b7f4aa8b7db6b0a2807c8b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 becbd40a973e9a93a6c3325ada64ce77a96dbbc198f7ab98b47333c86822d55f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 9220f26e68ea095ea70a52afad1a1cac9b714c8c2bd4890feec4f5130cee9c8c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 d244209a51156d84dd1c6251a72fa20443d0e11a4ff3fc6f8593c8e36b1d073f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 4eed90d8c825352bebc03657703a9f9d0ae20463c898c783c0ec44d20fe55678
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 5ac8101e18518358858f5b70c630b66b2f9cd5710581654a9919ec02cf43f623
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 459f854b718be32f1f725937b6e206f3bbad2f6296579b3a27f28e08711e5021
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 461a7c273d53c1a55658427a78bf1ddf929505780f631b52177a5dea4fcc0d35
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 d0d8507ce05c5ef276f99ee11979f749b3461f4fb335a539461c8fa75f0f8fb0
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 9b9fdc28904c3437bb06db71db5db9e3e473e293c7fec3e63be6236d8479f5ce
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 e54ef59f125f387518a33132bfc0ca321f7cc052c2f2d5df2d79b33cd84ad364
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 b58445f5276d35fa9533b5119d80cb6ce5b03c01e8b6bd76f6512e15cba1bbad
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 8d2809f4b8ba2091d363fe985091104ee87751ea58320b791c83c1ec347d53d5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 3fdbfe275addd3d58ff2d8d380b3a43a06980d9801ffedc649aa0f7c90a20a2d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 ca84ff7c71207c7a0ed053b48bc1d059f327ad9d68947be88c4b5c90d2498109
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 f342a0f5d829831e7c151508aa5a17daf0499254522f6bc9712ecf24880ab9db
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 5896b316ac41bd230cd91dbc0f5b2dd39e77255bbc05ed11882d049ce2b70d48
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 308e5f033a6bbecf1ea72739916d82f23527a69fd2cac291e19ef4627953000d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 62549096b3e503ad28fc6ab7ab45317f6e5dbc9c01fe49ba77ef0a1cf2ba2050
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 67496fe87cd56a8212a5121192daee0bdd8ffadd17cd4184de6f0a5199c8619a
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 69c9a5aea3cf9cad5c0e7e1a65f68303043f9bf51eb52104b56247122736e1dd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 21c58235cf9dbdaebeba4728e4ead342eb66ee570ee863275cb828434024d4ef
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 bf2ecb0137478ff26bc1cb3081f420f28cc37e12b2bdbaf6339517e8edb103c2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 3f31cab8683de2c476fb491e307b0cbacbf91a2197493556a62ad8d20c54bb39
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 1eaa55d33d7c6993e3d504ea867add2c1f35cb8bbd5c3543a8c3e26ff216c0d5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 8e294756f55ab0978eaca6a2f9d3089513de8d46a1d619b4be690aa24a5279e1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 f382f725925b526d8b6693660cd3456faf7bbaa146751ec1b84335217a2e101c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 6cd4466f15853041084473886f1e0536b7c9018bac3e74a83a4f5fb5ed60abaf
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 4fea5fa11b6a038ce0f74f04847530cd4ac8a1d61534fcad91ea1343d2ed9199
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 550759ca0d81ff5fa7d596fb1532386e70bd3de411ff12848495c0ab401df3d3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 17b348e22c99c7a75c12fa54f68a8141fcc085842cf00cb90275cd309c5ab3dd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 47bd758f19c8dcdae0ece8858f32a0b4ed33a26ce8eb7b0a2a457dc70af0f0e1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 809f7d06a98bba8cbc0aa32bf23a60639e1809ef87a13821405f9cc058b121c6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 972a7f811b380d46872badabe916b5331f0a0865cf3fe90199f6e80c5d13943b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 e93a1df5579410c5e674b397b62d36627e629f07d6e54e73279a9828cf2a8a2f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 ff75cf412e988e693e5e1150047441a1e24ced575f3a8325bee913385f693730
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 7e066449e5c1efcfb563eae65b668bebe03c787159c0278324c3944bea280ff5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 72918eb908682d78cc7acd7e28c33d55c4620df3c8c7289e7f9e9553aaa4cc90
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 d38cdba8de2af2f8ae6fc7bd580b4f424a9e3a4a43193e67f7f0ae8219a42f38
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 afe42629348015905a2c23cf623f38c0e20a8044a1a08ae6aed85f93011db8e3
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 d45d7962e6d107065fd63c4c95f8868cd3fdc94f2f692ceab10c200b3358a2f0
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 893c1df90772b4e46d6e5934c63b6b4a0d71d826b87dbfcd58642762c91d2154
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 946a85e141a5e170ff97a5e92adb5f3bc6fa853fa251ea18ba987440b476d24b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 ac7e3a33845677bf8e3db7e3822c5cf088753a4a16d50b5f3a6900f0bcd3140f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 32be7dc647900628db55bd3812ec8733af094d2b14c704f020ad10c537b0ea79
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 6dfd2a6fa16d76fa6e1e159c931e9591c1e6562d91bba5282b83f16ad4340058
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
                  • Size 1KB
                  • SHA256 4b13b40049b411f4771da18bc72b54154b0f11496c99e8f431ee28ee628c553f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  TransportSecurity~RFe5a736c.TMP
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity~RFe5a736c.TMP
                  • Size 1013B
                  • SHA256 379b3ff582ae1f7c23750db89b5aed934d1176b812f38005960b61333b568297
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Preferences
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
                  • Size 7KB
                  • SHA256 57ce55c4a7848079524b9824ce5e445fa83bccd5156e7c552163544827f17bd0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Preferences
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
                  • Size 8KB
                  • SHA256 94b0b3ff984d921603ec2788bf77999f6a875089b7b7939e43b03102c88d9392
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Preferences
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
                  • Size 8KB
                  • SHA256 6b8230c5c80391fe2f67943155de72137e8503caa01593f6d4c7a8a1f76acdb6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Preferences~RFe59b637.TMP
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences~RFe59b637.TMP
                  • Size 7KB
                  • SHA256 1cbf01c780c50d44489158ad0397ee1052d162ba759aec79d423045897d415c5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CURRENT
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Site Characteristics Database\CURRENT
                  • Size 16B
                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                  • MD5 SHA1 SHA512
                  Submit Download

                  a1849c7c-1f9e-4428-a2ab-ce84e57d7f39.tmp
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\a1849c7c-1f9e-4428-a2ab-ce84e57d7f39.tmp
                  • Size 414B
                  • SHA256 00a25eeed4ddf2a70ba65e1f53764725a867474ae700036f9f828ae1e93c2d11
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  MANIFEST-000001
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\shared_proto_db\metadata\MANIFEST-000001
                  • Size 41B
                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                  • MD5 SHA1 SHA512
                  Submit Download

                  download_file_types.pb
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\FileTypePolicies\145.0.7584.0\download_file_types.pb
                  • Size 7KB
                  • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 2KB
                  • SHA256 408069ea7c6a614590e859d2c6e195ca2f0f2e883c46a6b85fc0fdc45db6ca80
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 5KB
                  • SHA256 27ee9cddeff05e890dea54ec0714d3f278cae1e23213bf9db020a1cc4a2eb0bc
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 1KB
                  • SHA256 c3395ec265185663c7d9539ad3f8fc185eed2b01d3a317c265bd1c24d4b16ab8
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 5KB
                  • SHA256 dbec69b3cb61bf08329acea8e6b36757b95cb8999a6663f8a84e9920e5303a68
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 6KB
                  • SHA256 12cd625d03135d3def58e7c4ac678a3e96b77804196c9eea0785b80fd40da4d8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 5KB
                  • SHA256 21fea640bc775cf25794d20a12d44c07f30cc59e914d9aa49c6924d533beec09
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 6KB
                  • SHA256 9558862825fa7102b259d9ef689619ac93234e1d71c09a84a291e508a7ea558b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 7KB
                  • SHA256 3ff2785e9c3bfdd94e17ff4909a3fa8449702c3f375fcf8639ac47fe6cbecf16
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 6KB
                  • SHA256 dd6c41d600115a9cfa8b444a5fd3f0d232491316cc59766946c5fdc8bd42a2d8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 7KB
                  • SHA256 ddf2be188c727ef27c5e303048dea593fe770d55b71126e1b94f85b29a1f51a5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 6KB
                  • SHA256 a3da465b57ca44f7431eb6fbdc7b624932aca1e249a7736ecb878e9523401a76
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
                  • Size 7KB
                  • SHA256 c70d6e76c30e067e1bd4438855e5c14a185303dce97a679e2116f90441d10c17
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Local State~RFe594d99.TMP
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State~RFe594d99.TMP
                  • Size 952B
                  • SHA256 2e1c36de62ceadb1c0ea11ce7e03b951757eb81f03bbc656fe1882755ef1b639
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  preloaded_data.pb
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\MEIPreload\1.1.0.3\preloaded_data.pb
                  • Size 8KB
                  • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  optimization-hints.pb
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\OptimizationHints\752\optimization-hints.pb
                  • Size 557KB
                  • SHA256 c9c44f096ab0fa1ee8e870ad885f46dbb8cca006708c297c03751636ffe22aa3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  crs.pb
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\PKIMetadata\1793\crs.pb
                  • Size 341KB
                  • SHA256 f89fc12c008804e5d486306feb2b852106665a14b3300b7e868ee9578a822f58
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  kp_pinslist.pb
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\PKIMetadata\1793\kp_pinslist.pb
                  • Size 10KB
                  • SHA256 ffa0cdcb257993e4fb05a3d6ba7d4ef2944074122c8681ec0ff1d0857b36ab0e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  privacy-sandbox-attestations.dat
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\PrivacySandboxAttestationsPreloaded\2025.6.16.0\privacy-sandbox-attestations.dat
                  • Size 7KB
                  • SHA256 d5fbb03c2733c6670d21968bd057f315d56640f4e9dc3333f60e0b81fe3920d9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ssl_error_assistant.pb
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\SSLErrorAssistant\7\ssl_error_assistant.pb
                  • Size 2KB
                  • SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  safety_tips.pb
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\SafetyTips\3091\safety_tips.pb
                  • Size 180KB
                  • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  Filtering Rules
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Subresource Filter\Unindexed Rules\9.72.0\Filtering Rules
                  • Size 154KB
                  • SHA256 22a0a5fc9e38d0de4e68eaf7e961dbbd2bebf234bebffbcd21bd496c0813fcde
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  keys.json
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                  • Size 8KB
                  • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ranked_dicts
                  • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\ZxcvbnData\3\ranked_dicts
                  • Size 865KB
                  • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  LockdownBrowser.log
                  • Path C:\Users\Admin\AppData\Local\Temp\LockdownBrowser.log
                  • Size 88KB
                  • SHA256 09e9ff9d1ca330348aab8bd787423bcc40f8733776290cb6bb6d9c4b1925a9cb
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  MSIB87D.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\MSIB87D.tmp
                  • Size 166KB
                  • SHA256 c30c8a461175ae3240c7a835c9a4946a913a54e55f4b87f42b729c685a40448a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  0x0409.ini
                  • Path C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}\0x0409.ini
                  • Size 21KB
                  • SHA256 8b76df0ffc9a226b532b60936765b852b89780c6e475c152f7c320e085e43948
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  _ISMSIDEL.INI
                  • Path C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}\_ISMSIDEL.INI
                  • Size 496B
                  • SHA256 b3b83c9c48ac30a9745a6fcc53c41f661817ef8cec3845e12960d8e1097e470e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  _ISMSIDEL.INI
                  • Path C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}\_ISMSIDEL.INI
                  • Size 20B
                  • SHA256 0a33c5dffabcf31a1f6802026e9e2eef4b285e57fd79d52fdcd98d6502d14b13
                  • MD5 SHA1 SHA512
                  Submit Download

                  _ISMSIDEL.INI
                  • Path C:\Users\Admin\AppData\Local\Temp\{3FB2E74D-D3D3-4C49-848D-1C367510FD24}\_ISMSIDEL.INI
                  • Size 692B
                  • SHA256 223be727311e52ffe2e7024c8a87a3ef4ea6cba161cd8acfbf48469fcac0c4e1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  ~A064.tmp
                  • Path C:\Users\Admin\AppData\Local\Temp\~A064.tmp
                  • Size 5KB
                  • SHA256 aabd6f7803cc8f65b2f16cf4a20b3d864e41efcb52b1c0222ee24bc104accd2b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  default.dic
                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                  • Size 2B
                  • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                  • MD5 SHA1 SHA512
                  Submit Download

                  NewShortcut2_D49D4F2A42E745149F646DD045FA6CEE.exe
                  • Path C:\Windows\Installer\{ff694045-5446-402f-8128-1462e26a7e6e}\NewShortcut2_D49D4F2A42E745149F646DD045FA6CEE.exe
                  • Size 60KB
                  • SHA256 07549d4c2306360c9a4146bbb5bf500d2d49e9850e7829f153dadb62e99e5026
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  metadata-2
                  • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
                  • Size 24.1MB
                  • SHA256 ffa2f86e25db085e4225bd117919bf996ce15f9295e8d3921403901d2efa2a85
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  {b299c050-f959-4a05-9211-fe4e346c3f9b}_OnDiskSnapshotProp
                  • Path \??\Volume{7d83d395-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{b299c050-f959-4a05-9211-fe4e346c3f9b}_OnDiskSnapshotProp
                  • Size 6KB
                  • SHA256 95f2c8871f9ee2256c57076bc7a886bc46ff94c9c2b2ce0cef8362d0fb8794f8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  memory/340-223-0x00000000055A0000-0x0000000005686000-memory.dmp
                  Download

                  memory/3480-664-0x0000000005810000-0x0000000005965000-memory.dmp
                  Download

                  memory/4212-1006-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1007-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1011-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1012-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1017-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1016-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1013-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1014-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1015-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/4212-1005-0x0000000009AC0000-0x0000000009AC1000-memory.dmp
                  Download

                  memory/5040-673-0x0000000005A20000-0x0000000005B06000-memory.dmp
                  Download

                  memory/5816-131-0x00000000052D0000-0x00000000053C4000-memory.dmp
                  Download

                  memory/5816-135-0x0000000005670000-0x0000000005684000-memory.dmp
                  Download

                  memory/5816-126-0x0000000000950000-0x00000000009A4000-memory.dmp
                  Download

                  memory/5816-227-0x0000000011700000-0x000000001170A000-memory.dmp
                  Download

                  memory/5816-140-0x0000000005720000-0x000000000576C000-memory.dmp
                  Download

                  memory/5816-253-0x0000000012D30000-0x0000000012D96000-memory.dmp
                  Download

                  memory/5816-141-0x0000000005810000-0x00000000058A2000-memory.dmp
                  Download

                  memory/5816-145-0x00000000058B0000-0x0000000005A05000-memory.dmp
                  Download

                  memory/5816-136-0x0000000005C40000-0x00000000061E4000-memory.dmp
                  Download