Resubmissions

30/09/2026, 04:24

260930-e1gjhasw8m6

30/09/2026, 03:50

260930-eedkqazzht6

Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1803s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/09/2026, 03:50

General

  • Target
    WIN_STB-5.4.442.0.exe_PROD (2).exe
  • Size 93.8MB
  • Sample260930-eedkqazzht
  • SHA256 b7847398eaea7ac1be2a9c234dfd6ecf07543c76813668a8fac77957605c3cd0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 47 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Indicator Removal: File Deletion 1 TTPs

    Adversaries may delete files left behind by the actions of their intrusion activity.

  • Network Service Discovery 1 TTPs 25 IoCs

    Attempt to gather information on host's network.

  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 14 IoCs
  • Executes dropped EXE 27 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Accessibility Features 1 TTPs

    Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 32 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 36 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 32 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\WIN_STB-5.4.442.0.exe_PROD (2).exe
    "C:\Users\Admin\AppData\Local\Temp\WIN_STB-5.4.442.0.exe_PROD (2).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1608
    • C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}\WIN_STB-5.4.442.0.exe_PROD (2).exe
      "C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}\WIN_STB-5.4.442.0.exe_PROD (2).exe" /q"C:\Users\Admin\AppData\Local\Temp\WIN_STB-5.4.442.0.exe_PROD (2).exe" /tempdisk1folder"C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}" /IS_temp
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3704
      • C:\Windows\SysWOW64\MSIEXEC.EXE
        "C:\Windows\system32\MSIEXEC.EXE" /i "C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}\NWEA Secure Testing Browser.msi" /l*v C:\Users\Admin\AppData\Local\Temp\LockdownBrowser.log SETUPEXEDIR="C:\Users\Admin\AppData\Local\Temp" SETUPEXENAME="WIN_STB-5.4.442.0.exe_PROD (2).exe"
        3⤵
        • Enumerates connected drives
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:980
        • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
          "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe"
          4⤵
          • Checks computer location settings
          • Drops file in Program Files directory
          • Executes dropped EXE
          • Loads dropped DLL
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:3492
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=gpu-process --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADgABAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2216,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2256 --mojo-platform-channel-handle=2208 /prefetch:2 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:1912
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=2248,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2356 --mojo-platform-channel-handle=2352 /prefetch:3 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • Loads dropped DLL
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:3948
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=2484,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=2504 --mojo-platform-channel-handle=2500 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:4416
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=4056,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4092 --mojo-platform-channel-handle=4088 --host-process-id=3492 /prefetch:1
            5⤵
            • Network Service Discovery
            • Checks computer location settings
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:2064
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=renderer --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --no-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4064,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4104 --mojo-platform-channel-handle=4120 --host-process-id=3492 /prefetch:1
            5⤵
            • Network Service Discovery
            • Checks computer location settings
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:3292
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5264,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5280 --mojo-platform-channel-handle=5276 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:5784
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4300,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4892 --mojo-platform-channel-handle=5752 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:6132
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4888,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4808 --mojo-platform-channel-handle=4780 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:3676
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --gpu-preferences=UAAAAAAAAADoABAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=4764,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4896 --mojo-platform-channel-handle=4836 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:5632
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=5768,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5020 --mojo-platform-channel-handle=4896 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:4092
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4808,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4736 --mojo-platform-channel-handle=4732 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:6064
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4312,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4836 --mojo-platform-channel-handle=4736 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:3328
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4840,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4732 --mojo-platform-channel-handle=808 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:3256
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4504,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4068 --mojo-platform-channel-handle=4780 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:4740
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=1584,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4772 --mojo-platform-channel-handle=4768 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:568
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=3056,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4780 --mojo-platform-channel-handle=4892 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:4888
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4780,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=5772 --mojo-platform-channel-handle=2368 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:4364
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4892,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4880 --mojo-platform-channel-handle=5764 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:2684
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4872,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4692 --mojo-platform-channel-handle=808 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:3772
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4292,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4996 --mojo-platform-channel-handle=4944 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:2872
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4720,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4684 --mojo-platform-channel-handle=4472 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:5984
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4944,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4700 --mojo-platform-channel-handle=4728 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:6120
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4644,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4684 --mojo-platform-channel-handle=4724 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:1044
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4596,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=4728 --mojo-platform-channel-handle=4700 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:1084
          • C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
            "C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --string-annotations --user-data-dir="C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache" --log-severity=warning --user-agent-product="Chrome/132.0.6834.83 CEF/r132.3.1+g144febe+chromium-132.0.6834.83 NWEALDB/5.4.442.0 OS/Microsoft Windows NT 10.0.19041.0;IsSecure;" --cefsharpexitsub --field-trial-handle=4304,i,116654482020415249,13503310453937484474,262144 --disable-features=EnableHangWatcher --variations-seed-version --enable-logging=handle --log-file=3052 --mojo-platform-channel-handle=1580 /prefetch:8 --host-process-id=3492
            5⤵
            • Network Service Discovery
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:3284
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\system32\cmd.exe" /c rmdir /s /q "C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1616
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4736
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding D975B897E0EFD1D032B6579D3D4B35D4 C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:388
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      2⤵
        PID:4680
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding A386140F8840E0DD0BD03BE92644F4B0
        2⤵
        • System Location Discovery: System Language Discovery
        PID:3520
    • C:\Windows\system32\vssvc.exe
      C:\Windows\system32\vssvc.exe
      1⤵
      • Checks SCSI registry key(s)
      PID:4620
    • C:\Windows\system32\sethc.exe
      sethc.exe 11
      1⤵
        PID:2840
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
        1⤵
          PID:5868

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              e593f23.rbs

              • Path C:\Config.Msi\e593f23.rbs
              • Size 15KB
              • SHA256 f42dcc3ce7df28a74f6927884b418ca9dab669bb0183fbc905650bbffbb53898
              • MD5 SHA1 SHA512 SSDEEP TLSH

              CefSharp.Core.Runtime.dll

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.Core.Runtime.dll
              • Size 1.3MB
              • SHA256 1a119ea448104c2e4a84be588e8ac75df74ab6c5e540fb9c8b7cbe576bce5e15
              • MD5 SHA1 SHA512 SSDEEP TLSH

              CefSharp.Core.dll

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.Core.dll
              • Size 947KB
              • SHA256 af249fe8e9f63911a2b1e7fa44ff9bac2427f75beee359911c49819047300ce1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              CefSharp.WinForms.dll

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.WinForms.dll
              • Size 53KB
              • SHA256 b8dbba2250cbb52b85b0c523e349098bac9800ef759f36952d792b50be78a390
              • MD5 SHA1 SHA512 SSDEEP TLSH

              CefSharp.dll

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\CefSharp.dll
              • Size 275KB
              • SHA256 6eb82c2edc4a62658d74cc6f49a978f7e34838b2ad390e51694162529f147efd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              NWEA Secure Testing Browser.exe

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe
              • Size 309KB
              • SHA256 3baf19269b2c5bbe514a55dc2b030924365bc7103e545f00e29b095ca4877acd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              NWEA Secure Testing Browser.exe.config

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\NWEA Secure Testing Browser.exe.config
              • Size 169B
              • SHA256 788f20c6dd16c7d1785b2707d431e03f7568a838ebd639593f4dbaada791be9a
              • MD5 SHA1 SHA512 TLSH

              chrome_100_percent.pak

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\chrome_100_percent.pak
              • Size 663KB
              • SHA256 67feeb5b8d5bd0af4ce9abe2e3a4361ca6ab64a269904f20a9d5ac8c28d5ab93
              • MD5 SHA1 SHA512 SSDEEP TLSH

              chrome_200_percent.pak

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\chrome_200_percent.pak
              • Size 1.0MB
              • SHA256 a51f7015b4732a0553856e3e6db20c428f3f2245165278f73cba3367647d3ba3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              chrome_elf.dll

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\chrome_elf.dll
              • Size 1.1MB
              • SHA256 5a765831ba7fe0ff113703514380168f6169e7fa00b475904a247973bc922b2f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              icudtl.dat

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\icudtl.dat
              • Size 10.0MB
              • SHA256 9192f5453665fcfde180f1283f2fbccc477f4daa0081e3903ec02d9242721860
              • MD5 SHA1 SHA512 SSDEEP TLSH

              en-US.pak

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\locales\en-US.pak
              • Size 510KB
              • SHA256 897f387622523f7fd8cf13d2caf2a2b3c7da735fe0ea7a653882ea2518c81853
              • MD5 SHA1 SHA512 SSDEEP TLSH

              msvcp140.dll

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\msvcp140.dll
              • Size 427KB
              • SHA256 fc4a623bb0ab791e98ac304e6d39c2282901d265431820b9406bbfa1098921df
              • MD5 SHA1 SHA512 SSDEEP TLSH

              resources.pak

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\resources.pak
              • Size 8.5MB
              • SHA256 42132d240416a48443e1a269a83f6db4e81ee5aa0fdeab2472e87b65ea07cfac
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vcruntime140.dll

              • Path C:\Program Files (x86)\NWEA\NWEA Secure Testing Browser\vcruntime140.dll
              • Size 75KB
              • SHA256 85258bbad2864c04b84e60f8db2bab5d4e179aced06cde23e5f57548ffa029d1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              manifest.fingerprint

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1076117460\manifest.fingerprint
              • Size 66B
              • SHA256 8bd84b96078f657a23ff655f42ace98fa2b7d95b1d14ce9830c241e462150b33
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1076117460\manifest.json
              • Size 97B
              • SHA256 335b1566f2a398f764be95e60ea16352e087262dfffa2616576bb22947d7e4bc
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1080452916\manifest.json
              • Size 985B
              • SHA256 052de1145ee2003bc29958ee122d431ec6cfd50688dc6d7eb20f3783b0654dd3
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1189855677\manifest.json
              • Size 85B
              • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1306974965\manifest.json
              • Size 72B
              • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_139979881\manifest.json
              • Size 108B
              • SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1480486938\manifest.json
              • Size 108B
              • SHA256 6ed022b10fef41956878ca2b9f9ee1ed1973c9c0dc5bf3adeb658d2c73ac8737
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_174268513\manifest.json
              • Size 78B
              • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
              • MD5 SHA1 SHA512 TLSH

              LICENSE

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1888779299\LICENSE
              • Size 1KB
              • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_1888779299\manifest.json
              • Size 95B
              • SHA256 c8afcac6d18769a07be1d87fa52c3861c210525cf7de195f09489dfea947306b
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_236219093\manifest.json
              • Size 73B
              • SHA256 59cac6a0fc316bd8b00a65120176bff4352bb507a4b46b0a6b5f33c9ecf5e670
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_346335106\manifest.json
              • Size 76B
              • SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
              • MD5 SHA1 SHA512 TLSH

              hyph-as.hyb

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_457191324\hyph-as.hyb
              • Size 703B
              • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
              • MD5 SHA1 SHA512 TLSH

              hyph-hi.hyb

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_457191324\hyph-hi.hyb
              • Size 687B
              • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
              • MD5 SHA1 SHA512 TLSH

              hyph-nb.hyb

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_457191324\hyph-nb.hyb
              • Size 141KB
              • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_457191324\manifest.json
              • Size 82B
              • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_466243984\manifest.json
              • Size 202B
              • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_517267502\manifest.json
              • Size 86B
              • SHA256 31a56f514d228a98683b8cbf7e8a3ced78857ef3e745a06fbc2c5b33162d3220
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_690053457\manifest.json
              • Size 97B
              • SHA256 d42f3640c57d4324e6882ca1c746d770b7796121811697547c51a697894de3a4
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Program Files (x86)\chrome_Unpacker_BeginUnzipping3492_954108091\manifest.json
              • Size 114B
              • SHA256 3cf4bdd23d314f45538d4db80cc5a30dbe7b546ffc488a24cfe9dad08a461dcd
              • MD5 SHA1 SHA512 TLSH

              NWEASecureTestingBrowser.log

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
              • Size 288B
              • SHA256 3b21a847ee5b6d4b764d54a8ce02d341a5efe763caa6754c9ed907a06f76f8a3
              • MD5 SHA1 SHA512 TLSH

              NWEASecureTestingBrowser.log

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
              • Size 391B
              • SHA256 c51ac727c7babc930e1cc3b24fb4f9b6cd0b793a172f45ff5fa9baffcc212039
              • MD5 SHA1 SHA512 TLSH

              NWEASecureTestingBrowser.log

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\NWEASecureTestingBrowser.log
              • Size 608B
              • SHA256 d45a3c286d9224a199f08f48aa93077305eaa24720956b79ad9f551cf4d6ea45
              • MD5 SHA1 SHA512 TLSH

              crl-set

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\CertificateRevocation\10809\crl-set
              • Size 1.3MB
              • SHA256 4910855d45f4279eda4e80047309644163263a093dca44b6684722ae55d403cd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              temp-index

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\temp-index
              • Size 624B
              • SHA256 64644148dc51ab4907810a3d016273d4dd8ecdf597143a82736c3d8594608454
              • MD5 SHA1 SHA512 TLSH

              the-real-index

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
              • Size 216B
              • SHA256 104d21359490f17c785dab2293152520784c788c234661be80c7a6fc4a4e918f
              • MD5 SHA1 SHA512 TLSH

              the-real-index

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
              • Size 48B
              • SHA256 a38fc1104255409f7cc85607aa4f5a124e2234a772057527fe6eac6c6ad0385c
              • MD5 SHA1 SHA512

              the-real-index

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Code Cache\js\index-dir\the-real-index
              • Size 312B
              • SHA256 62207676216535d3b78ce1453ba940d1645563518879e20bbe1e6586bb0ac2de
              • MD5 SHA1 SHA512 TLSH

              Network Persistent State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
              • Size 2KB
              • SHA256 c9f58f3d668d1911a53cc20a7ebd0df6bd7f3391bee7279a7f84f562f191c11b
              • MD5 SHA1 SHA512 TLSH

              Network Persistent State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
              • Size 1KB
              • SHA256 4fd53ba89036eab5eb69fb92e11eccbbbb8b4bf59a1822c2a4c00e2c3b3f7df0
              • MD5 SHA1 SHA512 TLSH

              Network Persistent State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State
              • Size 1KB
              • SHA256 a2b3ebaa5d60342734ba75968946ba6729d9795de9de7796ddf2cfca36380e60
              • MD5 SHA1 SHA512 TLSH

              Network Persistent State~RFe5aaeb0.TMP

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\Network Persistent State~RFe5aaeb0.TMP
              • Size 59B
              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
              • MD5 SHA1 SHA512 TLSH

              SCT Auditing Pending Reports

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\SCT Auditing Pending Reports
              • Size 2B
              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
              • MD5 SHA1 SHA512

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 6b47246610f1aceb5435c1def32fa8a8ed54b412605afc63af44f2bdab65f18d
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 2642e6769b5ebb2a40110b1af3b45377eb152c134aacd0f40a6c120ef2c8bb0e
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 c9cd4e7d3414524cbdb416058e8bd93868d7f1d2c66a868051598596ab1bf894
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 94a9eac82c42434395deae63bba204bd5511030af181578e08270787f133de05
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 ad8a077de30368c9a9fea50f46a82c78d4ef710731a43b1f34c015bc931a01eb
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 5c783772f3383b157b78217c628c896dad9487015b995386d531dc22a4bef3c9
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 8ed75c55df9bfd1ca9477838544b90f3a72ae40fb279a84ac2e54086d45954d7
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 ccb8a316af3c9b4fa3da611680006636fbeacb18a0d067e2ebcd0b077eca77e0
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 0ea95ba6c80de969a3149c1617bb93f8722dfa97eeb740c06a883955d5df740a
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 07672dc7f77727f3ea5fdb862d02f3d3e56eca44f0d83bc5b3ddd5d3234fd0fc
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 fde1329793a9480c1a97cdf47a2e77f21f25207bf57fba549281c8558a5162d1
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 5e588bc71067520d597a83fa606064b80aa4632423568c7fd7100e33aa6d5ad2
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 eb7413db8fe53f8bcd6b20ea4ed362f3235955102ddc8cd7276c445c7833c4ba
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7c2e20905cd87ea3eda83ab923a0094489cdd6d4077569bd71e6f4842e6fa44a
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 f80d223e0df4fdcae10186fd9edf23dd07fbd968467053d7e2d7e4740956169f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 54044d8621571c9405a6c58a10bcf5608c2f763fae417e144e8fcad96d09e42f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 05a4bddc23f013f32702c88460695f15d1d771d0ac0880cc010dc4bc494317e7
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 65ddebf08714a37ba4cdf41897c1a729771ca64bd708c494aac77977e0a5f984
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 ea9a49c8cf67640597ca7387b968ce1a7113ac673dab71db075ab328d54d8269
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 624f3b8cd82b324d8ccdb7325a69a0ccdcdc2cb87dc3838f1541ae171a2cfc46
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 81d5be291cbbb4b45cf50dfdb8f13acad0fc2868c1354f47f61060f96905f06b
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 a486ae6abdd79c3c4c6db822a3da5328e27c6be00b1a7d41c813d88be7c9b84f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 2682ddf089fa4a033e9cd2ab01f2eefa11b37620997edc77d5152ac50c78df62
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 c60946eb5b1bb02b56250d94ae3ae32bf6381344f48695ced9df00cde7b0e54a
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 d80c8b21a11cefe47dcf9289f22aa83988cc6ec74f455e5d13ece549db329acb
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 0f79af92dd83f07d5cd744201379347681a80bd4e059d3fe525dec22749e4293
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 f9858fe3877a00009a5113918976d8da0ab08dc4adfa3fedd02201276d2e4ac0
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 32a9f4a596fb17db8d3e1bd7630a34d972bfb023dc08ebee6ac85c21e4ae098e
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 16457524bd585929eb3c11ad7768452c2cea9957e31777246038f61c311bcafa
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7ee9139d67cfd56717e67aa593df61a26569e8c2f97fd0cdf46fb427e85d659e
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 974b50bf9fc3c7a7e52afd319e221428c7f86dfc69732d649281e86850246b3f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 81f4dd1025bcf437149d92e79a27a993915f5a47a3dba41e2c5c8f9418e6d372
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 f1cc672fdd728d731414d10165195d7286b2c1fc509632b2eb6ae759bc1342d3
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 c342ab27ea4867068d524844daabd894222ca7c5318d8f3328b2430f78513ebf
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 c70ec58fcf7ef7f14f43ce97d8e314ff5cafd104c2560f5edd9e4c030325af72
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 ef158dfa0c76bd4c1a479da7d2d311d7cdcd77c85ed4ee6afbabb36b422e4c7d
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 03096dd50abef6c2ed9dc9b704387f65d96a4da4495966ac4ad0f2ae92b9e05f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 edec9484343e31eddc05cbc81bbf52d05104c5650fd68c504df10edee21ff6ae
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 bf62b59ba1a88e70a23d465b2455e5d2755badcecfae18a7651ae0dc5d1f3216
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 ea74e8248bf4ae3f7bc1d400afae56c70a3f03e21d4b3b66be8d45666aceffe6
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 809274f275e911c1982e1ce1c6319119a803f6b1ba3ae4dd17cb581a13a98bb0
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 46835b693885ad94ccf2aa1dfad31ac73a5dc9b32b14bcb0f42bde277c940de6
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 45f003397dd090756ad235bf2b8e759255d365c24dafbd0cceb7ce89ac492465
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 79e239aa03cfaf6950ffb77f8bd3f0558b0303ff6aa879a8c5d400f047e7860a
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 d1d65e5e3743c5e601d6577be337d968a33cf394b1b32948762a697b7bcd4a66
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 92af2b274a8c2e24fad561308d8fc5f24d1e7506608f242b2fe1c3765010296e
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 e3d73f6fca216b6d6479cd4f38c367c73307b0788d5bc95995e9efa4fbcdb416
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7acb863bf2fe3cb902fe185190f6ba76a81332e17f19059da7ec086acf9b0a56
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 8b44039413d6f67256a9b7ddc60ec68ff1b0ab356d9c3b84c8ee705f38946cb2
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 643236cbde5b0165db3eac074e061fed203dc2b1a948fe740950e67fdf8ff11b
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 944308bdbd8f8b01622c4286f31d4e88c50488979c5fc070e4f52f0ccbcfe965
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 9730c4c744a82e7c016ef0bec48109e2f3e26a3baadbb32745f146a0d6d33108
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 51879c7f62a22fcd949af199a83793f5c7959d46dff3c0fda9e32da104378d3a
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 c4f818cae3ae6a889d3eee7cfb03427cf3714c3463e8623a8a1d694f712bf824
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 361f1627c9679425e92a10cf67a59f95eafefafdfc334ee38d01c74bb705d3d4
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 851f9c16404fa08ab4f9f71222558c99b8be382af43a88a8bb8d4ce5c4074881
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 25e29cfa004cfac97167bf131423a3c7f4e0287d1a29601a63025771be693cbd
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 97459b2195b148213f9cffe8d1bb4e15a42ad18f28440d0e153bcfb5fc5199bf
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7fd98fe909de76f3251d42bd87aa831d333527a8836ac0174bb95c99c9069b0c
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 a88041fde23cc67c22976ce90dafab160b20ebc7bfb8f1e49ecac7ff85fdef5d
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 9ca82cc51166f76ac844be26af92a17b909bae2e31f12fbe0caad1215337aa1f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 f25f69ff54bfd1372c8097f85db473c16423ef7bdb153e1e648aaa84fcffb47e
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 3e6b3877b62fa57b4c51ba3a9746b1c7107c1a4711fcf415c845487812de696e
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 16aa1ebd47d0598f386c23fb68372a8b2dcac5173ccdc2f86e9f531435679297
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 9b494d8adc40506e2e873c6c6ac6af9623fdf2aa39d4e0e470d944ee2e6a6512
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 686ef4796e0846efab06e9316485d978786311c0fa364bd3f562e05908268a22
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 e0b239ed6bf150ac86ac15f096f49927416347500d258cddb3d876f137b338a4
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 4c4943b9338b719571e724e18fd5f781338f571c03950924185c31d9ad3fde53
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 53f2569c82c8c2b343aed9ae3eae6735cfeb3f664eb0515adbecdf8a1eaaa502
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 36b873ffe18766034f241f207abbe2c2b24b4d3ff026d6305fdbcd76940c37cc
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 31e923d33e9eaeb17f64bea2e53e8e3033ac2e0cb81d5d55ad72a1c910e823c8
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 1c441d8e06cab7ef4078bd1dcb7557452e06663f75589ff97beba05bc08a632e
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 933c66b50112e21aeb5324f84c1e3638344e03b1ef9ff0b8bccfcacc3a660b94
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 0852fdff7df1cc30080465e19786e4775976e844c3f40ebc439dbe5806f09a18
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 1e9202ee4d5173017490a71e892d114de5695e1f021799a60e563a129985fa2c
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 eaedbee182350a5c1abf0cac961c662aba178bc506593a13d7b92fe99642a144
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 6e5341981f037e02d7be218af98b35b12386071a64e0289db76a1b6a92726ded
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 32963eb4f23b719c4ed88ef2c9647e63289749c9c6c5aaa46aeaf065a60aade5
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 e5d3ce743a525886f496a460c5492af0c67b931e90599206284e46c9385b2219
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 febac2bf0594a81736d3d8452c30ba6ed6d0631b5fcb74ce90450bb2c46e8feb
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 1876d5997e94f52b0a9cc47d7b336dcd6ad3a0246242c7960cfc763f639e1b2b
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 f7348cc592f54e84c4fc8eac5bbe060a2d58f8d4fa0db655ea37d43a72423ba3
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 ff671e93b01f90c2fa25a27cd628ecb468103e76b3d996e953d90ed5a639f62f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 a617010ff8add0768282361d9f07155652c4ac324dffb4ca1527865be99c2fdc
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 2b8341faebe115958e1a3f2915b10039e23b6d3facf886fe5582c6f9b14de4e9
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 ad02349bd36f6aa2dc8326b8d41e892219cd4bc5e82efe2e4b3ac598d06c32d1
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 8fa130eb95f08f4a2e7cfed489ccc0aa9539136bc159f5e77c1b5ab0c40d68e3
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7ab62056096acc31cf39a71cd93fff854e86a5704ae354ba845d95128fd34ae4
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 4acc8f1946f69f360732b490b3964f99d91865d7a043d4b56d68cb4901f3bb21
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 0e88374510a52858aa306202ef621825df0767ca8ac8434049c2009e55673bc8
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 b9dec1b487718f1b990963cda26e4878c1b74b82a02468894b3603700b8a3366
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7309c243361ee0292df9196b26fabc17d4ebca4ba08087b74b527b2f2c26cac4
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 8a6e43e8711a95e5e551a0032f01cfb4688fcd9ca7e463a858245b28c97d32cc
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 314aa23a3ec69373c7683801f5e592451b4911cb114dd4e951673d4bce08142f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7fffba8b939bbc13e9a0472fbaacafedb165f887cc1f2eb3f82200f78b495779
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 69c8637a11a434133f1e8a5845abc21e0fdfb96ab2befe48fc4caebc7d4bd964
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 d5b074cd4768f0c8696b24a3ba6f454a23a3991189fd5092d552d2f49f4e6aa1
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 5710457229835a6a8d833e128b1e86ea61d1e0e5ab65e24c52cdb43f87818e65
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 fd7a1cef4ba474397ee702e96babf6d6770059540af18d5d3c928c9712e6e278
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 d8e3d16612d9ca1f451e82031c70e40539f8d8b93883204cab2616c4ce649114
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 cc2b51bccfa6703dfb2d5c31c1c3cf08a17a915193b8ec983a85d6d5a74a8ed0
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 61303a3a6d2fccafe0a956ab3f5156f0020ce13c5684dcce34e35ada5a7674db
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 f77492c1f1f1c800d96f588754d8110cbfb4a8f5d95abbb4bc5930a553fae612
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7fc912e3f3e0ab5c5a6eb501eade6d239a28a25c1dded9cf763c7843397d81d9
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 12d145d51e8919e201bff74887a039162f70a65695958cb72e52e419bdacd53d
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 0efabf77e5161f5bb17476924c2a6299965d95b6ee4edd7bc7293f6a6cbe3454
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 971a2c4007e867e9d1f971c2e06ac6ca66204e20d7e9b0c19c73bd88ffa1e916
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 4c5f2bc3b5514e71a0893bb49d3a3362ee842f520c467fd5f0025fbc7d05519a
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 de3610b964fba40e86559691aec50929de03404167b9d36c80cbbfd4951837c3
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 043ff1bf0f33f6fe524d05929f7ea2631228e546382aedfea5ec98caeceb3a42
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 d84ae2ebe97cecf9e2cc27cd51f733e96dab22b6a57c7ca7207c8501f1c56432
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 81f6c76a4dfcac392fbb3f444d8d9e9d4198aa7757558698b11e81af72653b3a
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 af31ccf1e1d372a8292246cbab4722ee45600f4c5a8aac01cb1ce8a8454ab20f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 368e708eb13678718951738f1978eea31c443d01f489ac19a621f4e8a9e4ff93
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 222992dcfeb6e2b8e61629525422a9b5f67bd51d1213f0208ae668e6e89c8bfc
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 32a03211c4dde4f9a858ca41c65680276d8afe7cc299de5b192e1bc08ee0b3f4
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 c04eac3c6521eb94c792fd9fae5f25d79dc0eeb7bc72693afc84b090dc886118
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 6f48e86c9a937e0fc48abc56353fcea2583be653bde2e2ef316513d894b5d54f
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 f2bbff2250fb51313156282fc48b1ed07fd8d241edfc0851e6a837e81e0e751d
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 8faa0f7c59c2616c83fe7b2c0d98513f30ff5ec27acbf7c2d576231c69cf9cc2
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 d3f9325aed4161989e9894bd6847af27dc13b3aa9e70c7427617c3f7a2d93bc2
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 d4581a514db66fc3d833515a350520747da18ab99627991f8db6a7cdb6420ba5
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 503d3b14e92d19f8de84eb204b5758b33b208b9e6eec3942934207d763b14440
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 7fc46312a4302b07b347bbfcd630a0a6f46b2e3c7d30057b884c455ba1d2d08c
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 82fa66875dcbb753df29ce7b9414b393ac38d174e3357f104844fdd4607cc552
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 2d28be57740034a769c6ed09710b3a733a3d3ff952149cfc1a2d1c64bea051f9
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 3bf8b5dc0810c5ef0fdb74a9294c4c8065a86c334cb9afc6eff0e5f4302bcc7c
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 2f69f2642beb2291d1ace8a9acbcbed27c81a4a6bf669464e652feff4544b551
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 9adf746aba0cef7efe0338a92e956329e2e2262da44b278781ebd38dd9f29ef8
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 00e284875da0d82d72fda9bced77a3a7963041e57916e218c890d080414619b9
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 76fd17c08bb4ec7299aa6cdf03e8590fad1f04510d214db53ec5120e7edc5184
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 373187309292868f671b82f7f407840849a42781e062ee4a1c1964228e2b138c
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 1c8fa6cca7ecad73a65d1604eaf8a193ad00c05c2015ed481a43f21988224130
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 62d61c28c2a92f95c6f8d4be02e582d640a7444ba21e03f7ee252d4165758ccd
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 27d4c67e74f8e703e67f513ad0f1ebce709d9dc3a002be784c2a814219dfa4ca
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 775a97a2a884a42b3c9692bba5aa1aaf49558b2f111543775c2addbfeab8daf8
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity
              • Size 1KB
              • SHA256 75bc7c4419abc79ab67d389c87abf1d7ab635c4d0d20706fb258ceaa70431b54
              • MD5 SHA1 SHA512 TLSH

              TransportSecurity~RFe5a8510.TMP

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Network\TransportSecurity~RFe5a8510.TMP
              • Size 1KB
              • SHA256 24296faa24220634dbcf12c85f0ed6e6b83dfc7fb52254ab3c107c5d405a3e30
              • MD5 SHA1 SHA512 TLSH

              Preferences

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
              • Size 7KB
              • SHA256 b437caade572e05eb0462908032bbf83258c9fbd7aa53bfb8737ed13b1c9ba12
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Preferences

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
              • Size 9KB
              • SHA256 98a26f1fd733efd21ef239bcd8eeb9308a0881d13bbf55af2b17a7628a5d0383
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Preferences

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
              • Size 9KB
              • SHA256 6f3018d72803584bea3cc759b351a3196ea4381e90b3888cec91ae60467f711e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Preferences

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
              • Size 9KB
              • SHA256 15f34b66dfd008eae0618726bf889b7ede36ac85baffd8f25ec669ce84927f3a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Preferences

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
              • Size 9KB
              • SHA256 5915de86c1c8037f4c4d7fca580aa402b284fdf399f9b81b427c3c971c8e502d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Preferences

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences
              • Size 9KB
              • SHA256 1559a6d66b92c546ac6d966706ef36f59f63951c5b11cdec7517818cf3430a48
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Preferences~RFe59fbcb.TMP

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Preferences~RFe59fbcb.TMP
              • Size 7KB
              • SHA256 5f440e6a4be7d3932b4d7d9397170c339dcfa094cc738bef9a203532f38326ec
              • MD5 SHA1 SHA512 SSDEEP TLSH

              CURRENT

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Sync Data\LevelDB\CURRENT
              • Size 16B
              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
              • MD5 SHA1 SHA512

              MANIFEST-000001

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Default\Sync Data\LevelDB\MANIFEST-000001
              • Size 41B
              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
              • MD5 SHA1 SHA512

              download_file_types.pb

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\FileTypePolicies\145.0.7584.0\download_file_types.pb
              • Size 7KB
              • SHA256 a1391aa8d42be124bd50c493886fe7b3a709059ee20b0e012b421390f4a3864e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 2KB
              • SHA256 b40fc1ea82d36f1e0c128a32f0d02923fb43320d9b61262df959f984386501ba
              • MD5 SHA1 SHA512 TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 6KB
              • SHA256 0e7ca221db5e4ba36b50215129d38d28102be9094da69fd68b2fa68420b52a61
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 6KB
              • SHA256 67ad113e2732cb13c5efc993ed46d7eb883ae887e142895aa055fdc57581e2b3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 6KB
              • SHA256 bef04fd7894cb68b8b9a0b91d7e5438e13d277a53d6e7cbab77e0df07d7203a1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 1KB
              • SHA256 462ac8b6af37d98e9e1ccd8dfd52d77bc4b2dc1f2fd0118a926068e65dad6cd5
              • MD5 SHA1 SHA512 TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 6KB
              • SHA256 0a11d6716b154dfbfb52bf631e5e9954f0f1bc5caca683662f73a94cd908bf63
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 7KB
              • SHA256 5fbf0c0d8e31100eba8cf284a701c37ea362cbc7e2a70dfaf2b19e33128a1943
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 5KB
              • SHA256 f71bf246314bcd66220859715ef1d3aba8ac2a7844b5b36d3977d43fcde9c584
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 5KB
              • SHA256 bac40937aa9486d60dbab8f822a888e418de45181633d11e00945778b47cda74
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 7KB
              • SHA256 ff3787bb2362f774ffdb1293bb08c56c28a0ff1760b30b5c1ec29eb7425d98ba
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State
              • Size 7KB
              • SHA256 cff93a46fabe38984f4ac801abb379d1eeeede0d7a33a6e3f3d140d44e49b657
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Local State~RFe599560.TMP

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Local State~RFe599560.TMP
              • Size 953B
              • SHA256 bdf7106980f3a3286c20255ab8f8cd12da1b76770f85453ece52f6633ed7014e
              • MD5 SHA1 SHA512 TLSH

              preloaded_data.pb

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\MEIPreload\1.1.0.3\preloaded_data.pb
              • Size 8KB
              • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              optimization-hints.pb

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\OptimizationHints\752\optimization-hints.pb
              • Size 557KB
              • SHA256 c9c44f096ab0fa1ee8e870ad885f46dbb8cca006708c297c03751636ffe22aa3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              crs.pb

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\PKIMetadata\1793\crs.pb
              • Size 341KB
              • SHA256 f89fc12c008804e5d486306feb2b852106665a14b3300b7e868ee9578a822f58
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kp_pinslist.pb

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\PKIMetadata\1793\kp_pinslist.pb
              • Size 10KB
              • SHA256 ffa0cdcb257993e4fb05a3d6ba7d4ef2944074122c8681ec0ff1d0857b36ab0e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              privacy-sandbox-attestations.dat

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\PrivacySandboxAttestationsPreloaded\2025.6.16.0\privacy-sandbox-attestations.dat
              • Size 7KB
              • SHA256 d5fbb03c2733c6670d21968bd057f315d56640f4e9dc3333f60e0b81fe3920d9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ssl_error_assistant.pb

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\SSLErrorAssistant\7\ssl_error_assistant.pb
              • Size 2KB
              • SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
              • MD5 SHA1 SHA512 TLSH

              safety_tips.pb

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\SafetyTips\3091\safety_tips.pb
              • Size 180KB
              • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Filtering Rules

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\Subresource Filter\Unindexed Rules\9.72.0\Filtering Rules
              • Size 154KB
              • SHA256 22a0a5fc9e38d0de4e68eaf7e961dbbd2bebf234bebffbcd21bd496c0813fcde
              • MD5 SHA1 SHA512 SSDEEP TLSH

              keys.json

              • Path C:\Users\Admin\AppData\Local\NWEA\NWEA Secure Testing Browser\cache\TrustTokenKeyCommitments\2026.8.3.1\keys.json
              • Size 8KB
              • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              LockdownBrowser.log

              • Path C:\Users\Admin\AppData\Local\Temp\LockdownBrowser.log
              • Size 88KB
              • SHA256 739a101df3dfd1fca4e36a0118feaa7ce7e40620101b6624d523046de3d67de8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              MSIECAD.tmp

              • Path C:\Users\Admin\AppData\Local\Temp\MSIECAD.tmp
              • Size 166KB
              • SHA256 c30c8a461175ae3240c7a835c9a4946a913a54e55f4b87f42b729c685a40448a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              0x0409.ini

              • Path C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}\0x0409.ini
              • Size 21KB
              • SHA256 8b76df0ffc9a226b532b60936765b852b89780c6e475c152f7c320e085e43948
              • MD5 SHA1 SHA512 SSDEEP TLSH

              _ISMSIDEL.INI

              • Path C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}\_ISMSIDEL.INI
              • Size 496B
              • SHA256 a3d3e1e17dd8febac11234a41c91d348aec5791826c436fbe1830943388d1235
              • MD5 SHA1 SHA512 TLSH

              _ISMSIDEL.INI

              • Path C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}\_ISMSIDEL.INI
              • Size 20B
              • SHA256 0a33c5dffabcf31a1f6802026e9e2eef4b285e57fd79d52fdcd98d6502d14b13
              • MD5 SHA1 SHA512

              _ISMSIDEL.INI

              • Path C:\Users\Admin\AppData\Local\Temp\{B54641C9-4496-4836-AB35-3EDB93A09B6F}\_ISMSIDEL.INI
              • Size 692B
              • SHA256 09c67e82651f99efb6db68025719feb87076e24cb2cb357c7df5bc0af9a5c2af
              • MD5 SHA1 SHA512 TLSH

              ~D4B2.tmp

              • Path C:\Users\Admin\AppData\Local\Temp\~D4B2.tmp
              • Size 5KB
              • SHA256 aabd6f7803cc8f65b2f16cf4a20b3d864e41efcb52b1c0222ee24bc104accd2b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              default.dic

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
              • Size 2B
              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
              • MD5 SHA1 SHA512

              NewShortcut2_D49D4F2A42E745149F646DD045FA6CEE.exe

              • Path C:\Windows\Installer\{ff694045-5446-402f-8128-1462e26a7e6e}\NewShortcut2_D49D4F2A42E745149F646DD045FA6CEE.exe
              • Size 60KB
              • SHA256 07549d4c2306360c9a4146bbb5bf500d2d49e9850e7829f153dadb62e99e5026
              • MD5 SHA1 SHA512 SSDEEP TLSH

              metadata-2

              • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
              • Size 24.1MB
              • SHA256 9beabef37444ed43b9b7dc0b0d3fe4a73ffb5df99963dae492d2263654f6dd3a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              {8a3320d6-8572-4552-81a1-30d76a100394}_OnDiskSnapshotProp

              • Path \??\Volume{82411472-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{8a3320d6-8572-4552-81a1-30d76a100394}_OnDiskSnapshotProp
              • Size 6KB
              • SHA256 5a5965120377aab57b2b8263bc186e18d88dd5b19d54bd4ad7a4732816dfdfa1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              memory/3492-126-0x0000000000A50000-0x0000000000AA4000-memory.dmp

              memory/3492-256-0x0000000012E60000-0x0000000012EC6000-memory.dmp

              memory/3492-231-0x00000000117E0000-0x00000000117EA000-memory.dmp

              memory/3492-130-0x0000000005510000-0x0000000005604000-memory.dmp

              memory/3492-135-0x0000000005430000-0x0000000005444000-memory.dmp

              memory/3492-136-0x0000000005DC0000-0x0000000006364000-memory.dmp

              memory/3492-145-0x00000000059A0000-0x0000000005AF5000-memory.dmp

              memory/3492-141-0x0000000005900000-0x0000000005992000-memory.dmp

              memory/3492-140-0x0000000005810000-0x000000000585C000-memory.dmp

              memory/3948-235-0x0000000005910000-0x00000000059F6000-memory.dmp

              memory/5632-548-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-550-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-538-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-549-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-545-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-544-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-540-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-546-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-547-0x0000000009AF0000-0x0000000009AF1000-memory.dmp

              memory/5632-539-0x0000000009AF0000-0x0000000009AF1000-memory.dmp