Quarantined File Quarantined
File ID
b4ebfd0a1e2447bcb45b3b72c5794e0e_b0668b6596578d5d918c8d29083423c8025bd49328130383841139dd575868c6
SHA256
b0668b6596578d5d918c8d29083423c8025bd49328130383841139dd575868c6
Hostname
DWSHIN
Agent ID
b4ebfd0a1e2447bcb45b3b72c5794e0e
State
Quarantined
Created
2025-12-09 11:48:21
Updated
2025-12-22 02:38:43
Cached At
2025-12-23 00:00:41
File Paths 2
  • { "path": "\\Device\\HarddiskVolume3\\Users\\andsi\\AppData\\Local\\Google\\Chrome\\User Data\\Profile 1\\Cache\\Cache_Data\\f_044564", "filename": "f_044564", "state": "quarantined" }
  • { "path": "\\Device\\HarddiskVolume3\\Users\\andsi\\Downloads\\ProcessHackerPortable_2.39_English.paf.exe", "filename": "ProcessHackerPortable_2.39_English.paf.exe", "state": "quarantined" }
Raw JSON Data 
{
  "id": "b4ebfd0a1e2447bcb45b3b72c5794e0e_b0668b6596578d5d918c8d29083423c8025bd49328130383841139dd575868c6",
  "cid": "84393bf974fd44bda943a25a6a7bc27f",
  "aid": "b4ebfd0a1e2447bcb45b3b72c5794e0e",
  "hostname": "DWSHIN",
  "sha256": "b0668b6596578d5d918c8d29083423c8025bd49328130383841139dd575868c6",
  "paths": [
    {
      "path": "\\Device\\HarddiskVolume3\\Users\\andsi\\AppData\\Local\\Google\\Chrome\\User Data\\Profile 1\\Cache\\Cache_Data\\f_044564",
      "filename": "f_044564",
      "state": "quarantined"
    },
    {
      "path": "\\Device\\HarddiskVolume3\\Users\\andsi\\Downloads\\ProcessHackerPortable_2.39_English.paf.exe",
      "filename": "ProcessHackerPortable_2.39_English.paf.exe",
      "state": "quarantined"
    }
  ],
  "state": "quarantined",
  "date_updated": "2025-12-21T17:38:43Z",
  "date_created": "2025-12-09T02:48:21Z",
  "detect_ids": [
    "ldt:b4ebfd0a1e2447bcb45b3b72c5794e0e:4296718800",
    "ldt:b4ebfd0a1e2447bcb45b3b72c5794e0e:4297982760"
  ],
  "CreatedAt": "2025-12-09T11:48:21\u002B09:00",
  "UpdatedAt": "2025-12-22T02:38:43\u002B09:00"
}
Actions
View in Falcon Console Check on VirusTotal Back to List
Host Information
  • Hostname DWSHIN
  • Platform Windows
  • OS Windows 11
  • Status Offline
  • Last Seen 2025-12-22 09:44