Malicious Browser Extension Analysis: MSI installer -> malicious extension -> C2 domain hidden in crypto transactions 05-31