At 23:58 she booted the VM, mounted the image, and watched a progress bar unconcerned with her pulse. The binary unpacked like a folded map—scripts, registry ghosts, a handful of encrypted logs. One filename caught her eye: 154kuyhaa7z.log. She opened it.