OctoRAT Wallets
February 6, 2026
Fuad Aliyev
Desktop Wallets (`%AppData%`)
| # | Name | Path |
|---|---|---|
| 1 | Bitcoin | \Bitcoin |
| 2 | Ethereum | \Ethereum |
| 3 | Electrum | \Electrum |
| 4 | Exodus | \Exodus |
| 5 | Atomic | \Atomic |
| 6 | Binance | \Binance |
| 7 | Jaxx Liberty | \com.liberty.jaxx |
| 8 | Litecoin | \Litecoin |
| 9 | Dogecoin | \Dogecoin |
| 10 | Dash | \Dash |
| 11 | Zcash | \Zcash |
| 12 | Monero | \Monero |
Desktop Apps (`%LocalAppData%`)
| # | Name | Path |
|---|---|---|
| 13 | Coinbase | \Coinbase |
| 14 | Ledger Live | \Ledger Live |
| 15 | Trezor | \Trezor |
Browser Extensions — Chrome (`%LocalAppData%\Google\Chrome\User Data`)
| # | Name | Extension ID | Profile |
|---|---|---|---|
| 16 | MetaMask | nkbihfbeogaeaoehlefnkodbefgpgknn | Default |
| 17 | Phantom | bfnaelmomeimhlpmgjnjophhpkkoljpa | Default |
| 18 | Trust Wallet | egjidjbpglichdcondbcbdnbeeppgdph | Default |
| 19 | Coinbase Wallet | hnfanknocfeofbddgcijnmhnfnkdnaad | Default |
| 20 | Binance Chain | fhbohimaelbohpjbbldcngcnapndodjp | Default |
| 21 | TronLink | ibnejdfjmmkpcnlpebklmnkoeoihofec | Default |
| 22 | Nifty | jbdaocneiiinmjbjlgalhcelgbejmnid | Default |
| 23 | MathWallet | afbcbjpbpfadlkmhmclhkeeodmamcflc | Default |
| 24 | MetaMask | nkbihfbeogaeaoehlefnkodbefgpgknn | Profile 1 |
| 25 | Phantom | bfnaelmomeimhlpmgjnjophhpkkoljpa | Profile 1 |
| 26 | MetaMask | nkbihfbeogaeaoehlefnkodbefgpgknn | Profile 2 |
Browser Extensions — Edge (`%LocalAppData%\Microsoft\Edge\User Data\Default`)
| # | Name | Extension ID |
|---|---|---|
| 27 | MetaMask | ejbalbakoplchlghecdalmeeeajnimhm |
| 28 | Phantom | bfnaelmomeimhlpmgjnjophhpkkoljpa |
| 29 | Trust Wallet | egjidjbpglichdcondbcbdnbeeppgdph |
Browser Extensions — Brave (`%LocalAppData%\BraveSoftware\Brave-Browser\User Data\Default`)
| # | Name | Extension ID |
|---|---|---|
| 30 | MetaMask | nkbihfbeogaeaoehlefnkodbefgpgknn |
| 31 | Phantom | bfnaelmomeimhlpmgjnjophhpkkoljpa |
Browser Extensions — Opera (`%LocalAppData%\Opera Software\Opera Stable`)
| # | Name | Extension ID |
|---|---|---|
| 32 | MetaMask | nkbihfbeogaeaoehlefnkodbefgpgknn |