Malware Analysis Report

2025-08-10 18:04

Sample ID 240507-ppqm5sfg5t
Target https://steamunlocked.net
Tags
discovery evasion persistence spyware stealer trojan upx
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://steamunlocked.net was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion persistence spyware stealer trojan upx

Downloads MZ/PE file

Registers COM server for autorun

UPX packed file

Executes dropped EXE

ACProtect 1.3x - 1.4x DLL software

Reads user/profile data of web browsers

Loads dropped DLL

Checks installed software on the system

Adds Run key to start application

Enumerates connected drives

Checks whether UAC is enabled

Drops file in System32 directory

Checks system information in the registry

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

NSIS installer

Uses Task Scheduler COM API

Suspicious use of AdjustPrivilegeToken

Modifies data under HKEY_USERS

Enumerates system info in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of WriteProcessMemory

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

NTFS ADS

Modifies registry class

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-07 12:30

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-07 12:30

Reported

2024-05-07 12:48

Platform

win11-20240419-en

Max time kernel

1050s

Max time network

1049s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://steamunlocked.net

Signatures

Downloads MZ/PE file

ACProtect 1.3x - 1.4x DLL software

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\extra-ram_softradar-com.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\is-JI6DF.tmp\extra-ram_softradar-com.tmp N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\Install\{08B4FECC-DF52-48C0-BEFB-8D7CDD3BB021}\WaveInstaller-v1.3.16.1.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A

Reads user/profile data of web browsers

spyware stealer

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{1BE9D40C-2307-4213-830E-7E3CE9EDF0C2}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterOnDemand.exe\"" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterOnDemand.exe\"" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{3C41B0C4-B5B6-4293-BED4-C927CCFDB909}\LocalServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\LocalServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{9CD78CBC-FD21-4FFF-B452-9D792A58B7C4}\LocalServer32 C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterOnDemand.exe\"" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{9CD78CBC-FD21-4FFF-B452-9D792A58B7C4}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\1.3.16.1\\notification_helper.exe" C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser.dll" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser.dll" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{9E0CE9B5-C498-40A8-B7F2-B89AF1C56FFF}\LocalServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{9E0CE9B5-C498-40A8-B7F2-B89AF1C56FFF}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\SWUpdater.exe\"" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{1BE9D40C-2307-4213-830E-7E3CE9EDF0C2}\LocalServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser.dll" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{3C41B0C4-B5B6-4293-BED4-C927CCFDB909}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterOnDemand.exe\"" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C}\LocalServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{9CD78CBC-FD21-4FFF-B452-9D792A58B7C4}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\1.3.16.1\\notification_helper.exe\"" C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\Software\Microsoft\Windows\CurrentVersion\Run\Extraram = "C:\\Program Files (x86)\\Extra RAM\\ExtraRAM.exe" C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\Software\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterCore.exe\"" C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\Software\Microsoft\Windows\CurrentVersion\Run\PCAppStore = "\"C:\\Users\\Admin\\PCAppStore\\PCAppStore.exe\" /init default" C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\Software\Microsoft\Windows\CurrentVersion\Run\PcAppStoreUpdater = "\"C:\\Users\\Admin\\PCAppStore\\AutoUpdater.exe\" /i" C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000\Software\Microsoft\Windows\CurrentVersion\Run\Watchdog = "\"C:\\Users\\Admin\\PCAppStore\\Watchdog.exe\" /guid=A3A1C297-EDB6-403A-B657-0094DC11D6D9X /rid=20240507124245.898241329796 /ver=fa.1091c" C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\F: C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\Downloads\OperaGXSetup.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\Downloads\OperaGXSetup.exe N/A
File opened (read-only) \??\D: C:\Users\Admin\Downloads\OperaGXSetup.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\Downloads\OperaGXSetup.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\psuser_64.dll C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\swupdaterres_en.dll C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdaterSetup.exe C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUTC62F.tmp C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdaterBroker.exe C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\psmachine.dll C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\psuser.dll C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Extra RAM\is-V6GA3.tmp C:\Users\Admin\AppData\Local\Temp\is-JI6DF.tmp\extra-ram_softradar-com.tmp N/A
File opened for modification C:\Program Files (x86)\Extra RAM\unins000.dat C:\Users\Admin\AppData\Local\Temp\is-JI6DF.tmp\extra-ram_softradar-com.tmp N/A
File created C:\Program Files (x86)\Extra RAM\unins000.dat C:\Users\Admin\AppData\Local\Temp\is-JI6DF.tmp\extra-ram_softradar-com.tmp N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdaterCore.exe C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdaterOnDemand.exe C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdaterComRegisterShell64.exe C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\psmachine_64.dll C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdaterSetup.exe C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Extra RAM\is-DVBUB.tmp C:\Users\Admin\AppData\Local\Temp\is-JI6DF.tmp\extra-ram_softradar-com.tmp N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\swupdater.dll C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\VG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\PK C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\GL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\BO C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\SX C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\SJ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\MZ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\KW C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\AD C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\NZ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\HK C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\CG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\AG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\BH C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1416815177\kp_pinslist.pb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\TW C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\SH C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\NG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\MY C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\KE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\SI C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\QA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\JM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\EC C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\DJ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\UY C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\GA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\AZ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\VC C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\NU C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\NL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\LY C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\GY C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\BA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1843464599\LICENSE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1211601080\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\IN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\GR C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\CO C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\BQ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\YT C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\JE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\EG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\XK C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\TC C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\PR C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\KP C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\BS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\BR C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_179134760\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\MV C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\ME C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\IL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1416815177\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\ZW C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\LI C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1180647089\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\SC C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\MG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\KY C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\ER C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\GN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Enumerates physical storage devices

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133595593655036179" C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WavesorSWUpdater.Update3WebUser\CLSID C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\NumMethods\ = "8" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\NumMethods\ = "8" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WaveBrwsHTM.OJ4IMXDEYEYBCWEHIBNRX4Q32A\Application\ApplicationCompany = "Wavesor Software" C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WavesorSWUpdater.Update3WebUser.1.0\ = "SWUpdater Update3Web" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ = "IRegistrationUpdateHook" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods\ = "16" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\ = "IProgressWndEvents" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\ = "IAppVersion" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\NumMethods\ = "5" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ = "IProcessLauncher" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ = "IRegistrationUpdateHook" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ = "ICoCreateAsync" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WavesorSWUpdater.OnDemandCOMClassUser\ = "SWUpdater Legacy On Demand" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\ = "IGoogleUpdate3WebSecurity" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\NumMethods\ = "5" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WaveBrwsHTM.OJ4IMXDEYEYBCWEHIBNRX4Q32A\Application\ApplicationIcon = "C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\wavebrowser.exe,0" C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods\ = "16" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\ = "IJobObserver" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\NumMethods\ = "41" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WavesorSWUpdater.OnDemandCOMClassUser.1.0\CLSID\ = "{1BE9D40C-2307-4213-830E-7E3CE9EDF0C2}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ = "IApp2" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\CLSID\{2B2AD342-8BBC-40AD-AF1B-6887EAB9D3D0}\InprocHandler32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\WOW6432Node\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-1474490143-3221292397-4168103503-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 518948.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 559989.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\OperaGXSetup.exe\:Zone.Identifier:$DATA C:\Users\Admin\Downloads\OperaGXSetup.exe N/A
File opened for modification C:\Users\Admin\Downloads\download.htm:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 143782.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Setup (1).exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 831317.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\extra-ram_softradar-com.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\OperaGXSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 304212.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 277505.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File created C:\Users\Admin\PCAppStore\assets\images\css2?family=Inter:wght@400;500;600;700&family=Open+Sans:wght@400;600;700&family=Roboto:wght@400;500;700&display=swap C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
File created C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\OperaGXSetup.exe\:SmartScreen:$DATA C:\Users\Admin\Downloads\OperaGXSetup.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\Downloads\Setup (1).exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\Watchdog.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Program Files (x86)\Extra RAM\ExtraRAM.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\PcAppStore.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A
N/A N/A C:\Users\Admin\PCAppStore\nwjs\NW_store.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4488 wrote to memory of 1784 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 1784 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4408 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4448 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4448 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4488 wrote to memory of 4252 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://steamunlocked.net

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8b5903cb8,0x7ff8b5903cc8,0x7ff8b5903cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1912 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2552 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4068 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5368 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3516 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004C8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6236 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6376 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3032 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6136 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1708 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6604 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6696 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6592 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6920 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7084 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6700 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6764 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6616 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7316 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6596 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6628 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7220 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3104 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7524 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7964 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=8012 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3868 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8272 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004C8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8676 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6608 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7812 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8716 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7008 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\extra-ram_softradar-com.exe

"C:\Users\Admin\Downloads\extra-ram_softradar-com.exe"

C:\Users\Admin\AppData\Local\Temp\is-JI6DF.tmp\extra-ram_softradar-com.tmp

"C:\Users\Admin\AppData\Local\Temp\is-JI6DF.tmp\extra-ram_softradar-com.tmp" /SL5="$6028E,260343,54272,C:\Users\Admin\Downloads\extra-ram_softradar-com.exe"

C:\Program Files (x86)\Extra RAM\ExtraRAM.exe

"C:\Program Files (x86)\Extra RAM\ExtraRAM.exe"

C:\Users\Admin\Downloads\Setup (1).exe

"C:\Users\Admin\Downloads\Setup (1).exe"

C:\Users\Admin\Downloads\Wave Browser.exe

"C:\Users\Admin\Downloads\Wave Browser.exe"

C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe

"C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe

"C:\Program Files (x86)\Wavesor\Temp\GUMC61E.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSI4NzQiLz48L2FwcD48L3JlcXVlc3Q-

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{B6A60CC6-26D4-49DA-B3C8-64FFE551AA59}"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pcapp.store/installing.php?guid=A3A1C297-EDB6-403A-B657-0094DC11D6D9X&winver=22000&version=fa.1091c&nocache=20240507124208.151&_fcid=1715085107451642

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0xfc,0x124,0x128,0x104,0x12c,0x7ff8b5903cb8,0x7ff8b5903cc8,0x7ff8b5903cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7284 /prefetch:1

C:\Users\Admin\Wavesor Software\SWUpdater\Install\{08B4FECC-DF52-48C0-BEFB-8D7CDD3BB021}\WaveInstaller-v1.3.16.1.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{08B4FECC-DF52-48C0-BEFB-8D7CDD3BB021}\WaveInstaller-v1.3.16.1.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\gui1D18.tmp"

C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\wavebrowser.packed.7z" --wid=tisbnhkn --make-chrome-default --installerdata="C:\Users\Admin\AppData\Local\Temp\gui1D18.tmp"

C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.1 --initial-client-data=0x2b0,0x2b4,0x2b8,0x280,0x2bc,0x7ff7896ada10,0x7ff7896ada20,0x7ff7896ada30

C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp

"C:\Users\Admin\PCAppStore\Temp\nseD4C6.tmp" /internal 1715085107451642 /force

C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\gui1D18.tmp" --create-shortcuts=0 --install-level=0

C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nse2055.tmp\setup.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.1 --initial-client-data=0x2b0,0x2b4,0x2b8,0x280,0x2bc,0x7ff7896ada10,0x7ff7896ada20,0x7ff7896ada30

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --prevdefbrowser=6 --install-type=1 --from-installer

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.1 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff8a15e48b0,0x7ff8a15e48c0,0x7ff8a15e48d0

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1864 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2132 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2220 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3144 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3180 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3816 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4328 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjU3NSIgZG93bmxvYWRfdGltZV9tcz0iMTIzMzEiIGRvd25sb2FkZWQ9Ijk4NTExMjg4IiB0b3RhbD0iOTg1MTEyODgiIGluc3RhbGxfdGltZV9tcz0iMTE4ODEiLz48L2FwcD48L3JlcXVlc3Q-

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4572 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4564 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4788 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4912 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5028 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5144 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5260 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5376 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5492 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6068 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6188 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6456 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5852 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6776 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6912 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7068 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7212 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3816 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7360 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7440 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7208 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7216 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6148 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7332 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\PCAppStore\PcAppStore.exe

"C:\Users\Admin\PCAppStore\PcAppStore.exe" /init default

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7140 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\PCAppStore\Watchdog.exe

"C:\Users\Admin\PCAppStore\Watchdog.exe" /guid=A3A1C297-EDB6-403A-B657-0094DC11D6D9X /rid=20240507124245.898241329796 /ver=fa.1091c

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7456 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7100 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7188 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5856 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4384 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7872 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8012 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8156 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8308 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8148 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8584 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7868 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8856 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8864 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9136 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9132 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9412 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9544 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9680 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9824 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=7140 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=7004 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=8880 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=7916 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=7940 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=7876 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=7884 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=7112 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4300 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=3812 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=6280 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5484 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

.\nwjs\NW_store.exe .\ui\.

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\pc_app_store\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\pc_app_store\User Data" --annotation=plat=Win64 --annotation=prod=pc_app_store --annotation=ver=0.1.0 --initial-client-data=0x26c,0x270,0x274,0x268,0x278,0x7ff8a126a960,0x7ff8a126a970,0x7ff8a126a980

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1888 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:2

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --mojo-platform-channel-handle=2092 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:3

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=2164 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --nwjs --extension-process --no-appcompat-clear --no-sandbox --file-url-path-alias="/gen=C:\Users\Admin\PCAppStore\nwjs\gen" --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3052 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:2

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=4364 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:8

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8368 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7804 /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=612 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --mojo-platform-channel-handle=3728 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\Downloads\OperaGXSetup.exe

"C:\Users\Admin\Downloads\OperaGXSetup.exe"

C:\Users\Admin\Downloads\OperaGXSetup.exe

C:\Users\Admin\Downloads\OperaGXSetup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=109.0.5097.70 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2bc,0x2ec,0x725c4208,0x725c4214,0x725c4220

C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\OperaGXSetup.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\OperaGXSetup.exe" --version

C:\Users\Admin\Downloads\OperaGXSetup.exe

"C:\Users\Admin\Downloads\OperaGXSetup.exe" --backend --install --import-browser-data=0 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=6208 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_20240507124325" --session-guid=36398880-306f-465c-a13a-190ec9642bdc --server-tracking-blob=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 --desktopshortcut=1 --wait-for-package --initial-proc-handle=7008000000000000

C:\Users\Admin\Downloads\OperaGXSetup.exe

C:\Users\Admin\Downloads\OperaGXSetup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=109.0.5097.70 --initial-client-data=0x2cc,0x2d0,0x2d4,0x2a8,0x2d8,0x71424208,0x71424214,0x71424220

C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202405071243251\assistant\Opera_GX_assistant_73.0.3856.382_Setup.exe_sfx.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202405071243251\assistant\Opera_GX_assistant_73.0.3856.382_Setup.exe_sfx.exe"

C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202405071243251\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202405071243251\assistant\assistant_installer.exe" --version

C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202405071243251\assistant\assistant_installer.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202405071243251\assistant\assistant_installer.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector.opera.com/collector/submit --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=73.0.3856.382 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x344f48,0x344f58,0x344f64

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --single-argument https://pcapp.store/?p=lpd_av_r8_fastapp&guid=A3A1C297-EDB6-403A-B657-0094DC11D6D9X&oid=1356

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.1 --initial-client-data=0x11c,0x120,0x124,0xb0,0x128,0x7ff8a15e48b0,0x7ff8a15e48c0,0x7ff8a15e48d0

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=6048 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7772 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7112 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=8064 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=5912 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3852 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8764 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=7092 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7360 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\PCAppStore\nwjs\NW_store.exe

"C:\Users\Admin\PCAppStore\nwjs\NW_store.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Local\pc_app_store\User Data" --nwapp-path=".\ui\." --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=452 --field-trial-handle=1892,i,10350168331215345216,8476415042260057774,262144 --variations-seed-version /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8820 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=6812 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6448 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7432 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8624 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8388 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8692 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8840 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /registermsihelper

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1820,4801676357932956197,11237112931997632915,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7580 /prefetch:1

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9212 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5620 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5780 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5624 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=8144 --field-trial-handle=1872,i,18358549964331041449,10126861316998068101,262144 /prefetch:1

Network

Country Destination Domain Proto
US 8.8.8.8:53 steamunlocked.net udp
US 104.27.201.89:443 steamunlocked.net tcp
NL 23.62.61.97:443 www.bing.com tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 232.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 97.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 36.32.239.216.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 216.239.32.36:443 region1.google-analytics.com udp
NL 23.62.61.155:443 r.bing.com tcp
NL 23.62.61.160:443 r.bing.com tcp
NL 23.62.61.155:443 r.bing.com tcp
US 2.17.251.5:443 aefd.nelreports.net tcp
US 2.17.251.5:443 aefd.nelreports.net udp
NL 20.190.160.17:443 login.microsoftonline.com tcp
NL 20.190.160.17:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 104.26.11.119:443 softradar.com tcp
US 104.26.11.119:443 softradar.com tcp
US 2.18.190.80:80 apps.identrust.com tcp
US 8.8.8.8:53 98.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com tcp
GB 216.58.212.194:443 cm.g.doubleclick.net tcp
GB 172.217.16.226:443 www.googletagservices.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 172.217.16.238:443 fundingchoicesmessages.google.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 216.58.201.97:443 lh3.googleusercontent.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 216.58.204.67:443 www.google.co.uk tcp
BE 64.233.167.155:443 stats.g.doubleclick.net tcp
US 104.26.11.119:443 softradar.com tcp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 194.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 238.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 33.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 3.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 73.80.16.104.in-addr.arpa udp
US 8.8.8.8:53 97.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 155.167.233.64.in-addr.arpa udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.200.33:443 tpc.googlesyndication.com tcp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
GB 216.58.201.98:443 adclick.g.doubleclick.net tcp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 142.250.178.4:443 www.google.com udp
BE 64.233.167.155:443 stats.g.doubleclick.net udp
GB 216.58.204.67:443 www.google.co.uk udp
GB 142.250.200.46:443 google.com tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 104.16.80.73:443 static.cloudflareinsights.com tcp
GB 216.58.201.98:443 adclick.g.doubleclick.net udp
US 18.213.195.144:80 install.wavebrowser.co tcp
US 18.213.195.144:80 install.wavebrowser.co tcp
US 18.213.195.144:443 install.wavebrowser.co tcp
NL 104.97.14.227:443 p.typekit.net tcp
NL 104.97.15.50:443 use.typekit.net tcp
NL 104.97.15.50:443 use.typekit.net tcp
US 34.198.226.158:443 api.wavebrowser.co tcp
US 34.198.226.158:443 api.wavebrowser.co tcp
US 172.67.40.50:443 app.posthog.com tcp
US 172.67.40.50:443 app.posthog.com tcp
US 54.80.100.22:443 api.wavebrowser.co tcp
US 104.18.30.234:443 app.termly.io tcp
US 104.18.30.234:443 app.termly.io tcp
US 34.198.226.158:443 api.wavebrowser.co tcp
US 18.210.37.220:443 api.wavebrowser.co tcp
US 104.18.30.234:443 app.termly.io tcp
GB 142.250.178.4:443 www.google.com udp
BE 64.233.167.155:443 stats.g.doubleclick.net udp
GB 216.58.204.67:443 www.google.co.uk udp
NL 104.97.15.50:443 use.typekit.net tcp
US 16.182.36.9:443 wav-installers.s3.amazonaws.com tcp
US 54.80.100.22:443 api.wavebrowser.co tcp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 216.58.212.194:443 cm.g.doubleclick.net tcp
GB 172.217.16.226:443 www.googletagservices.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
NL 23.62.61.171:443 www.bing.com tcp
NL 23.62.61.129:443 www.bing.com tcp
US 204.79.197.200:443 tse2.mm.bing.net tcp
US 104.21.49.91:443 freevbucks2022.online tcp
US 104.21.49.91:443 freevbucks2022.online tcp
US 18.239.190.132:443 d26h1wdc757l2w.cloudfront.net tcp
US 172.67.162.35:443 bootstraplugin.com tcp
US 18.239.190.193:443 d3khua7ksvxesx.cloudfront.net tcp
US 18.239.190.193:443 d3khua7ksvxesx.cloudfront.net tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
GB 172.217.169.42:443 ajax.googleapis.com tcp
US 18.239.190.205:443 d2lmlpk6xgu7kg.cloudfront.net tcp
US 18.239.190.205:443 d2lmlpk6xgu7kg.cloudfront.net tcp
US 18.239.190.205:443 d2lmlpk6xgu7kg.cloudfront.net tcp
US 18.239.190.205:443 d2lmlpk6xgu7kg.cloudfront.net tcp
US 54.208.166.52:443 t.afftrackr.com tcp
US 54.208.166.52:443 t.afftrackr.com tcp
US 172.67.173.122:443 nationalconsumerscenter.co.uk tcp
US 54.208.166.52:443 t.afftrackr.com tcp
US 54.208.166.52:443 t.afftrackr.com tcp
US 104.16.247.135:443 www.cdn925.com tcp
US 104.16.247.135:443 www.cdn925.com tcp
US 104.16.242.248:443 www.clicken.us tcp
US 35.190.72.161:443 fqtag.com tcp
US 35.190.36.172:443 cdn.fqtag.com tcp
US 35.190.72.161:443 fqtag.com udp
US 8.8.8.8:53 stun.voipzoom.com udp
US 8.8.8.8:53 stun.gradwell.com udp
US 8.8.8.8:53 stun.veoh.com udp
US 8.8.8.8:53 stun.2talk.com udp
US 8.8.8.8:53 stun.nas.net udp
US 8.8.8.8:53 stun.voxox.com udp
US 8.8.8.8:53 stun.voip.aebc.com udp
DE 77.72.169.211:3478 stun.voipzoom.com udp
US 216.93.246.18:3478 stun.counterpath.com udp
US 70.85.220.74:3478 stun.wwdl.net udp
DE 77.72.169.210:3478 stun.voipzoom.com udp
US 27.111.12.93:3478 stun.2talk.com udp
CA 216.145.109.98:3478 stun.nas.net udp
CA 66.51.128.11:3478 stun.voip.aebc.com udp
US 69.167.127.106:3478 stun.veoh.com udp
US 35.190.72.161:443 fqtag.com udp
NL 34.141.179.97:443 go.smartorfast.com tcp
NL 34.141.179.97:443 go.smartorfast.com tcp
US 35.190.13.203:443 aux.fqtag.com tcp
US 27.111.12.93:3478 stun.2talk.com udp
US 216.93.246.18:3478 stun.counterpath.com udp
DE 77.72.169.211:3478 stun.voipzoom.com udp
CA 216.145.109.98:3478 stun.nas.net udp
US 69.167.127.106:3478 stun.veoh.com udp
CA 66.51.128.11:3478 stun.voip.aebc.com udp
DE 77.72.169.210:3478 stun.voipzoom.com udp
US 70.85.220.74:3478 stun.wwdl.net udp
US 34.160.172.121:443 www.ontajdu3js.com tcp
US 54.208.166.52:443 t.afftrackr.com tcp
US 54.208.166.52:443 t.afftrackr.com tcp
US 18.239.208.35:443 onthatass.com tcp
US 104.18.52.27:443 polyfill.io tcp
US 35.190.13.203:443 aux.fqtag.com udp
US 18.213.48.233:443 www.getgx.net tcp
US 18.213.48.233:443 www.getgx.net tcp
US 27.111.12.93:3478 stun.2talk.com udp
US 216.93.246.18:3478 stun.counterpath.com udp
DE 77.72.169.211:3478 stun.voipzoom.com udp
CA 216.145.109.98:3478 stun.nas.net udp
US 69.167.127.106:3478 stun.veoh.com udp
CA 66.51.128.11:3478 stun.voip.aebc.com udp
DE 77.72.169.210:3478 stun.voipzoom.com udp
US 70.85.220.74:3478 stun.wwdl.net udp
GB 142.250.178.4:443 www.google.com udp
US 18.239.208.99:443 api.locize.app tcp
GB 142.250.178.4:443 www.google.com tcp
US 18.239.208.35:443 onthatass.com tcp
US 18.239.208.42:443 siocdn.onthatass.com tcp
US 34.160.172.121:443 www.ontajdu3js.com udp
US 18.239.208.42:443 siocdn.onthatass.com tcp
DE 52.29.104.245:443 www.opera.com tcp
DE 52.29.104.245:443 www.opera.com tcp
US 151.101.2.217:443 browser.sentry-cdn.com tcp
GB 163.70.151.21:443 connect.facebook.net tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
GB 142.250.200.46:443 google.com tcp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 226.21.18.104.in-addr.arpa udp
US 8.8.8.8:53 120.66.68.104.in-addr.arpa udp
BE 104.68.66.120:443 cdn-production-opera-website.operacdn.com tcp
US 104.18.32.137:443 cdn-ukwest.onetrust.com tcp
US 18.239.208.28:443 sio.onthatass.com tcp
US 18.239.208.123:443 static.hotjar.com tcp
US 18.239.211.245:443 sc-static.net tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 104.18.32.137:443 cdn-ukwest.onetrust.com tcp
US 151.101.1.140:443 alb.reddit.com tcp
US 216.239.32.21:443 analytics.bestofluck.io tcp
BE 64.233.167.157:443 stats.g.doubleclick.net udp
US 151.101.1.140:443 alb.reddit.com tcp
NL 23.62.61.145:443 analytics.tiktok.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
GB 143.244.38.136:443 a.omappapi.com tcp
US 18.239.208.43:443 script.hotjar.com tcp
US 151.101.1.140:443 alb.reddit.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 35.190.43.134:443 tr.snapchat.com tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 140.1.101.151.in-addr.arpa udp
US 8.8.8.8:53 21.32.239.216.in-addr.arpa udp
US 8.8.8.8:53 157.167.233.64.in-addr.arpa udp
US 8.8.8.8:53 145.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 136.38.244.143.in-addr.arpa udp
US 8.8.8.8:53 43.208.239.18.in-addr.arpa udp
US 172.66.42.248:443 api.omappapi.com tcp
US 35.190.43.134:443 tr6.snapchat.com udp
DE 52.29.104.245:443 www.opera.com tcp
US 35.190.43.134:443 tr6.snapchat.com udp
US 13.107.253.64:443 devtools.azureedge.net tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
N/A 127.0.0.1:9229 tcp
NL 23.62.61.99:443 www.bing.com tcp
NL 23.62.61.99:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
NL 23.62.61.97:443 www.bing.com tcp
US 172.66.43.132:443 reviewed.app tcp
US 172.66.43.132:443 reviewed.app tcp
US 172.67.164.213:443 nileseek.com tcp
US 172.67.164.213:443 nileseek.com tcp
GB 216.58.212.238:443 www.youtube.com tcp
US 204.79.197.237:443 bat.bing.com tcp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 216.58.212.238:443 www.youtube.com udp
GB 172.217.16.238:443 www.youtube.com udp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
GB 216.58.204.66:443 adclick.g.doubleclick.net udp
GB 216.58.204.66:443 adclick.g.doubleclick.net tcp
GB 216.58.212.238:443 www.youtube.com udp
GB 142.250.187.206:443 www.youtube.com tcp
GB 142.250.187.238:443 www.youtube.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
US 74.125.124.120:443 csi.gstatic.com tcp
NL 172.217.132.201:443 rr4---sn-5hnednss.googlevideo.com tcp
US 74.125.124.120:443 csi.gstatic.com tcp
US 74.125.124.120:443 csi.gstatic.com tcp
US 74.125.124.120:443 csi.gstatic.com tcp
US 74.125.124.120:443 csi.gstatic.com udp
US 216.239.32.36:443 region1.analytics.google.com udp
GB 216.58.212.238:443 www.youtube.com udp
GB 172.217.16.238:443 www.youtube.com udp
GB 142.250.200.33:443 tpc.googlesyndication.com udp
AT 81.19.159.21:443 www.download-and-play.com tcp
AT 81.19.159.21:443 www.download-and-play.com tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 104.21.3.14:443 www.jeroud.com tcp
NL 185.26.182.112:443 net.geo.opera.com tcp
US 159.223.126.41:443 pcapp.store tcp
US 52.20.229.180:443 api.wavebrowserbase.com tcp
US 18.239.210.27:80 ocsp.r2m01.amazontrust.com tcp
US 34.194.5.64:443 swupdater.com tcp
US 34.194.5.64:443 swupdater.com tcp
US 159.223.126.41:443 pcapp.store tcp
GB 89.187.167.9:443 delivery.pcapp.store tcp
GB 89.187.167.7:443 repository.pcapp.store tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.200.46:443 www.youtube.com udp
GB 216.58.204.67:443 www.google.co.uk udp
US 23.53.113.140:443 wave.outbrain.com tcp
US 23.53.113.140:443 wave.outbrain.com tcp
US 64.74.236.95:443 tr.outbrain.com tcp
US 64.74.236.95:443 tr.outbrain.com tcp
US 64.74.236.95:443 tr.outbrain.com tcp
US 23.53.113.140:443 wave.outbrain.com tcp
US 8.8.8.8:53 95.236.74.64.in-addr.arpa udp
GB 142.250.178.2:443 googleads.g.doubleclick.net udp
GB 142.250.178.4:443 www.google.com udp
US 18.239.208.54:443 cdn.swupdater.com tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 18.210.37.220:443 dct.wavebrowserbase.com tcp
US 8.8.8.8:53 dct.wavebrowser.co udp
US 54.159.42.159:443 dct.wavebrowser.co tcp
US 18.239.210.27:80 ocsp.r2m02.amazontrust.com tcp
US 8.8.8.8:53 extapi.wavebrowserbase.com udp
US 8.8.8.8:53 extapi.wavebrowserbase.com udp
US 8.8.8.8:53 s2.googleusercontent.com udp
US 8.8.8.8:53 s2.googleusercontent.com udp
US 44.198.107.139:443 extapi.wavebrowserbase.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.mywavehome.net udp
GB 216.58.201.97:443 s2.googleusercontent.com tcp
IE 209.85.203.84:443 accounts.google.com tcp
US 54.80.100.22:443 api.mywavehome.net tcp
US 54.159.42.159:443 api.mywavehome.net tcp
US 8.8.8.8:53 t1.gstatic.com udp
US 8.8.8.8:53 t1.gstatic.com udp
GB 216.58.212.196:443 t1.gstatic.com tcp
US 8.8.8.8:53 139.107.198.44.in-addr.arpa udp
US 8.8.8.8:53 84.203.85.209.in-addr.arpa udp
US 8.8.8.8:53 196.212.58.216.in-addr.arpa udp
US 34.194.5.64:443 swupdater.com tcp
US 8.8.8.8:53 dct.wavebrowser.co udp
US 8.8.8.8:53 dct.wavebrowser.co udp
US 8.8.8.8:53 seed.wavebrowser.co udp
US 8.8.8.8:53 seed.wavebrowser.co udp
US 18.239.208.92:443 seed.wavebrowser.co tcp
US 54.80.100.22:443 dct.wavebrowser.co tcp
US 54.80.100.22:443 dct.wavebrowser.co tcp
US 54.80.100.22:443 dct.wavebrowser.co tcp
US 54.80.100.22:443 dct.wavebrowser.co tcp
US 54.80.100.22:443 dct.wavebrowser.co tcp
US 54.80.100.22:443 dct.wavebrowser.co tcp
US 8.8.8.8:53 ntp2.mywavehome.net udp
US 8.8.8.8:53 ntp2.mywavehome.net udp
US 18.239.208.129:443 ntp2.mywavehome.net tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com tcp
US 8.8.8.8:53 t1.gstatic.com udp
US 8.8.8.8:53 t1.gstatic.com udp
US 8.8.8.8:53 t2.gstatic.com udp
US 8.8.8.8:53 t2.gstatic.com udp
GB 172.217.16.228:443 t2.gstatic.com tcp
GB 216.58.212.196:443 t1.gstatic.com tcp
US 18.239.208.129:443 ntp2.mywavehome.net udp
US 8.8.8.8:53 cdn.taboola.com udp
US 8.8.8.8:53 cdn.taboola.com udp
US 151.101.1.44:443 cdn.taboola.com tcp
US 8.8.8.8:53 cdn.mywavehome.net udp
US 8.8.8.8:53 cdn.mywavehome.net udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 gum.criteo.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.179.234:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.mywavehome.net udp
US 52.20.229.180:443 api.mywavehome.net tcp
US 8.8.8.8:53 234.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 mywavehome.net udp
US 8.8.8.8:53 mywavehome.net udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 8.8.8.8:53 api.iconify.design udp
US 8.8.8.8:53 api.iconify.design udp
US 8.8.8.8:53 cdn.mywavehome.net udp
US 3.216.89.252:443 mywavehome.net tcp
US 52.20.229.180:443 api.wavebrowserbase.com tcp
US 172.67.71.159:443 api.iconify.design tcp
US 18.239.208.99:443 cdn.mywavehome.net tcp
GB 142.250.179.234:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
GB 142.250.178.4:443 www.google.com tcp
GB 142.250.178.4:443 www.google.com tcp
GB 216.58.204.67:443 www.google.co.uk tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 8.8.8.8:53 static-02.veve.com udp
US 8.8.8.8:53 static-02.veve.com udp
GB 143.244.38.136:443 static-02.veve.com tcp
GB 143.244.38.136:443 static-02.veve.com tcp
GB 143.244.38.136:443 static-02.veve.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 159.223.126.41:443 pcapp.store tcp
US 18.239.208.124:443 d74queuslupub.cloudfront.net tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google udp
GB 163.70.151.23:443 udp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 163.70.151.21:443 connect.facebook.net udp
GB 163.70.151.21:443 connect.facebook.net udp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
GB 163.70.151.35:443 www.facebook.com tcp
US 18.239.208.71:443 tcp
US 159.223.126.41:443 pcapp.store tcp
US 8.8.8.8:53 pcapp.store udp
US 8.8.8.8:53 pcapp.store udp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:80 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 8.8.8.8:53 repcdn.pcapp.store udp
US 8.8.8.8:53 repcdn.pcapp.store udp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 195.181.164.15:443 repcdn.pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
GB 89.187.167.9:443 repcdn.pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
US 159.223.126.41:443 pcapp.store tcp
GB 92.123.128.195:443 tcp
US 52.182.143.214:443 browser.pipe.aria.microsoft.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.178.4:443 www.google.com tcp
GB 172.217.169.42:443 ajax.googleapis.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google udp
NL 23.62.61.194:443 r.bing.com tcp
US 147.182.211.77:443 tcp
NL 23.62.61.194:443 r.bing.com tcp
US 152.199.19.74:80 evcs-ocsp.ws.symantec.com tcp
GB 172.217.169.42:443 ajax.googleapis.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
NL 82.145.216.20:443 autoupdate.geo.opera.com tcp
NL 82.145.216.20:443 autoupdate.geo.opera.com tcp
NL 82.145.216.15:443 features.opera-api2.com tcp
US 104.18.25.17:443 api.config.opr.gg tcp
US 8.8.8.8:53 20.216.145.82.in-addr.arpa udp
US 8.8.8.8:53 15.216.145.82.in-addr.arpa udp
US 8.8.8.8:53 17.25.18.104.in-addr.arpa udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
NL 82.145.216.24:443 download.opera.com tcp
US 104.18.11.89:443 download5.operacdn.com tcp
US 8.8.8.8:443 dns.google udp
GB 216.58.204.67:443 www.google.co.uk tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
US 8.8.8.8:443 dns.google udp
US 45.32.1.23:443 pcapp.store tcp
US 45.32.1.23:443 pcapp.store tcp
GB 142.250.200.3:443 tcp
GB 142.250.200.3:443 tcp
US 159.223.126.41:443 pcapp.store tcp
GB 142.250.200.46:443 www.youtube.com udp
GB 216.58.204.67:443 www.google.co.uk udp
US 216.239.32.36:443 region1.analytics.google.com tcp
GB 142.250.178.4:443 www.google.com udp
GB 172.217.169.42:443 ajax.googleapis.com tcp
GB 172.217.169.42:443 ajax.googleapis.com udp
US 8.8.8.8:443 dns.google udp
GB 142.250.178.4:443 www.google.com udp
GB 172.217.16.229:443 tcp
GB 87.248.114.11:443 tcp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:443 dns.google udp
US 104.248.126.225:443 pcapp.store tcp
US 147.182.211.77:443 tcp
US 52.182.143.214:443 browser.pipe.aria.microsoft.com tcp
US 52.108.8.254:443 wac-ring.msedge.net tcp
FR 152.199.21.118:443 static-ecst.licdn.com tcp
US 8.8.8.8:443 dns.google udp
GB 142.250.178.4:443 www.google.com udp
US 104.248.126.225:443 pcapp.store tcp
NL 23.62.61.194:443 r.bing.com tcp
US 8.8.8.8:443 dns.google udp
GB 163.70.151.23:443 udp
GB 172.217.16.229:443 tcp
GB 142.250.200.3:443 udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:443 dns.google udp
GB 216.58.204.67:443 www.google.co.uk udp
GB 172.217.169.42:443 ajax.googleapis.com udp
GB 216.58.213.10:443 udp
GB 142.250.200.3:443 tcp
GB 142.250.178.4:443 www.google.com udp
GB 87.248.114.11:443 tcp
GB 216.58.204.67:443 www.google.co.uk udp
AT 81.19.159.21:443 www.download-and-play.com tcp
NL 185.26.182.111:443 net.geo.opera.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
GB 142.250.200.3:443 udp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 dct.wavebrowser.co udp
US 8.8.8.8:53 dct.wavebrowser.co udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 52.20.229.180:443 dct.wavebrowser.co tcp
US 8.8.8.8:443 dns.google udp
US 159.223.126.41:443 pcapp.store tcp
GB 216.58.204.67:443 www.google.co.uk udp
GB 216.58.204.67:443 www.google.co.uk tcp
GB 142.250.178.4:443 www.google.com udp
US 159.223.126.41:443 pcapp.store tcp
NL 23.62.61.129:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
NL 23.62.61.72:443 r.bing.com tcp
NL 23.62.61.72:443 r.bing.com tcp
NL 23.62.61.97:443 r.bing.com tcp
US 34.194.5.64:443 swupdater.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
GB 216.58.204.67:443 www.google.co.uk udp
US 18.239.208.124:443 d74queuslupub.cloudfront.net tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
GB 142.250.178.4:443 www.google.com udp
US 8.8.8.8:443 dns.google udp
GB 172.217.16.229:443 tcp
GB 172.217.16.229:443 tcp
GB 142.250.200.3:443 udp
GB 142.250.178.4:443 www.google.com udp
GB 87.248.114.12:443 tcp
GB 87.248.114.12:443 tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 d0f84c55517d34a91f12cccf1d3af583
SHA1 52bd01e6ab1037d31106f8bf6e2552617c201cea
SHA256 9a24c67c3ec89f5cf8810eba1fdefc7775044c71ed78a8eb51c8d2225ad1bc4c
SHA512 94764fe7f6d8c182beec398fa8c3a1948d706ab63121b8c9f933eef50172c506a1fd015172b7b6bac898ecbfd33e00a4a0758b1c8f2f4534794c39f076cd6171

\??\pipe\LOCAL\crashpad_4488_AVXNSBWNQFOBUVVY

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 ade01a8cdbbf61f66497f88012a684d1
SHA1 9ff2e8985d9a101a77c85b37c4ac9d4df2525a1f
SHA256 f49e20af78caf0d737f6dbcfc5cc32701a35eb092b3f0ab24cf339604cb049b5
SHA512 fa024bd58e63402b06503679a396b8b4b1bc67dc041d473785957f56f7d972317ec8560827c8008989d2754b90e23fc984a85ed7496f05cb4edc2d8000ae622b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c4f8df944f7583058f8a93e55fda0eb1
SHA1 f6e87123fa0fc107551d0a0b84f0e60178de22b0
SHA256 a24351bdac3a1e14af35139644e3f0c94db01b8181edf9f6bd88937bddb4a96c
SHA512 5c4197e95870e3ec5b58dd89a14d467399e81a5e65b097a8a641a75b35ed196fe2ad46dacb8321d6e6ec8b011bb47d29f35c7e41cae87851ff97e7a5a05d4c50

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 603d0c58eb960b61117c0821df1435c6
SHA1 36c3f76b8baf49d80b4451fb30631e5562088fd4
SHA256 b97c40ae9a8480cf1d79fe9a7a89a45a7ba2529b8f91542740e1daa2351a6e39
SHA512 2db6968eeadad00cff3e1a34cc2747c5377cee680220b77b53685a40837ee93328e86c5f36ba9698b2558f76db95e40f0b72e0d4079dfa65a2f9ab5e7f781c5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b337cdc98ad8389c0cb3eebdcd7333f2
SHA1 72d0ba129e5aeaec53dbd3965ad328484d03e247
SHA256 7c0be7fea4efd01929558c61c293bd353132aca0fa5d3d09cb93b01fdf45455b
SHA512 9809bc70f912efc0bf50a457148aec5a51e7514e6abeabdda5b022816bd2aa36ae8f1ef31325df3f5a1e735e9b55613e0dfc7567d8bdde9870e16106c5ed1634

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d81d27751d50f9045773ca6129ee5a89
SHA1 3d8a57c7f881a1beb61314ba5abaa7f19aaebeed
SHA256 7305d5517677e6d2ffe5db8c1e442c19631a40e118835b688934b3d33a711305
SHA512 749a163b69e4f1d06601fabfd5d2881192fc69e85d899e4b396c275c968a9bcf603c66c0f398969a76e344b31ee6b7d2dacead30bbf036dbbe1c4a96192eb0ab

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fe11502b4457ce20a1b92532e216d0f4
SHA1 15e3e2341de5cd697b5af78163377f47f27fd572
SHA256 4a50afe52ea1ac91fa89c8605d6b23d930dd477e76c3bad87c305f4991228524
SHA512 850e0ff5f9ff750e2e61372dd5eaf430763bddcc84cd08ff9a253dbadd7f918b82121becc6f9133ac46fc17bde1a326ec1e3915ed6a205ee739dbad302e0499f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579f7c.TMP

MD5 9ff23d1fc0b4c739956a1ef6b98017e4
SHA1 323f1b56fcd749aee3aa45cb5fce0f7c49ce403f
SHA256 b5ed6a69ed4bc6080f541137d4eb325595aa683f2eaef9658cd2fd41ae28b1ad
SHA512 6ff219813c782f13ab4f1efac3583a9fceb058420f92516a9dc60857e2d8ecb768119c1bdb0fb925359663d4c95808aafd72fac1a1463df25f4b97e90ab09fd5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 4f302dd902f58ac737834904be3a90ad
SHA1 cfc337adabe0df75c7e1a88d7e0afaf13d1e3a53
SHA256 5a213680388e6b167172e9d3606ed9a2aedb6043d662994b4fe58179c7acaa4e
SHA512 96580132d600877e20f7618531863cc9f47366692766436faa74ff8e276793a8b2e7111c21289bee42a48a472692d028f6d2fb0e8870a38bcb8fabc2eeb107fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 33994056c62bf2c3d4e8113a1fe32721
SHA1 bb6b09cadfbacbba35af44c6b2693eeb5a747764
SHA256 4014d8f090c7b67eb4de6dc7c9d67b940a9eaa72ef46cc0f95e88a6ae96f2378
SHA512 c96ea8392c95f13c4d9ba0651397fb89082b757143484a5d3cb9e1172fc43071f08ddc7f6ec212fb0aa96a491bc0be355e401fe97fcaf0dd33cedae80bd86914

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6d00dda4d3020b794f2b8a5da38355fd
SHA1 7461ac4d51cd603faa95029acb5c210be2cbb01e
SHA256 05b0dae93ebfbd9c22550fcac7346de75ee3fbc25f00f8745806fee240443253
SHA512 5c1818c1da7a9818c22086e2b3dfb9ef3345d83b5615c9a9421cd1e32b9ec1b87c0f9020a203f48dad4e11e6730caf9a54afade845f7da292839b7f7636bdc95

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 ba24f3a74eabc49f13b0157e853302ef
SHA1 051c7065bdf62e99eb9185bf7424ca2232693b1a
SHA256 6ff489da28d01acc4e04e75d001bb30c68f2f9d720efce16989122ec490258ac
SHA512 68fabc9b615f1c988b7f7c1847a4004c5dd667c8d5a739df3080fe860c3c16936c278fc9eea9da6f6b024b2844e8b5a451022704042634e053e2356fef32055d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d0c99ebf057347bf8df23ef1df235fd3
SHA1 7ffe4ff2b4e3f699f74af0a0d8daf885bc27a9e5
SHA256 cf668b1f2207ad4f39ac49882ac16163e9a02ba7d212aa19005d86eafa21e5d9
SHA512 669a7f0f6bc2e03e7bad61776fc2eabb6a56c515d62aec93dedb08207be15c222f763d84a5ea049a6a1a748827ac7923c0894988494621d126515abc729c260c

C:\Users\Admin\Downloads\Unconfirmed 143782.crdownload

MD5 87cbf3e8f93ee2211c57af6507451a39
SHA1 f5414260e610e0f4a02be7bebefe1604c6a31927
SHA256 da52aa7a93b8406440a9c6e9f2986a7cfcee3dd86962e8c94aee59da3bb8f7a9
SHA512 aaea86e3c9b40f36204a34dc00e4ab8bad51d16fac423ee98e35609a95eb8855fd9e256a119f367c4fd1c38b7cfbabdef268a8b85f52d523ce713cce5f86f5c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a9d1515e7cbd6853fc28fa63722dbdd2
SHA1 99a7701d5bbe5ffdabb710005b490c5e50f5e71d
SHA256 066a55fd579f53fd6ef79c148022c67edbde9222de7c84f93ab6fd4b8f19c487
SHA512 c8fd4e7d7f7ab3ecfe55913650494085a10150daffcb6cfd6e29ac629aa33a01978af9afed9725b8f8d060bcfd1cf358d40da880c1603a1629c7183ae4667618

C:\Users\Admin\Downloads\Setup (1).exe:Zone.Identifier

MD5 808334d033412d43792cddf998caa22d
SHA1 e7f3926b94adf04ea33da33247643a2fb480ec3c
SHA256 2d64c228dbd1b821db261fa9d650322b2f3b97b6019bf631a1730b9b23b0cee3
SHA512 cc311ec62870668c4fbcd32cde05597d214d137c1fd9514083cdb890d0af831eb1cc18597ad3ad275a15f9aaa42052acf3cfc829e2f0020c492bebc35f5f78c9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 457a61aa3d41c3829588eff41b8f8596
SHA1 2c084bb70cba031562ac9cdf07bf176de150d482
SHA256 b860e108fb2773da72d0e2e732101c9103646a4e5f6b118a3d4761a29e11f777
SHA512 5ebb81f3eff56e5a7ad1452f509e6c486d04b5d5bebc04b8bd36a526150e5b94f03b13f468229176a3cf01407eed5c916f05e11d6e00be94f69fe38d5f64d660

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

MD5 c49153fbd613699caf2c52172413d6fe
SHA1 8f8da53edfe84cd7f041d30dced27967b4bc59d6
SHA256 62ccac6f2792c778235689beccbcb032f8b1d1bcf9d0653e76d67c347ff13b68
SHA512 cc447ef118778ecc81f678643466813813aa93cbd3230e2a0851828f7c2bc1bed6307bb3460be19ca376cf63b4ae85ace7a64938f3d4971dc01edd9f496b6dc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

MD5 58749eab5f4db063c47640b36e2f8ad5
SHA1 80a02a80d0d457b44ff65f557e0fc7bec4c8a0e9
SHA256 59c0f43512346b478001ff87e5a78f6bfddcc33ec9f24517b235ff3a1c9739d6
SHA512 62c7c03c7df61e1f8867a2049b89e8486d6d7abe415079a1dedac38328efd8a869643f1b66cf1f867c9ed459b40f6dfed1cd338599a51e82d8ee1591a078678d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 895f2db556038719ed87450ad201052d
SHA1 fcb24c00a264815de96eb710fd5f49fb4f2ae533
SHA256 7753d7ae9dd8b1267e0d34909cfd16627d01f99cb3ff00dceb33a5b83d9ca446
SHA512 b3f00753e5317f8edf85a4344e4b6d553791f325c7ecd9e8270cc3eb1ded69e9854f2c398c82f57b5cdafbe7529907bef58fbff1d0429e58712f9fb1afea0597

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

MD5 361e67c346b9421ab3d0454ef507aaed
SHA1 0fba1919e937eed391166246c0d03b465fd1b556
SHA256 953a909b5434940b74d6cec7ef0372521ca2e1a9587f4ac07852205044639326
SHA512 4b387c72e07c3b6d9bcec328a3cd0ab431a630a2209c9c45b00f8642e2fbfd7194299fb1cd4aa8b4b0e9cf57ca26074b840dab602f59395b9647456929662cb6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 c049055501c419b4ed6a1e3c2d6f5d52
SHA1 51eebf39bb619aafd25539010fc28c13fdb03b30
SHA256 70bf4d113dcd67997f8ecd98be41166f86fc921516d2c0ffba57b43a9a1618b1
SHA512 05d6c2ffd1e31174288e0ab1183eadab0442727aa0d2dbc915925193be154237a0894de690c033886ee97d84e8a8c60ef5721b29c8eb1ee94b50da3045236431

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 bf65b3775e01b4c4d452c5a7cf477749
SHA1 8e25897bbaadbdb87c6d68be164b940711d6cefb
SHA256 1183ffaa8a85ccbc03b76bdd8a153c15db30597803fecb83112595130475a330
SHA512 af35bbb554f35f95171318e8dfbd57b1bd4e2510b2b37abd40e16af6a4115a97cda74fdc2de61b6c3a04f800585ece20930aa9d67819e57b8a1259a9199744e2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3a30c140037736d09a720843c6bda5b0
SHA1 0d435fcec66a6f1b18df3a873f7726d13b8b9a49
SHA256 fe5a05f3978cfc973f74ccbeed0188d8d7f25c70ef9ac67a923d997b2cd49efa
SHA512 fb16a903d128de92be6f75ce06b7064c04983f2c77698e215ad04f4d5765e476d3c139d99ead6cfa25ffa3fdc23fb94a0009d4a79b2dffcf77af25e9f20fa31d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 52a03243845078922cc7c569ca90947f
SHA1 3ea3a42286c90fa643aad9e5ff14b046c6e69430
SHA256 d0a2b7a9b12b929d80fec924e0df27710b8062de7c32d28fb1a1fe8a27b7093f
SHA512 03c4527e83ffb8a6cb3f067ff924d5555aff110555c7060cebaeaa9342f1ca014c212a09f0fa7e67c21182b1ef6febaea13a1906a2ca766855a22b1be323cba6

C:\Users\Admin\Downloads\Unconfirmed 518948.crdownload

MD5 a69d796ab71f88742ebc5317ff46015a
SHA1 e0161537372941371751cfc3defe9041b03251c1
SHA256 204259fc2caf158eb9bfae76aa4204dde93a18643f5cbb578d8f93260f11593d
SHA512 c948df9b292b6e4340e1329bdc467fb8ba9d4d8d08256d761efcd451d50c9432dc08ad4fa030f6a65d4abb7ab7ecf266b93421e16e14c655391a13e6c88745d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 20a661f7247b53c2cdccfe9686be8cc8
SHA1 884d94697360bd43069756f186475423572120e4
SHA256 4b9340c3f70b41651f9746c61f82159629c3d1d10c741c5061022ef0d31de6da
SHA512 c74488671a5e8f358c4f41c2db53b79060caabb351dc04678002e1eaad74b417e3154560dff42cc3f188f7f3bc6a5e4cdfbc8f4d362e2b471ad3ce4af5c93424

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

MD5 9441332e3873c9953e8c8eb6e49b8e9d
SHA1 11dfe8d14bdfdb33812059d863c5fcd8ed9139f3
SHA256 c64908c6d733fd775ef5449d76c90c5e9d67e29a63cae6cb5778a97e1c4bf3ac
SHA512 f0031d68d9a21ccc635c428561b399207807b8d500489cf482cb932b1b4db93d3e93c632db87dfabaed02adf425a93bc27d7ba90845820b46fdb9d9fb9d299dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

MD5 af2854ba8c3c90a6559ec9240f07014a
SHA1 35855956cce13396918a41f3ff85e27864cbb8bc
SHA256 0ad9bca7284f78b93368df4f82f9cf7bfba333f49f2ee4f1d1098c6f4d8eb043
SHA512 8d54a9eb379fb4b4f44f8d71c7498d0ab788578f6b49d8dd0f797efe171877bdc54f1ab2faed6ce931629b673b332667416586c6707ca019da57b3f6576ed3ca

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

MD5 ba1bc252528a94df68abc4158c30a342
SHA1 fdafa2adda170ab9a2473aa741f5ed31a6f256f8
SHA256 fd8f7fd869509c751b5e841163cd4ff6dcd42d3fc5d884731f33d30ac647a1e4
SHA512 9c0c9b8322343f22f21a42426713c6a8f9a3f63f9bd9362eeca1d30fc4a4d911f828c480ab9b08f45d3c72565209356b1d916c2d8ca9ba6784651b37ccd32583

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 3974fa105d64eb833d8b38c8dfd82332
SHA1 c021bd6b4063a558d39468e342e5d6df852bb75c
SHA256 b1c910c247f8ac50116fd28cdbf5fc3ca100b22f88994382bbd1c647eee185df
SHA512 899f3b9bb215ba26ecb99cd07241e8febbeabe4fbcfb5a25d57cca60d306ba99c0075e3ff741d0670f2d2baa4ff62eb0be31153ec69350277b862afe0459f53a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 37f372bee6740d2f4a05c87e3073dea5
SHA1 2c7b7f48c391cb8164a492a01fdcbbb64d58bbea
SHA256 c75ff9e2d1dcaff503e335a46c134c28ddbcb11045ed276d4e32193c352ddf94
SHA512 aca7af845a5f2a1f1bbc9f86fbf7ec6fc6fd2db4d1c0cbec07cc315bcf1ae922838c210168aee5faa90dfcfd67eb570443c5319da8085d623b73c3c61ad8b416

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 a7f4698ccd2bb2729db26eafe0ce766c
SHA1 eb01c02e7277f8e643c159bd7b5f56890cfc785f
SHA256 82c48cf6b87763783f64f46528be1f021b477d92800be9e5f1086a93cc4547b2
SHA512 34136d427c2c15848500cb470cd905d9816ead49e8da598dc22b2ed6942ad8d1315ee5afbc7f99744bc87d19150b3c654dc2d359d05078f21a3c3fe1c8535532

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 1729fc6a7e7e74d797285c0af04af6fc
SHA1 e016ea43912e11d7ffcd7edc90215c2b4b80b7c6
SHA256 193d02f3875b715994ec7b11ff5608ce1cd91bfdc9fd84e60ab42634a6ffcfcc
SHA512 3b36f0ed5448c4e8a9d493c0602fd7686fe6b7cd7e3aede97adbaf29a4cb52a0d80cd87bdfe19372bc22bcaf55bcbf4999f4d0726986945d720abd6539ea8861

C:\Users\Admin\Downloads\Unconfirmed 831317.crdownload

MD5 5afcb5dcc99b3d7bed0e2d479a271409
SHA1 fb1f25635a260c17648d7481c5a329477e48efcb
SHA256 a0785881a144a7e23f3f62e6703617153cae11904897713695457cfdf513cb75
SHA512 e43272d05dfd0afbc0741dff646353e5eea67a6b19cd2d801b6f29ea2010c1a6f6e34dff51f5b815a4fcd9d03ffb27bfb262cc2bf25c6b3050ef4478f5e9aa81

C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier

MD5 d38e66e2b229c3d9cec36a4fa837bb77
SHA1 a6d02df56342c0bdb60731eafe6b080cdd1d08b0
SHA256 770d3cef7eac5dc3edfae6cc98861df7d7a6cacaad394d363ef9dadb869b2800
SHA512 b73c706c6385c5d562262a02625bcc02721c7f8fe8165c817a796348d9eb0d4aab88b84bcef7c6dc71089ff6376d8a22bbc49733bc77c12fe2cfa71a395ff12a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 01910d3a1c35d458ab5240a3f382e49c
SHA1 9749b953cf8c4ff08249d3a3a4452a4e86674572
SHA256 20fc6e1c7e822c737a4c181e97938475ca9b36527778d9da406c4e5aebb69721
SHA512 e8226854df2fda440e60033d92e540d6d6f1ca4aec0cd7a0677e3c33fc5e9c9c91db61e9fb8f33db5e64cc77e22412c5e5eb0985977f82edddfffac4e21a69ff

C:\Users\Admin\Downloads\extra-ram_softradar-com.exe:Zone.Identifier

MD5 c4538f66048844448da4c35ed70bec13
SHA1 509174a3b8c000c735fbc8e1f5740c4c413ccd5b
SHA256 9536f38f4fed91ec7fd801d188b9e7cd42e964016d67bed316e5f1eae717ad13
SHA512 f7cb05ee1388df8f2113e92711c3bb5de7943356bf5f71b6c0855d6976b3fc139584f02235e2191be94f70879a41467d06b045d4580784e7b7e96150b227f27e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 d2d55f8057f8b03c94a81f3839b348b9
SHA1 37c399584539734ff679e3c66309498c8b2dd4d9
SHA256 6e273f3491917d37f4dbb6c3f4d3f862cada25c20a36b245ea7c6bd860fb400c
SHA512 7bcdbb9e8d005a532ec12485a9c4b777ddec4aee66333757cdae3f84811099a574e719d45eb4487072d0162fa4654349dd73705a8d1913834535b1a3e2247dc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 c912655c8d691e1a190dbec03d14e653
SHA1 a90a6ea007e121441a0d9c48ea4073a635085f6b
SHA256 35e5f055ba3fc9eb6c89884d533f5484fcb335d0e226145d7ea7a6a1e2da6fae
SHA512 c606bf2711a2be266c69a702d60bbc0d66dc6655c88dd669932f9c3954941a44d6a09e25bf60272ba5e0ba09ee65f4a3d8bd33a215ed2eb76ed601f06fa984d2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 74e33b4b54f4d1f3da06ab47c5936a13
SHA1 6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c
SHA256 535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287
SHA512 79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 5ab2d1f8cd709d40a8ea424bb51be98e
SHA1 5423cdf5c8eb1f57c0c330617cf2277b1283b6b4
SHA256 bfda89ab36691c4c6e8e8db2ee2b4bdccdb4d624410d97889f82c31d176facea
SHA512 912b41117f1603d903848822ad61bea5f9561c95049c1c689cb36be40f2cb58f7cc92fae4fd8b47297a127e816c657afa7bbbb3c087c21d80d9bc31639237dc3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5375dcde49674dd206fca29cb7ff947d
SHA1 fa287e295e97cd2ffbc41e0308e68e3747eadac0
SHA256 ba1d366fb3f01bbd584a98ceb11333e2da3e988d5dc26b7b1ce39f4d11d81ceb
SHA512 482921cf9198fc9c6d3dd3b9c7994720e95de89b16f3472945411f53dbf42e440bcd29fdf2f1b34f07b934fa29a0145598d39ca2216949fec5cdd37c75e70568

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c984ba46023278c5c0575511b9723a8e
SHA1 d73deb5cbd0bbbe0265fb99dc047ad2a79d51d3e
SHA256 597888a09be86af1e07d4e71c8b9a3ed2501fcbb92928f76b80e3843298d5a84
SHA512 e66edcabc60ae695a716f487f7528d179b2967732c63e1dbe79593261eda1ff2aec5cd33d231cca5e71a660fbc4364bd7fcda43f38512dd31e059eec0e55823f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 58c497220dc7e186655a99763676f26f
SHA1 95821b9b3595048f2ee6519eeb8267e9c39ec959
SHA256 4ca8a5d4133e870454a930a4c39ceb97199fc363791c9d28fc30361df7084778
SHA512 731d178184191cf76df59187f5baaf723d89220d7e605bb58c3addb6ad1de11d6cad58595a17b6e8e9c7fa38098cfe7f99f8f50bdcd796f827636df0c6851db0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5433ff1e67b8ca89594fca06bf8ab115
SHA1 d2e7df7cce29ea9e4ed0aa3205a7ca363d68ea4c
SHA256 9a8c0ed5fc68a58c7333e23bd3d9cee03255b77c7d95ff2f1c01979ae528c87b
SHA512 f8dbfcde9cdb352704254153f2de7a337c37c33243a874317220f69a5342d578ec4e41c6daadc224b89f69937021f10b56dbcd3d1c57991afc69b346dc325102

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 be33efca1498ede0a9ea5e841bf3aa43
SHA1 85074f8d0b7c4df81bef9c1fb6ad71fb2273083b
SHA256 1474a1af888dc2e49b9168c5e3abee84b57364f63786be17de2c028dc5bfd38c
SHA512 f21f910baece595823f80470f2aadbc69daf66412350caace7d47333dfbc66a80028db8419a5673c80ba6a777f3ecdd54d818755f5dfae0ee3988423ea977896

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b1b6a783963c7d8c17cb0c4f7de1a0a8
SHA1 ce0cd7630ef9358aaf71861f2f7260ea9c240b23
SHA256 607c0ed569316094b123af35f4209cb29a79c23294713cbc317d575bf025a28c
SHA512 919c6d6f1cb41aa039fbd547fb08a8dca448775c7bc0e3eef7929241b724ea6b1eba7d8ad6432b25a905000bdd9c89bb635054af696d2a2c1248750184691e94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 2529a0df0ed5c02b4248887695c6ab51
SHA1 d0ab91420a32d88e0980ca02e18efbf5b01a6d72
SHA256 0bc0c607069365fa3d4bfe0d9b9716caea5aa59e11d1ed0e75307c61876a94c5
SHA512 648c0b2034483c1fee595c108139582e1c5891009bfa532a85d045f8a131ac83a006bc3c3b9a08e37bd4912c390248d10739f904fb712f725cc4ed9e210073a0

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 715d1045689c92d2e539c351a1d9545f
SHA1 498d883a615d81ba0e962dd64d055bd640c26c59
SHA256 e48e09dab5ca611854758302acaab00a4271ba43e12a50e51149c5611cbfea91
SHA512 547466d8ecfdd2f9aada0021b169f2e8f99dd7c2cba784f03f399557d3960e2d26447c58f78d4caeee8b139fd20dc056408ced409045cfdbd182573943832560

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000050

MD5 8c913c16fe5bf240c09c7480025e61e2
SHA1 578c55e11d122f4c27bf4ecaa31130c919e2c64b
SHA256 e00ebd03759eca93392ed5bcfe8863ad5048b4de9146687a4f8bbb87bcc52ecb
SHA512 8f49995b0f566bc6ac567757d04983c81fcae459ada02faf6cfd47385d880cab8d3505c0a91831672590147ac6a10bef4aff10a35fb359f945e785e9fc4b0e92

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

MD5 cb68569c733a7572136e0c21ae59baa3
SHA1 e6a80afb49bb7d0673259747b3f3829badcaa18c
SHA256 dfc55541b0c31631571ccf8a16b71dd84d6743b01956a93718a46349a95e0f80
SHA512 bda24e319bbed03c1c40580731966b75facaae194ee2c789323c78a55234d8c501c112cbc8431b65527829cc8f49b19cb0932b655becc856645248eab5ec15a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

MD5 ac1e41e7105986d26bd22c7a3dea83e1
SHA1 c3ccf2bcca458f49a6d49033ec89c34ebcc03679
SHA256 ebb4e4f1a7912cc620a2c1c8151c27cfc7f43870d3a6eb82078147d79a9bede3
SHA512 a6cc080ac0b9e719662b975d4d644563c655fc896bfa85cc94456f2d3117d3eab54423a5f06d6b5e180a9ff792e879860afb7ab5f2e7f682407acccb6c21609f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000052

MD5 e0eff30579598f76147c9ea12f490d21
SHA1 f0bf2ef576db440b275bdae3d6abac35e59a33b2
SHA256 e70a34c5f232fa80328a361630a994cf847c54deb926f13d40be4807291b657b
SHA512 b7d9d5621303aab81b75a8534e9ced3fe0d0ecb100e045fed234219459ae94b530abd9d4c971a1ae842ceeec9ba7a821c5e6775c45142b47dc4b0196901e734d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3cc0d76ff87413b17d5d3ba0f8d062ae
SHA1 9790663b984919d572b4c10eb730eaba28cfd41a
SHA256 e020f0d27d361e7a9b8dc7df87594e7518657f4d060007151d6a4896f02fd2ca
SHA512 b3b477ec5a7e1a72803d3b2c6bbd647409182a2bd5fb3cec6ec293df5907ae96f1f8844f05879d20e10ecfcdcdc3b921c9699e6bcbaf3604d75fe19c7c4c4c9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3d203fa5dfce4605cbd29e53e5664bbe
SHA1 46cda314591df05e6c37356fcbc73cf9afbb884a
SHA256 e6a2ca3672bc00aba59183b4bd08b7ae0433bfa225fd7da4fc9ab93480431990
SHA512 7bb27a9f1e723bc3599a88f6cfb7a87e211214fbedf1ccf2c813bd1f3d45f8323436146855ff3dca713a51c6a52e1b8f56658e67223b8b3b5f5f33defcc271e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 fd59c8cd2445fc7a205fded082254a8e
SHA1 0101d6b89fc2bae096f7cbbf95d615128e512ef2
SHA256 9108e351de38c0e0cff57628601ca4ea9316b624a79480870bde6d132c4018dc
SHA512 39a8c58a8ea2ec0c7c232deb8f2e3d9b95fdd58914d84ec2fa5d348e8c5b01daa5affef649de10e4fd8ce6e77c8691bd847fec3f40874ffcb64fa80d9915cfb8

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 eaa2c2eec6c6c3e2f861ce0e1bb85852
SHA1 e1c5186c1fded577fce57d4741407dcde12dfbdd
SHA256 87c260876df76456740d8ee9f6680818ece7d0ce0c98d013505e922873833819
SHA512 590ebc3438ee05d7fd800d535f54179315d5fc1ff5844c17a0ff9c64c2997e45f4303dc59f5926ae3b10917b7470c8e3b5c41810f23413768c6850f70bc6d4bb

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 c4d209ce7ffd767951218f8fc676a508
SHA1 817128b2b0efbfff2d7eb9325b66febd919cf718
SHA256 2b306213c9c88a3e185f157d1260d8b924d1177e408cbe72c877491229c4d495
SHA512 c7041a1cda37ee6b07ee64a098e3c1b9fe452b1f444fbea877168eb6d0d9feb7bccc6e9730d4527dc29afed5426bf43fc861b6e753bb622b681517b0cc2553ab

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 b24a56d3c5fc2a95e60dabf205f86837
SHA1 952a99b851ded3b1a827107ba1094006d2c318fd
SHA256 6d84ae09c089bf7f033fb737214ea4de26ab43540d81f020613024584a81156c
SHA512 f3024404be89510270aa25c74f886d3e63f1842974af1baa74a2c4c39a32194cb2f6c1e506f94e871883eddc010dbcc7a0bdcfaa74f8fd9c71584c7ec4b20737

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d97f9542448232cfbee2663e88adfc97
SHA1 cb95206a48c891e30e5d1c085c59dcaf77ed20c6
SHA256 1ce9289b8c6bc24bb0971a59f05154080e66d17fe152d7a8d22b66ca82afaf0b
SHA512 d2c0ce79c4670e7b464b51b4e5c8f60020870e24abb1e4871bf9fdee3f31da32bf40b4c43b046921ffa6541d1b2663237ee74c45a00844330c022e2e17b8896c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0dab2f3589fa37029a84a58e73baaf0d
SHA1 e849e1b7385484dae32fd1d6d4daaed5433e9b86
SHA256 0d8d83ec28e88f4767325da51f553714987b842b6808620dba24c09b3920c95e
SHA512 fc58793c44eb4ef43407cf8b5ce507745d83674e6f1b6e453bc3fc7f72b3bdd7dfa08b048b34fa6ed7cdfdfcc0d35a744c8e21829085567e4e49346cc7fa8e86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 cfcf5314085c910af4c3ffa57d0b4015
SHA1 6a13275c17d12bb9ad82264f676d9fbf0c7c8964
SHA256 0bbc5bacbb7e67cc7c9ef4a90b0eb99de3f39d411be05792b8e634f4e42148ea
SHA512 0d77621f87a65d8c0a50a2a8edf9ff9d5c9922b2ab65088df031e443b59707b428ede3b419feb6f43cc893a9f452d5c87d4a53b6fe7721facd480cd53025a3a2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 534d916c38a5b2606e1422a5bfd5816a
SHA1 0c03947becca6fdd20d0cd37a5940bab67440175
SHA256 2eaa39d836a9468a9e606553cc5b92a0d72fddc1771a9c979743ac24b598d165
SHA512 186df630955687738aac5435669bc467a45b52f7fc319db911109978148c8f8e53a0ffc35d3fd6827b3d2d0fb429921939e07b2647fd48cb33fc0ecdf05cdb5e

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 5f55f497ab3308ac55d389fbffcb9f44
SHA1 d3d3397248ab301984e8f9ba1df6de8d84b762bb
SHA256 0d1f2a0b514a0b5e6fa13041dc4c4467a946cec49eab6508b7bf35583abab66b
SHA512 0c6ed021b9a39d93097edbada377ca4f38917b66ab0310bac359939d91466af692d7e34ae927e515bb023f100c3de3a5c5c05f3c2cc3071643cd7555135e9bb8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 49ef3455c9dc429b46fff649dc9e2c4f
SHA1 92be24324154ff8e7ce9e83d291583451fca7723
SHA256 c25c1f7a8e3e277a98b4d837c80e7b7ccdd04134ad6199421c1610792996287d
SHA512 c496c5f9e8562c2de09dd383f5612f78c62e67a0fca461c3df0668d4a0643568d598a73630cf19f80ff1886224d488ef9c1a8f1bfd6370c352aa655e563db678

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9689295a0c2c930470db64c7fb1c5cc7
SHA1 b15400a161d7eaf847742be30090ab748f775513
SHA256 1dd08f22e1713a090368b0b16bf36f25b7b97710956b9096ac00344caccfae7b
SHA512 845acc03384f10d78961f72696929cabe315c2360ad8ef994c588b25e9681ae4fbd45eca40e8c3382c04fc253d813c413fdc2cbdf0d1fdaac59bd2baec3a1bed

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e980f449ac4ebaf45826b6fb6ce92ef7
SHA1 d6717e478b2f949f0b8ffc8bcfd7eb57ff6ab83c
SHA256 1b7454ee093c7dc079b08fdf914e5626d567ded3392be6c004948fcc2f538c73
SHA512 323f62ab420a47437fcacd8132f6154b48e26a8cbc028457e61717ea92437822045b42a3c9aa60d8e0d7b25f4518aec19cdf7ddd155d7b543bc540ae9f74cf3b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

MD5 cf989be758e8dab43e0a5bc0798c71e0
SHA1 97537516ffd3621ffdd0219ede2a0771a9d1e01d
SHA256 beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615
SHA512 f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 bbc7e5859c0d0757b3b1b15e1b11929d
SHA1 59df2c56b3c79ac1de9b400ddf3c5a693fa76c2d
SHA256 851c67fbabfda5b3151a6f73f283f7f0634cd1163719135a8de25c0518234fc2
SHA512 f1fecb77f4cdfe7165cc1f2da042048fd94033ca4e648e50ebc4171c806c3c174666bb321c6dda53f2f175dc310ad2459e8f01778acaee6e7c7606497c0a1dea

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0634077986e99317311df1b5d412a031
SHA1 28ec4b2fb04391b1cc24ed8152de93c944561a02
SHA256 d7494fb9c32e3fbbfc3ff45393992faf724121f567053ff4df7a64cbdb02a6f9
SHA512 b6a0ea074ddfd133e215a53767a01309ee478e2d96ae414a97bc3e90601b37a257907d5513f5ce394b0fffa98bf0f4c85ba9bcebceeda2dc9f93af5a78c1fef4

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 40126028ad695a054ee6ae7f667acbfc
SHA1 aee4ba7ab8d4e6cae50dcdb1b2a23fe507fade5b
SHA256 c5bb182ed4aa73a6430d2e31c5cb26b44f9e27c04e827e9ae593aab8add3c564
SHA512 b7e15a1bcdb22052cef50c89e19c4250b54f9ce68e0f949b7710ea7c4572221f41ad13be2d0c76756f416ee58cce595ba2aa47ebb912a27abf3ffba6b1e6065d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1d4be312ecfb3352cf7d88d92f2bf288
SHA1 4a21fe1d45e468e5abbd0905cfda06cf4f6e5f4f
SHA256 90416518cb291bb81cbc348c0c985d8912d1aacbfaed21ae4fa511824ebdf9e4
SHA512 7ce372a6661d26072af3bc07b1d0adfa6367ff4a048b02939453a961383779293e5091b7912069b58d00a9ffd3250828b769d388df5a59b637a3bb71e8bfb14f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a061db512ac38ed0_0

MD5 347bc9a9337f7252b8451b1dbf740384
SHA1 41135e6fe970d70dc7f3c0bc9db742f4f9378b90
SHA256 37675c59044ddf34566ee8a9f734e57c9bfdf280e973a99708be2fb66f185f0c
SHA512 efac90558e9efec48a0f6a1c27e5eb352dbad497e57c75c85b0d1c605c96e493988d625547bbd9e25fe3e18a7cbeffdc6a405c6f5801bd9140af235175f8047a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2fbb709093abd0a3e02f28969a517c85
SHA1 551f5b1499b82a23d9af540588e0c1050b4da349
SHA256 7c38bee5e976989d52002fb354c25b804d7ec177b833cedd4c2b26516dbc7df7
SHA512 cb8a73aca403b58ea7881c085b9067658b9b8fa2d23029801e44b97922d86a879046aa1e2625ce17301eb7d23926e311a18e3f7467ba900c38299a313781108d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 89de024f838464da98e6a47058ff9881
SHA1 ced6fe102397249be916b4bd29282eb224c8bc9c
SHA256 39948f97627b367456f942c24a3e9f88143f298d8ebea39374b2a47c7426b425
SHA512 ff1f849e496d3ce0cfb1beaa18fee2976669ddb19cda023a16b5cb12b53db05947b4e8f7a4b10b04deee6477bbb8da3ff056327d6ac7d7f35f62e782715ec612

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b9

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 48f976384c64976492891439e168f0f4
SHA1 8a22c4e97f51510e1c77cf6a1af367f01389780a
SHA256 5570c31b6158f79fbbfd9b94dd4191ce9d62159f868ca44e14d3aeca0084bf86
SHA512 9e158080bcb0cc8ac26eaf2387b95bf9e7f9497535b4deea8f45c40624da472f7df822ae97653a28094628febc837a6b7c6f7788efcc243c02d8a2c15fd212c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d9b0aa412a2efd105d5ebbffeb0e8f87
SHA1 a44954a6b5e7c9e1f7a4158e32214c5603a62619
SHA256 1d94dcfaf3f330f4dc63c8d6bcee2d988d29b3c7e4531244b89bed123bf1605c
SHA512 6a88982badfad810a45897c7f2b47e53bfbef5e47c5f54b82ca82d66b63943e5a4b2555808163773f44e095e14ad352f73219aaf068077d4eac10c3610d642b5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ff7bdfa37bc23e223f9a5930fb4ec134
SHA1 592cf3d31fdaecf411d1b7abb42693e7865a5cf6
SHA256 9bee0d2174952f922219b8b4426f02824fd834878a7d2c5a52c682870f440ada
SHA512 ca1841667f1156e9e89cc79e8a23221bb7c07a9539eeafeb19c82584dd48ff8c6fecd1359683693c84c8e59f495a8b394ee2cb2a942aa1176e4fd1873afcc2f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 278af4e314590617a801c7d488a5c10c
SHA1 d19135fe0064717df5b52ca31893b68640c6a274
SHA256 6f423a6b3521068d88c6eefba9b121a73460779e6cf1f8a5e2cb0fdc8b1a0830
SHA512 a6ee378efb0af4d4a61fa12161c22f6c6260099dec73b3a4e0b7e2d632da1a59c7b29135b0d30fe96915d3c2a3e9501a9a0c318716c32ad30a952f91c1d3a97e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 fb04e784ae15dca9e74410d48751ac82
SHA1 ccfdf4ca939865a4d11384f244b9bc10e42baaa0
SHA256 85b2c0a56a8242d8c65d0178eeac3850e95ba3131a4faea953cf555eec78e717
SHA512 76538fe05107811babf3672a31de6ec91474ebb84e0c903cae434146317ab6b792616b4efc7d9a1f3818c1a525767f2b291aae5a9b38f025ebd3f95901e3a8fd

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 9210e35ae41f4e0b2d89dade512e9ea7
SHA1 1132f48c1f5dd12155fdf15b2659e93e4388105b
SHA256 028a630928d819513dbedddde14e2aac433341bbbe7601ed6932f76f7ea81bd0
SHA512 75a00a6b7f7286ed891b532272423f692eb7b5fee3fa675197cde96b02bb4e1dcc369332fe8ecf81f015cedfdcdadb736eea150658fdd6d5e018ee013c1846c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 4c29d7765cb9114a5e17db00975b0d32
SHA1 b25bb41ccdee13d09e1ff3e2fba0572aec113a01
SHA256 b24505049e1bca0adae40325ee99618c7c8d269dff6337cff29b04850b98894a
SHA512 6b12c76085ba584846c73d993d439b6b4565e2dca3e5b2c639349be9eabbc43fbd834e85fb2649f46768ac7e97a09e6f8b3a18ca477a84d832a591c6b995d7bb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 0d42e6cbc17b8558bedd1e4170dedd44
SHA1 1b7b3fa185945c7161dfc1f1488a1a0893b6fdb8
SHA256 1fe03adebe0560c82ba183ce2f174a3347f9f07c7cc6d270c4f6e3f6803e546e
SHA512 ea2e9d6e8c08e64d19c5384b16af1069f2e21e53c2c84601224694007413277f3fe0c484a3fe52b375ccfc2a8081b04b564d02ebfc17b30d47c28273d61395af

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

MD5 865f5074901f21f0a75b3327e80e4b60
SHA1 9847e161a7c4c3740a31f52b66da109c17e29c7d
SHA256 dad28449070104fd238e6a3337fcafe25c50548616db759b29a163dd90983d26
SHA512 f3d5b1aa5bb76addca628317c8282039211eb5c422a7b1f1124239b499178194a899f8cee93e0870beb4879fa4c48c62866bac837ecb250d44c930a5ff42160f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 889690680026896f54791d4aac12e729
SHA1 bbfaa3b5b6c4caa16ac23270628f07ea91c91a30
SHA256 5adfa478b0d40a5cf6d8d3ba93aa03e0c7a6edf861582656c732637d384aa21b
SHA512 9fe6fc522d677c6bd44c2566e87235237ec1a14e6735595790e660a0c037ac5410fdef9aee2acc5fa822a2ae8640adc53f011efd4c13f4762f6a04d2558304d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d9

MD5 f5391600d8dc690878e7903f753095cb
SHA1 42eff414e5de7f185ccb8da2d8eaf2f60beafcaa
SHA256 eeb564d8056d2debc312d0a102652acc177ef188db8c1ec847d1e4884279bb48
SHA512 9180ca99266dfd79b41cfc333113dd8c6cf4d75e209c784037ec54ec8beb66a3f8cb39e38e9d7d8907108ea1162a643ef8c2f829cf0244939278138c1939a0cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 331efcbfa1b88b62d283cdb42b2bd99f
SHA1 7b3b622bf4c0c9b695073393c15a789d5fc4a6ff
SHA256 87ccea1b65d4a690137baab4660629c2fb8777da0ff84f0a014673028ebdfcfe
SHA512 6fdf3c4a5be08625dacf7bfa540072d464c115233cc8fcfbf889d49d625df34b3486c1ff9f8cc2954f9e32c911afb1126116a96dc6931ef57a4e57a20a07785a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9fa5f9b30d53f4aab74d0ba48465c766
SHA1 e5fc939d0aa16b15337e9e97ef1e5996979370fb
SHA256 b7b37d715018b6de11ce53799739496d2207f4679137f55fe5ff719a78bdd210
SHA512 313c994393440a637cd574afedbd7cad626842aa6dea95c259f981b8930f5d540724d2aa15642e58ce75043aef5e7d6307921aef018e34b8b53d11de3f542be9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 f2952eccc051eee006c2635004e91904
SHA1 3660f94c1f15f66b7a7dd4f942076dfa06b99e00
SHA256 2a361f1c9717ff7bb3a881423b817fe896c2762372ae05a86ca037187860221d
SHA512 376306b9e82449eec12f333b1fa97bb154745277d5e56326317a0876e076f5b98915566471dd68f0185ba93d523790411b7168316515904be3d6d397aa81e614

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ad212c28c819f64702028ffa10fc4361
SHA1 70ec6d8d4e221d251d09d4533aeace0a61d7a9ff
SHA256 cd030446625510f1e05725b118d70e93683f5e441d5da8c145409436f7d0c13b
SHA512 f4b5e2d050635ad57a25f28b041ba9e58cdd87b6004e8b6386e6c7914eaedc87334ed0497a405f7f1eab54777e3956f451f04fa788eeca305f48733a643619ec

C:\Users\Admin\Downloads\Unconfirmed 277505.crdownload:SmartScreen

MD5 4047530ecbc0170039e76fe1657bdb01
SHA1 32db7d5e662ebccdd1d71de285f907e3a1c68ac5
SHA256 82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750
SHA512 8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 76f1b43e9037abe97d10ff4883501888
SHA1 ecea820c1ad51cebc43f9773f30306245046c98b
SHA256 10858064f4793520af0069d514a48ecf33d9663b4c70823613b14fdf67151135
SHA512 090b76853bc7ad24bef1c81bededa8157e2659b8ee56081fb62ada071289e1962fedf2af349e1aa6d00716dd34715a8e4669762eb78a76f01836bc0eaac98399

memory/2236-2696-0x0000000000400000-0x0000000000414000-memory.dmp

C:\Program Files (x86)\Extra RAM\ExtraRAM.exe

MD5 296bb95222cadfcf5c032d78d3f52736
SHA1 2e38782335d4f349383933cab90fa9656d6e3fb0
SHA256 d9390e7590630c349cb7c0ec4b5ba8b459d646c3c820d9047ab171f6a77272d5
SHA512 ccc393b09f94c1ad01357bcd441b0132602de956bc0a16d646f6bb7b24b0d2c243fa392e6ae5f3483eb546ed07af1c42529623837058ca2eebffa36707fc3754

memory/4580-2729-0x0000000000400000-0x00000000004BA000-memory.dmp

memory/2236-2730-0x0000000000400000-0x0000000000414000-memory.dmp

memory/1932-2848-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2856-0x00000000738D0000-0x00000000738D9000-memory.dmp

memory/1932-2875-0x00000000738D0000-0x00000000738D9000-memory.dmp

memory/1932-2853-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2852-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2850-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2849-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2847-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2905-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-2909-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-2908-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-2907-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-2906-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-2846-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2843-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2844-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1504-2838-0x0000000000400000-0x000000000048E000-memory.dmp

memory/1932-2840-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2839-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2845-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2842-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-2841-0x00000000738E0000-0x00000000738E9000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\nsResize.dll

MD5 826b388ae77158fb430eef40d09e20a4
SHA1 8e121819c77c950cb13767a0eeb76cf19e48eccb
SHA256 0a2387d1acb456406dd83fba1f69cb48532f96a7aedf2e9e128229c66dbaa075
SHA512 5c44c30861b8f2045d0ad3bef298f84a9404ce6b3fbaef8139cf603bff9cdc878b0f87d6184d52bcef7ce7d162148fd77d213c1f8fabefa49d5eed0d88222027

C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\inetc.dll

MD5 01e912f4dcc1962e4caf95cf06824bd6
SHA1 ca38906b61417a495ab4a99f87fefd1fcea27b68
SHA256 7de65937b8b6dcebe11e373630b32979dd51dd642f5024c398e235fc603683da
SHA512 156b3efc5656164c06e60a7657829216ce17c607a3ac82858c82ba8c886919b3e36d54df101b5387e5eca967672d30aa0bd081ba9ed322f407e7df45cfa6511b

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterSetup.exe

MD5 18693249f3a283e83b8179e692ffbba9
SHA1 546c0d89f8c8096d22c6f6be7e843cf5ce08e220
SHA256 3d828bcccc628e7096856337b178da5608a6c3db99383374e6c49d50a1895e64
SHA512 1ab246fea99daf75831f26930d458a05ff0efd5f9c71c9c4396681a065fcf9f5c04af774df34ad55e140b71d41e42254ee2d9dabbb18009800bdfc62170a8c39

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

MD5 57428456c6e6c2ea328c864681db5df3
SHA1 2dc7329e0b346c435b6ea5cf44a3d0a076f8d398
SHA256 ee87747102eba8844939352740d0bb6c4a67f10c2656961cb2722cd42ba99f40
SHA512 40fb34fce07f094fdaf78c499a21c3f534f0c8ae1246b6cf382ea7e63fa08b4de56e6c81eb8fadce8a2e508ae5d03831590a06ffda3d46026fb894e4997f31b0

C:\Users\Admin\AppData\Local\Temp\nsgA77B.tmp\inetc.dll

MD5 a35cdc9cf1d17216c0ab8c5282488ead
SHA1 ed8e8091a924343ad8791d85e2733c14839f0d36
SHA256 a793929232afb78b1c5b2f45d82094098bcf01523159fad1032147d8d5f9c4df
SHA512 0f15b00d0bf2aabd194302e599d69962147b4b3ef99e5a5f8d5797a7a56fd75dd9db0a667cfba9c758e6f0dab9ced126a9b43948935fe37fc31d96278a842bdf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

MD5 30a274cd01b6eeb0b082c918b0697f1e
SHA1 393311bde26b99a4ad935fa55bad1dce7994388b
SHA256 88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42
SHA512 c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0c8565afdd16c31bdb85c20316f670d0
SHA1 4eb9d617adec000d09e009a49f69e2c93dc4a0f5
SHA256 c4d014768570867e60784a0b92de0e675f9267114ba9d5c7badcf676faa36956
SHA512 9171621a3b711c7d1f5c55c9980edf32b8ace89c2ca9cd0341416683af0e03f3f8588fd7b5d0f8c9cb08b70e03dcc6232d57590d3b392240256b8ac29c740c49

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 bd05e25ece7fb9b60c30a50d950d198d
SHA1 0ef6a9b910cb860fdd3aade8da993d3e26ad1ca9
SHA256 69d887bb29bad42b7ac8bcd3c601677c90ff3bbf123ce609eb01499832b2acd7
SHA512 edce00a822e47484bb57c23119bf4816dcde4e077da2aae28829fa2670abc0bb90003e94d3751c9e0e1a89e7568765333add3f0b817f17d805098dc81e1fb274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ab7cce31307c1df0ced7659654858220
SHA1 b3d153d3fbe3433c4a619006b3028bb875e18edc
SHA256 2dfaf94832e2d3817085af2f2377f5f45c7c46f5b67a9bd4878fd2f003c2ccfd
SHA512 c59d668db18b1afcf7481e95dc6347563c760dec19d2f08f714a8042554cce4af0db792d6d1f78cb7f17421aae90dfde36576c329ad772e35753fbfc2caee335

memory/1932-3038-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1504-3037-0x0000000000400000-0x000000000048E000-memory.dmp

memory/1932-3041-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3042-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3043-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3044-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3046-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3053-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3052-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3051-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3050-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3049-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3048-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3047-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3045-0x00000000738E0000-0x00000000738E9000-memory.dmp

memory/1932-3067-0x00000000738D0000-0x00000000738D9000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsp3005.tmp\System.dll

MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

C:\Users\Admin\AppData\Local\Temp\nsgA77B.tmp\nsJSON.dll

MD5 f4d89d9a2a3e2f164aea3e93864905c9
SHA1 4d4e05ee5e4e77a0631a3dd064c171ba2e227d4a
SHA256 64b3efdf3de54e338d4db96b549a7bdb7237bb88a82a0a63aef570327a78a6fb
SHA512 dbda3fe7ca22c23d2d0f2a5d9d415a96112e2965081582c7a42c139a55c5d861a27f0bd919504de4f82c59cf7d1b97f95ed5a55e87d574635afdb7eb2d8cadf2

C:\Users\Admin\AppData\Local\Temp\nsgA77B.tmp\nsDialogs.dll

MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

memory/1504-3097-0x0000000000400000-0x000000000048E000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 30c222825aecd6b39a5e992e34b502e4
SHA1 efca164a8e5e12c6314319cf798aa8f6031a547c
SHA256 fac8203348f5bc52d5a4e762b9ff36533f82b1b309569013cc4e050133c1f22e
SHA512 3fab0f369042a0e647251cdbaca884ec05c2c9c304f63b9207fb6437a786371205b10e4dac7d030f973b8d00b7cbfa475686ffbed3c7aa6e00057a30f3b6f311

memory/1932-3198-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3197-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3196-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3195-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3194-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3193-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3192-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3191-0x0000000073680000-0x0000000073689000-memory.dmp

memory/1932-3190-0x0000000073680000-0x0000000073689000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveBrowser.lnk

MD5 98f3d9fde018ff9666f908120a4b0fad
SHA1 5e9e99490e7bb458f30b9ab5f6a6bb2915fa5747
SHA256 142415954dceb053977fb07b1b92d38e87869a98572994855c813c89d7f85f70
SHA512 41258787223d3a046210beb787fcd804cf975dda38f24f405459c653f59622a9813fac37cbe7b2538a75730bffb21cf1c8c211b5929bbae63071f3851afd0eb7

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extension Rules\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

memory/400-3348-0x000001BBD5960000-0x000001BBD5961000-memory.dmp

memory/400-3347-0x00007FF8C38E0000-0x00007FF8C38E1000-memory.dmp

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\82f0c336-3a8d-4b6c-9fca-c1e32a45a49e.tmp

MD5 dbb809c9ed271936f6842f22d0647bd0
SHA1 0276c592bacba0d2a3aacce241b3340c46a13f80
SHA256 b40ed97fedcf048b92224e3c6cac62dd8286732e7a945cdddefc49d8cf5bd398
SHA512 0e7edfcc08cb0969aac0e07461736a85e175ba8652c564924140f70d251dc0a7ab0da26a6d1411ce7070d45d6c7a95d0fa9f93165483cd6d3cd33d5d20d85f22

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Temp\scoped_dir5336_1629337505\Sync Data\LevelDB\LOG.old

MD5 fb5db5e3968d7da7cbbce232e2c2f811
SHA1 c0c795b1f11c11593a083cb727eb82c461d4d002
SHA256 689f095add0c4bafc2f43d6325bc02f5ba43eed18c7ea5c64a4745dfd78fc53b
SHA512 a1670d5cfe3b66080a7f03b24cc0441c7215adec93e865de65057b05e6e0092ff26b4ad3cae74d98b3f024a17699acbd8a1204907d80fe03fe7ed957e35ecf98

memory/1932-3413-0x0000000073680000-0x0000000073689000-memory.dmp

memory/5988-3423-0x000001B94B3E0000-0x000001B94B3E1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\System.dll

MD5 345b6faa62a50ba996a4fc52a17031c7
SHA1 7ee131c8c4f836e9c88764197da34a5a9dbe7d97
SHA256 e994184f10c979ec8d3e0ba11d3c95322b0f846fe45d0a56afc2afb35cf92d9a
SHA512 5eadf9edf82b83c2c051c6072b7d31a711bac17513dfb452c25f98cfec00fc54fef0e54c29e60d5de8813284bde440b4f7843c5cb07d2bd9014b0610e98a9347

C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\nsDialogs.dll

MD5 d3e82a3a0a0f6b3376aefbe411909ead
SHA1 7a819fb67e3f2847c667490d65723125850881c0
SHA256 3383fc788e3e7c0bd856c225b1007bb334039cca9d1f6f193a1cb01e3b87629c
SHA512 d933cc2bd25726cd99463e2b6c4fa4f84680f5051463231982fd1871d702a0d3e14a99593810260000861ae446ce3a623847f70953655e017cb03daedda0af7c

C:\Users\Admin\AppData\Local\Temp\nsrB508.tmp\nsArray.dll

MD5 261025b9c39810caebf7cdf301c62517
SHA1 59a757bdd007daffea95ffb2d2eef80b1e1f13e5
SHA256 44480d48dfe139cb4125ac05df462fda4d6980d6558151c3a862578fbf790370
SHA512 10db13d86f2a75f3857b35f0b9025714ae53f3be21cd7f93fbd22909e294f4fc81b2fde50f5b378251594aa6158d139432b98b5f90c06779fbdae4ce1be2d982

memory/1932-3436-0x00000000738D0000-0x00000000738D9000-memory.dmp

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat

MD5 e0f071b1bc4a0dcabb835d3e5a960613
SHA1 974ea3f8cfb435c9f63d2d0db1bf20b01664ee3f
SHA256 bcdcad551fce5701ea9c8fe8ab258466f5743d2de62970ad8a4efbdf8ace5a45
SHA512 85415e0c240288cf8449f9574d9cb0aa7dabe1997f93ddd8c3036e7bb5123d3044b3ab9f20d744c4bbd79f751c9ff1331e7a5249f3e0f48187a0e5f87a14a1e7

memory/5652-3477-0x000002D3F29F0000-0x000002D3F29F1000-memory.dmp

memory/5644-3475-0x00000114C05B0000-0x00000114C05B1000-memory.dmp

memory/5644-3480-0x00000114C0580000-0x00000114C05A9000-memory.dmp

memory/5988-3520-0x000001B94B3B0000-0x000001B94B3D9000-memory.dmp

memory/1504-3527-0x0000000000400000-0x000000000048E000-memory.dmp

C:\Users\Admin\PCAppStore\nwjs\locales\bg.pak.info

MD5 82d7ab0ff6c34db264fd6778818f42b1
SHA1 eb508bd01721ba67f7daad55ba8e7acdb0a096eb
SHA256 e84331e84cd61d8bdacc574d5186fb259c00467513aa3f2090406330f68a45db
SHA512 176458b03cc2b2d3711965cd277531e002ae55d284b6c9178d2353e268f882430235468e5a1e9e45c8427864d109cf30a024a993b4763a75fa2744f6e0a6ae2a

memory/5652-3578-0x000002D3F0DA0000-0x000002D3F0DC9000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\3a95d834-9c83-482b-871c-81cc6ee0cbc1.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

memory/1060-3676-0x000001CC819D0000-0x000001CC819D1000-memory.dmp

memory/5872-3694-0x0000019D8ECA0000-0x0000019D8ECA1000-memory.dmp

memory/5800-3693-0x000001B0819D0000-0x000001B0819D1000-memory.dmp

memory/4368-3711-0x000001BCD5550000-0x000001BCD5551000-memory.dmp

memory/2124-3719-0x000002198A190000-0x000002198A191000-memory.dmp

memory/5444-3727-0x000002A598190000-0x000002A598191000-memory.dmp

memory/5864-3741-0x000001A208430000-0x000001A208431000-memory.dmp

memory/3120-3749-0x0000024EAEB80000-0x0000024EAEB81000-memory.dmp

memory/5800-3754-0x000001B0819A0000-0x000001B0819C9000-memory.dmp

memory/5864-3756-0x000001A208400000-0x000001A208429000-memory.dmp

memory/5872-3755-0x0000019D8EC70000-0x0000019D8EC99000-memory.dmp

memory/5444-3753-0x000002A598160000-0x000002A598189000-memory.dmp

memory/3120-3758-0x0000024EAEB50000-0x0000024EAEB79000-memory.dmp

memory/1060-3760-0x000001CC819A0000-0x000001CC819C9000-memory.dmp

memory/4368-3759-0x000001BCD5520000-0x000001BCD5549000-memory.dmp

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/2124-3761-0x000002198A160000-0x000002198A189000-memory.dmp

memory/5336-3809-0x00000212F12A0000-0x00000212F12A1000-memory.dmp

memory/5748-3812-0x0000027BACEC0000-0x0000027BACEC1000-memory.dmp

memory/828-3826-0x000001E00B9F0000-0x000001E00B9F1000-memory.dmp

memory/5548-3833-0x0000027CC7F30000-0x0000027CC7F31000-memory.dmp

memory/5436-3836-0x0000014A019D0000-0x0000014A019D1000-memory.dmp

memory/4984-3840-0x0000026235380000-0x0000026235381000-memory.dmp

memory/5924-3842-0x000001758DA50000-0x000001758DA51000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nsp3005.tmp\Math.dll

MD5 85428cf1f140e5023f4c9d179b704702
SHA1 1b51213ddbaedfffb7e7f098f172f1d4e5c9efba
SHA256 8d9a23dd2004b68c0d2e64e6c6ad330d0c648bffe2b9f619a1e9760ef978207a
SHA512 dfe7f9f3030485caf30ec631424120030c3985df778993342a371bf1724fa84aa885b4e466c6f6b356d99cc24e564b9c702c7bcdd33052172e0794c2fdecce59

memory/6172-3859-0x00000136379C0000-0x00000136379C1000-memory.dmp

memory/1060-3857-0x000001BD8A550000-0x000001BD8A551000-memory.dmp

memory/6352-3924-0x0000022C019D0000-0x0000022C019D1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\scoped_dir1512_1426590109\CRX_INSTALL\_locales\en\messages.json

MD5 bf28ef9468e4e1cbc5f3e055adfa69e5
SHA1 d5cff2ec3851f3fff649d688919f9f4f8511420e
SHA256 0e86dc475bac19122a3134a18cf8af26b83831df3346bcf5093739ca2891b4b3
SHA512 7b37e27f56b8ef1aeec6f25bbe7336ad0bec837af4390e47932adc67c9ed873c6b7cb5d643b39d0b6f383d79c7ee0ab8aa39e70f894ce8f2b90a884d1325c3f5

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json

MD5 a192304f63ef26c80086f835cc4b7ada
SHA1 6963e90e752209132b728a938844c4c64dc94d43
SHA256 4f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512 be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 9c1d1563285c7bf44074cb46169213a2
SHA1 883db36a86528be1480dfd4fed11e1390cc12691
SHA256 db02cdba8cbc320f8287f996107e18858bbd3bf12e0cfe819c72515909750d2a
SHA512 c803897f374b764ce3a8fa58e1b7ff9bdbde471505b542b2784311ecfefa4b95993773b5b0f2de3d9bcab5c7031868a101681c941a6c9a2c26347da5755bf358

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences~RFe627077.TMP

MD5 aefbfe4224d185b0009dc8ac3fa3620c
SHA1 acafbff868e1c9bc42aab3737cd876f0050f5beb
SHA256 4d8ebe48c3b7e09e7a7617056add1aca93a1aa50b8a080f478f0b37e22f8ba47
SHA512 4322a5a2d5a02fa5386249fd9b9afead3f1a032bc4040e8041b321ee6bd2152b7922ea8821b5c0ff5b5d29fc1132d4047850d1ba52e83cf39e08df11371e0f01

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 b86260673acc9558afd838a1e2db964a
SHA1 f5298c5f59e8558db9189d1c374b5c0217cf179b
SHA256 6adafe36bb5d21c3de016dfa527a8dfdc37c9aeb4766356a2e0479713da35342
SHA512 392ccfa882cd2a360d09f46b59a5492867292adc15e8bdedb809e4917851467bfa1404b348da350d7178300d7c84222e4b889ed8f9391b3aa284e34e420937b8

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State~RFe627048.TMP

MD5 89e40735ecbe8a4f1bd911f2801de002
SHA1 bd6d98b9344a183a2745e97732af1365fd0ff09d
SHA256 8b7fb74e2a3e97333cba060855d7430d4226ff4212b64d195e9746e97cd98809
SHA512 f81a792bd5d91670071cd30b1bad8086d033e7bc80ddf25788a3749b01c8b0fd8feeb549f725f691b55b7c9f0585486540015f91901c8b46ed688b1b734ecfdc

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\494d4e49-5fec-4eb7-bd36-d20a68b8c6a1.tmp

MD5 728fe78292f104659fea5fc90570cc75
SHA1 11b623f76f31ec773b79cdb74869acb08c4052cb
SHA256 d98e226bea7a9c56bfdfab3c484a8e6a0fb173519c43216d3a1115415b166d20
SHA512 91e81b91b29d613fdde24b010b1724be74f3bae1d2fb4faa2c015178248ed6a0405e2b222f4a557a6b895663c159f0bf0dc6d64d21259299e36f53d95d7067aa

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Web Applications\_nwjs_pcapp.store\pc_app_store.ico.md5

MD5 03e9f614a008075733c76883156b568b
SHA1 5f9cb1b06928487c4b836e9dedc688e8a9650b0b
SHA256 b1a6a6fb45ad1e13054c40dc7c09e3098ee830bcf1ebaec27f640ae4c64b8416
SHA512 7e6969c8908a6bf57bd2cb4457a7c78360468383acee589278e49829617e2f3b872dd8213e57a2ed8f512d444c67a2e619deabdc1394d1c39c7759ed3c744f94

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 594179f58e8a2afedd47ff6183e36d9a
SHA1 870497aee9dd685b0496118a5f52fb77178e0e15
SHA256 4d3a93483c35495c6773d14b1607bf46c3cdaa0cbba2e70dc797cc7e985552e2
SHA512 2982128f361f918bfdc899add09feeeca78409ee03b0355cff88f88a3c801106b4cc8194422cf1d9ac0f1760e215b29a273dc3619d0b055c70c929936f20bf14

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Cache\Cache_Data\f_000003

MD5 015c126a3520c9a8f6a27979d0266e96
SHA1 2acf956561d44434a6d84204670cf849d3215d5f
SHA256 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
SHA512 02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 072667c303387255b14b72d2700b8d57
SHA1 307c429c2033a110fefa33a45f5fe0aa697605db
SHA256 c8b2d4b87f9af189d7f2cf9989fa5fbe04f228568fc7b00f477d7b1f2404f873
SHA512 10cec71a9f518044a411b8cbdab5c4e973fe3dd0ddd1635807fbf98608cc2fe273dc22828865d077075f12ad8e16c17ae54cd542476bcb6befcf86f911a1691c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\ce04bfe9-5980-440e-8d35-2aa57429bf66.tmp

MD5 f095eacaef086edcd6c06ba9f0b43a2c
SHA1 9c9a0a25446b37b9679dccdb71c4fa320642148f
SHA256 6fb8312a87f0ad36434b16ba565f2f3c9bc49ddbe094fc190ca735de6ee50f7d
SHA512 6e7335866d2dc7345eb94707250cd803f5a1d5a4e0a798153fdca20f2e316ffe39ba01217674ef7c8f906ef062031a79f065c667236625bc75512b352aa29c19

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State

MD5 4bd6a9b8b765a36598abe3a5443a735a
SHA1 363a5e75247029d7487f9acaa3611da54ae8c952
SHA256 7e7174b04afe0efe5d8a6628523be3827e63aaad2c8cfd32e0e00644331352de
SHA512 8d9a63044e337ed932d441300d6a86d98aabb278f33822927f008a0d6628a49740d98147c992d330215e05e6a3f3efa081c00815486e45fe244dd984a245cfe3

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Local State~RFe62a5ef.TMP

MD5 3e4a6500034ccad66c762fcd3e151c90
SHA1 1733af9144d595570c784ab1655f33ddb8cb9600
SHA256 091f7571a2260e3cdbba7179d3b8b0e37221422652e2a192055c1469249ea04b
SHA512 5fe69a16ffa537eb4a73e5d396491f5bc30e87159c42beef869b149d389e8e601b2cfee10fc2e21fce4f678f502fe71f747488f1035943ede5c7eacd8539c51f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity~RFe62b9e4.TMP

MD5 bdc5b212a6a2db1b21d8e63251432f17
SHA1 4f205465c71770153ce317d89b38e441acd95240
SHA256 eb5a5ba27df946d5d1e27597d1e037f0065b0323e2212cd5cc6b16a5dbb327bf
SHA512 7078758321be191e0a3fdc084a4da45e75e61ca89addb30008d03e4ad4ccd6b5d1baca3a5b9523b9cdc2bc45de6100f23970a2f5888307e0c103634c0a7a919a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 f5e013d53f94aeec06d1ecdc61a7514d
SHA1 2fdf29dbd2bd49852c6d752e147fbd5339c36b38
SHA256 5ae5060037f5a91c9a181aeb8203306a7a0c9f0f3233511210553c0863c235e0
SHA512 754394d28a87e7c44fd2c270f71eeddf76402a7e53b14d165068ff6b945434ba2d68a46e2085ed1f1e5a2d100ab8f3691489fd4b65d93ca093ef2c7a684cf1ed

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 0246103813e86d1e0cfca2ff066f07e2
SHA1 7a469e65ead534eb03f523f72d169799b4e398ee
SHA256 a34b51be1ec74b50c3dbc868e588d974ea1061a6d578ae5a87142eccc408cc59
SHA512 c9e5a962b0edb67e327e050361b20f02fcbd29eb29d369a885d6397e90b67c932b2e9cefe4a84ea308bd2dde4f02e6418763a8b97bbe8d97ff6ee0ee0b676456

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe62bfd0.TMP

MD5 75d721c3681386d10e1aa42b7cf81445
SHA1 0e78ec14f4a8c994f32ee894cb7d4d90fd8de60a
SHA256 386b69b6f18329dc2af2b1c346d125d8dd177709822ab55e199f66478a3efc54
SHA512 63056e1af065b3031ca41cb746c8cd829b92aee5502eafc3b6fc174a88315c457f68a256c13d057802d13183933a25fc8583aa58f9a0dbb3e76b38009d51df58

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe62c00e.TMP

MD5 3d90f73f747692f05044aff1ea4c7fd8
SHA1 7474cef16015fdf5278d16c5fd1d60586505ad6c
SHA256 15f136ca0117c65e98c965947f6995669f0590e71423d3495defd5e8d762e3dd
SHA512 d993de03fe840a71fe41fe0d896cdfdf65212d6331de0ff9880203040c52cc4696848d0d674cb3c526e000541ab5411c273c7a0f316d5318ef2df923cb3cd0b8

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 a6bf0250a278e4fd51f7762a85c9bad5
SHA1 a4c03774b7559b2e67ac0bb7df56764a87e2b789
SHA256 2b3712587e9b2a8a72d3e57b9204e19040965eeac34b70894dc34f30a4ab8c3b
SHA512 21a363e3063523c10416142f79fdc2f4f467714d90d3328a4ff6980cf24f232036207f9bd6c4cce4b23dca4175144e96f4b88a00c3b801f397acf5e98fa23b4b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 bbb78b0046e8bb638f254f3893c039b2
SHA1 629b8987a0250b372e8fe29ddfab90de26bd6110
SHA256 2ed01ba0a3ead69390dacea5a9f93dbd5209d0f4dda72fa11e799df7f47463d5
SHA512 af60ef832c01b63eb3053768f29d3af23ed9dcb6a2b20a4e7117d81712ac9d31523bf2a72925de97aaaac9ea4c315b37e9b702a231f9a499d107fd761bdabc36

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences~RFe62cf12.TMP

MD5 032706fb0b2a6c610f70ef342cdd1d48
SHA1 bd3968b216bdbfbf2d7e3cfc2c026bea22b795c6
SHA256 12203132d9bb160e8942f219b6f127897f1d9f617c70a6d9c3bcccdc557cefeb
SHA512 b5c0944392c26791dbdbd920f8e01ec22864acbef46b6bb5ad7bb533c0aecce12501f6476148ac6f95deae4e9aeacadf84832430bc53e7cbeaebc3eb0ea860ba

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 086ad47224ac1a8ebaa642eb3b1387c6
SHA1 26d3b003c684ef925a707f21d9eaf57b13f8053d
SHA256 b7761550274de061dee4f2dec475d4ceb234ee509ccac3ec6db9c872e5e5faa7
SHA512 5f3c081ec79d20da918fe2539d1a9facd274bd8ae39578db6ef6f55bef632643c29e86c9ed5c5870e5f4aff0c90a3dda4c4b45910aa358560df0601bd65f5560

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe62d9b1.TMP

MD5 e20318d540b09c666d9dc695a89be814
SHA1 07653a4abf90488ea74757fca6bdf453ac40df2f
SHA256 fa9c28b9f8f2a0041c8b0cf2dff106eab9143e7e1ca513844dc270cb6677410f
SHA512 bb15d889422c2508b713062ba2351c1b0b04edafef9b8c4fd034649506e98089e969c8bcb97953d9b14d65000385b53d58e6d2deff045e9d126dc637f887c95c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 a685a6c1a2a1591dd1f3796ebaa3f91a
SHA1 63b8013d90bd66170dba5910c4303a03570781e1
SHA256 56c59d626d4f18b58cab56081eec1446fc26b588a1d7c5a2850013b910534009
SHA512 168f7477e52605c1600015a98b9291e204bfa0019e1d034de6a7bf2b30e367473e616e2b60e913bcbb19488df43004d3f07fdea3e276fde8547913a91f99907d

C:\Users\Admin\Downloads\OperaGXSetup.exe

MD5 714b42c0e145a0c2d6d35f0191787ad0
SHA1 15db1463bd28d89f660985bf73376489fa09d765
SHA256 2c75ae485bd7def9abc6bed3a3cafc3a35bf27e6f0425132e310ff48590025b0
SHA512 2726dd10c1270c1cffb0a471037e83afb72ce92ed39c1a7bea915ebdda0a6c955e475f8ad83ee476ca9847957d906cd3fe7cf13dad82b2550d3a48db6972cfef

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 ec8f64e1c536badb5ff0a731e6442a23
SHA1 564d766b41657b3343c06370be94f7dc497039f4
SHA256 35bf893c04ad6275a299ddbfc1ffc2ceefb27045b7fc800f77c1504f83dfc76d
SHA512 854dd5078691e63d7bb9c37d0256830e7c8acc98509b77cfb692cd0f237dd97780fd543aea1ab1437b6d723c1148a0372deebe00885435e51c4687be62385960

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2405071243251102088.dll

MD5 c44227f38d59c590106f011b17eb90d3
SHA1 b99b310fc2249a7879290ca5d2ad915ef588e76f
SHA256 c0a24436f26dc0d4a4be90cc7c75343039f02ff058ca00da06399da839968b94
SHA512 0edc91a06511cedabee7587401f69fccb3ade9747e1855c850806c2f0fef4402ed412dc1c68d03a70b317ee6314fa446d8541e831dbe24cabfafda17aa1b61be

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 7adc52c62af0caf63b204bd9ce628064
SHA1 fed608c187f19606d9111dfdb09d19b8dfe5d3c3
SHA256 6ea5ca57a671c623a6de8fa3093c95dcfbdf4fd0b4f44f41745211eb73792a26
SHA512 3340cdc197aae88c0d55ade10d43343f4402c1ee96e481b6b305562e89855c1be4767658497ad005a8817d6fb672c9deba9c57990c29b3f4ce29d4b452fd9aa6

C:\Users\Admin\AppData\Local\Temp\.opera\Opera GX Installer Temp\opera_package_202405071243251\additional_file0.tmp

MD5 e9a2209b61f4be34f25069a6e54affea
SHA1 6368b0a81608c701b06b97aeff194ce88fd0e3c0
SHA256 e950f17f4181009eeafa9f5306e8a9dfd26d88ca63b1838f44ff0efc738e7d1f
SHA512 59e46277ca79a43ed8b0a25b24eff013e251a75f90587e013b9c12851e5dd7283b6172f7d48583982f6a32069457778ee440025c1c754bf7bb6ce8ae1d2c3fc5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 15f7418e8d34a2f804c674ff13290c04
SHA1 bcb0e303482f8d9da1805be002a93b47185e280b
SHA256 458079472ca85584a1b9579f358fbd9b1aebe43a683b8f9ed461131d229ab031
SHA512 3323e513e05a4c1cc35cc55e90a81cd6ef6a6c54ecc85cd04f297b84a9a4c7daa826a82f101f38c837d65155eccef78319b8d37ee40e95b45d1b0f0e7d51bd29

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 5b8839f55067c85b0a66863fc8a5b204
SHA1 987df140776fec04c7cc71e796fb8bed7e614bfb
SHA256 7929a500d42cc7258f7ea80e3e5a4c63ca1477e88352e6c2823b105641880a3b
SHA512 058df1f63d7b4cf1ec2cd68c9417af4716543c139f088a1b29cb05551339fc97f032083be6ecf26754b46f070e015779731b91be6dc0be97307870b0a340de6d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00001d

MD5 b02b0e984d604705c07442f802bdffa8
SHA1 fb288f0b8c59cac7374654e39a8ef1f9a828b0fc
SHA256 b26b5567cc10b8c77b861390758de1598b888175ea2cd8243b2f10617b827d89
SHA512 fc55e5c2b9ce2a0015c79f13b9c10fd79233c8de0aeac358fd786affe28ef170a6e9b8124c2e41cef48d37d5eeb322664e07ff46595cd005d6c2b0087fe7fb1e

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 d7fbb738d06901a4f4328d240591703d
SHA1 b55b8e6fe97ab8b06dfab4fa809f091283e9e21f
SHA256 fa4632278ee0afd62fca863f867582b6e82ed561f346f743ff6b0427db062604
SHA512 e5c4f3a4fe20cf81213099869b380803c6e52960a78f2e5e2e32e992386836d36e4e9a0897ed826db2e8e13e7c51f4e287988a7fe1ac916b16b622ec4f58402f

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity~RFe6362b7.TMP

MD5 514168678a65359d802d001a1902a46a
SHA1 94a43a8743152f1dcb06512bd4a9dda51848063a
SHA256 b6e0936056e793478e8c1d68bcb9ed85dca2778bfaaa94c49b877942ef166e92
SHA512 ec3d14362aa07eb76c929010beed3ae6498368f9c8f84d88b3557111bccc16ca6de92770ebc690cb993de9d7d9820161c681529d9348bbfb8714ca7d5c6d20ac

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 1c66a14d98b3b386bc35258bb448e49a
SHA1 6d185067a490312ce2bceb25585cf77e6f22d903
SHA256 1dacb3022c07d3397c93e2021b6d8b8b742f4f505a2fe3f8603e95744e88ed0b
SHA512 d122619962bc5ee1a79449be071e17dae4526220e564097133b109dcad74b50f4f3cc147a864c9b9cafc1b3d7b60cfaca8f5e8999a3b2cd5245ff64c31775b66

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 5fafaa1b090b4fb9fe62c27c25c22a0b
SHA1 6943a9439304b0e70524de9fb7a0a46e310c904c
SHA256 9aa2ea6fdc632a90425ec5e6fcc7263c67912260fd8ba8d58b8d6142e060f83b
SHA512 84b78ed89500c910ca51f25e5a83a8f8766013399c66d288b958e7fa119b8b60680c4c12fa2fc0939e83c204d7ae7f03e9085724fd12076f3e165db103ec2d78

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 e8e4147860c923eef9721d55f9b91d96
SHA1 d2812391c309da71d115251d6d67380cfd645dbf
SHA256 c44c9ef207da7fc7b1483bce978a9be9df2febab18184184cde34398c599bba3
SHA512 4fc6d2d508447c7402d13af9c5be6adaeb3bc5700b78bb55d016f6098c2cc0264b8f343b954b3253ed47a3df28fff59bfce6e54a1d27ddba839c94f1c522c937

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_179134760\manifest.json

MD5 55d0da4886efa9d373256980afe0b0c4
SHA1 495d838f50d5e76226480487be4770fdf289bf2f
SHA256 816e30826889f2e140b03e0c7cfdcd31dedb307c30712b017843080b271891a9
SHA512 0591312ee7c3e51cd0b2c13cd97aab7f65fb8fb1eaf65ddef3e3a7a49218893e1827ca3b217ecacfeb02bde8926ae81ad893db1031b2e891d2b06aff6a6d5327

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 99160a7f2d3ce9e390409517a48cd658
SHA1 47941391cb9bbaf7c7b84992e1271ea90e0dd235
SHA256 1ffdb5c957ad2997d179fa471e73b1baa4e01ddfe3e979483f6c9e62a6cd75c0
SHA512 56e85ccb08aedbd99eeee362bd2666e62064415012e2d75af66757e31d67a85958d29b8f1e034d8d58d3f77fd4f4c803c289c35dc2a331512a554cd102dd7cd1

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 b28d4e539281116a2ed6d091a45ebd22
SHA1 e41130b22fe1d43d4c6279d3752429bc266bfbfc
SHA256 a6c50140b83b2e2c33103e922ebde056aec52b46dacf76c95439bda75ced973b
SHA512 55e54219187c8f7425c1e89ca72ecf27a3ebb4c3226ea1cf1a0cf218660fd017443e78304a956449bb7693ad2f8e75987b59b3a122becadbbe0ee2e79621ec49

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 74aea3ba9e593f5e3f48e22e109581c0
SHA1 b02fca3471000bab5d3f9e17e6e661b25b088d51
SHA256 c047169f51d19a237e679ad1a29b2b229447f57a8eccff017a264eff00c92c41
SHA512 ad970eb7ecd993d3209ecdcb4259cc8f135949a8597e1d8f9a90abacb5356e10fc1ac28813019bd6a2ca6be3db135c6d12f6e36bbbd60fbdfdd2f91e3ab481aa

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 c1c8d7a729e8675fea2ca141f903cca2
SHA1 79cddb035fc4831633e0a34a8e03238fe34cf5ee
SHA256 3992a29ad423bcf04cfea3175560c8610d017ae2d21363b54be6fd4edcda55ec
SHA512 636751361bf0490ca448edca4f22700b36ee9acf4004710912674a4a21df905941996cc55f69d485cd5ea060cce637e7a9eab11408d2860b102fd0326e143c9b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 8fc4b1034b22c957f84e299e077124e8
SHA1 b9fe01e0f6a4cd6515fa83438062e38d350563ba
SHA256 eb1761cbb000013a142dc53bbd044b781095ef6c77055143c032dd85305da7d1
SHA512 3ee4e2baf856b61b429db8ebae976165c35c8d801211b02af08514618e50aa358366e007d2d4ce786101560a7871a472d9447e0254bb42365b359db676c5b236

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 9aeb2d21a0786da08d222291c913f766
SHA1 9611aefc9f833cdf1c03020c0c416f9f6af8009c
SHA256 f75fa2af71ad9b74c41e246bf9c694e2eaa06df85a0ab1148b9f91025d7e0a1f
SHA512 81548a8ee3e664271768f440c18c965ff511ac0b877b87942455d2f3c9d91802e178a7ba951b613d8c984d136af856b8f6cdc40024be6ad2b5fa1518d3ea9fbc

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_885229917\manifest.json

MD5 db7eb7e54eed7c7a94fabef1ff06ffce
SHA1 59ec7c4812b8281eedee765e052d280ef6d14be1
SHA256 dd43b3afeac53c5756b53b5a987feb96ca78d2016c5513a971b2d570a959c0d0
SHA512 eaae4182dbbd8c53a83cefc0070c1ba4542fdbf912e39537054f2fd5eef3ab0a6247f37d17acab31859a72fe69b2008d5ea5ff04fde3fb31666c2cada205ea53

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 ddc957d5fd9ca56aa098e6873464dfea
SHA1 2e2c52f8d15132f093e6525f7f1ff4e07be757f6
SHA256 0c1892a195f63fee6c6281add0cb3f312b71dbe549c1776bcd83cf10cea31b76
SHA512 dd77630b6c6a3997977480c0793ee12491c91d9d584f253a58059aad8eec3cdbf0c185c0c4a7871461bda04be05f2154e8abb1a5efa42e01bcdd83070d1a73ce

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 e9bec793a8b49e0d6ad33782ab6c55cc
SHA1 ff7c8523458e26cb7e300864001bd4ff9b8645b9
SHA256 206f341bec5c9b76d18d7abe937fa433ab92f4b3f21320f3ed6c134a63870f85
SHA512 1340ddde8bc1593f9333391453b43f290207e45209d8e2f9ceb8ae2a60409b5e9fb9b2cbd16141553724c98a29e880044fd40341432f4196ec3a17e087d3e51a

C:\Users\Admin\AppData\Local\D3DSCache\9fe1ec0ecafd03ce\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 2dfea8f2284ea5ebbacf248ba723a497
SHA1 db01ac6b1b30f23a63497e2e15f0eee039d71a92
SHA256 d8e5aa8571911ab40a8f77a9ffcc4701012b15f73579d2d796d472781cd49f58
SHA512 92e05035716c747bf13b3e4caec4bf7e3eea9c0d685c0c0a1fab437da13622c3392deb6534dcbedce5d43b2dbebb2f2da0c5629d506904bd0a0c7dc712fe1da1

C:\Users\Admin\AppData\Local\D3DSCache\9fe1ec0ecafd03ce\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 aa87c29969db353861e9086bd0c23072
SHA1 fe618e6d503b0dd2409281e33ddcfc43edfa948a
SHA256 f1e59413f48f9c24524694e8d462a3fbc1fd4af9f5b315eb8571ee23e9c00248
SHA512 046d576162116376ec9aa9b21a14a442dbffb30a6020235ef5526fc0839543ca8309c8d2c9f6002141c2778d2d7bcb67d07edb21521b181cf10b063a5b77653a

C:\Users\Admin\AppData\Local\D3DSCache\9fe1ec0ecafd03ce\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 7a64db3e705764e9d27e03b756a86373
SHA1 91cc69909165be37b15cfd4d1e1d6b881af41e8d
SHA256 66857c9043fe96b767d884c6c8609fb9bb349c6cbc0df25eaebdf5f79f08c4f5
SHA512 9d8ba30e505e62d7a6867527d0cfec76adb9a2aec0b2a5c61066eb6daf9779de385e3b3ca1afabc6e63f0f6b3a4635aca2ca72a68928c2323c886035a345809a

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 88f3feeca87fe93f2cc0d015ae8d5da5
SHA1 3dcbed5d68fd66c512538860f553a1347e38ed5b
SHA256 207ae3c3990b781a4a673718b07d3caff4a11c8eb1efd8797379af140a0cc457
SHA512 b2f01987a9f9e8451568df7954d7eb133de880110cde11ae371be3a87175111c2b4841790157854b3c556b1544645797945f468983754d72300d97165efe7e28

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1180647089\manifest.json

MD5 0f265661c3f2a77982e500475a1862e9
SHA1 e173386aa23daaa00f9a6d212120667a6eafd702
SHA256 44b5726a377aa27d65a4992274c4116eb86d5ac4115bf91aca15794b82639197
SHA512 22c2e44a83e2ee8a8c5fbe1d23fced169c9517d82b156788d64b80bf0af68615ba3ad86c09aad4931bc7d97f4ba3470b3a55fa504fb212aa17cbf588ca586994

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\OptimizationHints\445\optimization-hints.pb

MD5 eb60fc787ced178cf3cbcbf5eb6c50c4
SHA1 b5cfc419ba4a4749d35243e4f452232d3c75ac23
SHA256 fa4be7a92d620a66e00dfd1a4222cd9838ffa0ea1228dea1c007c72491539138
SHA512 a88d139a66d278e8f6767bfb3b0b8564dce3a515feda3447206433262705ff2937ea7298406bab0c22bbfef5489bc7aad3752b81e660a85502677f9043c78836

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 7c2734c2bfac88def6f4ac3511d9b3d9
SHA1 8eb6511635a9aa48b678240e15c308443db50e7d
SHA256 6ac128187fe36fee31c85dc74be601fb8c803f82f78ea08938dde8e7e1f78f2f
SHA512 9dfbd980d3c58cbf946e1d9469a41d4c02464317a2d7c50629119e5b003a388a6c6450bb4bbb38fd986702f98cde78a35efa490de800d5c34d3b2467a54b906d

C:\Users\Admin\AppData\Local\D3DSCache\e75ae0776967e3f0\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 5da7aad8df6342db4528ce16b4f4e467
SHA1 08917ed58cc5bfdfdf2a34de4275356affdf2d2c
SHA256 690c594920f91b28ca311b79af9888c924db3b4fd31f3eb7e480045749b65307
SHA512 043c94c4695499e7a2047a9ae670942edf21822ff1a0a4c087fa008c64aa983eb2b34ddf27add6cdef091dac2bd7e5e282cb517128f983d51bf47e3391130880

C:\Users\Admin\AppData\Local\D3DSCache\e75ae0776967e3f0\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 7119cee8c52ce1ca22890ca45bebba27
SHA1 a8292fd51a05a8d6697db3dbb5a15a743019a019
SHA256 53178bac0a9f65e4f9a5c5a29dec03d0d34a048aaed4fa8625b68004725bcdeb
SHA512 197fd9a7cff0127cdbf3769bd1ec3c0f97f28782e6569f71484d0d459d313c057472b38a94f79b96ca6e5a4ca698c59ad25a929912a641e758f3561480600fcf

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 5ad3902e57b3cb53e08bc7c10b5472f4
SHA1 63a7151cf61b671b462e319997010da96792ec33
SHA256 256a57a1e248f225986d50968b1884e8b35ba184b4a3079962260dc9e3ca5b39
SHA512 aa7b65d8318c8453509e2abd3a116b333f4bc68203f31505648a8f4ce5c274350ca794c8651e500183ada7c3a283cdc2682d7a823fc00080db194c2149c7f8a0

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 e353a58ba83879396032a252e066dde8
SHA1 0b45cd6e797d4dbf7d70cdb6ef2164bcb7a7a726
SHA256 5e638ffb9a060461276e8a055c17eaea046b993b945e9233312f319953ac0050
SHA512 aa9e6236e31872c24c0ee2a9d48a0ad82523abb5051320a60f341f2b073692007e10d07d77adc3ff270316ecff201f95d29f5a339eb7371b261bc1028d49e7fa

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 b5822e15bf9f6fa2640dc1c5a3aac059
SHA1 3da60d3d7ff2df8fff3b55d50b8c8298b830728e
SHA256 4bf0af87f640c392a158f22e7eb496fbcc0b517816e9c0ed4897129ab5af51b3
SHA512 8658f99a5e585b8f9d341341c83d937bcb0f2688119c3499941e5c78d0c458a4b1c9624504e90442ae7217987d46de98ed5a87bbd3d8339e0a549777a919f693

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 108758b3af0f270346407b45a89fb22b
SHA1 edf579863748f6fc061c90fedd4a5ac6f0ee18ab
SHA256 2a7bb7d659fba7788b149b060ef99de7f3aec2aa8f98e08e93a74b11470be090
SHA512 7c55955de0fd6762ad1dd6ac05aa7a17162545e8fe8b6848fc9c94038394efdf9bf3316134d442c28b9b870a8e438975f076906232a4637f55a9f4d18fb4f5eb

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1211601080\manifest.json

MD5 225c08f039684dfb54aac162dd9d5b9e
SHA1 426bd1044bfcd5e1a10b58ed1f217a6b33b2e9c3
SHA256 98306b21c0aaf9546301f4ab7fed785dc369c67e2fd2ad4d62fc63f072a51e3c
SHA512 d6ff6cea0c08d13a642996a110432792048d21160c04543fbcacc60abcde362318e13a42fcd7520bc7673e98544a68a3eb6cc4338f4f4d8e90e0dfd5c40b77b7

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crowd Deny\2023.11.29.1201\Preload Data

MD5 aa3ef996bce08a9c34fe513d078d1ee3
SHA1 21688d164d442d37fd5471e13b41b1d216f88d37
SHA256 09d2155be71880356a993fabacc2ce01f4fbab99497ec157b53a094b8927c039
SHA512 285c85ca55fa54a1a12c47909b8575e8388570a76f238dc75aedece12e58dc0a3fe15edeffc41af14bb7944a0682de76f0ee0d6502d15973f8d9b1c5b2f828bd

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 75bec4d48acee053b32ac5798b1f04f7
SHA1 fe7231cbb7770c7da83a874154895024dfa208e0
SHA256 c71e2b11129dbb94a9b64c98480ac1a05ca0969581bf653fe89b0e796d1a5f82
SHA512 2c9943370fd439c9b517fba421dbf85cf07bc1ecaa9eff89a915c187667cbe04a8996b4f3b2e713b5b3587c3a132176e0a651a82872eedd68dfb5a722c746b47

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 a6d512e0cfd228b0197b0562f5b8b48b
SHA1 d86f0c70e6ac04c5c9b5b7232edddd1ce9308d3f
SHA256 5df3f17914ddc6521a147b433b4b3a64f2f99b01796d28361164f474c0f4683d
SHA512 d6494e084fdc60416d25bc0bbb434bb506ab630b2f368f49abb7689eae51f572bbf9846673c28fa625c1fb68644bd97fc2ef778673d0812ecf85f933876f8071

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 95acbbbc2135ae5221482dc0061a75c5
SHA1 c4b64d499da9b7d07470918e319f7ed156f4ef7f
SHA256 932df6226aa84473f79b335cdbd92003763add90d0397c5cbef9018c1bb026a5
SHA512 296c58603d4f6115856091efeb49085248a695453918cd2d6d1775bc32666e646140caadfb183f3ef326ad84b9f9b35693dd7c6cd8f6bb8615dc4aa7a701c747

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 1736ed425e1f59d516915b7e22c3345e
SHA1 0d3a17b14f6e3e3ada8296b339717413a0289121
SHA256 0f7cfe1a6b7c931ea406006e13ae1d1af29a97f52615ccbe2b38bbe6b3c1e555
SHA512 588b97301a45373285106f3fbf04a0b3d79589b615080fc0e5a46fd74da50df2b890582ba9a8ccf0b783cb4f7412743f599002f999a6d7f7ad520ea667a87e82

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 8149636341fbc3a96e915cb39699a123
SHA1 574e57de9c2df765c67d87f3a629ba1d660bacc8
SHA256 c25019e5618e515802d0ed227359a58df470a82e3dc0e9648fe50b4236552f90
SHA512 a7b8a83c82a28cae9c5b635d5592a388200dbb561715cd8f6f0085f656bc4beb70db403bdad629a362e1aec4703ceaba31b1db40c60be14a1a08d0f18a1bf265

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 033eebb4cbb20a47976879825b8aef3f
SHA1 78aa5fc035cd52c945e677175680905488b95dee
SHA256 69ede7211cab6e1525653ce2bfe8df343f89854dcce86b6ea1ee7dff79aced40
SHA512 5ae14c60f11827e72cfb4a1b4f321fa7d593c7b2702e1e11818ca71619dde884ce72b3973e4742e046aa9bdd4eafefb4bc7c54557c74b62582cff026bca9dceb

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 702c39e4ad380fefa56efefe63a9e303
SHA1 6b7c5ac45e35b0fb03b2b2af3a73394a27d7b85d
SHA256 e51ef80fcfd03bbedb0a7c0e3bbdca69bb7d26829241e742a30ae9faa0385ede
SHA512 abd79a6f2ca3f837067045cea3e551affa34c99ced7d1ad66ef5d4f612a5e86b34304e95f4700a1d8c6e517a7715af0af973af6f7f514091b325c3eac68ce9ed

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old

MD5 cf99b701065802f03c61c01f2c9b9577
SHA1 4b2882d7b5ca475888eab44490ee684dd040bdd4
SHA256 4d2d14f9be60e395adb7bfd261f9957567b8c72978930a2b8eb91f6c93c7ab91
SHA512 2c9c04bca028ea178fcfd50cb4258b3b109a564798768e551cf74bed30204c6a99eb42e4543d25c348ef4ccd2ec80129ed20dcebcec2f9bf9b1fede61fa29668

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old~RFe6553b9.TMP

MD5 ad7802cc18e7d03945ad872e2084c9b6
SHA1 fc3332fecc0704ed234c0fb5bf15c3e0b739f654
SHA256 d7efe4837d758bd17e69ee3536325ffb37f0c92461961b738263d93d585ea08f
SHA512 274c5ebcdb449e5953d7b295a8da76053231ea0378e760762d7d918d6c5dbf4f388a5f349dd934424e34ceb35e4812caeefc27db088b4199b80bf743d667b302

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 632d963e9730679664bef3bb8c26791b
SHA1 033bd403eee7774cb697d3422476d58d7525bff7
SHA256 7764ae02c8b55d02528b0459b2d946e0893f047c833947b305322c1f49edd08d
SHA512 2743fd98431ffe213c605d0ce397fad7778e29e516bfff39a5090f3738656330e351763a34a383eca54321981c86633b653c9e7979e5b67fd76654f8bc2cf7a8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c4c7af70a60af722255eed2bd5c50805
SHA1 dd6fca17bfbf158117b35cbc053578c7786d9f58
SHA256 64ea0a3609fc8f03d51c21b69ed3f86dec665d268e9b4a4c4b4f28f391d98184
SHA512 79035bcd6f6bb9cbeaf1d425e65b0fd8ff822c0dba1f596dcf8992b643e14ded8ac90af7b117fdd3c0cbe5ceada7b7f621bbef7545911b9f4c9bd3e992aa5054

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 31b8a727d5b2268f8b9912c35598eb9a
SHA1 087da501d7ef93c7120be78ecf83450c0ab401c5
SHA256 3acedbe63b856f8206d815d8265cb3a00269f4d8d19d6e792fe4071d676e21e4
SHA512 d861864d994bafb946461c555584b05dbbf8360ea152daa6d01d9c004d4986d68e83d1ce6f7e5a90f1661fe65d3cc1d17d6e1e1b61821ca4519658393a73e0a2

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 80eccf130fbde40c272de0c205609296
SHA1 15929d3565dd01e89930f80ddf63ee1a061e3136
SHA256 3bb65414b010dfdbbc951549edda1d36ec4dd89722cc5437ff9ff5dc71680b0c
SHA512 cc119cb622278139828114a9c91aea7547203b9d756219606f37b83f827eaa4d84d8d2f8ea288d8f2618e17402b0e1693e468213d36fc675704c8dfb590bad9b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 46d83e8197d3b4ac9118bd2b76d2099a
SHA1 e70610832ad6ddd032854f73e86bca1622bc0ba8
SHA256 93405e8b8120a3b5f34dc41046ebce806b8fdc6890fbeb61c0584708c9c54c0a
SHA512 aaae18c3bb9a8eca73c7ba06da8766119f55937f5d600f94ce60dde993ef9939a9718204f961befa4da3bc355373031e5235134b41ede1718eb99ec4641d9fc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d1ab0909f95a4bbac89b47531678a8c1
SHA1 edf6d7af233f8f1f34cf90d6777f08c8642d1605
SHA256 f57a79ce3593bc2f3193de9fdd0d01f50ea42425d0737d045ae382460e4c67e9
SHA512 17913ba64b1ce28fe2b63fb5191a3a588800b90f55e4556419f33d05f50fb5272b874ecb75495ea4aaa10a4ff7b4eefd5742f12e53d7d72d9921b4041a730bac

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 1384b52b0e11bff9d759b54e0518efa5
SHA1 c6d07182c1fbd9002ccc631cae6088b457d88ebd
SHA256 aa34b20d6a6fb6d60e58c1512e7549ea15590bcb7c78ae68282addf6246a0b55
SHA512 64de6ee77c49e157e752266b69b84fbdf2842e646f3ee4908a9aedeb1c2cda7e6423615db77ce952fee871b685c2924a896679a92dc51cb564e9a62224342def

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7799b9fec720b7ed0d592c6303454951
SHA1 33c0290b1c720e2b032343f58d40063e9b2a96f9
SHA256 bd36b32377182d91df00b5870532cac1f8ba544ff61ca820a927604ac7ecd4af
SHA512 334c656ce149c18cd44ee7c3d86d242dffb0707f1a05d71da8c9893c819e7e2ff483ebed61ad3e24b82ba460a4e4affbfa3f34cf030ab5b777b4aae01f738e70

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 066fe1cc291c99b25b7631d371d5d9f3
SHA1 f1e072383a13b9d3281f1d5517fe42128ccf6740
SHA256 73a92e1108acf1304a65bf9d0a62d75a39a5f45588eacf7aeca302f24a4e30d0
SHA512 4fef5d2e2c28bc76c50fa8626273c3805c382294b04cdb416467034d63e2a57353df26ea6de4cbd1988932737b34b971a3c2f29b37307fcb2048f4c11df08927

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log

MD5 665280958d5d881bfa67f3421cac072a
SHA1 01cec24191b2387042e015054fa233db33672d41
SHA256 66d3a95b7d4d1b46c42c3c55be958060b5f531f68577b67cd4dcf9c26c2308a5
SHA512 7068236aa866aaef14590552e7e16d7fcf33efe84dabaeeab59178b165e2889561dbb925f3f44d089e17f8477998599f199372ee7b9c5fe628e98488471ab59c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 35361b508b2f05ae80e1be72fb2c7d48
SHA1 d55424562f63be87885e172734b49a31b75f3427
SHA256 8f1f44761ee41f0763fb3081f5c411b1d699dda3245276485a4a0e23925a0723
SHA512 0945b5ea4fa1e56da4e4b2b11df81cc549448d7b1a979d2a229b44ff9f7c3a3eaf3d991cf1217be1218432f56c941b817ec2c33ad8d32d7502cb6314d1ff39c1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 66135b4a7d890a58ee86e128a48265bd
SHA1 45718fbb30c4263efdcdb0e9ad5975f571570498
SHA256 272b6d25bc03d93fbb05cb25b68da479f6f54f988a1812206e245b081a15df80
SHA512 10ec3e72d669406fa5855d96fbfc9b4b1f836d0f65fbf265afda737e0ae92b646e5ff3485c83ec0a9ed952a268425d306ce9828b4827192acca0a969fa0ba9bd

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 4f66f09901b6d98b0561ab8fbf196a5a
SHA1 7e1e72ec7389c9c75b3e7f64b22d5fe185fad887
SHA256 397101418447ecb53c0e739e2788b48ebd2cf732634e1df5c6bd3bf8f32e2695
SHA512 a7c71d4013d748b8d579d58c0050f28e591603fdb991495f74dfad8f5ef73023ce8bcc43d5f790bdc7e5b19153eb20947ad97203d727232e23f98b81b3c811fd

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 a904503553803e599f850cfa97b8e7b5
SHA1 94dfe9eb3f06119eef3d5f0926f2fbc1e1649b9d
SHA256 20d13c255fac8a21b128ecb59760e2d7ad887639b4f8ccb0d43f258c34077573
SHA512 3237bd3871fa75a59462ca1c5937495d6a05f254b73476fcfacdf7a03a433168213025b91475cf87c854e2cdf03f583429e548d7c3be194bcd1b3d016dc8857d

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1416815177\manifest.json

MD5 09ae1e90f3aa21ac68cb7f6c1bfcc331
SHA1 a310ef51295749454c15136a3c30f566721076a7
SHA256 a24285c52c20baa1b824042982967c6291d755318ce98afa003a7f138c1b858a
SHA512 179a6ab02d8e96bcd5a8ece1e20eef980a71bab2ec5a1147781f9b29bf57f0428cda36deae13e6bfc19654017bfd6c75e49d31fb77e1324fe7a1ce48aaa404bd

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PKIMetadata\945\ct_config.pb

MD5 27d3304d96b6d9040693e9bc8e1a344b
SHA1 4308a601504e25241a20117f77710ec0e4bd175b
SHA256 dc81dd68bfae00956dc48fb38eafedd4c4e94054f68937f0e50021c69a579127
SHA512 eab6144d8823457d76233331c13656c0ddb271d17a7264d0cbcaa076d2d1e83a21fa2d93bfedf44046b15ab6e72c5e816a2bad6e09efee931b6088afeb64e2f2

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PKIMetadata\945\kp_pinslist.pb

MD5 22ee548baffb6f82c9a554ed8120a4d0
SHA1 7e3eb6d358722aaef6a7f0ae85c778adbda8917c
SHA256 02fae3fe343c93e08ac7a10ad43658776121b271fd2fa795436c3c376f2bea60
SHA512 6a014011ec4a7bcadcd9aa86234c6d0afd56d97210de92268948d2f13b781c631f6f463416c034931812075457a99a80bd7a569f8764b084d3a25a96d6decf42

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PKIMetadata\945\crs.pb

MD5 51c912244e7ecaa42f87eacf5dec3d64
SHA1 6c1fbe878e822b41dc5fd8f8b6fd71c6555a74b3
SHA256 cf405ba3735249f0fb97d3d822289737ddbaed63ba60a27fc6732c9f1705668b
SHA512 966fd17bdeadc56b8f2a36cf78762cd981aec763a7f00027ca05ffa20da2c318773d0fb39f0ceeed86b49d8aa04544fc87a73ecc9dcac9e54d14b9ba52b7dfbd

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 964256820345c69be27518b57bfa719c
SHA1 a69fbee8f69283241365c6355c9d2847cb79641d
SHA256 b1da77d69cc958f0a84c9b4c565383e827177b5e994e9eb8d22e9c825466a392
SHA512 feb9db89eb5b18011a17ea54d9289970345f20865b2a7dc98430b49c42737f7e25878ac4c575d433cb1c5ef990df04af2f47d15f581c369486335deb4d0fb524

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 868662e508f8c762b797422322d74448
SHA1 a0a30623500e54462de6158e7fbed87c9325d2d4
SHA256 f6e918a527260cc6b2ba26a3753a62872ec623a42074bbde4b44102cbc98af9f
SHA512 01923da51638a4e1283807e0c32614bb2250585a64c21446de190e446c046cd684c9e20cc272574130f8050ea512a6723f80d9db5c11452eeb43933b184e685b

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 2f35d0e13c25b2291320970e48c86b89
SHA1 2ff4f7083be81d75820341b38954ab97984a6e85
SHA256 a9b3961168f83b9b70c2fab2bb3c57521bbd630dfe54d99a1d16850288abb006
SHA512 7149b3665a6483f85a1192ef505c11fd870961bf68b897807db8a950ea658e03089bd1f4a1179a5e841e3a4a84b6945b5b3ecea4259288a49278939029c85930

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 032dbedeb7209e2a74bbe25c448e0df0
SHA1 c84d122fc581e13eb44033feb74958aaa84186b4
SHA256 66306cdf943b6bf35b8dd789e0a591f4e89b8977a3de41e4af629651a27418a1
SHA512 b535c1286a5918483b8606c21996889a7dad7b58b3ac5fa7faec109be75f6238180a61597f21b5c7935f4c82f832686d8647bad6ec69610167aa7b234a12980f

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\TransportSecurity

MD5 458385cc27405d2aa75042e536bfb0ab
SHA1 08694c17e82e379b215f2beb1c8014a53f8642dc
SHA256 f6aca677bebbdf4e2bffc1b162625622621094f017684256decdf7d437275236
SHA512 aa10329970e4c8e4ef5374e3e2576c601294401c4d60aa466acdaadd658e82f82816712d1c3401c4a2176a6bb89d646a2b064af7e212403ed73b8c14676e3d0c

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\263bbc26-ef18-4975-93ba-a213e5a531ae.tmp

MD5 af8b8cf02aa20eae4e441c51d2fb0cd8
SHA1 a155f6bd2c6f41a89a80aac536b452bfaf49ef39
SHA256 7e45682a1774f5dc0f728adbb9668c83a112a0e0ff7ba3183123e107015efed3
SHA512 79af3ce750ce5705e4b448bed240f12e82380741cbf64cd4f7bea961ff0f5314cc8f6f7a03bcd599041999220a64566ca6aedc25a6bb9202bf2e7719808edf30

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 fec21fc3f260f877e9917376cc26d223
SHA1 fc62abb43983219d1b88facce2581a2256173660
SHA256 a2aef4909d7bc178129a31856cea81f745b0dd68f67af76588ff0000ecc6c8bc
SHA512 ce83784cbe390a6d639824f0cd9f979a3581f0078886b4fd7bc3c3223446f5e5a75a28cc2f8068221c6c3dff863d6a9c8c27cefb959e484a7a4d6f1df114bdee

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_984910190\manifest.json

MD5 898f5b3c1b9e44506bd7a511321440d6
SHA1 0096290f45fe065bf6ee65e535cf5b2ce6949276
SHA256 9d00037ba16af20e96e2afc34f260f0e51183904c8adfbb0c2fa96ddc7a16f81
SHA512 0cf4ad588afc6df659809325f582f64aaaf1ee3661893dd76209ce3036ac553518ee007666faf7c08a0f2742f8eb528c8cc0c181d1f62e182bdd14e1553c3f9c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_417183657\manifest.json

MD5 ea1afe8ec4bcb01e90d4b4c40561a455
SHA1 0026ee91ed70e8a78dc568c0f4f413368458a7fd
SHA256 57e8a791b9890a0d7e5dbcc46a5abd00ded611dc107659f27ddaf46557491208
SHA512 86681b1e05a7f937f1caa25fb337a68c03be0b92f2652e4fc2b8bcaaa0c8116a35de2399a1752f7136500d974de752a1a1368f07be73df7f5944c9cfda2e36ad

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\CertificateRevocation\8740\crl-set

MD5 78eb17c6725d1866498a5686dbc41a7e
SHA1 47d9449b3c174177bb7e6d21b3337e69c55d04fd
SHA256 0842e42659565226dc147666632625825f5191eafad20bebe321000c57986a72
SHA512 db445019904cadd46fd2e09c57395a3b7e532ef40952ebdba3b54d180bbf44a34189f8c4896a5f2ca982fbd3bf8a144e255a071adaf913209d78ce78948d6c98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6eab101e30ade7ef8f160d7a921ab6b7
SHA1 43c0098509d17b24d8c1513f0650f37cdf458d84
SHA256 23924e3703043cf9a7df6ec9671270bf1bd220598b1ad6c369ef7d754ab3e9c3
SHA512 62405cb47c608b72da1d81c5e26dd541617c5874c7596a93f7b7d0dd13ab34f6e732f8e223278ab4bef428c1651b7ec130259840221e952d07b6560c6bfcd6d1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0bb40b1f0c55960215a182bffdbe7cb3
SHA1 17f2f520f0d681680d51a11d05905ac89f5f7376
SHA256 0ead33c8f7ff6a73fa8fc8551a767b130128b07a10d29a75199c512931e1cffa
SHA512 aebcedff88a3b2a11b64414fbdb8fb2accb7b668e3d130cc64cde94708b0aa39fbb7e3c79a478ef099a70c8db54b1ea9f5837b1fdf15479420200103aa07b7f6

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 d7771b35270b6714402e3102835ab048
SHA1 3a0499e7d6978402996a2fab0dc2bd2aa96e55b0
SHA256 3216a373538794afd194c414b6f81bb8b53ca3d1cadacc3d48142f5db13eb0b4
SHA512 f653c7da5f30a02abd8e8a5beb5616b45ac0ead9357ad5237c8db9cb98ad58ca251f91d7582bfb0705e5e82c3ebc3e8358eee0012332782efacf849b9aa938cc

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Network\Network Persistent State

MD5 bb16ab2dd7db586905cd2fd2f54e7122
SHA1 ac04a09db2825583f5ca4a50f17b2ad0f005f181
SHA256 cc3d065523ae772cd391bf4f49322ecad85af05f6eb31f2703cca3b97c28a437
SHA512 b4cf3202dd7be80f04c8cb4600a90d7dfa800b0e7bfc0b5f3233e1f72a44871d9950eedbbfeee06b917b848ee86be58282234a50d957d68ca62ec93653a4919e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 b139115bc2be3ad75f31b9e1dcf18099
SHA1 f0146197ce68f4b6ebaac1eed1bb1aa919954ce6
SHA256 10afa9551e4db2266a3a346be55dd814eebd43f8ce8cd22997c6e104c78e8e93
SHA512 efaf9d446ef9145baf21de6a2ef98f5142b741e4097b04fa497aef49a64a6456a025adf94c2de5e7f0b22def3424f82280d416f186082728c15d35fd3eb46869

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1843464599\manifest.json

MD5 2648d437c53db54b3ebd00e64852687e
SHA1 66cfe157f4c8e17bfda15325abfef40ec6d49608
SHA256 68a3d7cb10f3001f40bc583b7fff0183895a61d3bd1b7a1c34e602df6f0f8806
SHA512 86d5c3129bec156b17b8ebd5dec5a6258e10cb426b84dd3e4af85c9c2cd7ebf4faea01fd10dd906a18ea1042394c3f41a835eae2d83dc8146dfe4b6d71147828

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 cbf0d6b733610acf096e6ec829b472af
SHA1 fac6a9f36168dc1d7f88e1a1093278fd6bcaf205
SHA256 30cf32f87ae87459e924082f84cd9b19a99118f3282708bef87966498c4b3f80
SHA512 adcfb015ebb31394e8a1df3e4dfa073c803a8d3f97ae9c701043f0c865f02ab329a4a05c23b24a793e62b887f3991e10e20cacceff7f168dd507d9d32a242a82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b9ae36735006ce88cbfd2a92690220ba
SHA1 f50ec7b7f272520236ff92751241a0bf761a4c5d
SHA256 6abe773b4266ceb4e2f0701e43a363a6a58a78b8abaa21059b94eaa6ebd8444e
SHA512 996f34394bb8bfdfeff7c6764898b1e5b1916c14e5229b115b1ae359fbe667d6fc2b7b5e1d87a1845b941883ab195de6f38704dbc3b059c2d14706aec38e4ee7

C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\ZZZVFBI5\p[1].gif

MD5 d89746888da2d9510b64a9f031eaecd5
SHA1 d5fceb6532643d0d84ffe09c40c481ecdf59e15a
SHA256 ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
SHA512 d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1270660771\LICENSE

MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1512_1270660771\manifest.json

MD5 f484730e3678d8a3d9d2e39ec6e43aa5
SHA1 01567fae3cbd5beaf099f5ccbd0a2f2d39f620ac
SHA256 dfc1e147364cce4708e0d4bad53e46669edc0cfe0fa9c78f773a8d5ee5bb7895
SHA512 ffb55a70258aaf3b6c3de39298cb0cd0700263c6cfb83ca26a798c41082925f2b45d49b23746d7ae971346b94e8f545f72b005b19e6f16b0955623a1313f9e33

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\TrustTokenKeyCommitments\2024.5.3.1\keys.json

MD5 e2e2e3b27dbe8ebb1e5a1689cbada547
SHA1 0f173e6f154e12ce6774b006a4cc42d7a680f7a1
SHA256 0af9be189481b755cecec6901ab03e1f41557760157501f7d57570222db5944a
SHA512 e9c6e2d78df50474ee1fd4c01bf05c135dfc180817ba204fa10fe4d7c0c7560954a905244aed474220dd773645dab7c647ccd53fe82896d70f9177efdf6a85b0

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 39010eff6cb2f5baadd5a3e25b866b55
SHA1 f948be58b45a0740088ce06861d1972f0ac054f6
SHA256 9985ba337f8e739db9e23cd536f6ecc424f0cf2c113d220709ca78c810bceaec
SHA512 37f7c6a0068333c9ff58eeb05e2826b5ad290314bd87b2783b2e02ece39c00290fce755d1f0126e4ce11d7ee6a62584e2aebfb50689b7b0201ae7098cf9ab7bb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0

MD5 dd231d15cb244fb76fb431dd9d9dadb1
SHA1 4d6110ceb8b887af18cd7c37e556cb260b57e907
SHA256 5bff98d35728a0fa15f47195c7f069423e8fcae8ce37bf3abe1eae7a493ff969
SHA512 eaaaa77b3d956df447e45a40db5f47efa45c4023eb8f9ace8f7905cd9dc7cbfbdc35a98ce00f76aba6769b6199bb3986f1884c521a6e124688f728493654d7c9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old

MD5 580371f8e63268714f4b5d0784f560c6
SHA1 367a461b7b717625608cae9f7e38feb11fd372e8
SHA256 bf75c00f919966a1f96b1ac128da275099ad33b36520794c53b92e9b96191933
SHA512 264d09e2a78103785f650d058b8b7b92bd7b1a86bed6f04b9a6c927cf22575c978840314e9402efc475a5356e2f05dac65041de2d9301d92deb4f4bec5a63542

C:\Users\Admin\AppData\Local\pc_app_store\User Data\Default\Preferences

MD5 d2cf2fb6f615983fb8cd6b6093c33608
SHA1 626ccc600162fb983f184aa87c6049770238e0a7
SHA256 421dd4162b583f6a63f1cadd7030492c519e1603a335b192bba1fa6e90ec7361
SHA512 a92d7ab16478fd0fc59bebeb94044d2e988e5b570364df07d50fb57a55ac6095026a8a98310ab3055efdf10122a17d18d0a5ea43e6f4feae297878f755b5f6cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 50b03dd8510565c05be078db75980c73
SHA1 74f9c7528ff0a730781a3b688bd57dc1499ae44d
SHA256 7cfb91a52bdb8669f9522717de4526a48056add001fd04d886936497f3bd4493
SHA512 e10bb03218f5b82e1229058f0312b26538d62585b5c541435f3b0e178d60237a0e46559236bc4a7ceb6dff14bf2bac4c6467fee22f4f4e6907f557200bf7a3ce