Overview

overview

7

Static

static

1

Wave Browser.exe

windows7-x64

1

Wave Browser.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    90s
  • max time network
    92s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2024, 05:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Wave Browser.exe
  • Size 1.2MB
  • Sample240614-fr1fpazelp
  • SHA256 4114122c0dca23f637d83eed33f9abcdc92709e2ac6f63ffd55f5aae519b58ab
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks whether UAC is enabled 1 TTPs 6 IoCs
    evasiontrojan
  • Downloads MZ/PE file
  • Checks computer location settings 2 TTPs 48 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 3 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Program Files directory 14 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Registers COM server for autorun 1 TTPs 55 IoCs
    persistence
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 43 IoCs
  • Suspicious use of AdjustPrivilegeToken 59 IoCs
  • Suspicious use of FindShellTrayWindow 60 IoCs
  • Suspicious use of SendNotifyMessage 52 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\Wave Browser.exe
    "C:\Users\Admin\AppData\Local\Temp\Wave Browser.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:684
    • C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
      "C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:880
      • C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\SWUpdater.exe
        "C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"
        3⤵
        • Adds Run key to start application
        • Checks whether UAC is enabled
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4656
        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver
          4⤵
          • Checks whether UAC is enabled
          • Executes dropped EXE
          • Loads dropped DLL
          • Registers COM server for autorun
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:3732
          • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe
            "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Registers COM server for autorun
            • Modifies registry class
            PID:2232
          • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe
            "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Registers COM server for autorun
            • Modifies registry class
            PID:2132
          • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe
            "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Registers COM server for autorun
            • Modifies registry class
            PID:1528
        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg
          4⤵
          • Checks whether UAC is enabled
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1872
        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{069D0C8C-B70F-484E-92C2-C88FEB3ED04B}"
          4⤵
          • Checks whether UAC is enabled
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: GetForegroundWindowSpam
          PID:4268
  • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
    "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding
    1⤵
    • Checks whether UAC is enabled
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1960
    • C:\Users\Admin\Wavesor Software\SWUpdater\Install\{287379F0-EE90-494F-B493-0C619B577D85}\WaveInstaller-v1.3.16.5.exe
      "C:\Users\Admin\Wavesor Software\SWUpdater\Install\{287379F0-EE90-494F-B493-0C619B577D85}\WaveInstaller-v1.3.16.5.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\guiF26E.tmp"
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:1300
      • C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe
        "C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\wavebrowser.packed.7z" --make-chrome-default --installerdata="C:\Users\Admin\AppData\Local\Temp\guiF26E.tmp"
        3⤵
        • Executes dropped EXE
        • Registers COM server for autorun
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:2448
        • C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe
          C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.5 --initial-client-data=0x274,0x278,0x27c,0x244,0x280,0x7ff7e4aaea10,0x7ff7e4aaea20,0x7ff7e4aaea30
          4⤵
          • Executes dropped EXE
          PID:224
        • C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe
          "C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\guiF26E.tmp" --create-shortcuts=0 --install-level=0
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:1544
          • C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe
            C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.5 --initial-client-data=0x274,0x278,0x27c,0x244,0x280,0x7ff7e4aaea10,0x7ff7e4aaea20,0x7ff7e4aaea30
            5⤵
            • Executes dropped EXE
            PID:892
        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --prevdefbrowser=6 --install-type=1 --from-installer
          4⤵
          • Checks computer location settings
          • Checks system information in the registry
          • Executes dropped EXE
          • Loads dropped DLL
          • Enumerates system info in registry
          • Modifies data under HKEY_USERS
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:3428
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.5 --initial-client-data=0x100,0x104,0x108,0xe4,0x10c,0x7ff9ce5748b0,0x7ff9ce5748c0,0x7ff9ce5748d0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1100
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1956 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:2
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:764
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2176 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2628
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2476 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3960
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2952 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1656
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3520 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4060
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3816 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4540
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4432 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1172
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4528 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4052
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4612 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3588
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4768 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2784
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4752 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1300
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5000 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1428
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5116 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2868
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5236 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4532
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5352 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:944
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=5468 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1240
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6048 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2124
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6252 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1200
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6544 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:1512
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6784 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            PID:4076
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6940 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3500
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7084 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5204
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6684 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5316
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7328 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5364
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7312 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5508
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7612 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5596
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7752 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5640
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7892 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5756
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=8068 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            PID:5888
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8256 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5960
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8420 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:6024
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7568 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5256
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6552 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5276
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6928 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5340
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6128 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5400
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7412 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5412
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8692 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5492
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8716 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5580
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7460 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5636
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9024 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5720
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9160 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5824
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6000 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5760
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7172 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:3500
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9204 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5264
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9248 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5560
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9400 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5772
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9540 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
            • Executes dropped EXE
            PID:5356
          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9388 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
            5⤵
              PID:5216
            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9808 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
              5⤵
                PID:5464
              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3780 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                5⤵
                  PID:5756
                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9952 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                  5⤵
                    PID:5420
                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10192 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                    5⤵
                      PID:6040
                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10344 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                      5⤵
                        PID:6104
                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10488 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                        5⤵
                          PID:1816
                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10624 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                          5⤵
                            PID:1152
                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6416 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                            5⤵
                              PID:5408
                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10904 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                              5⤵
                                PID:5644
                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=11236 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                                5⤵
                                  PID:5744
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=11248 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                  5⤵
                                  • Checks computer location settings
                                  PID:5516
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=11196 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                  5⤵
                                  • Checks computer location settings
                                  PID:5512
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=11168 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                  5⤵
                                  • Checks computer location settings
                                  PID:5076
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=11552 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                  5⤵
                                  • Checks computer location settings
                                  PID:4048
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=11712 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                  5⤵
                                  • Checks computer location settings
                                  PID:5968
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=11924 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                  5⤵
                                  • Checks computer location settings
                                  PID:5280
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6512 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                                  5⤵
                                    PID:6152
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=12204 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                    5⤵
                                    • Checks computer location settings
                                    PID:6772
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=12192 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                    5⤵
                                    • Checks computer location settings
                                    PID:6792
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=12528 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                    5⤵
                                    • Checks computer location settings
                                    PID:6804
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=12728 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                    5⤵
                                    • Checks computer location settings
                                    PID:6824
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=12960 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                    5⤵
                                    • Checks computer location settings
                                    PID:7072
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=5940 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                    5⤵
                                    • Checks computer location settings
                                    PID:6564
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=9212 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                    5⤵
                                    • Checks computer location settings
                                    PID:6780
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=11768 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                                    5⤵
                                      PID:5536
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=4800 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:2156
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=4860 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:2636
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=5096 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:6224
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=8232 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:6328
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=5204 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:4328
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=5432 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:5904
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=11996 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:6376
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=5288 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:944
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=4504 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:6572
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=5068 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:5996
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=6604 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:5312
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=11508 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:5360
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=6872 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                      5⤵
                                      • Checks computer location settings
                                      PID:3048
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10420 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                                      5⤵
                                        PID:5988
                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6820 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:8
                                        5⤵
                                          PID:6596
                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=9828 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                          5⤵
                                          • Checks computer location settings
                                          PID:7000
                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=11092 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                          5⤵
                                          • Checks computer location settings
                                          PID:5592
                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=7848 --field-trial-handle=1964,i,16408198027484201709,8260394898643255580,262144 /prefetch:1
                                          5⤵
                                          • Checks computer location settings
                                          PID:1032
                                  • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                    "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjY3MiIgZG93bmxvYWRfdGltZV9tcz0iODI1NyIgZG93bmxvYWRlZD0iOTYwMzM3MjAiIHRvdGFsPSI5NjAzMzcyMCIgaW5zdGFsbF90aW1lX21zPSIxMjY3MyIvPjwvYXBwPjwvcmVxdWVzdD4
                                    2⤵
                                    • Checks whether UAC is enabled
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:2108
                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --strtl=di --start-maximized
                                  1⤵
                                  • Checks system information in the registry
                                  • Enumerates system info in registry
                                  PID:5464
                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.3.16.5 --initial-client-data=0x120,0x124,0x128,0x104,0x12c,0x7ff9ce5748b0,0x7ff9ce5748c0,0x7ff9ce5748d0
                                    2⤵
                                      PID:6104
                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1840 --field-trial-handle=1844,i,10392033419771549850,14762269753951861706,262144 /prefetch:2
                                      2⤵
                                        PID:7096
                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2124 --field-trial-handle=1844,i,10392033419771549850,14762269753951861706,262144 /prefetch:8
                                        2⤵
                                          PID:5240

                                      Network

                                            MITRE ATT&CK Enterprise v15

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            SWUpdater.exe
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\SWUpdater.exe
                                            • Size 108KB
                                            • SHA256 ee87747102eba8844939352740d0bb6c4a67f10c2656961cb2722cd42ba99f40
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            SWUpdaterBroker.exe
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\SWUpdaterBroker.exe
                                            • Size 97KB
                                            • SHA256 74bd216198ff11f08542473aaa7e5a619b50574e344ba8e8ca2c19ff497bf284
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            SWUpdaterComRegisterShell64.exe
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\SWUpdaterComRegisterShell64.exe
                                            • Size 190KB
                                            • SHA256 00cd644354032257a39ff710ddd03e9fb98348f5323dec31ca670c903d68274c
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            SWUpdaterCore.exe
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\SWUpdaterCore.exe
                                            • Size 208KB
                                            • SHA256 8af504dda28da0896cb0e17273878d285d8cc1f912d304b21a49940fb577a0a5
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            SWUpdaterOnDemand.exe
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\SWUpdaterOnDemand.exe
                                            • Size 97KB
                                            • SHA256 cea433e8fea8dcf1705016545abd150a2891291ae122a776cd66ddb802a17587
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            psmachine.dll
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\psmachine.dll
                                            • Size 259KB
                                            • SHA256 442af0a1a403e17b5e5676cb49973d9e3ae067cfe9efb8b669bf413f7b5a2e1d
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            psmachine_64.dll
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\psmachine_64.dll
                                            • Size 323KB
                                            • SHA256 7e05780afffb2834ec4e2e1d67c9031616c13394ccfeb3a3c678415f19ba1104
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            psuser.dll
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\psuser.dll
                                            • Size 259KB
                                            • SHA256 a0439f5455ef696b70a230ab76c15f4bc3d7571ad4fbc32fda95247789aa5822
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            psuser_64.dll
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\psuser_64.dll
                                            • Size 323KB
                                            • SHA256 2992995fe9fbb5b0ff1da5f081f2aabd32ca276ede41889b4e457e6cbcf21efd
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            swupdater.dll
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\swupdater.dll
                                            • Size 1.0MB
                                            • SHA256 b21f99f14b4ccc78c5e01c269a8eba83ae0c5912b46d8c1554f329a1076a7617
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            swupdaterres_en.dll
                                            • Path C:\Program Files (x86)\Wavesor\Temp\GUMB4E8.tmp\swupdaterres_en.dll
                                            • Size 42KB
                                            • SHA256 a535ef96bcbe7f6953fb6d7194540716df495bd7cf25e902dddb6756561189bc
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            106143bb-97f6-437b-a561-ce5440b19ac1.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\106143bb-97f6-437b-a561-ce5440b19ac1.tmp
                                            • Size 1B
                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            SWUpdaterSetup.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
                                            • Size 796KB
                                            • SHA256 3d828bcccc628e7096856337b178da5608a6c3db99383374e6c49d50a1895e64
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            guiF26E.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\guiF26E.tmp
                                            • Size 1KB
                                            • SHA256 5e1cede4ea5c266fd4ecbd3feb9f6b7a518705c7af061caea58b71e4833caf3b
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            guiF26E.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\guiF26E.tmp
                                            • Size 3KB
                                            • SHA256 72bb1258cabde5860aaa51e3097052fe13f6b9d541b16623aa31b84e877801c0
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            setup.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\nsjF500.tmp\setup.exe
                                            • Size 4.1MB
                                            • SHA256 a83f3ae723657bf6fe90e39fdb1816f9ca652a310b98d8da22075adedc21071f
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            content-script.js
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3428_1375744180\CRX_INSTALL\content-script.js
                                            • Size 215B
                                            • SHA256 dbf6ccdb61c9e9287a12d830a61b3163d943c985a1f5899b2ad00ae8072e1cef
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            chunk-vendors.67b6e527.css
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3428_992723239\CRX_INSTALL\css\chunk-vendors.67b6e527.css
                                            • Size 386KB
                                            • SHA256 2b6e7fa075a7c50adac2642622b0b4e48b375ba62d10a7d69cd83d2ff27b7194
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            rules.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3428_992723239\CRX_INSTALL\rules.json
                                            • Size 316B
                                            • SHA256 8b8dca5d206ffcfddfabdf3c0c90f97da2bc8c993675ce616891745413ac93a7
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            LOG.old
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4540_855556287\Sync Data\LevelDB\LOG.old
                                            • Size 323B
                                            • SHA256 0f47aea5c2b274c9b17ec9423d9852a3a90ad098b1f2996be4e42332b866145d
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            64f72c16-3cf1-4c63-a66d-0e5858c1b5af.tmp
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\64f72c16-3cf1-4c63-a66d-0e5858c1b5af.tmp
                                            • Size 5KB
                                            • SHA256 836234e9ecadd61c64c2e4e1dd9ff23999ddad56e08a14fe9c383bc200a8af32
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            settings.dat
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat
                                            • Size 40B
                                            • SHA256 6f30d168ee6031268a5fb73a55152a0e7fb8c0c388f1627abb0b6eb5241d9253
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            settings.dat
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat
                                            • Size 40B
                                            • SHA256 649c936122a975ffc546ae02301642e9014269886cebf25fa6f8f9a70d092ddb
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            4e398e06-7c5a-4c66-a85e-616da4202863.tmp
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\4e398e06-7c5a-4c66-a85e-616da4202863.tmp
                                            • Size 36KB
                                            • SHA256 ca04e93752beea5d5aafd022aef0fb830bf99349ef8977570de84ea3d8e967fc
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            9f569abb-99ab-411e-ae13-d214876a49e9.tmp
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\9f569abb-99ab-411e-ae13-d214876a49e9.tmp
                                            • Size 173KB
                                            • SHA256 b40ed97fedcf048b92224e3c6cac62dd8286732e7a945cdddefc49d8cf5bd398
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            MANIFEST-000001
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extension Rules\MANIFEST-000001
                                            • Size 41B
                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            background.js
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\background.js
                                            • Size 141KB
                                            • SHA256 acf3f0174db217be8b313a4b8c405c54d6504a53515209dccd87d221213e4cc9
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            icon128.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\icons\icon128.png
                                            • Size 12KB
                                            • SHA256 7e5cfa06a8ee0e6581b54abe90e96bba2cc08f30512c926fae7d8148f53fecb7
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            icon16.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\icons\icon16.png
                                            • Size 774B
                                            • SHA256 e5389525ba1c4f04b7d5693429a357a5c6277ae931abd2248a965cf5f8d427e9
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon32.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\icons\icon32.png
                                            • Size 1KB
                                            • SHA256 d989185077f43440d4adf982c585964ef3630d875c6d3cb9b82ce5c1735c2cf2
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon64.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\icons\icon64.png
                                            • Size 4KB
                                            • SHA256 1fdbb30f30aca89656b46743706f68ac6e04560e87cec534549e4c31ede697a5
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            chat_notifier.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\images\chat_notifier.png
                                            • Size 1KB
                                            • SHA256 5f892c3cc9aa33d8e054e0e4ba234ac3e3747ed765b0be87b6e1817d3cbc5a56
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon128.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\images\icon128.png
                                            • Size 3KB
                                            • SHA256 f0a2377fad0525feb0254df9cd50fe8070bf415da7657afd559ecdf3e9d8a5a1
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon16.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\images\icon16.png
                                            • Size 501B
                                            • SHA256 fe35a48804ea6068efff3b2578244922b4485636d24f0f61711bffe7b4c25338
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon48.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\images\icon48.png
                                            • Size 1KB
                                            • SHA256 562adcf2274dbda895c3af3ae1a76d55cbc848749bc45ce3004f2471a7ed6436
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon64.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\images\icon64.png
                                            • Size 1KB
                                            • SHA256 0e53df9f306c6ef1b7166557f16ea8e1a3623e3b9435c4d41b38cd9675ede020
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            messenger-logo.svg
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\images\messenger-logo.svg
                                            • Size 889B
                                            • SHA256 d4e5cbf1780329e64b2a0555f28d437c7feb3019e4fbec9a11416b0e3c9b7408
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            index.html
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\index.html
                                            • Size 1KB
                                            • SHA256 b08a7e81d0d405202e0a9be7d4370b2d224fc9969c60ae70e3ebe47dc622e805
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            main.js
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\main.js
                                            • Size 1.3MB
                                            • SHA256 1721f74838edfcc96c81017d19e94e903c5f343b66596f5d9613bc92add67ca2
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\manifest.json
                                            • Size 1KB
                                            • SHA256 2d4b2baf75297258071663b7bbfb4f12bf5748349e8c8c617d076c5e3a1f1806
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            message-hook.js
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_1110679144\CRX_INSTALL\message-hook.js
                                            • Size 1KB
                                            • SHA256 87179e85e074330c367b64bea5c1385ab53387deb150696709a974bfd52d6a43
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\_locales\en\messages.json
                                            • Size 175B
                                            • SHA256 c5cea8c6fe04b30d8a5490f0bbddd0b3dc3fa4382dde777105bb3e80d2992dc8
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            _ruleset1
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\_metadata\generated_indexed_rulesets\_ruleset1
                                            • Size 539B
                                            • SHA256 1b0293509d472f044cba12851e475f17067a86586b3d1a96017fe3855416aa4c
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            bg-wrapper.js
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\bg-wrapper.js
                                            • Size 84B
                                            • SHA256 0a48213b9a577ba7d1dad1f28e6d7394d6ec81ddb6a3d240b6fa21071a22243c
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            options.e6e84e00.css
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\css\options.e6e84e00.css
                                            • Size 613B
                                            • SHA256 11db5186be7fb14d46e0e42cb0229831754682ee3cacb8ce2613ae9b6684c4c2
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            gmail128.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\icons\gmail128.png
                                            • Size 4KB
                                            • SHA256 ccdaa6965bb0b82ecefb62919324815cabef742506d77de79e36f7beab3fa573
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            icon128.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\icons\icon128.png
                                            • Size 4KB
                                            • SHA256 4579d09ce9295a8419245c2aca45ee91169e182d5861cd7abc061145c53cdea9
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            icon16.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\icons\icon16.png
                                            • Size 501B
                                            • SHA256 5de849a40397f1535caa858fc91b7281a806a8a64b05e4e4ed9c572b42b99325
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon32.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\icons\icon32.png
                                            • Size 1KB
                                            • SHA256 e5f75e716884ff58c46b29e1d44f016ec85b6ecaabf4ee6abf302e76b935c387
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon48.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\icons\icon48.png
                                            • Size 1KB
                                            • SHA256 6643ff55eab8446c16581b4b98ea3688d6f087a747a91382f15c6e740822d172
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon64.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\icons\icon64.png
                                            • Size 2KB
                                            • SHA256 d51dabfc17737b69a588a29a215cdc6c9e1442588555b8d4f58eb885b79b3b55
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            ymail128.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\icons\ymail128.png
                                            • Size 4KB
                                            • SHA256 90c24565cca615f4c105adbc869516d104fc4ef4b8e16b687b138ef1e3ff4b52
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            background.js
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\js\background.js
                                            • Size 168KB
                                            • SHA256 a0c6c4ba721d577350bcfc10ffa4491f87abc04f2fc7eacf0fb650fde4e8376d
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            chunk-vendors.8d4b78a9.js
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\js\chunk-vendors.8d4b78a9.js
                                            • Size 289KB
                                            • SHA256 ed951b5d3a0416421fbbb2ce879297b258c169c7c05744fa21506e6547c28402
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            options.00bb6fbd.js
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\js\options.00bb6fbd.js
                                            • Size 36KB
                                            • SHA256 07faf94d6340d2f5ca395c57037b5e98f6277bcbadb72c6091d092508dbbdeff
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\manifest.json
                                            • Size 1KB
                                            • SHA256 fa430dc95ee3e43237f36cf6832e75cc0a8cdd472467c61a74e50bcf20b03872
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            options.html
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir3428_489197799\CRX_INSTALL\options.html
                                            • Size 1KB
                                            • SHA256 c661f2ed61e9cbf0bd28cf19e3fa9ae1c888b72775d0e378a726160a4be40c3f
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            icon32.png
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.4_0\images\icon32.png
                                            • Size 1KB
                                            • SHA256 6b8407040b26f8076c2d8cc044c92e33c9c7d3ad6d29f32c5091d81380350f97
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            preferences_schema.json
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json
                                            • Size 7KB
                                            • SHA256 4f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            MANIFEST-000001
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_dnpmpbbfdefapbnfffohgcejpogkbjbp_0.indexeddb.leveldb\MANIFEST-000001
                                            • Size 23B
                                            • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            SCT Auditing Pending Reports
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\SCT Auditing Pending Reports
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            TransportSecurity
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity
                                            • Size 1KB
                                            • SHA256 66d4c941b39ff403dfed15acf0369324e4a30fb157a44bde92ac67fe71dedea1
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            TransportSecurity~RFe588855.TMP
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity~RFe588855.TMP
                                            • Size 1KB
                                            • SHA256 7460c6180133f8790c1160326078f2a73920d29284d2f638d9b12fdff3240b6c
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            Preferences
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences
                                            • Size 12KB
                                            • SHA256 2564ea54007f5a0d8ae955b56f8f42f42856fd40fb2f23e51fe017a852cb3c33
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            Preferences~RFe5849d5.TMP
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences~RFe5849d5.TMP
                                            • Size 5KB
                                            • SHA256 582404a96c57df32ad2a42b1a62f277e5f053f2960018cb36df7b02f45da2401
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            2cc80dabc69f58b6_0
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
                                            • Size 35KB
                                            • SHA256 7fd1b31f221e4cf526fbd7da58665ea3f0cd7e7802c2d460f1a7c0c60152f062
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            the-real-index
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 120B
                                            • SHA256 eec664a5cfc61a3917617f8435fddf4f92253ab154823f2904bd206327d64aa9
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            the-real-index~RFe588f6a.TMP
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588f6a.TMP
                                            • Size 48B
                                            • SHA256 dc7cb184cce679192c85e2c1430d2c504869d5c3371162d0266f9f01c1f793b8
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            CURRENT
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Sync Data\LevelDB\CURRENT
                                            • Size 16B
                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            f61201f9-9f85-4356-8c1d-9857ade995b1.tmp
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\f61201f9-9f85-4356-8c1d-9857ade995b1.tmp
                                            • Size 12KB
                                            • SHA256 3cc5ae58fce3521088991999b410bb5e459b8c1c0c017ff091c67d82f342047d
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_0
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_0
                                            • Size 8KB
                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_1
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_1
                                            • Size 264KB
                                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_2
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_2
                                            • Size 8KB
                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_3
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_3
                                            • Size 8KB
                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            Local State
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State
                                            • Size 5KB
                                            • SHA256 9be88f0155a6f98ca74e53440a406daede09f9c34c8eee2386af55355e708e5f
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            Local State
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State
                                            • Size 5KB
                                            • SHA256 559610dba9baa9dacec156852fa6fc514bf3e9e06f8328efd98677f8c44eac1c
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            Local State~RFe584987.TMP
                                            • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State~RFe584987.TMP
                                            • Size 3KB
                                            • SHA256 f17a7b1c10784ca2aa63a64a56510d3b581174be2661532aa823357170e7aa8a
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            WaveBrowser.lnk
                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveBrowser.lnk
                                            • Size 2KB
                                            • SHA256 ba0c6d2d334e031c60be955e22a2520ab04a8732f58400195196508c7ba6aab0
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            wavebrowser_elf.dll
                                            • Path C:\Users\Admin\Wavesor Software\WaveBrowser\1.3.16.5\wavebrowser_elf.dll
                                            • Size 1.3MB
                                            • SHA256 424201e215f733462764e3291b0a679ec40b41906b6122fcf46ed2f13c4637f8
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            wavebrowser.exe
                                            • Path C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                            • Size 3.0MB
                                            • SHA256 c451206e59d0e62a8f9f0b0d6d475dd47a6610e0463440b8c8a208654f498a31
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            memory/684-8-0x00007FF9D8670000-0x00007FF9D9131000-memory.dmp
                                            Download

                                            memory/684-3-0x00007FF9D8670000-0x00007FF9D9131000-memory.dmp
                                            Download

                                            memory/684-4-0x00000000207F0000-0x00000000207F8000-memory.dmp
                                            Download

                                            memory/684-5-0x00007FF9D8670000-0x00007FF9D9131000-memory.dmp
                                            Download

                                            memory/684-6-0x0000000020870000-0x00000000208A8000-memory.dmp
                                            Download

                                            memory/684-7-0x0000000020840000-0x000000002084E000-memory.dmp
                                            Download

                                            memory/684-0-0x00007FF9D8673000-0x00007FF9D8675000-memory.dmp
                                            Download

                                            memory/684-2-0x00007FF9D8670000-0x00007FF9D9131000-memory.dmp
                                            Download

                                            memory/684-1-0x0000000000D90000-0x0000000000ECA000-memory.dmp
                                            Download

                                            memory/684-9-0x00007FF9D8673000-0x00007FF9D8675000-memory.dmp
                                            Download

                                            memory/684-420-0x00007FF9D8670000-0x00007FF9D9131000-memory.dmp
                                            Download

                                            memory/684-10-0x00007FF9D8670000-0x00007FF9D9131000-memory.dmp
                                            Download

                                            memory/3960-256-0x00007FF9F5270000-0x00007FF9F5271000-memory.dmp
                                            Download

                                            memory/3960-257-0x00007FF9F4A40000-0x00007FF9F4A41000-memory.dmp
                                            Download