Analysis
-
max time kernel
743s -
max time network
755s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
02-08-2024 21:44
Static task
static1
Behavioral task
behavioral1
Sample
RLBotGUI.msi
Resource
win11-20240802-en
General
-
Target
RLBotGUI.msi
-
Size
22.5MB
-
MD5
3630a2074d466b46687ff9d8c8dab4a8
-
SHA1
da21db383e4d76686f97ae7644f01af796ce85cc
-
SHA256
db94135a654eb737df7e84a2c145755006859b0318f54830d155e49d7deecd8e
-
SHA512
44548fe7b8419254fb5887116a7b596da76b1e5bc3199e1292235087d0e7ce2e5eab663c21f6c17fe792e5f198ea1ddd0268d31a1bbc1a3fbfb73e4c15fad9fb
-
SSDEEP
393216:/L6KytrrxzxiLSlnh6Cqu46LL4lSxeUUGGWE2UkpN8tQ6a6ITngx7746y3af:uKyHzTln0Tur/4lRUJUntQFTgVdm
Malware Config
Extracted
C:\Users\Admin\Downloads\@[email protected]
wannacry
12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
Extracted
C:\Users\Admin\Downloads\msg\m_english.wnry
http://schemas.microsoft.com/office/word/2003/wordml}}\paperw12240\paperh15840\margl1501\margr1502\margt1701\margb1440\gutter0\ltrsect
Extracted
C:\Users\Admin\Downloads\r.wnry
wannacry
Signatures
-
Wannacry
WannaCry is a ransomware cryptoworm.
-
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
-
resource yara_rule behavioral1/files/0x0008000000025cc2-11357.dat aspack_v212_v242 -
Drops startup file 2 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SDC247.tmp WannaCry.EXE File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SDC24E.tmp WannaCry.EXE -
Modifies file permissions 1 TTPs 6 IoCs
pid Process 7292 icacls.exe 7428 icacls.exe 8468 icacls.exe 7560 icacls.exe 2612 icacls.exe 8504 icacls.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\zlhkxyme508 = "\"C:\\Users\\Admin\\Downloads\\tasksche.exe\"" reg.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000\Software\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterCore.exe\"" SWUpdater.exe -
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe -
Downloads MZ/PE file
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\M: msiexec.exe -
File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
flow ioc 228 camo.githubusercontent.com 228 raw.githubusercontent.com 234 raw.githubusercontent.com 608 raw.githubusercontent.com -
Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
flow ioc 208 https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html -
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Sets desktop wallpaper using registry 2 TTPs 3 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" WannaCry.EXE Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" @[email protected] Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]" @[email protected] -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName wavebrowser.exe -
Drops file in Program Files directory 14 IoCs
description ioc Process File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\swupdater.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdaterCore.exe SWUpdaterSetup.exe File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUTD2.tmp SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdaterBroker.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\psmachine_64.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\psuser_64.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdaterSetup.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdaterOnDemand.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdaterComRegisterShell64.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\psuser.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdater.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\psmachine.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\swupdaterres_en.dll SWUpdaterSetup.exe File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdaterSetup.exe SWUpdaterSetup.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-mn-cyrl.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-de-1996.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1788673527\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_303835148\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_196253879\metadata.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-it.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_639954622\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_855985494\kp_pinslist.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_639954622\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_222426188\ssl_error_assistant.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-tk.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-mul-ethi.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-hr.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_303835148\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_823538160\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-la.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-eu.hyb wavebrowser.exe File opened for modification C:\Windows\SystemTemp\Crashpad\settings.dat setup.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_490584381\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1339675531\safety_tips.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_196253879\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_490584381\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1230463965\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_855985494\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-or.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_873781979\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1788673527\us_tv_and_film.txt wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_873781979\_platform_specific\win_x64\widevinecdm.dll wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-uk.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-el.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-lv.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1339675531\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-ta.hyb wavebrowser.exe File opened for modification C:\Windows\SystemTemp chrome.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1230463965\download_file_types.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-lt.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-gu.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1764361101\LICENSE.txt wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1788673527\female_names.txt wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-sk.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1764361101\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1788673527\passwords.txt wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-ml.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-gl.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-be.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_2130764501\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_222426188\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_873781979\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_873781979\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-nl.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1788673527\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_324274135\keys.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1788673527\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_639954622\Preload Data wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-nb.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-da.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-bg.hyb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-af.hyb wavebrowser.exe File opened for modification C:\Windows\SystemTemp\Crashpad\metadata setup.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_490584381\cr_en-us_500000_index.bin wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2192_1302964959\hyph-mr.hyb wavebrowser.exe -
Executes dropped EXE 64 IoCs
pid Process 6244 Wave Browser.exe 6552 SWUpdaterSetup.exe 5256 SWUpdater.exe 6436 SWUpdater.exe 6460 SWUpdaterComRegisterShell64.exe 6668 SWUpdaterComRegisterShell64.exe 6696 SWUpdaterComRegisterShell64.exe 4668 SWUpdater.exe 6756 SWUpdater.exe 6880 SWUpdater.exe 5824 WaveInstaller-v1.5.18.2.exe 6892 setup.exe 3332 setup.exe 6300 setup.exe 3292 setup.exe 2192 wavebrowser.exe 4392 wavebrowser.exe 5012 wavebrowser.exe 856 wavebrowser.exe 5584 wavebrowser.exe 6752 wavebrowser.exe 1804 wavebrowser.exe 560 wavebrowser.exe 3132 wavebrowser.exe 6804 wavebrowser.exe 6932 SWUpdater.exe 872 wavebrowser.exe 6872 wavebrowser.exe 6240 wavebrowser.exe 5620 wavebrowser.exe 7140 wavebrowser.exe 7132 wavebrowser.exe 4796 wavebrowser.exe 892 wavebrowser.exe 6476 wavebrowser.exe 3356 wavebrowser.exe 6572 wavebrowser.exe 7552 wavebrowser.exe 7564 wavebrowser.exe 6576 wavebrowser.exe 6912 wavebrowser.exe 5280 wavebrowser.exe 4104 wavebrowser.exe 6916 wavebrowser.exe 5672 wavebrowser.exe 4864 wavebrowser.exe 6276 wavebrowser.exe 8004 wavebrowser.exe 7636 wavebrowser.exe 7688 wavebrowser.exe 7956 wavebrowser.exe 7980 wavebrowser.exe 7268 wavebrowser.exe 4836 wavebrowser.exe 7944 wavebrowser.exe 8140 wavebrowser.exe 2836 wavebrowser.exe 7480 wavebrowser.exe 6956 wavebrowser.exe 7700 wavebrowser.exe 2312 wavebrowser.exe 7768 wavebrowser.exe 8208 wavebrowser.exe 8296 wavebrowser.exe -
Loads dropped DLL 64 IoCs
pid Process 5256 SWUpdater.exe 6436 SWUpdater.exe 6460 SWUpdaterComRegisterShell64.exe 6436 SWUpdater.exe 6668 SWUpdaterComRegisterShell64.exe 6436 SWUpdater.exe 6696 SWUpdaterComRegisterShell64.exe 6436 SWUpdater.exe 4668 SWUpdater.exe 6756 SWUpdater.exe 6880 SWUpdater.exe 6880 SWUpdater.exe 6756 SWUpdater.exe 2192 wavebrowser.exe 4392 wavebrowser.exe 5012 wavebrowser.exe 856 wavebrowser.exe 5012 wavebrowser.exe 2192 wavebrowser.exe 5584 wavebrowser.exe 6752 wavebrowser.exe 5584 wavebrowser.exe 5584 wavebrowser.exe 5584 wavebrowser.exe 5584 wavebrowser.exe 6752 wavebrowser.exe 1804 wavebrowser.exe 560 wavebrowser.exe 5584 wavebrowser.exe 5584 wavebrowser.exe 5584 wavebrowser.exe 1804 wavebrowser.exe 3132 wavebrowser.exe 560 wavebrowser.exe 3132 wavebrowser.exe 6804 wavebrowser.exe 6804 wavebrowser.exe 6932 SWUpdater.exe 872 wavebrowser.exe 872 wavebrowser.exe 6240 wavebrowser.exe 6240 wavebrowser.exe 6872 wavebrowser.exe 5620 wavebrowser.exe 6872 wavebrowser.exe 7140 wavebrowser.exe 5620 wavebrowser.exe 7132 wavebrowser.exe 7140 wavebrowser.exe 4796 wavebrowser.exe 7132 wavebrowser.exe 892 wavebrowser.exe 4796 wavebrowser.exe 6476 wavebrowser.exe 892 wavebrowser.exe 3356 wavebrowser.exe 6476 wavebrowser.exe 6572 wavebrowser.exe 3356 wavebrowser.exe 6572 wavebrowser.exe 7552 wavebrowser.exe 7564 wavebrowser.exe 7564 wavebrowser.exe 7552 wavebrowser.exe -
Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 6 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\ChilledWindows.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\WannaCry.EXE:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\CookieClickerHack.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\DesktopBoom.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Flasher.exe:Zone.Identifier msedge.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 3712 msiexec.exe -
System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WMIC.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language icacls.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WannaCry.EXE Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language icacls.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaveInstaller-v1.5.18.2.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WannaCry.EXE Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WannaCry.EXE Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language icacls.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language icacls.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskdl.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cscript.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskhsvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WannaCry.EXE Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language taskse.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language attrib.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language @[email protected] -
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 4668 SWUpdater.exe 6932 SWUpdater.exe -
Enumerates system info in registry 2 TTPs 9 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer wavebrowser.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry wavebrowser.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\NumMethods\ = "41" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WaveBrwsHTM.XSNXQL3TIFE3PUWLZUI3BOGV3U setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ = "IApp2" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WavesorSWUpdater.Update3WebUser\ = "SWUpdater Update3Web" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WavesorSWUpdater.CredentialDialogUser\CLSID SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7} SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WavesorSWUpdater.CredentialDialogUser\CurVer\ = "WavesorSWUpdater.CredentialDialogUser.1.0" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods\ = "11" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ = "IProcessLauncher2" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WaveBrwsHTM.XSNXQL3TIFE3PUWLZUI3BOGV3U\Application\AppUserModelId = "WaveBrowser.XSNXQL3TIFE3PUWLZUI3BOGV3U" setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\NumMethods SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterOnDemand.exe\"" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\.xhtml\OpenWithProgids\WaveBrwsHTM.XSNXQL3TIFE3PUWLZUI3BOGV3U setup.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ = "IPolicyStatus" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\ = "PSFactoryBuffer" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WavesorSWUpdater.Update3COMClassUser SWUpdater.exe Key deleted \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\LocalServer32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key deleted \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1} SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\ProgID\ = "WavesorSWUpdater.Update3WebUser.1.0" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WOW6432Node\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WavesorSWUpdater.PolicyStatusUser\CurVer\ = "WavesorSWUpdater.PolicyStatusUser.1.0" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WaveBrwsHTM.XSNXQL3TIFE3PUWLZUI3BOGV3U\ = "WaveBrowser HTML Document" setup.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\WavesorSWUpdater.PolicyStatusUser.1.0 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\wavebrowser\shell setup.exe Key created \REGISTRY\USER\S-1-5-21-970747758-134341002-3585657277-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1} SWUpdaterComRegisterShell64.exe -
Modifies registry key 1 TTPs 1 IoCs
pid Process 7804 reg.exe -
NTFS ADS 18 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\search.htm:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 648865.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\Roexec.zip:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Roexec (1).zip:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 32272.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\DesktopBoom.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Free Robux-v1.2.6-appsonwindows.com.apk:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Dr. Driving-v1.70-appsonwindows.com.apk:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\CookieClickerHack.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Flasher.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 838885.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 472761.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 252331.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 83273.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\ChilledWindows.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 566692.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\WannaCry.EXE:Zone.Identifier msedge.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 7612 vlc.exe -
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 1988 chrome.exe 1988 chrome.exe 4772 msedge.exe 4772 msedge.exe 2412 msedge.exe 2412 msedge.exe 4724 msedge.exe 4724 msedge.exe 4712 msedge.exe 4712 msedge.exe 4592 identity_helper.exe 4592 identity_helper.exe 6168 msedge.exe 6168 msedge.exe 5256 SWUpdater.exe 5256 SWUpdater.exe 6892 setup.exe 6892 setup.exe 6892 setup.exe 6892 setup.exe 6892 setup.exe 6892 setup.exe 5256 SWUpdater.exe 5256 SWUpdater.exe 5256 SWUpdater.exe 5256 SWUpdater.exe 7540 msedge.exe 7540 msedge.exe 7540 msedge.exe 7540 msedge.exe 7360 msedge.exe 7360 msedge.exe 7192 msedge.exe 7192 msedge.exe 8468 msedge.exe 8468 msedge.exe 8224 wavebrowser.exe 8224 wavebrowser.exe 7716 msedge.exe 7716 msedge.exe 8508 msedge.exe 8508 msedge.exe 3712 taskhsvc.exe 3712 taskhsvc.exe 3712 taskhsvc.exe 3712 taskhsvc.exe 3712 taskhsvc.exe 3712 taskhsvc.exe 1620 SWUpdater.exe 1620 SWUpdater.exe 5476 msedge.exe 5476 msedge.exe 5852 msedge.exe 5852 msedge.exe 9060 msedge.exe 9060 msedge.exe 2184 msedge.exe 2184 msedge.exe 9076 msedge.exe 9076 msedge.exe 5564 msedge.exe 5564 msedge.exe -
Suspicious behavior: GetForegroundWindowSpam 3 IoCs
pid Process 7612 vlc.exe 8832 DesktopBoom.exe 2412 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
pid Process 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3712 msiexec.exe Token: SeIncreaseQuotaPrivilege 3712 msiexec.exe Token: SeSecurityPrivilege 4516 msiexec.exe Token: SeCreateTokenPrivilege 3712 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 3712 msiexec.exe Token: SeLockMemoryPrivilege 3712 msiexec.exe Token: SeIncreaseQuotaPrivilege 3712 msiexec.exe Token: SeMachineAccountPrivilege 3712 msiexec.exe Token: SeTcbPrivilege 3712 msiexec.exe Token: SeSecurityPrivilege 3712 msiexec.exe Token: SeTakeOwnershipPrivilege 3712 msiexec.exe Token: SeLoadDriverPrivilege 3712 msiexec.exe Token: SeSystemProfilePrivilege 3712 msiexec.exe Token: SeSystemtimePrivilege 3712 msiexec.exe Token: SeProfSingleProcessPrivilege 3712 msiexec.exe Token: SeIncBasePriorityPrivilege 3712 msiexec.exe Token: SeCreatePagefilePrivilege 3712 msiexec.exe Token: SeCreatePermanentPrivilege 3712 msiexec.exe Token: SeBackupPrivilege 3712 msiexec.exe Token: SeRestorePrivilege 3712 msiexec.exe Token: SeShutdownPrivilege 3712 msiexec.exe Token: SeDebugPrivilege 3712 msiexec.exe Token: SeAuditPrivilege 3712 msiexec.exe Token: SeSystemEnvironmentPrivilege 3712 msiexec.exe Token: SeChangeNotifyPrivilege 3712 msiexec.exe Token: SeRemoteShutdownPrivilege 3712 msiexec.exe Token: SeUndockPrivilege 3712 msiexec.exe Token: SeSyncAgentPrivilege 3712 msiexec.exe Token: SeEnableDelegationPrivilege 3712 msiexec.exe Token: SeManageVolumePrivilege 3712 msiexec.exe Token: SeImpersonatePrivilege 3712 msiexec.exe Token: SeCreateGlobalPrivilege 3712 msiexec.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: SeShutdownPrivilege 1988 chrome.exe Token: SeCreatePagefilePrivilege 1988 chrome.exe Token: 33 2296 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 2296 AUDIODG.EXE Token: SeDebugPrivilege 6244 Wave Browser.exe Token: SeDebugPrivilege 5256 SWUpdater.exe Token: SeDebugPrivilege 5256 SWUpdater.exe Token: SeShutdownPrivilege 2192 wavebrowser.exe Token: SeCreatePagefilePrivilege 2192 wavebrowser.exe Token: SeShutdownPrivilege 2192 wavebrowser.exe Token: SeCreatePagefilePrivilege 2192 wavebrowser.exe Token: SeShutdownPrivilege 2192 wavebrowser.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3712 msiexec.exe 3712 msiexec.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 1988 chrome.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2192 wavebrowser.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 2412 msedge.exe 7612 vlc.exe 7612 vlc.exe 7612 vlc.exe 7612 vlc.exe 7612 vlc.exe 7612 vlc.exe 7612 vlc.exe 7612 vlc.exe -
Suspicious use of SetWindowsHookEx 24 IoCs
pid Process 8840 @[email protected] 8840 @[email protected] 6744 @[email protected] 6744 @[email protected] 3676 @[email protected] 3676 @[email protected] 9960 @[email protected] 2188 @[email protected] 6424 @[email protected] 7612 vlc.exe 9188 @[email protected] 10008 @[email protected] 9932 @[email protected] 3904 @[email protected] 3588 @[email protected] 5732 @[email protected] 10228 @[email protected] 3660 @[email protected] 4696 @[email protected] 7252 @[email protected] 8908 @[email protected] 8908 @[email protected] 860 helppane.exe 860 helppane.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1988 wrote to memory of 1036 1988 chrome.exe 85 PID 1988 wrote to memory of 1036 1988 chrome.exe 85 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 480 1988 chrome.exe 86 PID 1988 wrote to memory of 1672 1988 chrome.exe 87 PID 1988 wrote to memory of 1672 1988 chrome.exe 87 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 PID 1988 wrote to memory of 1280 1988 chrome.exe 88 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
-
Views/modifies file attributes 1 TTPs 7 IoCs
pid Process 3876 attrib.exe 8416 attrib.exe 9112 attrib.exe 4416 attrib.exe 7536 attrib.exe 2832 attrib.exe 7208 attrib.exe
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I C:\Users\Admin\AppData\Local\Temp\RLBotGUI.msi1⤵
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3712
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4516
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1988 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffaad1cc40,0x7fffaad1cc4c,0x7fffaad1cc582⤵PID:1036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1816,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1812 /prefetch:22⤵PID:480
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2124,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2140 /prefetch:32⤵PID:1672
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2208,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2336 /prefetch:82⤵PID:1280
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3080,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3140 /prefetch:12⤵PID:2608
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3120,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3292 /prefetch:12⤵PID:2344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3084,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4472 /prefetch:12⤵PID:3044
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4428,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4804 /prefetch:82⤵PID:2296
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4872,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4860 /prefetch:82⤵PID:2416
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level2⤵
- Drops file in Windows directory
PID:456 -
C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff6c7354698,0x7ff6c73546a4,0x7ff6c73546b03⤵
- Drops file in Windows directory
PID:3404
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5132,i,16256288557946325445,8079475568045289957,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4808 /prefetch:12⤵PID:4732
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵PID:4328
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:2332
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2412 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xe4,0x10c,0x7fffaa9a3cb8,0x7fffaa9a3cc8,0x7fffaa9a3cd82⤵PID:2308
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1800 /prefetch:22⤵PID:4476
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:4772
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2520 /prefetch:82⤵PID:1028
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:12⤵PID:3328
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:12⤵PID:3300
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:12⤵PID:1040
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:12⤵PID:4916
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4880 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4724
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3568 /prefetch:12⤵PID:3124
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:12⤵PID:2516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3328 /prefetch:82⤵PID:3312
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3548 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4712
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3292 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4592
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:12⤵PID:2972
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2964 /prefetch:12⤵PID:2572
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3544 /prefetch:12⤵PID:3416
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3836 /prefetch:12⤵PID:4276
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:12⤵PID:1176
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:12⤵PID:4056
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:12⤵PID:3044
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:12⤵PID:1112
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6764 /prefetch:12⤵PID:4220
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7024 /prefetch:12⤵PID:3948
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7128 /prefetch:12⤵PID:4000
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:12⤵PID:728
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7428 /prefetch:12⤵PID:3492
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7416 /prefetch:12⤵PID:3708
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7692 /prefetch:12⤵PID:1324
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8116 /prefetch:12⤵PID:5460
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8256 /prefetch:12⤵PID:5468
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8268 /prefetch:12⤵PID:5476
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8524 /prefetch:12⤵PID:5484
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8536 /prefetch:12⤵PID:5492
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:12⤵PID:5880
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6916 /prefetch:12⤵PID:6044
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6944 /prefetch:12⤵PID:5868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7420 /prefetch:12⤵PID:5952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9564 /prefetch:12⤵PID:5336
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9620 /prefetch:12⤵PID:2336
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9892 /prefetch:12⤵PID:6212
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10080 /prefetch:82⤵PID:6296
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10116 /prefetch:12⤵PID:6336
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10096 /prefetch:12⤵PID:6344
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8948 /prefetch:12⤵PID:6596
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8280 /prefetch:12⤵PID:6780
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8496 /prefetch:12⤵PID:6892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3656 /prefetch:82⤵PID:7052
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7992 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:6168
-
-
C:\Users\Admin\Downloads\Wave Browser.exe"C:\Users\Admin\Downloads\Wave Browser.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:6244 -
C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"3⤵
- Drops file in Program Files directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:6552 -
C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdater.exe"C:\Program Files (x86)\Wavesor\Temp\GUMD1.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"4⤵
- Adds Run key to start application
- Checks whether UAC is enabled
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5256 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver5⤵
- Checks whether UAC is enabled
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:6436 -
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6460
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6668
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6696
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSI1MTciLz48L2FwcD48L3JlcXVlc3Q-5⤵
- Checks whether UAC is enabled
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:4668
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{1362D43D-EE69-40FC-A414-B94A6D9FC696}"5⤵
- Checks whether UAC is enabled
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:6756
-
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6552 /prefetch:12⤵PID:1548
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7256 /prefetch:12⤵PID:7076
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8420 /prefetch:12⤵PID:5328
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3472 /prefetch:12⤵PID:4804
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9424 /prefetch:12⤵PID:6068
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=7844 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:7540
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:12⤵PID:6980
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9632 /prefetch:12⤵PID:8620
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7900 /prefetch:12⤵PID:9460
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10700 /prefetch:12⤵PID:6196
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10296 /prefetch:12⤵PID:7320
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11116 /prefetch:82⤵
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:7360
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10856 /prefetch:12⤵PID:7224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9440 /prefetch:12⤵PID:2768
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10324 /prefetch:12⤵PID:9292
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10840 /prefetch:12⤵PID:7548
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=9860 /prefetch:82⤵PID:9320
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10512 /prefetch:12⤵PID:5292
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8444 /prefetch:12⤵PID:5740
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10744 /prefetch:12⤵PID:9840
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10660 /prefetch:12⤵PID:8156
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10424 /prefetch:12⤵PID:7380
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:12⤵PID:9144
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10680 /prefetch:12⤵PID:7188
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10416 /prefetch:82⤵
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:7192
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:12⤵PID:2128
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11144 /prefetch:12⤵PID:2536
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9516 /prefetch:12⤵PID:9464
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11128 /prefetch:12⤵PID:8044
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10808 /prefetch:82⤵
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:8468
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11016 /prefetch:12⤵PID:8424
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10852 /prefetch:12⤵PID:7704
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11112 /prefetch:82⤵
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:7716
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10668 /prefetch:12⤵PID:1864
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:12⤵PID:3544
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10604 /prefetch:12⤵PID:8612
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10264 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:8508
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10928 /prefetch:82⤵PID:7124
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10656 /prefetch:12⤵PID:3536
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:12⤵PID:5836
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3924 /prefetch:12⤵PID:10104
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11216 /prefetch:12⤵PID:9752
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1524 /prefetch:82⤵
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:5476
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3064 /prefetch:12⤵PID:4668
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9264 /prefetch:12⤵PID:3648
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=10556 /prefetch:82⤵PID:704
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9676 /prefetch:12⤵PID:9840
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11288 /prefetch:82⤵PID:9164
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11676 /prefetch:12⤵PID:1116
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11952 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:5852
-
-
C:\Users\Admin\Downloads\CookieClickerHack.exe"C:\Users\Admin\Downloads\CookieClickerHack.exe"2⤵PID:3984
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10392 /prefetch:12⤵PID:4972
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11272 /prefetch:12⤵PID:4312
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11156 /prefetch:82⤵PID:6768
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10404 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:9060
-
-
C:\Users\Admin\Downloads\DesktopBoom.exe"C:\Users\Admin\Downloads\DesktopBoom.exe"2⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:8832
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3848 /prefetch:12⤵PID:7456
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11356 /prefetch:82⤵PID:7864
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1644 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:2184
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11052 /prefetch:12⤵PID:8148
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11028 /prefetch:82⤵PID:3096
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3860 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:9076
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1728,15187649577004399863,6452926574388550476,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9676 /prefetch:12⤵PID:3724
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:976
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1652
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004EC1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2296
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:5588
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Checks whether UAC is enabled
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:6880 -
C:\Users\Admin\Wavesor Software\SWUpdater\Install\{0471FC8A-09AD-405A-A607-1BA681E435F1}\WaveInstaller-v1.5.18.2.exe"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{0471FC8A-09AD-405A-A607-1BA681E435F1}\WaveInstaller-v1.5.18.2.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\gui4A2E.tmp"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5824 -
C:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\wavebrowser.packed.7z" --wid=0yiyn9ne --installerdata="C:\Users\Admin\AppData\Local\Temp\gui4A2E.tmp"3⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:6892 -
C:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x26c,0x290,0x294,0x23c,0x298,0x7ff6411512d0,0x7ff6411512dc,0x7ff6411512e84⤵
- Executes dropped EXE
PID:3332
-
-
C:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\gui4A2E.tmp" --create-shortcuts=0 --install-level=04⤵
- Executes dropped EXE
PID:6300 -
C:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsq50C7.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff6411512d0,0x7ff6411512dc,0x7ff6411512e85⤵
- Executes dropped EXE
PID:3292
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --from-installer4⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5012 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff9043ccf0,0x7fff9043ccfc,0x7fff9043cd085⤵
- Executes dropped EXE
- Loads dropped DLL
PID:856
-
-
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSI2MjciIGRvd25sb2FkX3RpbWVfbXM9IjEwOTI5IiBkb3dubG9hZGVkPSIxMDY4MTEwODAiIHRvdGFsPSIxMDY4MTEwODAiIGluc3RhbGxfdGltZV9tcz0iMTY4MzkiLz48L2FwcD48L3JlcXVlc3Q-2⤵
- Checks whether UAC is enabled
- Executes dropped EXE
- Loads dropped DLL
- System Network Configuration Discovery: Internet Connection Discovery
PID:6932
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --strtl=ti1⤵
- Checks system information in the registry
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:2192 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fff9043ccf0,0x7fff9043ccfc,0x7fff9043cd082⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4392
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1832,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=1824 /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5584
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=1980,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2004 /prefetch:32⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6752
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2264,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2280 /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1804
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2788,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2852 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6804
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2792,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2880 /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
PID:560
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3784,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3828 /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3132
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4492,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4172 /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:872
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4516,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4596 /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6872
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4640,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4780 /prefetch:12⤵
- Executes dropped EXE
PID:6576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4664,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4656 /prefetch:12⤵
- Executes dropped EXE
PID:6912
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4672,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4956 /prefetch:12⤵
- Executes dropped EXE
PID:5280
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4628,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4836 /prefetch:12⤵
- Executes dropped EXE
PID:4104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4688,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5164 /prefetch:12⤵
- Executes dropped EXE
PID:6916
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4696,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5280 /prefetch:12⤵
- Executes dropped EXE
PID:5672
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4704,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5400 /prefetch:12⤵
- Executes dropped EXE
PID:4864
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4712,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5520 /prefetch:12⤵
- Executes dropped EXE
PID:6276
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4720,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5636 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6240
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=6120,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6104 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5620
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6024,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6132 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6152,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6388 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7132
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6168,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6500 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4796
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6192,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6616 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:892
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6216,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6732 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6476
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6224,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6844 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3356
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6232,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6968 /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6572
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7368,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7204 /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7552
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6080,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7564 /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7564
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=7776,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7376 /prefetch:12⤵
- Executes dropped EXE
PID:8004
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=7824,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8044 /prefetch:12⤵
- Executes dropped EXE
PID:7636
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=7800,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7780 /prefetch:12⤵
- Executes dropped EXE
PID:7688
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=8256,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7208 /prefetch:12⤵
- Executes dropped EXE
PID:7956
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5904,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5916 /prefetch:82⤵
- Executes dropped EXE
PID:7980
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8828,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8848 /prefetch:82⤵
- Executes dropped EXE
PID:7268
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8832,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8684 /prefetch:82⤵
- Executes dropped EXE
PID:4836
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9108,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8844 /prefetch:82⤵
- Executes dropped EXE
PID:7944
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9248,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9256 /prefetch:82⤵
- Executes dropped EXE
PID:8140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9240,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9408 /prefetch:82⤵
- Executes dropped EXE
PID:2836
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9400,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9252 /prefetch:82⤵
- Executes dropped EXE
PID:7480
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7440,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9696 /prefetch:82⤵
- Executes dropped EXE
PID:6956
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7548,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7444 /prefetch:82⤵
- Executes dropped EXE
PID:7700
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9844,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9688 /prefetch:82⤵
- Executes dropped EXE
PID:2312
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9996,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10016 /prefetch:82⤵
- Executes dropped EXE
PID:7768
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10000,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10004 /prefetch:82⤵
- Executes dropped EXE
PID:8208
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10172,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10328 /prefetch:82⤵
- Executes dropped EXE
PID:8296
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10384,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8788 /prefetch:82⤵PID:8608
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8732,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8752 /prefetch:82⤵PID:8688
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8744,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8460 /prefetch:82⤵PID:8700
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4648,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10112 /prefetch:82⤵PID:8712
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8792,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10092 /prefetch:82⤵PID:8724
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8728,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10688 /prefetch:82⤵PID:8736
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8808,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10712 /prefetch:82⤵PID:8748
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8784,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10828 /prefetch:82⤵PID:8760
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9424,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10944 /prefetch:82⤵PID:8772
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9420,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8936 /prefetch:82⤵PID:8784
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9444,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8900 /prefetch:82⤵PID:8796
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9520,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11208 /prefetch:82⤵PID:8808
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8968,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7684 /prefetch:82⤵PID:8828
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11352,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11364 /prefetch:82⤵PID:8856
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11360,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5956 /prefetch:82⤵PID:7944
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8824,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11528 /prefetch:82⤵PID:6932
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11820,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11824 /prefetch:82⤵PID:8568
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9156,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12004 /prefetch:82⤵PID:9012
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11848,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12148 /prefetch:82⤵PID:8500
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11996,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12296 /prefetch:82⤵PID:2100
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10372,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11676 /prefetch:82⤵PID:9544
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12580,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12592 /prefetch:82⤵PID:9664
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11816,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12008 /prefetch:82⤵PID:9964
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12868,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12880 /prefetch:82⤵PID:10012
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13028,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13032 /prefetch:82⤵PID:9460
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13024,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13180 /prefetch:82⤵PID:9740
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13336,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13348 /prefetch:82⤵PID:10052
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=13488,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13504 /prefetch:12⤵PID:10076
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13664,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13208 /prefetch:82⤵PID:8540
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11972,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7692 /prefetch:82⤵PID:8680
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13896,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13904 /prefetch:82⤵PID:8460
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=14056,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14068 /prefetch:12⤵PID:9104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12572,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14224 /prefetch:82⤵PID:9124
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14412,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11668 /prefetch:82⤵PID:9144
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14100,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14520 /prefetch:82⤵PID:9428
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13668,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14408 /prefetch:82⤵PID:9556
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14212,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14812 /prefetch:82⤵PID:10040
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=6236,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15032 /prefetch:22⤵PID:9512
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15116,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15136 /prefetch:82⤵PID:9608
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15280,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15288 /prefetch:82⤵PID:9680
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14804,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14792 /prefetch:82⤵PID:9696
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15120,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14808 /prefetch:82⤵PID:8900
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=15836,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15848 /prefetch:22⤵PID:9372
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12864,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15804 /prefetch:82⤵PID:9572
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16016,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15896 /prefetch:82⤵PID:9720
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16164,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16160 /prefetch:82⤵PID:8592
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16020,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16324 /prefetch:82⤵PID:9068
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16312,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16476 /prefetch:82⤵PID:8612
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16308,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16620 /prefetch:82⤵PID:9656
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12568,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16760 /prefetch:82⤵PID:9956
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=15820,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8992 /prefetch:12⤵PID:10156
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=9004,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8980 /prefetch:12⤵PID:10184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=9080,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9892 /prefetch:22⤵PID:10232
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=7988,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9388 /prefetch:12⤵PID:8668
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=16996,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9352 /prefetch:12⤵PID:8236
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=9708,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17148 /prefetch:22⤵PID:9520
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=7480,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17272 /prefetch:12⤵PID:9072
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=7512,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17256 /prefetch:12⤵PID:9356
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=17492,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17500 /prefetch:22⤵PID:10120
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=17472,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9336 /prefetch:12⤵PID:8964
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=17664,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17656 /prefetch:12⤵PID:9808
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=17676,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17848 /prefetch:22⤵PID:9896
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=17880,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=18248 /prefetch:22⤵PID:9516
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=18528,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=18512 /prefetch:22⤵PID:9528
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=18776,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=18808 /prefetch:12⤵PID:8048
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=18748,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=18760 /prefetch:12⤵PID:8532
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=18736,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=19108 /prefetch:22⤵PID:9224
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=18636,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=19384 /prefetch:12⤵PID:10148
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=18464,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=19400 /prefetch:82⤵PID:10228
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=10424,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=19236 /prefetch:22⤵PID:9668
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=19712,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10272 /prefetch:22⤵PID:6256
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=19728,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10344 /prefetch:22⤵PID:8140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=8756,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=19844 /prefetch:22⤵PID:9540
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10260,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16464 /prefetch:82⤵PID:7656
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=7832,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=20032 /prefetch:82⤵PID:9980
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=19532,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=20316 /prefetch:82⤵PID:4704
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10212,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=20192 /prefetch:82⤵PID:7596
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=20592,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=20600 /prefetch:82⤵PID:8060
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=20740,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=20752 /prefetch:82⤵PID:7480
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=19244,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7076 /prefetch:22⤵PID:7596
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9476,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7344 /prefetch:82⤵PID:8228
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11060,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17436 /prefetch:82⤵PID:8232
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=20612,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2884 /prefetch:82⤵PID:9148
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=17984,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2884 /prefetch:82⤵PID:8988
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8764,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8676 /prefetch:82⤵PID:5852
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=19540,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16940 /prefetch:82⤵PID:6712
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5992,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17656 /prefetch:82⤵PID:3496
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=19372,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=17228 /prefetch:22⤵PID:2800
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=19824,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15072 /prefetch:82⤵PID:9732
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=19756,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14976 /prefetch:82⤵PID:5852
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=17232,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=796 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:8224
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=17228,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5928 /prefetch:82⤵PID:8924
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=4624,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15752 /prefetch:22⤵PID:7432
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=19828,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6944 /prefetch:82⤵PID:2084
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6084,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10272 /prefetch:82⤵PID:9788
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --field-trial-handle=19708,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=19960 /prefetch:22⤵PID:3800
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=18872,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=18920 /prefetch:82⤵PID:6668
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --field-trial-handle=19928,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6792 /prefetch:22⤵PID:6020
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8064,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7320 /prefetch:82⤵PID:8108
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --field-trial-handle=2156,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7048 /prefetch:22⤵PID:3896
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=18824,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9324 /prefetch:82⤵PID:9836
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --field-trial-handle=18812,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6768 /prefetch:22⤵PID:3884
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=17164,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15764 /prefetch:82⤵PID:4932
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --field-trial-handle=8060,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8144 /prefetch:22⤵PID:2316
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=19948,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6728 /prefetch:82⤵PID:7212
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --field-trial-handle=8144,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6824 /prefetch:22⤵PID:7412
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5928,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=18868 /prefetch:82⤵PID:8520
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=544,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=19960 /prefetch:82⤵PID:7832
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=18996,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15752 /prefetch:82⤵PID:9504
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --field-trial-handle=8136,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6804 /prefetch:22⤵PID:3604
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12324,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15720 /prefetch:82⤵PID:8884
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6868,i,8454933056073865151,10094846374728371379,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6904 /prefetch:82⤵PID:1592
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:8392
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:7916
-
C:\Users\Admin\Downloads\WannaCry.EXE"C:\Users\Admin\Downloads\WannaCry.EXE"1⤵
- Drops startup file
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
PID:10160 -
C:\Windows\SysWOW64\attrib.exeattrib +h .2⤵
- Views/modifies file attributes
PID:4416
-
-
C:\Windows\SysWOW64\icacls.exeicacls . /grant Everyone:F /T /C /Q2⤵
- Modifies file permissions
PID:7292
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:3496
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c 43361722635460.bat2⤵
- System Location Discovery: System Language Discovery
PID:8064 -
C:\Windows\SysWOW64\cscript.execscript.exe //nologo m.vbs3⤵
- System Location Discovery: System Language Discovery
PID:9620
-
-
-
C:\Windows\SysWOW64\attrib.exeattrib +h +s F:\$RECYCLE2⤵
- Views/modifies file attributes
PID:7536
-
-
C:\Users\Admin\Downloads\@[email protected]PID:8840
-
C:\Users\Admin\Downloads\TaskData\Tor\taskhsvc.exeTaskData\Tor\taskhsvc.exe3⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3712
-
-
-
C:\Windows\SysWOW64\cmd.execmd.exe /c start /b @[email protected] vs2⤵
- System Location Discovery: System Language Discovery
PID:8608 -
C:\Users\Admin\Downloads\@[email protected]3⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6744 -
C:\Windows\SysWOW64\cmd.execmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet4⤵PID:3780
-
C:\Windows\SysWOW64\Wbem\WMIC.exewmic shadowcopy delete5⤵
- System Location Discovery: System Language Discovery
PID:9060
-
-
-
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:7856
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:4416
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3676 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.google.com/search?q=how+to+buy+bitcoin3⤵PID:4992
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fffaa9a3cb8,0x7fffaa9a3cc8,0x7fffaa9a3cd84⤵PID:1512
-
-
-
C:\Windows\winhlp32.exewinhlp32.exe -x3⤵PID:3000
-
-
-
C:\Windows\SysWOW64\cmd.execmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "zlhkxyme508" /t REG_SZ /d "\"C:\Users\Admin\Downloads\tasksche.exe\"" /f2⤵
- System Location Discovery: System Language Discovery
PID:7936 -
C:\Windows\SysWOW64\reg.exereg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "zlhkxyme508" /t REG_SZ /d "\"C:\Users\Admin\Downloads\tasksche.exe\"" /f3⤵
- Adds Run key to start application
- Modifies registry key
PID:7804
-
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:3152
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:6028
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:9960
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:8152
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6424
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:6912
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:10108
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:9188
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:8088
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:9560
-
-
C:\Users\Admin\Downloads\@[email protected]PID:9932
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:9308
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:8916
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3904
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:1608
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:8476
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3588
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵PID:7376
-
-
C:\Users\Admin\Downloads\taskse.exePID:9524
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5732
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:392
-
-
C:\Users\Admin\Downloads\taskse.exePID:5596
-
-
C:\Users\Admin\Downloads\@[email protected]PID:10228
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:7540
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:4672
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3660
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:9796
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:7264
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4696
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:7496
-
-
C:\Users\Admin\Downloads\taskse.exePID:8140
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:7252
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵
- System Location Discovery: System Language Discovery
PID:9024
-
-
C:\Users\Admin\Downloads\taskse.exetaskse.exe C:\Users\Admin\Downloads\@[email protected]2⤵
- System Location Discovery: System Language Discovery
PID:9444
-
-
C:\Users\Admin\Downloads\@[email protected]2⤵
- Sets desktop wallpaper using registry
- Suspicious use of SetWindowsHookEx
PID:8908
-
-
C:\Users\Admin\Downloads\taskdl.exetaskdl.exe2⤵PID:5816
-
-
C:\Windows\system32\NOTEPAD.EXEPID:9712
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵PID:9928
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:852 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2612
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource core2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:3440
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:9508 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /registermsihelper2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:9232
-
-
C:\Users\Admin\Downloads\@[email protected]"C:\Users\Admin\Downloads\@[email protected]"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2188
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1620
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\DisconnectInitialize.M2V"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:7612
-
C:\Users\Admin\Downloads\WannaCry.EXE"C:\Users\Admin\Downloads\WannaCry.EXE"1⤵
- System Location Discovery: System Language Discovery
PID:3120 -
C:\Windows\SysWOW64\attrib.exeattrib +h .2⤵
- Views/modifies file attributes
PID:2832
-
-
C:\Windows\SysWOW64\icacls.exeicacls . /grant Everyone:F /T /C /Q2⤵
- Modifies file permissions
- System Location Discovery: System Language Discovery
PID:7428
-
-
C:\Users\Admin\Downloads\WannaCry.EXE"C:\Users\Admin\Downloads\WannaCry.EXE"1⤵PID:6596
-
C:\Windows\SysWOW64\attrib.exeattrib +h .2⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:7208
-
-
C:\Windows\SysWOW64\icacls.exeicacls . /grant Everyone:F /T /C /Q2⤵
- Modifies file permissions
- System Location Discovery: System Language Discovery
PID:8468
-
-
C:\Users\Admin\Downloads\WannaCry.EXE"C:\Users\Admin\Downloads\WannaCry.EXE"1⤵PID:9584
-
C:\Windows\SysWOW64\attrib.exeattrib +h .2⤵
- Views/modifies file attributes
PID:3876
-
-
C:\Windows\SysWOW64\icacls.exeicacls . /grant Everyone:F /T /C /Q2⤵
- Modifies file permissions
PID:7560
-
-
C:\Users\Admin\Downloads\WannaCry.EXE"C:\Users\Admin\Downloads\WannaCry.EXE"1⤵
- System Location Discovery: System Language Discovery
PID:9760 -
C:\Windows\SysWOW64\attrib.exeattrib +h .2⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:8416
-
-
C:\Windows\SysWOW64\icacls.exeicacls . /grant Everyone:F /T /C /Q2⤵
- Modifies file permissions
- System Location Discovery: System Language Discovery
PID:2612
-
-
C:\Windows\system32\NOTEPAD.EXEPID:7448
-
C:\Users\Admin\Downloads\@[email protected]PID:10008
-
C:\Users\Admin\Downloads\WannaCry.EXE"C:\Users\Admin\Downloads\WannaCry.EXE"1⤵
- System Location Discovery: System Language Discovery
PID:7296 -
C:\Windows\SysWOW64\attrib.exeattrib +h .2⤵
- System Location Discovery: System Language Discovery
- Views/modifies file attributes
PID:9112
-
-
C:\Windows\SysWOW64\icacls.exeicacls . /grant Everyone:F /T /C /Q2⤵
- Modifies file permissions
- System Location Discovery: System Language Discovery
PID:8504
-
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004EC1⤵PID:4448
-
C:\Windows\helppane.exeC:\Windows\helppane.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:860 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument microsoft-edge:https://go.microsoft.com/fwlink/?LinkId=5288812⤵PID:7340
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7fffaa9a3cb8,0x7fffaa9a3cc8,0x7fffaa9a3cd83⤵PID:6024
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1884,15463213885735823723,462713229754920307,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1900 /prefetch:23⤵PID:5540
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1884,15463213885735823723,462713229754920307,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 /prefetch:33⤵
- Suspicious behavior: EnumeratesProcesses
PID:5564
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1884,15463213885735823723,462713229754920307,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:83⤵PID:9336
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,15463213885735823723,462713229754920307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:13⤵PID:5440
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,15463213885735823723,462713229754920307,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:13⤵PID:3888
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:5424
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:6924
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Installer Packages
1Defense Evasion
File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1Hide Artifacts
1Hidden Files and Directories
1Indicator Removal
1File Deletion
1Modify Registry
3Subvert Trust Controls
1SIP and Trust Provider Hijacking
1System Binary Proxy Execution
1Msiexec
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
MD557428456c6e6c2ea328c864681db5df3
SHA12dc7329e0b346c435b6ea5cf44a3d0a076f8d398
SHA256ee87747102eba8844939352740d0bb6c4a67f10c2656961cb2722cd42ba99f40
SHA51240fb34fce07f094fdaf78c499a21c3f534f0c8ae1246b6cf382ea7e63fa08b4de56e6c81eb8fadce8a2e508ae5d03831590a06ffda3d46026fb894e4997f31b0
-
Filesize
520B
MD5d7bdecbddac6262e516e22a4d6f24f0b
SHA11a633ee43641fa78fbe959d13fa18654fd4a90be
SHA256db3be7c6d81b2387c39b32d15c096173022cccee1015571dd3e09f2a69b508a9
SHA5121e72db18de776fe264db3052ce9a842c9766a720a9119fc6605f795c36d4c7bf8f77680c5564f36e591368ccd354104a7412f267c4157f04c4926bce51aeeaa1
-
C:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\@[email protected]
Filesize585B
MD5340aaa806497ca09efe5a03167a86431
SHA1e6cbcb7b802c86c83959acf425ca292faf803f4f
SHA256012906015a3b9425fa99394197dfe6c24d74a9703ebc9b2c61f4af5d0d384940
SHA51222a8301dfa439b14c7f77c85e6dc72f75790451d0c5a304bebac702729c84589fab5e10c86fd0d9790d619f3d41e334d963f46a2901b477f2cc2510c4016f824
-
Filesize
209KB
MD53e552d017d45f8fd93b94cfc86f842f2
SHA1dbeebe83854328e2575ff67259e3fb6704b17a47
SHA25627d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6
SHA512e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9
-
Filesize
216B
MD50f2e36b036d684418f22435a6961f2f2
SHA1a0679ebecfe5ffbf4ae0d69c85fcd54abb5df2dd
SHA256020b2f54f48dbde2cdc43a336cb35e4476b825cec4eeb4eac3a3d8c2f1a65011
SHA512b190550aa95c304a6fa73bc86756c9fc46d01402e5e26d75bfa9dbe47527e430f55b9759ddf4a399ed6669edfbfe893458dd90a358d4cb75933ed7dce6850560
-
Filesize
2KB
MD5100c3d4a6af37bcb9d20c0aab2af882a
SHA18d4caaf940a3b92b080e46cef228d2c06a284c12
SHA2568e6b0a08bf4e8f587b65b729dda97001924699b2e3dc915511953d6fb0a85a75
SHA5128e944e69f3a8cc4c5bf91264c5f89302462fe2087c171f6ec0c94a2d08a672453f826779ad8bd814a355283004c58b9fc6cd6598f164c5e5f9c437db46824935
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
354B
MD537328b070924eb1002b5b32c76cdc49b
SHA1c28fd114381e964800240d4aa895eabe8ca15322
SHA25695c7b963be5e12cf86e4f1061beaf4e2a1897ef8a28c516eae89e71e5ab7ffb8
SHA512fd5fb102c10c54bb1ab27512fb9323cd6ddb295d278484238b58ff3f81e35e0c21abc31c18297b52769829a3a4a53fdc6ba9ff1e8e8a52b71e51923bcdeef829
-
Filesize
8KB
MD5a3c988ebaaf23dfc37558900cce39fcd
SHA19ec6ca2de9ce5f3216c477b859ec2765e05099a2
SHA25663e0735348f260cddfc1842df11c528ae95157b0a33c57f886ad651111b5b351
SHA512716d575c8a6bbfe920e991204d3ddfdfcbfdc31692ac11bf19564d2e3720a75f6cd55ec6839a66bd82020650f8ac4c61b33e479ad3b160e1ab0972acd31a9513
-
Filesize
101KB
MD506b06ceb98a4611a9acdae7b217597f4
SHA154c239313b41c5d25a1f2603b883f25c8a6701cb
SHA2564ffad005e462a4a73debcb7c893431cab118f67b0c04648986f22767a4578128
SHA5127dce9e61fbf9012fcb382b680ae1f086bc6730c22ea4363579aa111a2c6c1678ebe2ef1e626fa495515a1b9dbdd587340dc7f1798e7bc7b895678df6aff57922
-
Filesize
197KB
MD5b10c1ab859a5850dd79e25a8ae3c5d31
SHA189125a2ded7b8d819e633ef2ba3cb1297fbb304e
SHA25630eda17d7c66871ac335da272ea628779a2403095ccb24a8eaa838cae8edbca9
SHA51218937c29689acb07329f69bc738717907e17d10c43a28d442c261a37df68c5b0491a3239e57d5a925fd9f91cdf96e93168513b534831ae15dac1212f890280a6
-
Filesize
197KB
MD55207d4a87bb24d02bc7febc1da3df234
SHA11a4f55578780c4b194052a9baf4d4e13cc7d2e6b
SHA256a3d1b6c76789318b6b94f6560cfb9410e7b2b8c9239ed61cecf8594b45377204
SHA5124f29a224e77d07eb7c278df0aa1f7c8c5f4688d8e985dbe94e896f8165876fbb30ac49853e6347785c2e238b64a6989f526d13ec0a60955e25e31437127a09d4
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
152B
MD51e9e7c176dbfb8e4afff2f96e3613a66
SHA144156de48db3e7c1e6a34e85088b7a1a3d64d015
SHA2565cf6dbb5a90ddd5b6e96dcc6faa0ac29fc07310b71f06a4675ba9b1012185e5e
SHA5120ecd26bd0b6ce8a6f87b8726f5c665257d47a07135fdc0cdc3b30f7351e8c9058cfee780f1a0cd45754bfa7130c77ac1ec29de3a18b04242b30ccbd03a622af9
-
Filesize
152B
MD5219d82f2792cf6d618dff291c512e7dc
SHA1c83caf9675c799664477a2970f74df98f6a7fe70
SHA256ad87fb2a24047d44fed6a96aa948309036c94e416d46d90bb28446757c87d0c9
SHA512c73b37d2074476fa614e191aa6241df71eef66b1aef113266dccc567afcdbf31edf75329148931d829a47719bdef1766944bc27e25770a8fbeaecb2822784c90
-
Filesize
152B
MD5058032c530b52781582253cb245aa731
SHA17ca26280e1bfefe40e53e64345a0d795b5303fab
SHA2561c3a7192c514ef0d2a8cf9115cfb44137ca98ec6daa4f68595e2be695c7ed67e
SHA51277fa3cdcd53255e7213bb99980049e11d6a2160f8130c84bd16b35ba9e821a4e51716371526ec799a5b4927234af99e0958283d78c0799777ab4dfda031f874f
-
Filesize
152B
MD5a8276eab0f8f0c0bb325b5b8c329f64f
SHA18ce681e4056936ca8ccd6f487e7cd7cccbae538b
SHA256847f60e288d327496b72dbe1e7aa1470a99bf27c0a07548b6a386a6188cd72da
SHA51242f91bf90e92220d0731fa4279cc5773d5e9057a9587f311bee0b3f7f266ddceca367bd0ee7f1438c3606598553a2372316258c05e506315e4e11760c8f13918
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48cb4998-425e-4992-8b83-6aaec48e3702.tmp
Filesize7KB
MD5c427a743def9523de27ce48d61d862c8
SHA1bc501d24fefe0fd57e81cdcece5692ff57a388d3
SHA256b4e0fbe979afa0d520936b8df07e04213d6c92588613f7889b510c27209c82b0
SHA512280041d8d9a94db9a9e695e2ed7ec9fd9590c4b383d65c6ae751c4ec5e7b39a2161471c554b8adfe26bb4f4d193902149b096c2a13621aa4f8cf143911fff463
-
Filesize
64KB
MD5d6b36c7d4b06f140f860ddc91a4c659c
SHA1ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA25634013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA5122a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487
-
Filesize
69KB
MD524a806fccb1d271a0e884e1897f2c1bc
SHA111bde7bb9cc39a5ef1bcddfc526f3083c9f2298a
SHA256e83f90413d723b682d15972abeaaa71b9cead9b0c25bf8aac88485d4be46fb85
SHA51233255665affcba0a0ada9cf3712ee237c92433a09cda894d63dd1384349e2159d0fe06fa09cca616668ef8fcbb8d0a73ef381d30702c20aad95fc5e9396101ae
-
Filesize
41KB
MD5ed3c7f5755bf251bd20441f4dc65f5bf
SHA13919a57831d103837e0cc158182ac10b903942c5
SHA25655cbb893756192704a23a400bf8f874e29c0feee435f8831af9cbe975d0ef85d
SHA512c79460ded439678b6ebf2def675cbc5f15068b9ea4b19263439c3cca4fa1083dc278149cde85f551cd2ffc2c77fd1dc193200c683fc1c3cdac254e533df84f06
-
Filesize
19KB
MD52e86a72f4e82614cd4842950d2e0a716
SHA1d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA5127a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
-
Filesize
63KB
MD5710d7637cc7e21b62fd3efe6aba1fd27
SHA18645d6b137064c7b38e10c736724e17787db6cf3
SHA256c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA51219aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44
-
Filesize
88KB
MD5b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1386ba241790252df01a6a028b3238de2f995a559
SHA256b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16
-
Filesize
1.2MB
MD5027a77a637cb439865b2008d68867e99
SHA1ba448ff5be0d69dbe0889237693371f4f0a2425e
SHA2566f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd
SHA51266f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4
-
Filesize
43KB
MD5d9b427d32109a7367b92e57dae471874
SHA1ce04c8aeb6d89d0961f65b28a6f4a03381fc9c39
SHA2569b02f8fe6810cacb76fbbcefdb708f590e22b1014dcae2732b43896a7ac060f3
SHA512dcabc4223745b69039ea6a634b2c5922f0a603e5eeb339f42160adc41c33b74911bb5a3daa169cd01c197aeaca09c5e4a34e759b64f552d15f7a45816105fb07
-
Filesize
74KB
MD5b07f576446fc2d6b9923828d656cadff
SHA135b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA5127358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df
-
Filesize
27KB
MD5d55af88c49b9910a897f95047cd82313
SHA19d671c7b9309ef08a2f418b0638f6ebb45941fd4
SHA256091c3cdba6c7b013bb176f8207befc643b73790519161bc6e7118e6e84d51c4d
SHA512f39f46410e3d98db6169405b959803cee7a17fdebe05f3c423ddb0fed342f922bfb2ad8585ca748203007d773b4b0636a715e2cb368bfe73a9a5b26dddae95a8
-
Filesize
20KB
MD56931123c52bee278b00ee54ae99f0ead
SHA16907e9544cd8b24f602d0a623cfe32fe9426f81f
SHA256c54a6c3031bf3472077c716fa942bd683119dc483b7e0181e8a608fa0b309935
SHA51240221fe98816aa369c45f87dc62e6d91fcdb559d9756cb6a05819f1cde629e23a51803e71371f4e4f27112a09489d58ed45b2b901a5f2f00c69c082b3576057f
-
Filesize
60KB
MD5845e1a3d0f8b316c2336250dc14628d0
SHA171fee07b3e73d3ef8f7f13012f6afa33497b7c85
SHA2563652f51272e5dbe7fd76034923c754699ca0ad9b51f15045ebebe1e07eab8e4f
SHA512612f8bb733828a8a6be340583976aea7d24654070039f772f227d3996c096739c1a41d5460df7c3a20d8bab12839e921fb756eac7063491f9c39b620da7969b6
-
Filesize
40KB
MD5cd6c249d3b732cf32b3b4946cbe55a25
SHA124c0dc8f083b3b21c30be0b97c274656f0d32cb5
SHA2568eda2d93090461af6f734a3849c635d5bf6e62f44a13b1260fe9872ca7e68e0c
SHA51241329a12aa41b64e70b9012d7d056f548ecec12e58271302f290565a2ba89e46adec0755e90f2e003f42df0a046aabdabbe20030400a66e094858d7a6f55c5e7
-
Filesize
204KB
MD5a19255d36c8f3ddea0ec3ed6203c1555
SHA1ffadbe8c6b4137a7b38902e14ec6575973821dae
SHA25660cdac50564d0324dda06c5b3894a4673b1b024db53d16f4766dfc01f7bf2d62
SHA512710a89ffeedb2180ee10a066ce9c97afc56d57a72dab28c95bb46272e4d32179421e2c362c0a1641c8e059a28afda28e018f81d14b07aa2b5dc25ca6bca00283
-
Filesize
195KB
MD515d62eb02000fce7cc1a32ebb3fb84cf
SHA1ce87ae691f92bc3ab7f9dc0c0439f20d7d501d70
SHA256e00600dad4a967696c5b12f520711aeff752d94bdd431acc9d41560776d518d6
SHA51276586bafca0e3ada0855f6321b1aaad5f859c2d87e479697bc68ca950ef554b71a6e6c7db9e446e95dbc318c0b6a8f19de69ef0d3503cd0f61737dc417dc3cda
-
Filesize
100KB
MD5070db1fa66a78a58858b4e836fe2bbbd
SHA1645415b28888eef1d3d8deb8273f89e99846eb89
SHA2568d8a76f5f703adbb2dc9caa42c0927ae8ead6ab246a8e022c16a4bf45c80676b
SHA512fd87fa92eef612b2a279f564dd7ba94019f0e66f283c2ec4c65121ee6f5abb802b9076405703b49118fb73ef7cfe27003b103c5758f03f0a54b897d139908037
-
Filesize
84KB
MD5b296a5008b1970bb6f9f20d129c5f914
SHA143588a155ff58896c0609c750b73be1bee12139c
SHA2562bb7be6b816453e24a664f16159fdeefa75c43d4a1e98f99852d9a9fe5ba7c1d
SHA512a4f2c66f8de34c9be607a9f58609d274d8554d28015c06893058f04ad259698db3ff5c5e7fade2db2e3decc0c2b5cd4d9861ba32af8289972653bf1faca3d00b
-
Filesize
47KB
MD58e433c0592f77beb6dc527d7b90be120
SHA1d7402416753ae1bb4cbd4b10d33a0c10517838bd
SHA256f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
SHA5125e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3
-
Filesize
24KB
MD5ad2d84f24fa0db65a6eb402e88d3cf01
SHA1fe50ac6c19bf3b36dde827b10f46c71513dddae7
SHA256688c0bc13deb1d30fbc17d66729eb3cfa6982e2461f0e70be0e34acf1c44b18e
SHA512783a48be02eeeed1a2e94fc056eb8d139ccd9647900118d7cf8321efe499127b9dcee9c9b3476d1a4a86a6dbdfc3a24b36adc96a6f4e39d9f6536d232cf8c7bf
-
Filesize
43KB
MD55638526fb224ad0a4f724285780de90a
SHA108dd197445f17f985697554cb2a60047488e6f01
SHA2567ef26b78b23f2fc011d6c174f0b72a35448ba8bf99ac24a1fef89a9b358a2e34
SHA51219097aeebd31ffdb9c797ca88005316cfd9fb9b0a6279ed8ead782e8631761b5f5e7eb582182d9715309d8cf2f3869c942e3841fe8ee7fd383a8e0fc7cc6372d
-
Filesize
24KB
MD5c594a826934b9505d591d0f7a7df80b7
SHA1c04b8637e686f71f3fc46a29a86346ba9b04ae18
SHA256e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610
SHA51204a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961
-
Filesize
5.8MB
MD50dc93e1f58cbb736598ce7fa7ecefa33
SHA16e539aab5faf7d4ce044c2905a9c27d4393bae30
SHA2564ec941f22985fee21d2f9d2ae590d5dafebed9a4cf55272b688afe472d454d36
SHA51273617da787e51609ee779a12fb75fb9eac6ed6e99fd1f4c5c02ff18109747de91a791b1a389434edfe8b96e5b40340f986b8f7b88eac3a330b683dec565a7eff
-
Filesize
17KB
MD56c958f437d036d9cbfbb5d82279bb39c
SHA1d978ec20af656312c40d0e857e25c67245599c31
SHA256a452e2937739fa40733918a304342f171b38712db80fe35f3bc0d4614908d8f4
SHA512e7328298e8b2b40dbc55c8d6d0e433f2ab6a720ed170f747813388432f087b53ebef5c458d9ae168326ed7124946c8c07f6cd0177d9bbeb6c49ba929cba0b489
-
Filesize
18KB
MD5853d6494a5a1b252c1d31ca1b10b888b
SHA1826c5055bdcd5d99e84d3f9fece5e44cbb560502
SHA2568e3ad7d5765370b114c5e99538183d819e7e665124791fdacc15b2d151773c94
SHA5125ed110fd989ed51eb129ac70f496500e4f3659dfc0e52a0541f8cbcf0d5a9f9627e9b183f7f84e4badd37fe990cc3ff79d04d5c25e43982143b5a04cfad4d749
-
Filesize
18KB
MD593de0bf9371a32d8a8ae62e2769b0875
SHA149009d82e8a66bc3b4554f5e769af87c55e4bd61
SHA256ca5ecf9af8d324865b54a3f5af9a9842ea3714bffd25ccbe74422d5183151dc7
SHA512b7cc91e27a47a2181417d68b0c3fea9864729d972ce23853dc24113c43e57a7c4f11faba490a5593a36c590bdc58215e8c1229e6e23e4dc0ad4731c71384655e
-
Filesize
45KB
MD513f0dacc8f003322e1aeb25c5d49a486
SHA1bdbf8b64d18a89773a855a1a8a9473b2822fc7cf
SHA256f29217cf3b11c1839d31899a6e96fffb5fdbf57b3a085ba71fd5666523d526ec
SHA5127e2204ef11375419a02d3b7848f32ea5db18458e3c6bf3746cb521b6d7f4d73c819f87d65abcd681902e47266ad143aae089ba5bc1cef68b47958ceb24a30eb6
-
Filesize
98KB
MD5630498e6f5ac098bc2a36d90c7cb3562
SHA158afe751616777cd88d704250461c1fda7937d88
SHA256fff676e552c6602b099184533ff5ee4b04a3b0a3ab64900846f86157de1672ed
SHA512d310b15ffbc25879ec1228f994d497ec05f7f16cac5d4903e95a7d800dc670c597d5e41f08d4d5e546378a6c5c8c18d5279dd69a0805b2a269d567a4da9cb623
-
Filesize
52KB
MD59bf45d6c2c277a73386533625d82573d
SHA1de61278916928aa6fad8776dcf45a9ccf943b8ae
SHA256ecb1d1221aea52c30dbb073a19ef3dcc3fdd956a315f99bc724652290212231c
SHA512346a8489ebb75cdb0ee4dc6296641e2b8ebfb223f77a82c56edbe0592746637add90cf06823e685bea7c656d22c95ecc38943a26b1b4d3fb1e1fb4bd5f00e8f6
-
Filesize
30KB
MD536d615a4b5d8aa0598c58e9cc63b57a4
SHA1511bb37570411578fb7f20488e3d3b656cf6d2c7
SHA256aab49d770b32e839291451a4a6c00ec49fb2568180dc884736d877d621e11e0b
SHA51299936189ee74ddcc1c2773b4933b580981fbe1c55fe568b93acfa9e0135a97583506bf3f1ffaa42eeda40fdf958497c411c3591e86f999d931e63af742e20d96
-
Filesize
143KB
MD56ac418a6326703464e869289da7a865a
SHA1d1f864ad580c41ee75ce7b03feb595ead27804aa
SHA256b8918f8fe3079915e4683b3edcd7308b72fa1552d250eb975c148d85507535bb
SHA512ce5991177d36587378a9eb4be5ec115e304c90c45398e560128b92880c196c6c4eb037809cfb46579cd30b6e1c3ff0de1b4f12fbc933f5f762706373e75739c3
-
Filesize
62KB
MD5f9f305e10bd8ea1432b9fd1d355ecc90
SHA1934ce6d59f903d145519d1066bb574c82a25edf9
SHA25601d35e181e0a373c0fae013280a79616dbb1fc2d2f892b3215c941c098e0c9c6
SHA5129efb67bfc44f6c31137e0387bac74880f9b93d3645837805ac6ffed7e7fad5be7c3812cd11c9172b767ff4cc258fa140663c33892ba8f28ac2ef7686b3bee0aa
-
Filesize
20KB
MD593eeea702a80c096950e60b99b74b8a4
SHA1cc5facf47047c7aac51bdfa9db1339891957e8c7
SHA25698fa60f3d0aa0668eb3bd9f56657d4d016913f2194b0e2077810f4c906a77854
SHA512c4ceb5227cada0067261eb6adcda1a0cebe46e1184884a03bc8061f0d947fa8f3751ac3709080934e79ef2b0b76aa417f5e0df40ce8cbaa9c1b4153c3b83734f
-
Filesize
16KB
MD5a2edb5c7eb3c7ef98d0eb329c6fb268f
SHA15f3037dc517afd44b644c712c5966bfe3289354c
SHA256ba191bf3b5c39a50676e4ecae47adff7f404f9481890530cdbf64252fbb1a57e
SHA512cc5644caf32302521ca5d6fd3c8cc81a6bbf0c44a56c00f0a19996610d65cf40d5bae6446610f05a601f63dea343a9000e76f93a0680cfbf1e4cf15a3563a62c
-
Filesize
53KB
MD59258b13063a01d7686274c5e99b08146
SHA1e083ac63b9b04fa2cb6a3bfb97dbf00d7db21873
SHA2561ccfc17c9ececcf5a085c1703f1d26f2c18ce767929fb380e4f0620183c5b0ed
SHA512b5f083d2fcd4f408dc5adb2f1691cc540e6361da40bc34c9ca41e1476ca3897a132a9eea53cc4ff62f76f5f36b8c6ef199201f4c675b167d1aa69a075954d01a
-
Filesize
18KB
MD58eff0b8045fd1959e117f85654ae7770
SHA1227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA25689978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA5122e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058
-
Filesize
40KB
MD53051c1e179d84292d3f84a1a0a112c80
SHA1c11a63236373abfe574f2935a0e7024688b71ccb
SHA256992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff
-
Filesize
53KB
MD568f0a51fa86985999964ee43de12cdd5
SHA1bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA5123049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7
-
Filesize
2KB
MD5ce6e2f06f2bbdb020334bbc08843069b
SHA1bc2239f2878ec79b77ca53062bb59ad2f180a250
SHA256dda8c99d8e79d12f1fd7736e38a57407513d144a6d00b387a06a148964c21887
SHA51208383d5a3f74f69461e49d09e8eee3fb2ff3f62ebfc6dcf453bc7124efbee7956564cfd667a6a492ed19418c79c5554e7860cd819eb8409744e6462ef8ba1f88
-
Filesize
2KB
MD5589579cbaf14740da1d1b7c223c099e8
SHA105ace2fab355a24c6dbbfed4157f4f0d0ab0dc57
SHA256607e3d7a66a51fe89f4c142fecb96b4b5be4af68bc9a1563bda72cb76b9dbeef
SHA512cb4d656b24706f154b93993dbc5b89d9d479621faefa6e87f279e8cd558d899e2030858fc3ee04d9bac48e2ceef38bf7e1f5d7d48c8fefc9ead6c6a27a345c49
-
Filesize
291KB
MD5bdaa2c4e9db29371065fb5c717bd9344
SHA197099a8bf89fc9cc26fe7a5769e2af484fe96c85
SHA2566dae4cb7316be5a7bb3dd697e6a42698469dcf2c92cf65a7a70eb2762fb8ca09
SHA5120ce502643015a2115c6f69f70bbf3d9a166d805571455d977290a3d9c2ce44e82c415a5ac53092863ee1a64a8c016551f57d8e72844b671c3c6eaa66016ad3d9
-
Filesize
16KB
MD583cd54e871d9cde0a19af13e10447b61
SHA1240866c796d754e66d129f8e1571eba02ca02c9f
SHA2565e1c55b8cca6842824a71a3909c368ad4c7176ab1a803eff2897772a11e83227
SHA512e1989f828a7cca997fc4bf22ab84ea2cdd58fd24dd013eea7789ae1e7f9290193a69bde7c89710810442183c7f0508f0383537ca7f64f96d50f3873fe6e6b008
-
Filesize
9KB
MD50d3dcd932a186a8c93e6f684a732b076
SHA17debb9149e6f3c29b01ef50ec1dd98097375afff
SHA256dacf1d7a4b929e8647a1fc90bcf9efbba1c89dace601478b9ece190d06b7be7b
SHA512b09187336d8931d79bceff6369436a4cc894eb81f4a7a04aa3afda09f3a7a125e87a7a8333a9a1466913080ad4df6b2f4840846b7f4ef9e3c8a461556fc5dc84
-
Filesize
175KB
MD5d1191e1d34a08e6208110c6de0021d9c
SHA1d59bc618c0304740b1a55c41b417c47f9900e074
SHA256d051c50ca7c17265989f1a52bf3e649f05ee4088eb851ee87a349651f3c927d3
SHA512bb34792a913b4797c022c0272546291c222648fd5ff6b07acd510b76f02fd36e8a4e65a83b016d49a8425e8e9ca9c78cd8155fd26f6cbbfec83230f4561d35ef
-
Filesize
2KB
MD5ff478f02f284147d5fe573172fa16bf6
SHA127b0c354d2e00f7ea91aa68ed0dd6c057d8168ec
SHA256525390a34edf2f21b07af3227121250bce4e99e00f05cb247428fc1aebd1c042
SHA51288d9683349053675909e8c606b9b5226e077e0a1a963c047338cd3ebdc5ab65af1f2042596b761678e5157b62386479c877924d22d89750dd6ff6e98a20e66ee
-
Filesize
4KB
MD5e14cfffb435fdb43ee97217877ba0edc
SHA1c2c9ade283674a3b601b78337a343b86f1ad02af
SHA256dacab1be6a00563d0dc3e89212382bba056d6a31f52f0c80200d7b35294e9a77
SHA5129a224265135aecb7e069c239e62dac723c5babc991ef88aa0393d08238ef3a14fbc030fcc92dc8fe4ff5c282ed6b83b63afb2a4ff01a3393b56757b572346b4c
-
Filesize
54KB
MD5139e92634cfc76392024adcdcff06285
SHA17ec2a9c56f27afa364f3c54f7e21674cc6b8dcdb
SHA25600c7c40cf32e2dacb0283f1d5dae7de55d0186f3df4a29d6b010ef0b6cd691b0
SHA5125446a851b78545f6cb7603a839c085f5fe3174a78ba2ab5b37e432d36cf911995f6065130226d55b541f81fc203b9e8613c6aee9f215aa986702f9894b7c569f
-
Filesize
3KB
MD5690bdaec1509f256658d2c85f1016953
SHA1381467a5e207ca580932ace320bb0c7670195807
SHA25650e95dae767d6897997ea99fc2c198f05852dec941c49f1a72170268defafb81
SHA512d243b91814684830ada4dc0b9825794dc9a02847274396332daefc20a5a569249f45e2ce6ba2fa3645bddcf3f29a3dd024f2d5e165024d640cfdf72f74b58818
-
Filesize
9KB
MD55a86cab8d1dabd57fc642ec18e6324a5
SHA130c585dfa093371300d8e12cdfa3272dce486fd5
SHA256f42b5a0076151770a907a86f6a36e3ae0d839c657e1442e82af8865baf153fdd
SHA51208161519eec609a41d471433aff7b08aed04d0613bfd94245e58567ed8b8b2a270a751517c9e2d3d8a013e7fd6fe238586abfa9d07cb9fb9358fe2246f0c0933
-
Filesize
262B
MD565c5374f866c1600bde8f66aee5d65c5
SHA117df94a2ddee817771943b881c6756ba1bcf6023
SHA256a8e70d13b9193766b1b6e49e794d8d99fb91cd624d4dbbc02e2e237b4c1ff048
SHA512eeaff580efe47f8789e30149ac21456790de8d2f65d01e311f1a2245385db405ecda94badcff85ec73fa84fdf609de3a1e5bcd9b89614096d3fd741646277df8
-
Filesize
68KB
MD5f0086fe9cf41c39a5a2a9f1e4358a0a6
SHA1afb4286ddbb18e819b2ea08c5e2125332f6cb768
SHA256feb9f54459d46e88261eefbedd17679ccc8bd0adf6fffc9eb150e3fe2cf1f4e6
SHA51221c91e44f1ba997c28613e75be10f747374013a8dd6c8138f383d2b6f745226e80533d9237fd6b94134235d9bd28df4e080e55f00fa0faaff18997e4300403e2
-
Filesize
31KB
MD515acc09c878fcd28e8d3f2525f06dbc8
SHA1189d261c26e69a5215c202c331f015b1b99a1c36
SHA256c6db1f0e0692025234b467cb200427c82701609e960469bf0882c584dd014839
SHA512b1ff05dbbc355c288981c82f73371aecfd5d275c8612f3210d3cbe37458318d6e26f00f0f2eeafccb8f5f9357796d31f32a4179edb97f963ab480ce5571e2977
-
Filesize
180KB
MD57033beda823e253aa399a0395271d9ef
SHA1444e565536aefbde4540d09f0a3d374d78cce7d9
SHA25675af81cd634fdfac1f4a0d14badfb61d4f4ef6494d6fe1351f1046e00be1078b
SHA5124c4932316532441c0fa749c031e76be6d88ebf17fceb88756c6610f1f5daa5b703ee8c4217826638957c8aff90f9b92bbca1cf2ae3eb42c887bcd2aa60277de2
-
Filesize
303KB
MD54d2cc36f3d3cd263fc63033fc0a29595
SHA1146fa4ff52fe1497d5963129ca3cc4c2e1153911
SHA256cb69a1b3c7f9b059d9567f1711bb073381cfe2f3cfb5edb504dbab793512e8ac
SHA51242ab66a1161862370e186e4b75d38e24f635d0d427903c23a8c0c18530d4ae8e5deff8c59586ae8973b2beb5ecc57efb1bf72b34aa690ea0540aa29e8081f2d7
-
Filesize
2KB
MD53e55e8b36e6da184037dfc8815c30fa6
SHA113ea8a6b9b69b47fd00db901aea02d12a4874c14
SHA2561780e54fa8109ba585636bea5de6fa2a055ee3e6a5805bbc00f1f2ed7940f2b0
SHA512a1e86030d4b9cfd75a7e38e46ccb8b3ecbecd6f1fec755aa99b109729d5716ff6783a96972a99c8f989f53a311975cb1b2aa72f9b199b033dbe3b6e6960564fc
-
Filesize
1KB
MD5006ee267af271aa9f6c468c330a72bd1
SHA1e8c881c123defa38ae0c6e354a61f9ac65a0e725
SHA25676ba0d8bb7289000198cebe56b257d4e4155a37c8367a4c36e936379c83527c3
SHA512e0dd06053f2e19a08bf37c6a4b10c8cab62480370a5afae3213d694674b52ad9dff57258c5e23929890aebe6479c48f30dbecdd43626d3f19190336b226f26d4
-
Filesize
262B
MD51adc0099be2f355b838f5513e097f654
SHA1c3e788d3bcdc05ded395463d19f523cf7b9f3f4e
SHA25601cd3a8235eb5bdd078786436118c8d9e9d9504ea4ddead464fa9c8b104f0fab
SHA512aaf7f45cc8fc21ea80683ae5a6f30b42174c9bcec34c5df67ef041aeb8af6790c214e41a1e98deb89f4815eb5e050c80851d52154f8056fdb74165c45ee08272
-
Filesize
296KB
MD5494c083c2bdd75c5cf548a48f30542dd
SHA185f4163b4bdcfb2ddd807cc1eda96183d1222503
SHA2565104634779c2ad701c7980012bfb4f94a9cd91918bff04c052b16627ad7633ad
SHA512bad885663e759a9193cd2b35e79c1591243b1e1d2de2532f490e70155294f92b86286f3f2fb50693674cd900f367adf7703d264fc8e2ab8a569f2ebcf7aa99ef
-
Filesize
3KB
MD507528a3fabd28caeba87bd57e6a81c22
SHA1fc56fd583fc6a5c9191b046022bfd8b5de52087d
SHA2566f14fc26ac923fbbaf13111f92bed2136e9e53df1e6693f6c7d15668001bfd32
SHA51249d8e219468a8e87578a985138ec1f2ffa01dc04c8b73005d49ed43ac4252b42933800c7213e8e8cd9dcd568b60814ac1f5587bdc9ba962d49561478dfd36a9b
-
Filesize
11KB
MD5268d569e2103247e75cf6a15213b26f6
SHA16153714a97b75d5e775901c01b4339342dc32cb4
SHA2567a499e0de67388bf0feecb6fa22a2fdfbd2fd35b2ae666e1c392de37b96b21ee
SHA512bbe34049dd0658dcfba1c4a53a2bb82e627441c2759df066f5a5f94cef9e75e2bd287623c8a75898495b3176eb44cac1b8c43e2822830adf63eb968eec80a80f
-
Filesize
2KB
MD5a288ee5f2212e5c4b66c0c5fdaba95db
SHA11819642750a3547a1460845e7fc56826f9ef0f7c
SHA25636c3600dafcbec6f29870910d209c27333689d9d85a8c9903d647004ee895383
SHA512b5842d508e429ca89c33d06b0506be4454f1acc1baed8b6eae5ef31174a30cbc63b8a09dfb9516e19950173cb4c81c1cf96422310975f0d4b1a82bcb491b1c89
-
Filesize
9KB
MD56fc5b643560d2df2860c33ad39c837e5
SHA1554478f4daaafdebdc27b869aefdad85c32ce2ee
SHA25617fb3fc7ea7b49b18c23e7a48fb4f26f547f26b2579d02fcb98945e21818d462
SHA51269991865a72a520e7000e5cc0449d12fa3756c9db061fdbaa19111877e1770147262bcba6d54b0b900cd770edeb60b729b111898a286ceb6a67856bfdcbf94aa
-
Filesize
10KB
MD574ca802accc96feba7c2e0a376bfe377
SHA1949f91ac6ea1c45a27c24eafef6a72db0b329125
SHA256089bd65d30ee8a5401f4046df7b5d64bd678778e115ad056753e831400f12484
SHA512172f95c358925d22bec4578d2cbf533a0b9be6ef9e9a4d162ea56ea38e230cc7976e9060489e471d3de34bb764af54c33964b0ebbc661b38cccd328b811928c4
-
Filesize
5KB
MD533a0451ce8510565214cbaa94cef32b4
SHA16e683a2214936c0cd5ff544836d90d1bc83dd81f
SHA256854b54b0b3aaff5d35cb617da75658202ce6b14da513e4062a7a6901e8262a67
SHA512345badc88af617e00b3506254b39d574be4df26ab16abc8d14ffcc3837225fd192a134e00150af7189cd7ba8cb5087b6d4c0cd4ba130c7280694a1df66b13f39
-
Filesize
436KB
MD50388b7487239ad52889aa184d481cf70
SHA130c94664213c7e72baacb7eb03ff9cc3bf0762ee
SHA2563ace554b2e6bf6baa54834d05b7c12a1e95f23f1ef385be79b689c4e4eb8b3af
SHA5120125712ba2bd7a857e847058c8b45c3d27e6a8bd90c0682fcd58f45d9c8101b2733b2a9f9b952b3fc352e04e2135375ce906dfb85a1b80a45a169fed2d80e4fe
-
Filesize
78KB
MD5476c72c2e57ffba924af5e568b8ce7f3
SHA18e7d33c4d502e11a1f01dd5e5a41b3c181ca5275
SHA2564e45b0272fdb7bade0db4103377c0c372b2fde45d32e4aa6332754c7bcfc3e9c
SHA512b817aed2344abfdbfee6bf352b34a5c9fad8c85e838f2fb9b7ebda3729848d07db8eca9a91fa28e1ea7dc8057bf5d5a8f90468c9bff9eb7ab9ba0ede74fc1974
-
Filesize
4KB
MD5d8412eddc30f11a0e3c93f4e28fcdac7
SHA1b3b78bff061d7c24c76706f31ae9553275e35493
SHA2560043146c49f3f951d5d61b77f6e71a230498b3a35609c7a073ba4d74b04cb03c
SHA5126a8b111b61debc5ddecf043b4dc6d7178a8008b017316e18a3214bc7d4e97149f548083a7b26bdac1d6122055a749b1d59c0a4dee66503ffc54a4339f420180d
-
Filesize
1KB
MD503a88c2b72b7e62de4406ff82d253c67
SHA1ede0ffffeea4be439f4f420a83fc719170af3dfa
SHA256f5ee23d1886eb07392ed80729142d329f0529b663df7963120b5dd3f8b1c865a
SHA5123deaafd48c63265eece99e46134e13ff88a55c85cc5996fc7a6846083cc0452acaf3691fa06afb750875617b0b9f535dc896cfb1eb06cb1e0ae3079e156692da
-
Filesize
13KB
MD59506d436211bc0f6161cf07af9d49079
SHA115996e5ac7fb61566008ae1f51c64fbc92f219a6
SHA256b44a9d174bd84b4dc7f3343887fcceb0985aee78d9a4392db3cead06b9cac888
SHA5129d17b4ed86ffa68346741ba281200534b99d657b641db109b0f13f3bdf70099cfd02068edd9503667650aff27c89b04443dec552b9f73fdc254a312c8f041977
-
Filesize
1KB
MD5aa7d3f39ad3128f78d48c2cc0116b308
SHA161c18b5795ce66101580527459e8b10f5a7e5076
SHA256a05c998e73c5df23e18e68da558aba0a34cfcc94f544119ce043a92746f7f1bd
SHA5122bad34e68be0aed3c1ba7465f15afa245f44869938f606efb435c49f76472e95452d4f10ef84efdf8d9e03bc65de4c21796f2b463f93b7bb6a0ad14805917b95
-
Filesize
53KB
MD5e515b27bf800e9e746d0d0a79b0544d2
SHA1b3e16f69b240dbe17693b8621fb5c4ca6b5ab975
SHA256716aa1f8e05f7aa94f387d8bb14e3dfa3ed4a3c1b95c55fd7193634dfb47b35c
SHA51244db1b3e935721cd0ec7c15239ab10482e05a796c8ddc9fb0fb74c8720ff118d7eb39dadc5c73f74fd498f0fa818ec75575952ff2c5044cc519f0113eeaf69e4
-
Filesize
2KB
MD5d4ea00961377397c240cd4b01a558bce
SHA155b4d4149f0461c9c3ca6b79b57776c6331a7ad0
SHA25692379f2a6e2b319d12ab4a4abfc726fc411999695520ddd718119fdf527f24c0
SHA51221381fa65059fc2d970c75379b7117f313f0cdc9acfa7921d99d96fe40dd8bb8ee0ddd26273983816ef5b47b84ebde643e8aa04f51160a9f5897caca35715b23
-
Filesize
2KB
MD5242dbe325f3b0f5d7427ddfddb82c38d
SHA11d2a7c508227de3db45c09c094cfa5bbb1f4906e
SHA256afd39d56fb03c834d3548af6e7acdc8948e7a92f6456a92f05034aea52c04590
SHA512dc31159f84efd334bd1b10546688f114db0d45c0ff13000c8ec5e7dfc6ec9d71bda91f32e9ffb46f0c7dc9fdf17810a876f018c2772b1e6a063e3e8ce933afda
-
Filesize
12KB
MD5c3b6446592b1a106d2645a2755e832a3
SHA19991e64d73f5948287ab16061e484ecca7cfb245
SHA2569773b8d761520ce5343be3bce7583e813b55d7ace4b990080d4f977385a29f88
SHA512da381d16d03e1227733d3ffd06f5607588049b9ca72ca0d0dc3b94ffc8fd6fcd4ed648af0b9b4e994884105233fd6ee724edbef77d07e5da064045775b4553b6
-
Filesize
54KB
MD55eeecbe756df8aa17c10846883466b76
SHA184b75536abc7efee245d365d34fc5dc0236337d4
SHA256063b72f558f371b102e31ebed29153effac1d784914051bdfa452699a181ad06
SHA5128c5a107dc2c1a8caeb049697675bb97dea5388813bc4a7b69e036b157c06089cfef61bed1700675cd03ad95300de6c5113d760026dbbd9fd00c57c3fa2f945f9
-
Filesize
1KB
MD58a7d14ec631a96a0a2abf86bae55e12f
SHA12ff7e1aae4d3fe3ddf43401cbdc85440637497c4
SHA256b3acd21aaea5ed3eda8240b4816ad7b65f16f90c7fac0070bffc0b4a463b6b38
SHA512e61ffc00c0fb136869cc3f3764cd7e7a445c064405d6c3d47f38ec893586401bfde0f7441505b9296ecc99e9f6106278991706b74a99f32ad45aa5f26983ba65
-
Filesize
43KB
MD5df0b156047bf8f29dd650260efb0c73e
SHA12524c77532f60176f08dbb7958b312534455cb1b
SHA256a117466f9e737c1ae550cd2d650b374bf736bc584965ffe321ae8e5755b53687
SHA51201ebb68ff73861988306b041e13efcf283d81129fa866209d2dfb62ef670602bca29b3edb16f6647b5f3d5b7cf19c1f2ae50220ddb561f722b9f841ca53c7454
-
Filesize
32KB
MD56914763ce8db73dc3982fcfaa8b81a71
SHA176311c13234bac2b2df8a26ff2e9e626bf3f8119
SHA25688122398e8e5f98785e078f9bcaf64ca3624accc8f2315ffdba6ab09fee88ca7
SHA512552cd24360b74d6516c12735777dd0c83ff35051ec3ef7471412b587096f0993cc75d2cd1202abc81db9f01b4b760130eaea52380c7971d2daa9e78722fbf596
-
Filesize
6KB
MD57969633349d5d9d2f566c93a8cf0e68f
SHA1a6c5c69f5011c021471e57e89c84e4e1e76b8df4
SHA25661beef39431407a3a82929b70a110c435c09fb8e2bc91d7ba84641dec5528fc5
SHA51286c12dc2ccc5cc46e327c19d58e7dac3898629d5806a1d59d1250c46b2446d581783d64e56997fc040aab20feace962731bd6dc5870a9c691d174c7d3d32b8bb
-
Filesize
2KB
MD5e4f7f762508fa770d77651cd03c8dd08
SHA1cb1467c3b79a4ef8b40c2e2bcd905db07f7c8bea
SHA25638f3886e34829070c66eb87bb444a0f1c6437e2e469599f5ee8ee82844585377
SHA512cc1124117e095c86bd3e29a229dcd3882e33ca87ca09ce86b6b0aa0ebd7a629d3acc531363d4f1f590beef805a06740f0193ac4dc210fdc4097e607f6e73a7d0
-
Filesize
12KB
MD5a4389776e7feff0eb37e1b80778d7988
SHA1d046b39a941ae9e7b8b9b5c661d8feb3244447b4
SHA2565319da23b70b8f52fab1f2ef17797f669a7c9ea4ac3dc6d3323c865f9c68a80a
SHA512b107e9d022fc8acd99dc8b80b92744d04b1823242a43b69d86cd78c2fee3094e41e9cac8118c3d8d923c414b0dbe087dc4290cd31208bce39671c7833a465cba
-
Filesize
21KB
MD5b93e9940f9417afdb62fce3bb4644392
SHA1c7019ae19db34fde4868ffa2df1eb426fb2430c6
SHA256375023025663f2b593b86445dedc2b13dac9ed008d6d78277d632d9a8dce8414
SHA5128c915be5f8aa0796bdff7085be63619a341f1ffe01814d2204706f332d4fadd0135ddec652a70f6ea1e5b54502fdb62ffb32b81e30f6bd76299a8602a3f50192
-
Filesize
2KB
MD52839906d2a6bd71e700dee0cff1407cc
SHA1896e4ecca1f23f6f1371815e893d45f06cc7681e
SHA2564b7d6fd4a326cf9c8df01305933e88cc4b1bc8ca2216e1b5264fe6523dc78a2d
SHA512806acf3113bbe7050f936c22bd309f6f9349297d7f0447641a1855452f6bd7aec7b52427315d8081f6f79c62fb3ec0570d03241419df2c2a8e074650e719b133
-
Filesize
2KB
MD549023de67e9274029d86c7b01131e12a
SHA141404523a1426de7724194749eadb1372bf7fdab
SHA256e9da7fdac7fe872df02317f5a7f90eac9fb9e0dc3cc151068826d5c8197522f8
SHA512536dbc1a9cac0467fb339f62d1f39ba6a7d266728dc04eb445abc2d255dc92a770feef40c4730b7a1165fe74b1825e072f231df572d11d3b11a0ed6da5db4131
-
Filesize
3KB
MD55cf37fc71fd0445c3bd4d81ffe413bc7
SHA17daf73e5df0ed5d79c9055af760e654e7a57e1b5
SHA2564b8f4a2b7d8be64eccd97955096fdee69259712b0a1d8293f26ce367af72baa1
SHA512a0d166866f611bad4f5bf2e36d9e231916856ad5d257b0dd96aec0489ba1c3b19ab3fd913bd9c1efecd5e26b04d8710e57a95f64f86b8abf92d7f7049bd00786
-
Filesize
4KB
MD58c51408e94e60800cc98ccfb2d26e21a
SHA14a8d12a28bfc8388f74eea8fb3dd6b03255d61e1
SHA256036daec74a1aa17cfad1a8cc3e19b1d8f481cc01655679a89c73ea70289282dd
SHA512847a5e170832845d0fc27ad791dd7c112d15e2108b480c3136c401948f17197fd9d5b4d0afe45bce169a1329393181f0523d284d45e3128e7b4ab83aa31d5e30
-
Filesize
1KB
MD5414b8575e0f6f37171b0b05fd45cdd6c
SHA109095bf68ef7d22c48ae7bc6355aecd11346b958
SHA256f22b7ecb412b4ed2eab11ce4f8f02dfb316552bf0806fd33ed2d12ffdc9a8edc
SHA512c8da30049d2446ea39f79b190bb717b154191a439e6cc7420babfc09afc0ac30046b3221bdbcfa9b0741c0f24d8d1bf210aebb3f172346e89128ec5913cb2a41
-
Filesize
262B
MD5484b2bdfb0809adb661d89401d1011be
SHA15b754f3682f90b94d9f7e0c44d05bc23d73579c4
SHA256ed268d4c14ea7bbf3b956a86feefec05bb8ffd01b8a6aa31f7367104141f5dd6
SHA512838cfd6edcbb13e1a7a9c73b7ad780a91e563275667f702fd5f684c3d32af4e000dae9605c7210fd7e157c49a9a39c769dd18b25de4861a4a5e5cefcfdcc5a30
-
Filesize
48KB
MD5dc05fe9bb2824130615caa5fde833386
SHA1126f314adbfc34be15bb9f18b4314cc53dc71c6e
SHA2561cc3003d481302c84f9666556c532dacb0781281973fc3e681f37c37f2b67622
SHA512a07261556b4d95a624cffff538c2c004f070acd96548e535b5c7a5c40d9854c2714f6c1ec812aea87acac7525b6f7afdd77f5ae2be3de04ec7380a3d231e6e07
-
Filesize
19KB
MD55513bcaa23eefe9e6df1d31857673eab
SHA18e4d3ad5e77b1d57487769f6bb757a1ef5950961
SHA25639a78caa327ced7204299ca670ba06797b2de2121fb138d43abc1d33aba70a90
SHA5121f78e398741faaa3342a4b2d01f2aac40ae97b87c15cd0bae05eb9a11fac10d0041ce0cf07f4bfc775834fadf5c92af619365e636e5adafc9f65dd4ddd9fd9a1
-
Filesize
6KB
MD57a119bed206b71328449c378b8aaeb91
SHA115096b15e7e6080883df5cbbb21de0acf78692be
SHA2561610b6e04204f90923f4a65ff5d7faa95ae7f989e44c5e331022786056b39e01
SHA512cfd9eba48f588c7b975891561e9e63235d86380fba98d49dadee50e2641aa7b5b5df5f8c66439029adb4a3ea3ff030bb9f960dd8624a923a91338c434e5e254e
-
Filesize
35KB
MD5373d8c7721b27def486b63165ed8e155
SHA18fb72cb606ab46fecf4292a72ac17fede815ddc8
SHA256f3960a507135caa0b7853a223264171bf8c5672918b73e91a997390f5a4908ab
SHA512d3b9261d2ebe5097b449c762541f58ab6c32389f38d6568d54458c02939a8a648cc749a1f7b11b16b33c54c8b5dbe870c1c85bee7c512913f7aa6b072d56ac9b
-
Filesize
4KB
MD5c5c8cd8950915dce6f2e265ca72385f8
SHA173d8f9e86d9473074e064742a8c80d91c973fd40
SHA25631d1d107ac2ec352cdfd1239f032247905db19336dc217e6fd6d7b630febff5e
SHA5121395035df05b099b20c6ed49c700cff0304af7445f30dae9480ae19de6c0da6f1863955f2cdd9f093cc082f3a27018b8345649d8722cc80b78aa94d8240ee509
-
Filesize
5.1MB
MD58c9072c9dbab3007387a71dbc477ea4c
SHA119aabcf9e058e9f87e7aa9eb25574407e6bac3bc
SHA25670057f7162dec58adee9b1e64930c08f5e6aae1a60f30a4109050ee2e320175a
SHA5125b87fc54ffa151af4979742ee657d44e2c1529b8374fb88c762460c274aa69138cf7002d348676561f87002d92514bd25ede96abaed9bb5c0d83f66437654bdd
-
Filesize
3KB
MD541685f775957f50a459b44129f40f7b8
SHA11b1f453600df3e66a0c95ae4d5294f05b80ee24c
SHA256ccb6446186cf89082322838574c0cd588465d50164a48c01266490466d51b87d
SHA51249b2b8019c2235334f41b96efaa88fb8c19764845640358f6d24368c63b09aeddb3f5a0fc7e934d94dc05b8dc4b3e5128a951b28d26be17c0a98e831ac84154f
-
Filesize
2KB
MD52fab8dc1cd84246992eb4fed801816be
SHA1e5cd555c54342b3c399e82de0d891cbb4b80e59c
SHA256c85f04a24dbe825b0104487b25e30306ed43adca4553f8ad581f329be4cfdea2
SHA5125ac5a877be5695335c750e1677610722385c9671e04f3273bdcf02627addd2ae9cbe4c5e5efdbc28fe4f7e095c84363273e9685c6bb00eaac353c85ee224285a
-
Filesize
262B
MD5c655ca95f84af94edfbb2d0eb720636b
SHA194abd4d9ab2e1cfe372bf82e6e6e501b631856dc
SHA2567922339f6ce2fe7dd83b3080a6f294dea0765582034c9e9bdea6250d8dc20e30
SHA512da4eb9ccf15bf3126607dc592afe469ebf4813ad5215b4fbfafcae05460e9b9ab80180a44c426a71fc24a0a5a4b4a523826506a1a2e4469e57f548923934551b
-
Filesize
5KB
MD5804ee05a611a833c2857f2ea500ac4d4
SHA1ba13c66ca3a69d4340f74fa4bd8e794fd7a29af5
SHA25663221025a04458d3f8f14fc12532c25c7e50b4455d417514477e042ebbe4bc4c
SHA51238bb2358f9ef9b801dd3e54c5ee332cdccca781c29c420295b9a26b7fa1bac869aa76d900220c91554a3e0651dbb10fe39956ca1dc4aefc5996e003379a1089e
-
Filesize
5KB
MD547aeacb925bf6165b3ffbeff39799606
SHA14ce71cbd5a82007ad3a2d6f6e857f1ec49552a86
SHA256f584ab37f55ed997c96c6b5a23ddcf57241686d08f2c7f200006b699990eaf09
SHA512dd53217c66743671ea93e8cb18ce92574311d9f5fd81557e030617e45070d1bdc51cdcfcd39a9cb5478e0dcc7c9a3a36443bc06f003fc64de52da1a280413590
-
Filesize
26KB
MD59ed6750332b9b903612015f73917bce4
SHA130c53bda494cb74da7ced57e7f9e97bba9940993
SHA2569987d3301736a011f56caf0bfd0a87e7fb53c482c6e0ff8d9781fe6facd78e48
SHA512705fc6a93ce5472848078b0be4ec3d0330311e326ca6e756131846c256f6ca18fcaeb9c31b9a024596c69739c5bc2302374c7e21fb39361314e7c63358e0ba15
-
Filesize
1KB
MD57ef928a959c29ad276bbdc1a96452e4d
SHA1fa2d3cbf1d4436bc1ab8121b9a586c17359b3652
SHA256ffe5642a9a876266e911fbd13f5d786e5cedb9b3e612645ab2ff8c137eda9a7b
SHA5120a723720bb0b33306a69c35907142e686c463c3b2697c5ddd587060a26c261b2d071911bbf42fc4d5fe722ad25d98634dd0e655dc66bb73f387338281c85f370
-
Filesize
262B
MD5a9906cc7f125961d45358e87fe1c6a8a
SHA15e36ecfcaf33e10a5962eec46bd633a35570b2bc
SHA2564876cc0bdba6264d076a01a81e3b15eb3c5eade4567c44a0630d11994d10107f
SHA5127a20c87ab0758dc91486507a5dcb57ac63960dc04a66c6126812a56fa542a2c5dbcd0167aca79edabbb4c2064683dd990f004abfc14b7dc289c96c6dfcf76118
-
Filesize
2KB
MD5e97b291207d8a621466fa6b3f57ecfbb
SHA13505ef7ebce484386af6b7b5a9d782eadcbe478d
SHA256f70e0370aa05a4dd890067be4e5a5d3ebaf26e6fb5551b735a456a45184d2981
SHA512b8b77c94473442e5cc3e1438825dcc310fb17e1131d8a18cf6b6a345adee2d9ff285e2418c42693c0bce1895d7b1cbc4ea959f9a889909e982adb5bf5846d6a6
-
Filesize
2KB
MD542757a545c6a4dfae482d35976cf32a6
SHA1cc0170b54a0ca6150a59f2452c778a56ba67e132
SHA25688a433e8bf81deafc19c245d19bedaef3f25d3f68346eac164731c87709e24aa
SHA5127f89e3280fd525a2e299e3439b2471a897da808a91cdfb4af8a5ebdf5730bd35d962745f039bf528de95110d390ff5a6778258cd2f10ec83d85d27fced2a6548
-
Filesize
3KB
MD5a9b7c1b04b3df2b4a95d370cf02f9be8
SHA162a2d941e4bc73661e879a6c5af9d977d0edfa71
SHA256304835192f0e4867fe061be5c0bbac4caf19c73ebaeeddd2ec6f7e17333f8c6b
SHA51234080d6183658175b3e3f00c3856390b4ab9ea3d8ea6652c0ab045d50af258f1d66fc358e8e64335a5958a03b6fb6a509da192edf12ac22d39e127b91729e6d5
-
Filesize
268B
MD5931e28b55531d424d8abc2e131c2b8e1
SHA17c61b016dd7a1bf7235269a50618a116a4d9d542
SHA256c3f18a0ce0baf518f7bc257e32873c58b92ccc1256513ca29ab43b9e74c971f3
SHA5127e356a483a8291b2ec29dcd2b811653be464f19ab5105ed8f10a5b64253ef077dbcdd51d0a239ccb35dbc5c391eb9a5ad61f7f954ea755237e01f68aea481c64
-
Filesize
262B
MD5f59b51602c35ad5e9058e831247caa7b
SHA10fbc65a0153d27b181979be960c2b28c558cb4f0
SHA25637c3d3672d8569f527115cd7f3780c7f93d6087d9b2c524fa53fe07c6825489e
SHA51225d0da6a741d48c7e1fee8c18dee900815c776feb80818464eff9b517c93ab22dfd34da6f79cc7c98e1f8b495b6c0e15cfe7cca2223c5dc931f4a3c8aa297b35
-
Filesize
262B
MD5e79625a6d5199b85ab41b6a0f41d7e17
SHA1717f347a2ded83748ae0f9a413d9df6dcb1c8d76
SHA2563325d40aec088337256ec181370696d4264debbe4e7a2e2535c4dcaff7222cca
SHA5121d6a25868a86a2480267236a8e0a7b677c2b381bd8a07dcb9d56347e15dabcb1d0e2aaa4eb052853305f2af21f17cf1aaf00ac12fee9a2365689aaaf2184f81a
-
Filesize
11KB
MD5d52251ec41392fb87ebade07b25b7487
SHA14fe78a74e10d9199aeb4264964f3f7e4ecdd1532
SHA2568dd3e73d2b78f63c26482dedda0fd78ffc50e109d24accc911f7d1082946cba3
SHA512bd22b79e0297a0a709bbed95ef7175103b3f16a993460448179f9f2adf15960f87a844fc6694e690ef835602bb38aaba838dbd4067b87173aafb50c37c2de279
-
Filesize
3KB
MD5fd696b070897fcc9e840160f5c46d03e
SHA17aee086d78b614e94d6443553bf45ab9385fce91
SHA2561a66769bc7a2f475562b518cad920428470e6e84a379a6472c4f2c381afc797a
SHA512886e4a1e2a6b1b3bf1dfe638454e84755814173a67a43859b109f3d5546698f141cd44d2d3dac3ea731b50e39d63f1040b03f7444c4c614d27fc982dd97a677a
-
Filesize
2KB
MD525bc730af83c9c6d066c7ae19a259d8a
SHA1a76583a30b2b6f25af91d6c89d663d300b93f243
SHA256cd60475663877ebe3aed82e9f71dd1dba6d53a0ff48e4c379a8ba344822da4f0
SHA512e689f07af9d1cc6cd14a0ecaa959044ef866b2cd0cbbe1e45aadd9d1205cd4fd29aad386612d0f00317ef0f51b5631b967146d0a5e6a343fd2830ac6adf6c78c
-
Filesize
13KB
MD5b49337d47f5eed7ed71daffcae86fb52
SHA1988a1d27a4a1a5b1427f7eca65223c225ecc01b2
SHA2560107e3bfaea3f45897e5ff5091025c9ec3de4bf22d14ad49be2d7c9d3dec8870
SHA512c38c99bcddbeb5afc717c758df9d09eaaa68287dde28bbc23a973fbd0b73fabbcdb6d8b72f8ab4131379baf49a235a3830affb080178a24957c9f4e1c314304a
-
Filesize
33KB
MD55995667e38921af1738c8d1a120b86d7
SHA1434cd058d4fd6e17ce75271d0334a7a5b62cbd86
SHA256ffce28874bafeab8e3a7793df4b5c8b7531295478679d881f4d57e2f5b823dae
SHA51258e10bb147c7b822f09d2bc5cbe56d65cf0e651662511da750f6eab7d28f71ee8120ee9939a95c8070e60e26fe26d89d6ae8835eea5b5bcb1d679f449136e222
-
Filesize
4KB
MD57f3bec187699970cc187df3dd6eb66c2
SHA1ac2a3f2f8bc72f74c3eb8782b1c0eed2bc005670
SHA25614820fe5214fdaf7be13d8b365a4eba03d5d6fd41c1311a657a0bdd58f41780a
SHA512395bc330ed90014bbb7246c51fad56f4c9127264e4bf7705a95e255dd1126350d5204e2090293a5c42e9a24edf5191cb493484d56193bf4a97ea2967a44fc852
-
Filesize
2KB
MD54ecb28b3c8dbd16e0d837448e350eee7
SHA157625749e28b6112189d67b35761401eb242de76
SHA256f2bf5ee08b68b713141fede5869a4b24084fdd65dc7bb5d2dcc368b3142abc79
SHA512df0ae4aa99a3bc5df14424b112e2d8bbaf9bea3ea69ed5f85db2c541dd122e5961e2ecb91eb213cb66f604e6b03ae250f6b8fd9f70f9617bc70a4902e7f4e5c6
-
Filesize
8KB
MD5958f0ecb09ee0b574975864296dbb2c0
SHA1cfc33c817267c645ff350a37e8900daa89bbedaf
SHA2564b4f68b0f380f22a83b4436f922b9b4d058898cc56bdab2b09e87fda7f0e337b
SHA51262c390fb702447639633ef3c4498e4c30fbd7a78e67a3ab2ae7031eb7799b06f29ef873c9331dba4b8d6a463cad5322f09f8611b61fb4d2f12cb23b49751dd96
-
Filesize
8KB
MD5f9f0094f9098d94a068fe41d8f9a85c5
SHA10972233b0bb60a3956358b0c1f241ebfc2808152
SHA256f5be61217d237b2447fc7eb4e0110b62633e51e75fe1d197c2582dd934e0042f
SHA512aa273e0854d4857bcf30d361848d378ddb10027c584e75bfb0c2bd11c5d64b04d77720d4102e3ac493cedc0b1cc71594f29c3fd273d0281a44a74420596994a1
-
Filesize
2KB
MD5bfce179e22ca662255b0c6786a320e12
SHA10c0f7ace42faf9ece87bb829b412945133d5bfb0
SHA256738a664c378d072061486575cf10f6181d05650720cc694b2d1e6fde3157bc7f
SHA5124e3b65f4ab633afb1d65f862b915bd136367f42f00cc09320ca22aefdf5b7f2f25273687a503a2f105c98b62435171a570001e98cebe6c0c3cad99a08023b477
-
Filesize
2KB
MD5b133bbed940e24a3f4f93f27c5137657
SHA17bb4116549ec092c6c6953beb2860caf41dec88b
SHA2561bc1032e140fdee0323dc229a3cf12c82551f9b8b44cfb9d822919d31d0f9333
SHA512c5318bf4eff80e8034696958a035fac9b6d07d065fc92d8721169e56570d93e7a6f87c36ce24179bf7a512d3c20457dfb280b78f559142efb891c8a154e3264d
-
Filesize
262B
MD5c743d52d05d9449e80115f85df3e99f9
SHA11c2224580c07ceb0001d63fceb044e4bd1811d0c
SHA256335b8d6183016b5f02d90b03a0b680e573aca1dc1dbe60da4e2b602a13dfc529
SHA512c876494216e06d774607dbf6663458a5db7c3beb9a8bd7c0a5339699f88c9cbc6f827266898319d908dcac46f6495fa75ad4be8f10a08559d3d7439e1d6a88ac
-
Filesize
3KB
MD50382713df59427860bb30f549091fa99
SHA1e604f67e6cc854db7e9c035eccd6f51176878734
SHA2561d9bd7a206c1bad2eba38791340f4350a5ac1537dea6e8713f2d9c8c67e033f0
SHA512d3120e501445f3f3e9eb004945635f830a3e25ba8993b857615fa33ec42efba5a6fa8f2261737fcde13ff13f8b346db6d7d3afbaa67cbaace8b7cde70a40cc9f
-
Filesize
2KB
MD5dbb33eeaa7d93ffed9625f7d9ca4fc37
SHA1bfdbc93ca958ba259d259676980533eea1bf232f
SHA256d0dcd8957ed7f348f00d6be163a48e0cdfa8944e4ea182402905ea3930f19fd0
SHA512a1879798703a1c903d10ab6e6b12c2839384bb31d479abbd49dcf6c2f4dcd19f02bc8f5d8060179ec1aec4d190fa63b774d804c5bf2c3bda772af695847af4db
-
Filesize
21KB
MD5518b9c3b83471d182b42fdd06b46401b
SHA1d307913ead23d9187a1b7c89c35aef1ec8e71a47
SHA256af9ad291eda3512383d160405c1978ece5db1fe7cb14000f8ed13df2cb8a7d50
SHA51295c2a45860f7ba59cba2a9e1bd793bece08e9bae873cd7c91630a437a5df3ee9418e26e4a0664d1bb8da6ca054868609596f3fd9b2af5743d888f207f128d0f0
-
Filesize
8KB
MD5998e0202aae266d934b7be04a414fcf7
SHA1ca7d5757f8482d01ace049a0c898f17c088d6ac7
SHA2563339a1e9888d1c6a2a576021d09f38fd3f5a09a9c41c4793e0f14b4eaa31796c
SHA51272d2c9b78fbdfd5a24cfd888654f24e10242d1440f24bf45334160532a5b56191c7dcd46bf11e9208e11c01187691267210a5c07847af4a3e8ed36c5cb6651b5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize9KB
MD5012749e8b60fe5ff393909301e005cee
SHA1e7b72195c087204fffce95329ef76309bba9483f
SHA2567ef99807731c5d8871825d98b8d60a35d68f8280fad313939b6cd088f6287168
SHA5125374ec62f67684aded70053469c013e19654e10b5bdf72bfbbf08882cdff15e6e6b1efb228f909396185b778e0a4276d029dafdb984f338e083d8ce8f5f72f8d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize4KB
MD5d4728cebbaff476f750184b94fcb84f5
SHA1135f82d55302738eb25c64b5cc6892409041642d
SHA256dfb080bc396703c26c000a3a47b67127e135bf3ccbbc4772a926345bc206ba85
SHA512dc4d0cfc3fda162e700046add42bbcecbec860d2f730313bd0c146ddc4ca19c777569061d7b94c470d650dab01b607fb2edaed44136ea8a5631cf191e0794e00
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize9KB
MD5e9b744ec1d5e4d43d417428ad8160aee
SHA16b33635d519d1a3a219c6aab41445854ec9a6990
SHA256f8afb17f5bbd4d17926a07b8ff20a154585becb7e9a47fd399d6b92fe69c76d7
SHA512e466e1998ee9012fa52f4204a5a75eca687870c94a72f655c212937eb74ed0d5b1e1fe3e63a600a7225a11b512d3f9c654ada6f4c6ea39dadb7f746c4160bba5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize8KB
MD5a45bc8bb3bbf69c59d26cffde8f088fb
SHA11407fa4e66404063af65b6868d6f65e44f6b6235
SHA25625a34d1f8778f6f5901eb506c6669bedb22999afd03bcbc1e17ac00286f09d69
SHA5126bf14a0beb42d6f549d932cbe677850c2109d8d699fcdf726d880247ca20aaaa4a75039457eb48e4f555c284712ebcadffa412db7436da5e3ed63338002c7003
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize8KB
MD5a42de7c7d413a3aec3d76c05f4622c0a
SHA1f79c0c418c126f3d099bdf68795c4e7e6a4c6416
SHA256d0e753fbb4bc86d6e483a6995ac6c8f585fdd30270321f338fbcfa68c81dc9f2
SHA512d29814898f45a11695563abebfda1f231d5cf742e4422a1d6c9256f1980e7b2b94fec6b4692f394ebef3f9aaa56e4ca2ff1a858e3f38d05ef85de99e5da7a1ce
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize6KB
MD59814ff8047e780552680ca84dd3039fa
SHA16fe7ce5d2760d250881498d18bd9480fa78121ea
SHA256e6bc1b2fa3abfa1c91f9edf57f474937cf4c9cd1f6e59b65cd0a0b1e8cbd53bd
SHA512a32c90d9f2998cb6bf89ee9c28977b2e6e703dec1f03f78d899883e3834276741144f3bbbfacceca5afdaf58ab0d6cefb29cb97f7d7d511970dc0de7c6c17ee2
-
Filesize
16KB
MD50915f11b726cfbc39613512851510a5a
SHA13fa78412462785f580d59aab283b0c5914079d58
SHA2569215152caa80fd11524bdf438f27f9e010a1998c6731b8dff548ffc689ef22e3
SHA512480a921530a30a5b61dc3565d1efb5321a6d587ed455a76a26436001ea6b4e96a70851a79d31f7bca798647ffa2510e8464d5d0bba491cbec749f1298264043e
-
Filesize
17KB
MD553f007540210b7f5780ccbc49a5baf5d
SHA1c807884dec2163b499fb506f61ef8479ce5ca99e
SHA2564fd1b8453ab96f27edb8bfd473cbca59710cd26ed700bbf94bf1c51b4f390bef
SHA512b624e3332ff6a584f4f8c7c61548d9529ba9f184094c444f5b51d43fed28cb9f2fc458d03c240e394719ee43209c7a038c15ce93c2ef27e9e27e9698d3636e8e
-
Filesize
13KB
MD5e4d69c9022ac8c88b70812e3f9114f25
SHA18cd0cbcfdcebeb0636b3b9b4c455f66b6c961085
SHA2562f6bdff4f3e6457eb80af6dea8165ab635bc419873b1e90c462e93d86d131911
SHA51270a436d583bb6d7074d224dfd2d2de24b802e6754847dc14e3c471c8c95956f91bdbe81e3ee3735a50974477475917740fb8a3233f8fccd7b28073f44573de70
-
Filesize
16KB
MD5e6f704701b21fd89bba23a0343a84538
SHA1ddee236efadbe4466297bf4df1a8787b180b88d1
SHA25637a0c00195280659a12466ce3db19825e8c610f7f5089067d3857a220f59f5d0
SHA512d807534d56ef52f27ab32e26247529e8011eb071279a4070cb98ef1b5ff4473fe1c38178fe3b3b795c0d356c01380d0f9b80f0579053df4cd0cd74bd824ac00b
-
Filesize
14KB
MD5b21aed5647bc51c072efc1682e5f6263
SHA1738d2e9ce75f28ac401e38f8b9ab689444e10f20
SHA256cb8b5d74df819d206f25aca82a02cb358f94d0291f3dc25676b6a0301765df2a
SHA512c303d2b5f240d5b49b15c786ef82334b515940f39da49eda3e25e7d0d3084f21cf009866cf16ec160cf8df9eca2a14003b33d7ad87a485f7a1c489adc4ae6c59
-
Filesize
17KB
MD58a800b5938a55d60dd6f1c09b2ad6348
SHA182d387faae19d08bc4bcdfd3bd69206a23b4b062
SHA2565e6eecdcecc74b4700716b66dba13753e30da2119cbbf3f96b3fe1354277e659
SHA51218a0b279ca020b7a5efcfee4ed68f08239bad1f6f338fe0ccbb1f713e33e143a907090abb97daec04b4f5d003764a9cef9dec705a4c7687e5708d4e7173e277f
-
Filesize
6KB
MD5924a3f86b1fbd3a144b3049f32b93f9f
SHA18ff326e947697d73ffba6be3786cd7d270731911
SHA25619ab5cc3be3b70285ee7ac3b12f0ce2797911bb7ae150f3dd68cfe542892f117
SHA512d8bed9309bcc093f579efce162f5705cafc063cf688191b8c82f88232f6c5ddb2096aec477b69e49b4b8c2557bfd93d42f8f0b1b366080f82f2097bf8ced6969
-
Filesize
13KB
MD547fa92bf167f0a382f1f1e9a5de4984e
SHA1800822eac5bc9de741d8c07a3055b3b36d8f0054
SHA2562f20b5795d3770d8259517d5032784e927e1b93bb659302972065d177b0bcdbe
SHA51267bb3a996a7c14e133fb98d8643aee236f81a90731740b79a4a48089ce311a3469eb76a444118af8df4804bdb5e60b2cf57dac274ea3c0e5cfac5bed0f8c16d4
-
Filesize
15KB
MD535348cd827fdbbde2b10be9a6247a915
SHA1e29bf1e38babdc75e7f37147705d73daa0e7db28
SHA256d0b99b87df8cfb03d51b95ef71f5aba4f9abea3861c13742f96373b2ed8ad1ef
SHA512e018084e547bffa27e8bb898cd322968dcbbeb12c38008e8b9c4a8e7957ba73292bd02b4b9c31b0508d65203984469757789d2076340b5206d521363591eac81
-
Filesize
15KB
MD5c1e111c3deb72a10fe7fefb571a06201
SHA1607c06f6b1107b3f47f70a547a374a4b09a58112
SHA25656297ddb238ddf07b0fba99e9eccd82cc19a53ebcae4549b1feb324a989b2984
SHA5122d75895dcc8b3377e22fd2e2cba53d275021c8a7c5fb7cb66d96e96431e95b4eaca9239269588a0cc1f224ba1f52c4e211c88815bd7de0ba8685474af594f51b
-
Filesize
17KB
MD5240422c26217fef3540675c4db382fdb
SHA1e380b0a61238a4bddf6514d0c3b324d20a0720bc
SHA256c0d7eadbf80952cde2b28b9c78a823fdf0b379f9e5356ee33726a192841a7b49
SHA5126cdf3d2a2d9425d71d20b905fba303e4faf692b03e63225514ba3aa664aa3a42f7b0aa409d223e21860448899ff26aa7b34b08d3571f4dd14dfe755885fdfa05
-
Filesize
18KB
MD534c0ff8acda2c8ab710df720f87d6b1b
SHA15525c6f41c646113ebec3b3fbfc3e7dc0b5593e0
SHA25655b22788f5aab706c1ba8ebd6366b01fb653d55962b8b0b4837169c06bc9e68d
SHA512075a9c120ce0445604c68acb079f162cfae9d8cbb29884d419862bfd31851ced9e30c8cb186910cfe36be9c41220392c9b49b615fb9925294f9131c7328b3830
-
Filesize
18KB
MD5b2fc6ae6125a9f243632be4a8505a396
SHA1bf5366dcbf9e0ab7c3ba3437c70b238f971c673f
SHA256961c84368382bc6c8860d883eed7b9d01b2993598aad211fc5b5a3f8d77b0ffa
SHA51286d03e9e401ae22dc47c932fc3e7ab564244d61c5004a08ee7fae273c42a5b20bfd9487e688070459b78a163486d7b7515c06163d77eb597fa9e663c9f8b1c08
-
Filesize
19KB
MD5e736d3fc8c88b28b1282fc3dcb4f0b0a
SHA1c5442c30c898c05f49899a3a2d93e93d491707fe
SHA25643e156c121484778a6c7727597721d8317f0ca31c4ecdbdd228cace2c510bd82
SHA5126037b78298184fa708de4e7f4c22fb272c832f0a7c967c239983959d59d2f433856de5a51367ff7249c8060e097a8c023b48a63d8e249141c3b2a0b73bd01c4c
-
Filesize
5KB
MD5fdf80549f58376f219b70f0a9a59f0c9
SHA196495030ba18580e2bcd80372e41d717be9e3a77
SHA256d2c21ca805d91a77b670376637e5f2963637792784e67d116e464794ef2d18e2
SHA51220b6f1e7b9f0227dca94604c44571b13648ec842e3b95338445831637d5391380a72e89aa7e3f96263589f94989b343d5cba61d193701b41ae4f5f1773bc8664
-
Filesize
15KB
MD558643c52820925585b80805de563df0c
SHA19690f973964d4aab8761a52e13c2ad4645faa819
SHA256847133889d9b9a6abd5233394e26541245035a5e345b137884bdef743b46ffba
SHA5126eb71eef0273002127fd0f71cc9a2cd64f1a03f7b3d0a2b485e95cb1a19f9d607a75e444e9d941d19752f0e40463a5b58359f723af213b8f4d2c740a254c29ff
-
Filesize
16KB
MD521ad644e955bc3e1588e82a9beb5a9b1
SHA138083e410aeab7e7f6597ee5f56aaf2cb52304f2
SHA2561e239402e694f15e1ebf05968f8407a38de9795d847dc11fad1bb3c6d3b80422
SHA5122990b3864184df742ef2a595297d11c0376d3390727da0fe70a0469d5113c913f4a06666153a97bcacded677ea76f39229f13b935ba0df58941186543a666640
-
Filesize
17KB
MD572b99b576e03893ba82f898ad5b5b44e
SHA1193007774f77925451eaa4a254c58a2c7619d9a2
SHA256d87fb0fa17a6a82237a07449c193ad454cf12f0fc2c8f60d16856f9d5260bef4
SHA512b44d8d0b199b4842637388ab950236053228e0fa0933963ca5f3e6875f64486274b92e7c3a26f0847e0bb67c14c9411f73e635787444984c6b377ced39b0d8c1
-
Filesize
17KB
MD56dd36e7d70fda74deb0d730c218b0e37
SHA1644234f92c2d29269f75a5fcd33c068d1311197e
SHA256d4818c73df692b960649c411651fb5e2c80edb2df11b6e5ab6a736375410d6a7
SHA512a40981e589a335c70a50b268e6188c7cde73845ff6732039122caa18396f3b07d356fa546c749bbcb4ab9622fd2387e421086a622f271fba8a871fa5048417d3
-
Filesize
17KB
MD52d56db13d7fdcf6837381e0351164cb5
SHA1409c909cd6e7754f01dec8a1febf71e5fd453df8
SHA25627da656ec22f023f0a3372ab64a3d5329a40760970f6458fcb25af0d0ea5976b
SHA512a9a798ff1ab17288b7b192ea0a3e5ea19dbd4fd6677ab5243d737d5e3709dfcd6994a796b82b0901082024dbf6f8da5a32806d2667060b306af2224c5bbb5b65
-
Filesize
17KB
MD59b9e176c42775d9ad8abcd3920bce2a3
SHA174e2570c8807f6002f2ebc173120d1345537f707
SHA2564098635c490a63d3ca02f9e7ce511277ae3e8c0c6c947e0d5f772495ef207695
SHA5127c853a7f37bcb628f8ca6fd77a75d2b149528bb515623d42c404bb8a86ccfbc5e65a2738ea387c7c798bedeffaaf931b265adb65648535c79d08595853497658
-
Filesize
18KB
MD5fe92b4c89b9f5d97480a62acb5b7e4f3
SHA1860ade7baa57dc20ad4bc479e4819deaa14701c2
SHA256deb6da7fea8946b5361b373968900e73286faa90ca4bd9a32cc3c16d8a42ada5
SHA512cfad511bb92be313e7f10d4d4b881134b6489eb07ea22a58559f0d0525877d9d934468f04385fa3a0a610d79d7dcb03d705b1fcfac8e2875740c9a577849b73b
-
Filesize
18KB
MD5b5df83fbbe2e23a97852ff9024365cd9
SHA1a7d14461b081f68606579c36ce0e0fa7d7cfae87
SHA256cc6c3296677dbc1e518bc65b4b7264fb555b5699744c2a8d4c0b455ebcb2d0de
SHA5125a200063fb8c8f0de9559d051de1827caea3c83641c4b5dadebcf0d0f8e5eb414c6888eb66531134cda8195a6a8b9a2c6ad4f94b55e2a97df6e3e6ef55d90660
-
Filesize
19KB
MD536fc4b617db39b5529f506ccfefabede
SHA106f93640354a0533abeffe6449f74520fb85172b
SHA256ef5a2410efadc2710904f8444c84a980c16a9bddc7d48412dcb967a0db9a7df1
SHA5120616b030cf829ae8d209e584718a4ceff5d6019b0e2505bf09a1d31cb403ba6ed5d63cc4bf8c41c3d280095f8e6188a96950f1171655ba6014fdbafbb9577678
-
Filesize
15KB
MD50a999ba6cc5f98220373cb33a897428a
SHA11e1a60c3c73450b92d94807456acef9a93c92d8d
SHA256b5087903c32dd5e277e78ad547c656b55e07d1fb5ea74ce02bed58045e0ccab3
SHA5124d25bc1ba0d1a7ad197ff6db6639c3edb6cd5c4a5ef19720db31f78ff78f549c0674711d3dff237394d8b5928f4a2664236472d24df12b757a6d7d41c7ea2a0d
-
Filesize
17KB
MD57a9af6a064ce006f0c5dd7b7ecb9f1e8
SHA1ffbfd6910b2dd787f94359522378cde1e8dff2a9
SHA25616bd6cd86d05f7696b0431f5d7bb1b4a4e1e58427754b4bfcc793005c8978641
SHA5129b661d477a77893b83a0d86e02f111be362f261ce1328c19b6174e08d07ef330d335f299ca4b3f2f04eabf21585271203244123a1013faa445d19714a3bbe50f
-
Filesize
18KB
MD576d9453a4cabb342b517b03ae335537e
SHA1825ea594b5200fb9f8f6c2022cb36239398f0ba4
SHA2569c97933fb40f551fd78d4234ef0d149b5d06f676023e92b3c59c3f9c0ceb29d3
SHA512154ad24b7519be493c469eff3cf5c971b576b4476be57a0048748ae87a4e6c441e45d399b42b3e4d4f6bd2f607230fe8a471e3b0cbeb8d280d657eb47ebf00c4
-
Filesize
17KB
MD5a2972bded9fa1fac32869518ec4aaf7c
SHA1c739a9c9e9c7b6cec006a39ce1783b6346db11a8
SHA2569f55e3ea6e123ee1d8befaf60b7dc402dbfe4dc5eb27a5106192183c06ac1b3a
SHA5126f1b3499ea5292e627f166b3d64ed9511b5cf1093855dfba4430465776c68d32e5afd884b7466b74196c4d2da189abb04bc4fd000c5e3a6847c29a046d1e9072
-
Filesize
1KB
MD54092508eb3a738a905ea59da0a15e8b0
SHA15feb1655eac6642810cb910a31d252f9dd38f864
SHA25611de0b70738b1e481c1f2465ef367ebd2081ed124bbd98dc1b79090fe8026f1f
SHA512d73e48acbb1471b7b25a72a1db0dd53890244e3c0c831278bb7c65f0ebaa0b99943334615af00006a3edeebab5296decfb42aae9788749201501e6ef99ac0eca
-
Filesize
4KB
MD57acbef6060fe92491d2ea2accddde557
SHA1b47c56f3d1c54931ff9d89b1d91319015bc62812
SHA2566a642d968335fff1f2d88d8da3eeea8663cea11ad3b177b7facf239c23f21f5f
SHA51279e9447b52c922d0fdec4c14f866bc05275a74c0325e8a08911aeec83e3cad6ed6e8293b162e732664e717182cb9bca4fe153fbd9ad6ff25e1f8483e35f8cb1f
-
Filesize
4KB
MD5a1352f35a891bc9d724b865cee32db56
SHA12f592b76e503c5760593030ce998f4795a78bd4f
SHA256a6683cf3a87a49cc07b39bfb1e3f6ac922176322c848760a03f16831d3644b91
SHA512f4d64f463452f1660ac4a60491004f1af55ebd94c822ebf16ba6902ac01bff753149e2f5f1be197a40fd948e113e5a1e9fe28bf8c3c6efca65b1d37dcc49aa1c
-
Filesize
5KB
MD5554b1b0fb2d27ee7884a34ca48815e53
SHA1bb6076c3317585822a130ae3eab8493a126d131b
SHA2568bbb1d7d699ff5ee189a162812861e834c022245ed04b118664f31406adf44ed
SHA512766dce3ef86bc7f765d17285c6df8da02c6acbbee67985454181c2f255a8277bfbffc58cdbaaeaa25a9dadafb0306a1c5cfc095b51174b8d6f97fd97e9a9478e
-
Filesize
7KB
MD513276c28b7ade31be6eaf26cca07e6d2
SHA142d6b448090c3517f919e7a83d7dc4ab94e783c9
SHA2562b7c82c0c9141f62dbb2d105a4fda761bce74d396b27b05442c8202697054091
SHA512278aec455ba1350193ffb268854c8ab0716b77683740e12feec212dc8b8933c19ef991fed991f3926fcee156ff383bca6abfb2473503ec1d90671b70c26716a3
-
Filesize
5KB
MD58530c576a32bc3200ec80ab27b5a351d
SHA1805e3c03e1d08faa5a338d9d3a9b4dd9fa7c3f12
SHA256672bfb8771ac0b640acca97f27fa266bf33e6a705795ac8b21dd35afc2139e90
SHA5120cfef78820371a8e9485afd6ee627db463a54a31ab9620863a6cfae2dd4c24617afcf7ad56e4fd62f2c483acf013bfb398492332aa051bead6c3be476b3c00e5
-
Filesize
5KB
MD56aa7cd813bc8fb00c505e0e544fe3015
SHA1dcc0df1379d2e4e779cbc71e125c851b55beac76
SHA256f668bb0ecf751b68ddf6d685dcace814e7b04170fe19913e59b55a07ede1f0b9
SHA51215d321d4cbe5edb413b7e41524f707b85a83b5e626b2a99788bd5440f363778518db61a59b1236141ec97ed588681b6f62c7c984b3d48bf27bf220ddb22c63eb
-
Filesize
7KB
MD5db56bdfa4597f0b12f566b22445663fd
SHA15256274b81075b4409ee4f6b4a7924fe7d096139
SHA2563bc232e849224752bac5b2144b1ef0809c2624275caaae161f330c73be8eaf6f
SHA512891d167befeeacbe282226571c877ddd19749ae2f3693812e7a16be4c5c200a67d21292a33c881b9e2f5fdacc7e75f13979a16c7478a4a0e26ad26d29e0052c7
-
Filesize
7KB
MD59befb848abac51accac13e437f9c40ed
SHA1c9841d6c3e4923efee760193572a31968ad31ee8
SHA256b78882ccb935297c3209b4149fda1e8b572eb9f645064d5d19792168a653bca6
SHA5126d474c4e2f7d6f6dee7e0bdfe21449748c255d76f9d2bbc80ee2eaca0e02986f8332184890124ca43b37cbbe26718990101e88c7bf7c8d39bbff88a50b340775
-
Filesize
7KB
MD5e90e5eb8015204a591cb6fb9dfce3dd5
SHA180a9e8b3fc7456fbb7268ac67d21a0bd09d58454
SHA2566ed36d5e74870650871202760187c33266eaacdb0e5618c8ac240f83aa1123af
SHA51228e21f825e3fff3ca0793e36fd7e30d1495358ecd1b0d02a5fce18b2b9f0d1e56b3bc8eb9a8c076caa133ede80627486b255ca4b8263020b7b103112796ceb35
-
Filesize
4KB
MD524e74c75aa42c4846570fff6bb722db6
SHA1e8b5bd9afa84702a988b3e5c09db99a39b909e0e
SHA2564355571f3ac9114f40651eca4bca84727f0be5c26a2a92213fce9791ffd1138c
SHA5122ef6bcd7f846d772252332f2b398f7db73ba07aebf4ba11412ff0801f4a5cbe985515038467ae4b855ec864a0ef038efd6d562129c845532238f5687894e1a1d
-
Filesize
4KB
MD55e495c71b360ba8695b15c14ae7a9bde
SHA16d1ef8bd2e86a78016bf0bebbfd3ca2fe023412f
SHA2566f2f4561683f43b40629a4dac266678491e03bb59dfde25c95f93cf61aa13303
SHA512973ab4477c56061c836c1e48468efad232c39b2804f7cbda0d558e308acbdd3cae2c9134026a03bea419291dbd30925a9054a9dbd555ec87b314c3585d7345ba
-
Filesize
5KB
MD5b9d257fb80dc225d981018e24d41be27
SHA1fae6446cab9f15142a3b09b2cd90236139f5a7c2
SHA2568b3d04d53f9b761f43f16bc182626605db53a1cde553a8c975d2a61483b2e671
SHA512f1a4fa53d187214cd7b72466457a6f99200a658e7a97827f7508be894b71dbc30635c9da8858690eaee80a5d1eb7b7d8451d231a1f99371e0a5559b09bf92ab9
-
Filesize
5KB
MD5bd6babfd82727fad825f6bbbd0a671b8
SHA1b00bbe3c379eb4e451e20e5c143a73354e1b41f7
SHA256fa7c5096e62be3cf24db2c622ff7cdcc6cbc3f2d421c10179ad6c151fb951757
SHA5121d04c789009a5726d8e012f057187e506be6baee4de061d7a7267e04121da5c4d8382030efdc393995db24dd6d8f466ebe94e614fb80ba8cb7f37378355f5f99
-
Filesize
6KB
MD5194627412a2ea634b5999ac42094d794
SHA18664c6b6c6a121cd2e0baadcb1b37f7d096cab0e
SHA256602f524bf7e9780177d9db9afd18f761efc0210502bba6b504ae0dfa2cb8b09a
SHA512fb324cf8717eabd1f2a28066cc31fe9ddebd5cf35092b6e8d389833f93d4f38b5fc75e5bc347722e1b07fbd99f90f900fe99fba2ddf1d66e7559e31e8483064d
-
Filesize
7KB
MD55c5310c2b1dc4d450b6b8bbd319f6b03
SHA14fa35941bcba14b23935de6310ad4e95ff9ec44e
SHA256482ddc636d0eefc1f653f4972e5ca49f9e9ce8158d645021aa22ef8a4107723f
SHA512dba780743e7281e5b3f694c275c1cb6e23b26636f09b1bea325b3c6622760263b421dc852ad9c4243156a28b5fd61e8ae73b5721a9866829af4cd8677601822b
-
Filesize
7KB
MD525d729d9ac0dd9f60aac72a66405980b
SHA1a5f835dad18a7463929d246168159f17a3b9d2e9
SHA256614bcd65ff767ddda76ae8803b4e61bb65dc75b4756e9b74457d043f4537c34f
SHA51262fff644f96784017be4422913120db67643b529a6d6dcaff56a786bec44fb66de2f94d191db3c83faf0ffc9daa8cf16a949f961934d8a976c098edf0adf8a22
-
Filesize
7KB
MD5208059088d1e1f033543982f687ea3e8
SHA19be154d82c7ee3c5b2b639a1ed297b24739ba3b6
SHA256b5e8cca39686670b0faa7c433160fccf6de9935b682633e7c5aeef4add9f9231
SHA512b6d0303be1f3b90403c4e469345af29bfc6743b10c0b67b8baa67341ffdcfafa592d6da478de2c6e3c8a9baaf8214fad50f05e56b32541545198a6d9e1c85ad7
-
Filesize
6KB
MD513b833796a602d3a8cb165df7d20c803
SHA1594589939388d93a6c5efcc481b497ed34992cbf
SHA2560af2d247122b383261cb738b89161605b6140885b8c7b5c73de4c5708218bd0f
SHA5122d172dfa19070f84f543aee31424a5adf0cb100cfd194097e158a0ec441d3620580172be370328dbd993cc4f70f51eb19f76c56d629c7bb05d294a39006edb0f
-
Filesize
6KB
MD51d1c680161439b353244a59816bf0f5f
SHA1bdee232ce7d6b1336fd73200a3fc8449d8cfa13b
SHA256615dc8661794a1d13f66d6152cb4094d0fcca60b6b0931976b0c3656d8975ab7
SHA5129b3a73158fdee5b58694fe13d77433aaf83d65e7092bbd10186c032731deb5360ad2f543d47311e6579491f585c292e24054aa00c7bf006cb2428733d468104e
-
Filesize
7KB
MD583151606876984b30b22fd8c36465481
SHA10cc31fce27b259af0d5a66724a09dab9b4c132c9
SHA2565859fff5d2d22b6d07c46ae4c111563f85ca5a2fce2525470ce98ce9fe5ce646
SHA5122ea717a61e578573ab9f49d52fcaa7aa9aac50b85caceba47dee3d9a332272a7adae96f918e1552a7d60e4fa02cde295fa076877c1fd9315bd116b44094eb876
-
Filesize
7KB
MD5f57cd6d604c8f8b428ec607a37f5ae91
SHA12d9b535f14757075debefe9ce151bdbdf505e424
SHA2561318778841b6c45ba943a801076533b4d402e4704f11daf4cfaeea25d4203138
SHA51243f1ea4e94cc730af97235c55c359fef1b45815ce8867f31e7c40e7e89a8132499715c373e3999125e55f6f986ad20208869969e77769e5a9e8f654bd4dca6e1
-
Filesize
7KB
MD5526c18393df11abb79289ff830178dc8
SHA1e76753debf59701856489a514aec68826732af4c
SHA256c41237ee3a0f73ac24df8fce70909bc37e658a8b5e687077827c58426888e8cb
SHA5121c5db9b515152b01ea3bd00fad89b566fcfad1d7d6bb9d06c302c750bd9f2db3ebf4b2fab4c91d1c1b10264dab685116252ebc65b518bb8a7ba537696b4c179d
-
Filesize
7KB
MD5249e224826852f7394475747fbbcb504
SHA1fa4ce80b87da1a02f6974d3518de93dd1444eebb
SHA2568690da977361e6890ae1a65d8bcc708a16577e9a93c8b7241a7db3ee6262c538
SHA512dd6b2fbb14b48fd7d2159aad25a3b4011232017ee09895b8b2b66242cb57f3d42cfadcbed88ecb1ac20f652bb6cb535f56ad885d6622c49041eb49c67b13146e
-
Filesize
7KB
MD5d5d15ec8938352eb5af14ad8928bd206
SHA14799ae1d904f4eb97dc5e3cda180a71401d500a9
SHA256b5031e45a303ac424d895a5e14cba5fe16ae6393a9e44b3e67c6d0d72f149c25
SHA51259861c432f0a481212d09e245237402b9b83f38c4fe5db2776243d403d523123a1f0405345fd106f8eb1cc2f61565e5a320de8dbeba0a04bc7aeab004a34a333
-
Filesize
538B
MD5ec5cf353e1ab614a98a740e3b9cb70dd
SHA1065001dccc4ad9a506e09efc44a567e139862cd9
SHA2568fbd39043756941a24dd16cd927b9e9761e8b2445c37f34dbd9421d7c627e2dc
SHA512bdebc9c6b96817fde7d4b42f2459e0dec50a622df24a33dc8ad289a2162ece7218ffffa21333c49329317e41bd506df20bc45bb346a9deb07df29cfaa7d8fbb6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a070583a-384c-41b0-8cd7-bae898f7bd5d.tmp
Filesize6KB
MD56e133776b31de3c7d02d3ab59bf4b5bb
SHA1c39ba93ddb80e09474f8da9f91c75b85f515372e
SHA256d806998740578ce32c56ce40874b74b65ec76362c7c3902809efc59173814661
SHA5123c9f04d6ebfd51a21f4f42b64a9f854025417f8219e245b2579fa7007c902a529800fec8f4421d284e693642d5a11ccd2d1b45190b8c8db580245d0a60791b6f
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
11KB
MD5f54bd7f3ae8815a60894628bd371c747
SHA15e0e9ef5c4faf1c0051a475e8ef851cf23c3780f
SHA256525a64a5bad0c9b172e00ffd15482b2fdf7d72881bb674be44f4638fd22a51f8
SHA5125499337e6e2a77af96a5554a71f044597d7a3c188a6f65b33f39f4dc350176e05b5bd2bdf55f8e024c746a55896b1ebe2bb0f02c0ad7a3505122be886206abc0
-
Filesize
11KB
MD53bb74390100290661f723a8cfb303198
SHA13edf1b192cc26e306f4f02739959580829113485
SHA25614874cee04e39cc8bea1fdbdffe51c28d8d255a79553461a823dcb028047906c
SHA51274c1f2ee877d5e13f330e0de66c459c52a422b0dd3cef1b029147673f6b97b0e74fabf463b6f6fb8682c16d8aed8bc0fde9ce7f2af8c20a5583991f1709c2ecf
-
Filesize
11KB
MD5b546894fef3dd6dba39ce435b9709319
SHA1186e21b444b67bddd2cf6f1addfdaafe855bbbf6
SHA25658a789aa607a54982bc137e1fcea4205a3f5986aa4de75577c646aba8ba1bd38
SHA5125c9449969d5dc9a5818718343ba9713a8255b735fbb49070ec7406a5cb59c965277e8bc7ba155723c51bc100faf4e1220fd1dcd6b216a44ba772338e007307de
-
Filesize
11KB
MD57c2c2dd4d8256dfdccd8f09b0941a15d
SHA1a31b3da2a4376e4c5d3b6e94b0b49e0f6e8b9b85
SHA25601079f3fcdd8fb822a5e87909c8d67f7ab03cb4e1b77817a4513b348a8797114
SHA512018bdc82bbb7ccefafb38e52efd8844b4b6470b03fe545c6c0876d3961a80ae4e4eb88ba5ebf38a81742158c12069cfc48578787a0630f8048278be6edc79596
-
Filesize
11KB
MD57cb5b74b396ead77a40f7c1f2fd96a81
SHA17713486f789c188b945e545bb2ac3a5eeac91bc1
SHA256bf127cf0010120bf6b15b020e0ccc1e933752814cec8e70192296e2dca346314
SHA512bd00b722671e6c10bf01676c0e374e1e7b13b35da49cbcf2cc6fce586ff429dba333f47e64a30abe70e278dff67548466aa4d57c08790f0ca2a2588fe8707fa0
-
Filesize
11KB
MD54abe297050d85be591101097c07ed387
SHA140273c69ebf51a1efe5e517a37aa22469310dbd1
SHA2565ee89e7c6e8beba6754ad23bedb9d9741995396fdb84d8d2aa83ec2132c906af
SHA512d13181292f2accaf1a8625af79fc7b8766584dc00ba17703cd821dc453c432d720296b4b200f295edbbe19df133626f2885facd1f509449b2cd0ff567ff68402
-
Filesize
11KB
MD538db058a6b4358fd45e93649c64137fb
SHA13742130a16726547932499ba298480a8ce19b087
SHA2569d79a19252783c698d4ad294492102bc377031bd28c64fe64a2a3ac77ff4ffd1
SHA512892266a2062e9cf58a6d898b308bc02400ef4b62559b4663f5125dd799f3210d05cf2ef6b9baef50292d94fba18dca8e021cf0f3dee9093c6478a56863723e56
-
Filesize
11KB
MD58041a0c332e83c32fd0067f94ac48d4e
SHA17306a8ce7e6fdebd6a6d02530e1176847a7456b8
SHA256f53138953ea5660c053395eccf8f77e6cbfd44086256a3ba3a77e594040d5f30
SHA5127789409b45b29fc48346ce24577b134d25670083764756dfc6158a166277f91c8cacedb5c91a2ce9ee57c3e5d34f280e5231f5868706bbc115c06479c12dc14a
-
Filesize
11KB
MD51db205dfb7a2163d12eaa0e5c9672b66
SHA10296fef3576bedcad6561a064834c4f7b9321189
SHA256877106520d094dcb4f3609a46569d8661d00ccd9feb3dc6b7751bada34b749a3
SHA5127a535c09d54cc121957ecd8e49c0cef8172ba5104c7a9cb17e05a9c153ad15a8372a13ec55adfeebdb891eef673937bb77568a7f7a73af61757439dd40980a55
-
Filesize
11KB
MD553b78c9e4dc8051145f848ef7e8087a1
SHA13381f8c4fc4cc89b7e334c48618e489c1b9c7d75
SHA256329b84dcfeae2da7eef69d67cc7e2ef4ee817bba6e0b270610dda7b807ac3931
SHA5129374f2e592526263148aa04e24df64b42b10e16736cc474a192dfacf56f36c2e235b6274e670417223e37ed02ea69996f906a450f303a421e3a49d355a0635fc
-
Filesize
11KB
MD5d30d13a2da7a57ac579017c51563a0e6
SHA193ca7e18ea9c6738e63ad414bbcfa586c268215e
SHA2568fb6c39a1db70b42cc485632cee73af190d99406e730e8668654fe7cfe6a267f
SHA5122322f04585dc87b64093087a27d8e574f81769967c230a91d5d4c67f4ec9047f43cef7b28aa3c5c1a36fbfc87d5a433a2f0f1a5f6f9f97d47a45d7ad23f5afb0
-
Filesize
11KB
MD5c7d74b1863060d9de5577c8b2fd4d33f
SHA120e22d575255618e9e7441e510dd313ed814d213
SHA256c0acd308acd0beb98060f8d8cbb19604e56b189eda05e8a010e86c2d3ca32ae5
SHA512e0ca729510d99f9b8497c2725158ebe8e5221186110dec97aed3516d2071c2c2cbb40bde5416eaf6b2cf1ad45fd37ff19cb82f94fb859b8f52a2e346813de2cf
-
Filesize
856KB
MD504398d23bf4733785de3a5ca05ad80c5
SHA172b193836a47aa3f0b7182de92a6a3f6f862131e
SHA256a89ea036242d4e3345ad54ea9bcdb5c73ee5b78fa320996398bab4ae46cb578e
SHA5121e7ba8e738c16af9267e7f9da427c23f2159214839d6e59bff66228375e9c7aea0f86c1ebd352cae248fd8508f762c1e81dd680e27cf7c1b5bd8084ab383148a
-
Filesize
796KB
MD518693249f3a283e83b8179e692ffbba9
SHA1546c0d89f8c8096d22c6f6be7e843cf5ce08e220
SHA2563d828bcccc628e7096856337b178da5608a6c3db99383374e6c49d50a1895e64
SHA5121ab246fea99daf75831f26930d458a05ff0efd5f9c71c9c4396681a065fcf9f5c04af774df34ad55e140b71d41e42254ee2d9dabbb18009800bdfc62170a8c39
-
Filesize
187KB
MD53008e7672855a4e6fbbb835c2a4d3e18
SHA1fd1cd9538985773ef4b6b1cca8f9bb99e76fc8eb
SHA256cf40f88d5b46c423f0243bd7ce1adc39bf52f19208eb763f08c36388068760a2
SHA5126e1752f5bd155670c8aabe0ef97631257f4f2780b080978251df7a7bb0b18d1bea25dbe27a4e2a37cd77df3842f6b314001df5077fcd168d87fb239985f4e153
-
Filesize
344KB
MD59772cf99f14ea49a1696d332d5fefc66
SHA19f77dbf43b70767f316228be37fd1e2e0b1ec1d3
SHA25603ddfcc1603ec9669159a6398e586d7f54bc3146fe265c16647b2f5bd8758b70
SHA5126f5b2c0124ec7d4a6038a51e6d5d8ecdf3594aa37e9973692bce325789ec276f02f4679606176e36db84e9eab0e2524e1039fd1c970862ab9da5776ca650b310
-
Filesize
1.2MB
MD57a3bc6142be9b7c9664464759974c08b
SHA17055fe5cf3e31a24687c3fcbc06394eaf097c6ae
SHA256446839b455f486943d42e46c8230b6b00d59943de94449fc418ee626aba4dbef
SHA512c881916068cfbd73425e1a6662d1049f02b8f1ed34b8546a9555d43b2b05ac3507e94f996435123a7694a2f2ddc4ef9f97d839b9a9584ae3ebca37f1b45d63cc
-
Filesize
6KB
MD51468a1a0ff233c86a8e2907d68340386
SHA1b8967319c5608bd85e7f9a4dd9c0f84c4c27a1e9
SHA25639842949b7fafd93d429c76c2866a7d6f140d3e4c5a3777304ef80b4b3167e51
SHA512e0540178459087302fa88472f5b5d62382273b1babb26e932291cae875c9c8c0112149805992e337efa397ad24379be763cbede2d0c3a417af6b6d3adb86554e
-
Filesize
40B
MD5c862cbbc1b82064465f98482ef73948b
SHA10e49a12b9d1fd903e0c44cfe9c9db0ae7a5b50fc
SHA256988dfba4289e28ef42d0ce93bae58926ae7a9528de7bdf97898d1c2cd2f2016c
SHA51212befd2966f25464dd21377d89b5d3c9b8fd9abaa8f257fe88bd1d80759fc5375439e6160f99dff7ec7a61135d9616992b611b63d1a6e094fe2eb29e23420559
-
Filesize
3KB
MD535a10dd7924dc7a4205fb3807812896b
SHA153583f9a14b35a9529614f7cb8c2f26a3a2a31a4
SHA25643cdb582f3881db7584ba1cab29ca88c74bf51819033ea88a02b0614e398ee8d
SHA512a7220a4c8cf583c334d78c108b7da9402a79eb2c57c428c5f740f8b2c6c19ac1c761da8d57074f2b9cfb063da84410f6558a8b61f978d536d9ac48428448a681
-
Filesize
3KB
MD5b6ddadfa381c9d9297812d2dca3d92bc
SHA19f83febb785d4c87730164f7cf020d036e0e11f2
SHA2566b2d97ac7dff812bbb826852feb506a4a300b7876fd6985e6b8a16ad710efe89
SHA512d89a308fc1b9b6ba055e88ac91a830169547c8aea734a773762767fe4c6a76033a8d3f20b8e82c094239d25c8e2f17e4c9b1bcd083d294db368aa28f2cfe85f4
-
Filesize
1KB
MD58307716154566dd5d4b7f87f7e536824
SHA15b746f1c97a036b190d4cf1db76760902ae1ed87
SHA256a7e44db42aa52a276edb6a2dea7dae1a8d1f683ae67d0179b5930271e3138d12
SHA5128dcd2e9dea6c147a4c9578b42fd1613a55e790d3a6ddf98809f123cb06270784b0c0e3ae27bf2957e6066fd8bd831cc09777270e2bb8f6f7c144721f95e3c5fe
-
Filesize
1KB
MD58e84151e901f61a135d941979efd8ff9
SHA152841c4272dc039438ce59943489367d1f2e4482
SHA256738e199707a5027486e17e9bfbd50a1dd295d2d6d5c48ccac17fecaec91b70a1
SHA512c2e2c027d3655bd549ec59d75cbe307c8e6b66838c72949b965ce2c7ac3c730ffb873a948cc055f6727964cf048d403262e8262c6c6559410ae682e2963c013e
-
Filesize
162B
MD5bf28ef9468e4e1cbc5f3e055adfa69e5
SHA1d5cff2ec3851f3fff649d688919f9f4f8511420e
SHA2560e86dc475bac19122a3134a18cf8af26b83831df3346bcf5093739ca2891b4b3
SHA5127b37e27f56b8ef1aeec6f25bbe7336ad0bec837af4390e47932adc67c9ed873c6b7cb5d643b39d0b6f383d79c7ee0ab8aa39e70f894ce8f2b90a884d1325c3f5
-
Filesize
326B
MD52b4289a66d62ce599b34af1bef71d029
SHA17b6d58890783d8df60908424b0e72fd0562241a5
SHA256aa65c0a30ca819ffeffa7c81fd45d7da2fc2175a5edf66f48f1422901a04f2b3
SHA512470350a2c1e45e5526fbbb0979f83e57592481812ba8f3cd29d006d1023b42cf9f98b8339973b9c0712e963ad7e3cd63bb805a0288134c10d27f4ccb43f8518f
-
Filesize
40B
MD5095e0465fc6f0ac4b86482e72982f6f0
SHA1ad27c4cf4c1ac30aac63797e8b5e3e00ae975e27
SHA256b43b25e234025d89514b416b17a012b273be50a1b0f362ebfad581e6d5a28713
SHA51228de8a558465f5b779763ef33e78e9dc4e1727abc88c6b63d85cefaa673dc441b90cf1509611cd58a929b8ac16779de73b1fc4358fcf7ec58b59d7f53096b634
-
Filesize
12KB
MD595f14fa7cf5f40efb6aab13d6f879dd1
SHA19ccf36a812d0a8c396a3c3049c9802589a6f84d2
SHA2560cf70eea2b4dffa36719b9a7bf9fb2f40a29728029b8d0bf05144c1a297899ce
SHA51208b8bda79b3c0fbb48fc42b293bcb12443834242d5358117a22b595bd623d00e1ccc7a244e26e44a7c2e37108269ad4b0a629f97c4bcf2bee3ad5434b1a73afc
-
Filesize
23KB
MD5c2935832073d69b70a3369efbd1490c1
SHA19c008bc89c0b6d50c89c6246e2061b58a9242f19
SHA256aece29ef481c87f8fa1b6f0042637f0a8d721e0805004df23c13a96c3f1a214d
SHA512e1f0e4b05f92e44beb4e7b3a39a113836cd1b8064658c41ae24a2d0f43df61334d0f4659fc48152c426cd1cbebccb6372328d440867e11fe4a047a2d3ac9b5f7
-
Filesize
2KB
MD542ff99bb2ba60f78e73d66df00d4dea1
SHA12f2e43ec05cf8d943e740b6ad2fea82785075297
SHA256f737b8824cbd2c18902b81bfe03a65a69e6f300b821f3ee1d289513cbb77f69e
SHA512c2fc0ac550047618502345ef2d049a9354b67386438ef765bda052e2e0a0960f49e92415963f33da140aff97b159f2b25185af9d24e5bd5c3b89689c3267d306
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a1f60.TMP
Filesize48B
MD5236f1cad0566f489850304f20d1b30d9
SHA1ce738249b86903e24b77b132c83099598a97f45c
SHA256c5c4b8968e24062eb83f5c258d48ba8d85202eb9e4a30c5130c833435b74b019
SHA51236610ae7ec09b958c42febcd779eb8495a7c04008ce7c6de9d6fd7537349e6f5df56c6aed31b23dfd43794424bb931b49e1732cbeee88f789340b2934be93457
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\background.js
Filesize197KB
MD5a4bc45976df2440091fa127bd8c44c65
SHA11d7af45f71962ae53625b0f4c302ed97bd50157e
SHA256bb43178ce7debf9c993a72e764a4719725d92932b05b754f9de5e0e66813a7af
SHA5128732daa7a3b041a9e9cf3dcb43dee7006fe05a1e2d5d933c6025d78c2d9d5d760e40b4aebb1b33377cd33f2a549a46c152331f4519648c0ccf149ba50ed19557
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\bbddbf12672a339b7dc0.png
Filesize103KB
MD5d6506d55722e451f4d13151ee693f680
SHA19b2f8a60d9da27b05429a9ab30d62c1c518da669
SHA256d496c91adef2aa2223dc421188e0af4b083e052552d3a246e62d36483ffe269c
SHA51255cfea26435d14a1bd5486167f79f1e65bd965e3aae05be36d61e0b38f813012621b8f2d32f2f0087f41009ab579def4f777ba5268deeae1ccbaaf9665c7120f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\d3897737645de49087f1.svg
Filesize10KB
MD5136d1b4bf4b7adf44865978068718c94
SHA13383fcfaf01c48b73f9ce7f2f662d0115577f9ac
SHA2561f345b3511f67dc4216077e858defc94df174e04e0c917a72f35f7c708b855cd
SHA512e9d16dabec6a07f7652d97b340cda70f0d7b2893f940278a9b3b621ce0062294e335614dc2f397d4726c866355a176ad0048b272614e36a55247b32c2dba2ff7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_active.png
Filesize12KB
MD57025023ed527694b815c4b4518a6a9e8
SHA118943edb97bbf5e69faa3e0c92997c9c4ce624e9
SHA256f5df828a3b73ed42fd72d7c54af685d562cb7aabf61abc7e61bffd8488f72ad8
SHA5129f9b4af1f1500f5b0f91678215cb76e7e9afc86ff18322ac0c0bea3350d1878ee0ffe94fafb834baba2bc347aba5937cdf39b738b31da2acee1f90186fe9caf3
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_active_128.png
Filesize12KB
MD581346649cb8375946c672e32d3bf9b30
SHA10c00d3bd8092954d0530be4c7d8fd9dee2e9a927
SHA256c3a1be99ecfafd90e4710770d50c1260c92f150215f7244d22e5518e6202fd4f
SHA51283b2af6163679ff038c919d94c5fca20fed3deec5a182f47cc397ffeda54959cfb6846f423a4904845c0fdb035b7eccf5e369496ad1b2b14a537f1bd1d53c0bc
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_active_16.png
Filesize785B
MD5a17aec844c2ec3e2c6d008711dfc26f3
SHA14bf42eb9ae3f6596fe9c1fff6fd3c080244ce186
SHA2561186fea81c63be4e1458228de1082a7b1c9aebee6b4859853c2d0bd3c6f305e6
SHA51209eedf3d49291cab2ea0e73f5e7b0cf2ec7ab097d700800e72c8bf90b587f2eb766bf6c329ff4f4492a6fdf9099c8f786c03be4322d11c804d7237152e8354e8
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_active_32.png
Filesize1KB
MD54ea619db394f5bdd0a6b999ea4f90a21
SHA16c8a2f6def5d420c3a2959c8aee20d02b6487221
SHA2565ec7e449f1b3b289276a5eb2a3df29b05a821d1644b7a922a4da6027533e9249
SHA51244f8e02e9d8d7c04ebc846f3c5800c4e0109ff5032f1a2e5999d6e829adc15e71323a2148ad527b86138c1168267395144dcf46d29bbb7332b42e0e6ea531e03
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_active_48.png
Filesize2KB
MD5c337db6be4c45b2457a8bc317b8f5faf
SHA1c934300181a555e4b87d2c53ff773a837e4e18b3
SHA256c56fac799b899785b5104c4b44467027d9fcda9158cbb0b9e7cd1fb1293da6f6
SHA5121c86d736e62af07978e3645788f8f0d08f0b6914d3b774127f72e6dc02f2fcb828b4eaf2eff61b83cd224dcefdbe6a2b5b96f6c4eebf8da578829fd0b97b02a7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_disabled.png
Filesize8KB
MD574e6dab6dbbd5d5f33528d4f3aa4d035
SHA18c4c17f7a4391ad5663aa450ddd70d47c0cee368
SHA256869e9c156f96d0463156e9b2f28e276a706b9e6b41eaacf41ee5b45568ef7148
SHA5123ecfafb76bb9983fd3109dc914f66530ee53c14d1a9babd6983befb8785a94ad5707d48f3b33da4b8faf35f873cda98ddc813b0c45eb066b09e0c1765b03a44d
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_disabled_128.png
Filesize6KB
MD5dc0ee05d8bf51d7fc83adafd09fd303c
SHA1ae16e45464becb6a5e5caab2b085acb1349b69de
SHA25684e9fcc162434ce32e0147543d297f785ee68c1a51d9ead1722af63e7f620512
SHA51256c333c1ec1598600da2abe10c840334a1b82590cf083e7fe190cd4f1f53e19928a536fb00b0e66a4dd33eab712ab5f49d4abb37a2a2a02cce06f60a9657d644
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_disabled_16.png
Filesize675B
MD5486b9faea77d0864251ef8d4666ade5e
SHA1de162b46c9fb7fccdcf89a4d8977d67cb5400edc
SHA25647b21d13eb7e258e884ea3af2d61c2a3a2ec2d94f84171081d8cb9a3a12385c0
SHA512755ef069cb929db1ef2aeb534a69e0332fa1ac290d070ad35a8045fd9e03d1228b0bd99b9ab0b3b193f6dd7cae827362e0694f21db79c1e1dc8cf8a2033ad26c
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_disabled_32.png
Filesize1KB
MD599123906febbaff7bd182013b6cb4392
SHA1b6eafdfa3bb2ce6c445709b97037c5d42f47042f
SHA2562fd54e16073f6fcf4aa9a5966acb384706328be970541abcc524b8ba462a0884
SHA512b23e140d01eae42f9c1a0a25062a4656a6a11ba37f882693a9c7c07539a71ee3619f7b593c93b016cd5a7d97143b75ae08c2cc49a60fd8839af0f976396f422a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_disabled_48.png
Filesize1KB
MD51ab56914d18699507389967e231b0687
SHA1e2d5b7bb61c0f3b478ba35f12a4dee5bcb0136ee
SHA256382c9f3a1eaae396c07bfce46aa9b311b281d8f64bf40f4012d62fbe6ab3e856
SHA512d43bad6a9b232e7445eb7670d162b9370488345566eced88238420e25d7d9cd2050c3c25c629bf3969f23681d337e8ff0008c5ce93b4b1812f25b4346a0060c7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning.png
Filesize12KB
MD59c15aebec8ee6361c1ba9a9edeb431a8
SHA1fed944b15d59b3f69789a2a82da0f1d813709ebd
SHA2567681cd645c126843720a72e21b3f8485d948c194320910aca06091f3cebf5285
SHA5121939d8e34a7866d658cd21f96922f8d6d0ccbe5fbdcd93278d194fc9e7aaa3f0d58ce32407cffc3960a6fc5aaf0df5abd8c6e5d61e47faa72fb698c04a310372
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning2.png
Filesize11KB
MD53bb8509b350f21f21343c2e8a4eb22e7
SHA1a33c97cdd060f3fd1bf652f5bcbdb1571f6350a5
SHA2562fa980c9bef20989d200998c632275ea4e5cc2dd1d1c279395ff27e56329f2a0
SHA5127e0c55e764a53583e2103e023ab003688aa9d44a4f53cc1e586489493285c57c2fda87e83519a2adbe71a5d0d8d80622ad0a73bb27d6fb2a91f348f5872782cf
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning2_128.png
Filesize11KB
MD53295521ba38f92deadf975a21e239a29
SHA17078ab97f03566f57b5403db3bb45047126873af
SHA2566ba4f2be7251c9379d3ecfbb231464b8fb7b2fcbeae7c63a8d99a074fd1b7dc3
SHA5123bbd77f8f25e6d5ecbe00acd6c75a992bb4688c835932aa2264b317496cb2257edcdcb88ccee8f46ffbb1388eeaf1f22165923088c76d87c2e1fae2d8c78b67b
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning2_16.png
Filesize1KB
MD5c5d0c0f7f9f37bb352e5bc8c2030a1b1
SHA17852eab28175c5f64cf6c9a8e26edf7707133d3e
SHA25604fe3f3d477e7f5c548871d9e3e8b3064e35996a4063a60a370dcee6a204db45
SHA512166412cb822fabcf8480f9d5c78fbd6a1e5f83ca6aeee712ce8cfdb4671d7a0979f486bee97ff01365ef7da1ae0790c7ab1d791e9b313beaa0ab9ac6402d4063
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning2_32.png
Filesize1KB
MD5addd7e9683ddfe9502a4c6cb84fec358
SHA1cd06fe06a9151d7df976822d11d23349ff779d10
SHA256b3d2181f3652885081501b31c30e6c1d7f6e30ef4378c20a1caabee7f92d6029
SHA5127a803bc03e36ef5f9639fc12a21da1a602380f47e822a5df879eefc45a3419d20fed4b750bfaab4ba951e132fbe72d7da79e398970f8e6351d8ef995e2bc913f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning2_48.png
Filesize2KB
MD5d7c76d7bd1c05c82ffe2a94f987e9566
SHA101b9351d8320734b8c20ee2533374d820fb814ad
SHA2568dc1c6ae1561486b4da74a55b74b9470367d5ce040c55448af3ba17c214fcaff
SHA512584aa9d9ab355326788ffe7f1745e8d7afda5303650d58c7fa85d0ac6a63356b3b2fcfb3163804c42bf7bce549ae4eac7660546e4b495aa4c00bfdf335b679c4
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning_128.png
Filesize12KB
MD5d4ad565db4d1579ee2500aacad91b9d8
SHA1069747cf07e26049d82afc520c826ad5b3b477ce
SHA256652a2d5d2406fb45dbdbdd03fbef0f21a3efdf41beb1d654c0989f1dbe40b026
SHA512b7994cef1a7988aa3120b7224af657468a6eb5f2f9fe8bf329ca2e0d58b170d129ee0a46e30c1297c3186da2486576a5c54ee7d0447da5cc0d1014affd58ffd5
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning_16.png
Filesize1KB
MD5c3d1964e49f8c4c2bed7e6279dc88272
SHA19874b2e441315f1b5d372d047178e5e502a3014a
SHA25648295d2a05fe12fca99472d29de1646628723ff7856e84dcb85ef2f3606f4fb3
SHA51225f8a9ebebc7e1a1376755bf367b1b5b5792692dec215bf076a837b87e18f08a44c272614d16384473108bc07b1d90a9670a0d006c38557a41fe9e2c4b9c936a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning_32.png
Filesize1KB
MD5402a2bc59a0a246d2292abc910de85b1
SHA1e7d2a897066d629e02e29df062063e4b0d8bb793
SHA256e1dedf486f3073698c8895ea9a4b88e4c2d241fe66be75167f6ce989ea8475a3
SHA512114042b9e88008f379d44ccec186a7c5ee4a9f4899736bc286841b1d3112b6b7840b651c4a1810540c02d01471799ebb7e2a8cb055109dce7257e0e2ff8e67ae
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\icon_warning_48.png
Filesize3KB
MD5be6f1c1dc7f6bb33016092b100281180
SHA1868b191c047e5518789a7cee51ae41a4bf5153aa
SHA256200d816fdf0e8649c7dbbd63c7088aadb4dea5708afa39b0bfaabf3721bb8667
SHA512744a443b2c1b246961763b15bea84fe88e82ba93e69fd6f85b3501dd55a32e6f4c24209e8abf067f8b4bb3036f05715a330951a052668d8993b8a5898e7cbddf
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\icons\warning.svg
Filesize2KB
MD5408375716fb2a77720319b68a8004099
SHA14cb7f9007ba4c268df39d5859580ec22c4676c53
SHA25657590da87b240ea2425384bc4b06c2de9a97d25cd3700aff91827f62607c88fc
SHA5127f300dbc7a9835dc2f2b694305225403ddac0204dadb9cbfbb5cfdf734aba4f140525260a07b2cdc2caaa3e833ea4d469268641c1ef64bd40180b75bcbefc643
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\manifest.json
Filesize1KB
MD5c1fc1094d80a1dd0310285a724d8ffdf
SHA1eec342f83ed6fce6e53b51a7e2f779c0e1ca6e2c
SHA25645bc49661f5776c00adf7d15a6d5320a61b40dd01084c997b4f3171965f6069a
SHA51205b31904407be1abc47acb84722f2b1b56d2428a6fb926b264bd7bd4576dc13b31baf0008f192013bf22d9f263f2f6c254b10d6f139a06bd36dbebfbeaf77450
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\popup.html
Filesize230B
MD58dbeb11860aa56321c607337cbcb86e6
SHA1c209b2465a5821a5ec9e8d30b90fad362a500933
SHA256d05e125f910c646a127da2be326c62a1648bc90a3ca682afdfca6a2bfc5387d1
SHA5121f3ffe249bdf93a935ded209a27436d6645acc83efee224a1d10b934eeda87599a1ea7cf14fc333691e5c5cc8e2ca05534ff41f17f3721b085ca50766b8be449
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\popup.js
Filesize265KB
MD5669f0c4e8887610b9c9aaee834beef8b
SHA14e51dacca348d1a898bd697373eb0f829f076858
SHA256de98670bc1b6d73a979a75789ff1fbae52f307967b899742b2881a9471cdf63a
SHA512037b4b20219f6f0c82bfb2c18a351af30641c10d320e3eda7cdd4dc258676c8cac40a908c119ed8ca34f4c2b76394bdae3ccb753781fe3034edeaf202042b25f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\warning.html
Filesize635B
MD56f6b09cef174e705e742183653fe758e
SHA1665574533f57864d79be4de7c99fa7722245d50f
SHA256c0b2fc1e63b6f7ef9ccdb9d43e4bcbe9865d8acda57839a4016087553f265faf
SHA512006f99a860a6ac6e23a07e6fa3dbba060096a1f50ff839a8a21a0d6cd114fd91c432b9425dc96b78adb5571945a1d03b5d94af02bbd6127f042fdca45cd3f541
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_1679153274\CRX_INSTALL\warning.js
Filesize64KB
MD52520c3027fb7fbedeac649d66a93b4ab
SHA122f3341f06a6afbdbfcf1ae70773fe74ddef694c
SHA256b2e000980ddbf4e1f2fd6f7cd5b71143663503173e59a6affb4879d5fbe82aa1
SHA512865af2d54af5768eb5bb71694c9604afb6622d6dab6534bc840af4827350f1d3780e4def31206ca5a9cedd1c53225b8a4302dfadedf390c47112fa49bcc7bd72
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\background.js
Filesize11KB
MD59e44b41428e8f1794bd94c1c1b80e795
SHA1748bfde28c6f5821b1002d0aeb7ade573a69d8fd
SHA256119bee705656331f59f3c7ace09c7e9a42496742a23f0405f6f1be01cabaea9a
SHA512a3b48ddff3aa87d9bf35be67769f41c3048a257dae0779472692ced66e18aa8c1d7a721a5aaed67e95aed51df4e97cfac4a9d71e29add23675706d8127e12266
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_active.png
Filesize9KB
MD5ed1684b544f174bedbbe56fff098d55e
SHA157156112678c4b69ed91c940acb7a5bfb4fd88bf
SHA2561e5e0fe10bf786171e13fcb21d64f3fd6065a146d94e28362f9a4d1b748a4c09
SHA512f85908f7df635a960a117be42e377785b193103893bd569dc74bf5085c67ed9dd947a21648f54aabee43eeb8e08ccf8ba95d275a63801d2643fd520a2be6556e
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_active_128.png
Filesize9KB
MD54673bc2d427c607eeefb9d63d354ede0
SHA198d5204c36700b6726d24e74ef5d6c413dbcba7a
SHA25665178d9950c22d956b00e2b4dae250baf20c3ec42bde65bfb592b262e8f1cb14
SHA512515cd7f8d89395c34958a0494b502fb7e29965cf01320c61c13e66bbaa36c3ef8124bf99537cebe694e40c43bb3c58aac5550a4348e0e95e40098b2856def96d
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_active_16.png
Filesize573B
MD577d8a759c443b390bfd3002d9730e820
SHA1302091d092ca259a9d644ad2ea247018be964709
SHA256bffc1f1f85bd444c6e2bb1c3da3c595b379c1b52f35af673143c72a3022ff5d5
SHA51257c122c7080028f67f02ff15e1131fd250be2fb1cdbc14478cf4b52172130cf0ca4548b7134a87d7e6a1c9e3432d9c4a7b13c76608ca5ae104923268cf76a87a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_active_32.png
Filesize1KB
MD543df6293b8620911c69c8a99de75329a
SHA1d534dde11a7d4ee4cce9c29c42616fbc274fd598
SHA256b5e86cc3d5e48c2ab42f33a11660bc07868144a37bb9cd363b68f5f59a2c9713
SHA51224d507260be213562ec289bc7f07ce0a1828e135b336755aca45ce24d16a47d72c9289a3e600490d8651ea0cc849bfd9ca2d37d71302f0bed6022d3f419dbd79
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_active_48.png
Filesize1KB
MD5342b54b4444668574ab0ef299cf94b04
SHA1f16a82a3c376c380833b9c2f59bf784405c9b120
SHA25617283c2e0d6479a0eb653cd6853e6dfe4b5b2222752d0e3561a9c2b3db3eaa8b
SHA5121a322e20ffd14de6082071efec090d00b2dd7e28194c148b250a7ea52f0cda67cc5a77f71539552fc610d34891cda8d33d558dd21f0d000093328601177031fd
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_disabled.png
Filesize7KB
MD59bd3c2b9ef38d034f61a2fefa8382684
SHA13328f6ff00107677c6ca25a87e7952c60dbf3a6d
SHA256d1de05811ac158c96e6c59414031165e4a88eb6b48b593a1d90511a578921070
SHA5122013c07257192d08d3cc7ed1ed22faa47472389238a445f05ba52258c8295739fa182ffdf41680575fbe6758446dc624f210b32a187e7a1861cb92b5926471d2
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_disabled_128.png
Filesize5KB
MD59f13303775bab8c1da2ee041357498b8
SHA14cbb02f26fe05cc7d563f00124c067da8d8ff8b6
SHA25623a9d2a492145a3f8e7d6e6af4facf63c4aa56075026f1e2f2c4969f9cb85db5
SHA51288f753fe99604449aa8929bf23e4f177694cc17f1faaa3a3ff18a602e4f00c01ae7e2602d5a8b363ef23bd2732f63361873b845e9062e4a2dfe09c952fe541a2
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_disabled_16.png
Filesize591B
MD5f26a633ef6d8deb06af98c0297dd377f
SHA1cf5bcbe22640f4e916421883fa55b7be489036b6
SHA256a4ad504d5604ebb417640ddfdb994822fcdb7c722705b0c4dd7eb30d120ad65c
SHA51201b5d1047400c6407605804e16a8aae6d35d45ecc8521de635eeb47a5af6b7eabc737e346f5719c8912df0a7a7942c011780ee5c533343300bcfafc72702b922
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_disabled_32.png
Filesize1KB
MD5e19026ff54589a33003a07f85d55b0fa
SHA161f80d7705209f71fe786e949cf8e2b14fe3f5f3
SHA2563e2a29c243afbaaf66113a8984b23eba192f37cf6464b16b0509353f4290fd5d
SHA51211b8b217d800594c97251739437867fb614b11384ddac75f5c2866958d3e0e1d47794154f8a686900de8151ac2a7fb49254a13e8e9152eb5f070fad4a5f8372c
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\icons\icon_disabled_48.png
Filesize1KB
MD565786452dc69c7f21273519ab9d5cc09
SHA196e2b0815d8e74b304f4be725b8746712cf4c4ee
SHA25602558efb6c057f740cab6e907f6d472be5d538c6c8ab0a2d4df3497aeacec92a
SHA512bd3087bd0c97b843f3bd78006898e4a796e8ed185fd9e6ca2e40dbae62c0aa6120765bc8539f7bb48d3ba34bafae9a21bea83f6347b7cd57fb75cc826193cc08
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\manifest.json
Filesize1KB
MD522ed7d699466b23bb9c77b39567e5e49
SHA112c8b60e8756b40efeb6518784e6e57492d96d51
SHA256f94376d79e56f588f1977ad4d574dadd4172c184662a501bbadc365dca027774
SHA51222fc94df1794581a21076630567716ba43f7f0795b4ac293462dfe7403ea55c10584dad8977a18cf9cc1a5092ac5ae60c1951b3ca630aaf4168cc79f66e04c57
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2192_2029573881\CRX_INSTALL\popup.js
Filesize82KB
MD56b72531e17ae11282061c035f7a71b03
SHA1b99ba4e4bf5ec5d611ab56a54f1d8493be99a643
SHA2561de06fc52b09897637b4cdfb49421746adbddc7e81feb6f5b05513b56b93cdfb
SHA512418f79818abd96616c7861c256113a134c564e48e0c4a0a83f24700e74634ccf6219440ad64de44b27f61cffc6f80a3e76e502b17dbc09239ddfb5c11ca64378
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json
Filesize7KB
MD5a192304f63ef26c80086f835cc4b7ada
SHA16963e90e752209132b728a938844c4c64dc94d43
SHA2564f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jppaokafcgimafbkleedlbiekikihfmj\1.0.5_0\images\browser_action16.png
Filesize764B
MD52be34c39b6d44c742eb895cc57f02912
SHA1be7de6c5f3d4fb6400b25c104a60661eb2fcf36a
SHA25679f610be71ed914a61209edfad80a01b094600573ae1ed78f72785d4aca0b078
SHA512070988ea6769ba5a8ae757ffe15e4286af58212a66be8b4d4929d29b70ae4e7093d9288e9007a3392ab4c66ccaac66a7775526a6841b951b4fdce05c978bd68f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon.png
Filesize2KB
MD5fd727c2aaa8b364faab1828aae2250fc
SHA1bca5b2548b009ccd0b2f79c09fd628fb3119231e
SHA2561a32dcbadab7c91a690879b5425f6815c07dda1aadb6f6a7942b9e895cdecd0f
SHA5127d21b3133beea16a8713ab8a87ac7b84d8b2a312e4f017a9988e970f7281b9c41dec3f909d5483bba387e5ede366e80c210da93a78ed72b108f65934eef07c15
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon_a.png
Filesize2KB
MD5c05285aad074c0872dd78908176b1052
SHA1b8a5926d153dfbc503a38a749baf9099903c289f
SHA2569a4a7e0c2969562d5d1299f80317d4560265b4a843cf17491c7d36fa74a91cc1
SHA5126006b22ff83d0afdc346179a4c2dbbf927efcc62fcf9105fb45efd768bdba62af5839c3efb21e2555e0090639ab2dca76397d294b51db0dca768def53ce00a1a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log
Filesize24KB
MD5787d88af520e897062d5420fe49e39df
SHA13a0522a62487615b82c5be368484f4911d5c2409
SHA2560ac9ca356bef19bd4522698d88c4530d9435b3b24ac99881d3e674b2c6102b8b
SHA5123e29e83bcc8a78365e9d9212ddadd0e1b4522f511b1a9c92e38c31843173ed88713a690568e35dc737109183f1af7af4f71ebc5a58f46da7b3a8ae2615410f71
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000005.ldb
Filesize12KB
MD5148102bb9711adb99534451097c35041
SHA10d27d9b56309d170ce0267137595b3aae53fc03e
SHA2561697002cf1cfbf4f6edd15c4e916b6bfae17302684096cc33c6ff2ab67174fb4
SHA51240cf43ed7014c4fdb457911d89df54092e9ddedd2e325b502d4dc1e8fef937a6d4fd37a7256a471775ffdd81e722de46f1d9786713cf3847189c44d7e806199e
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5216e8376e784d15792c3d0cdbbad7352
SHA18135843a44d68a677eccb8b81be1b7630acd43a6
SHA256fe030961ef0c0ecb112494d87cf63daa89af0cbf662dedb63c44ac6c3383000a
SHA51247ad3a27732c6ed55040fae6d497a1f19c9037c79ba2df87a38dec325218bfb5ddb08b46ace343f1d1123c6f8bc920e4140c372414b709da13a1f8982750f37e
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5bee0e4c5987dfa0d08a746ca3660c846
SHA1081c4e719e7396fb63b4996ecc5425c4abbfcb7e
SHA256b333479837370f1127062efcf18832a93f915eafec19fbddb0d47e04798cc7c4
SHA51206582b12de329fe58eedcb17b9cc0b554918db79d14f1896344b0c25c0022cf3cfacbf9fb06c5d9b92c4021ba0b2b999d714b12d1d0e0969226a0c1f5cb109f3
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5e7b925c80d77ab50fe99da8d650088dd
SHA186b1e7f8b674d18d693391b832bf00304f14e6d8
SHA256ba1dc60a13fea15cf8f98870b79b50a1c687d79243998f69527a93588125672e
SHA512d2be0383044f080f91cff431a4428b71d1152e0296b9e469bf98dc322be17e78f32a8c3408069a577cf403f7c8f268f448165096cafa2f8200429712979db6ad
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize441B
MD5d5809f6bc711bbc4c7470e1a34cd2721
SHA173ac0e75ecb1f5ba939fefd80a65d06ce75c009d
SHA256136d673b53c7d2938f49e4cb77d5b91cab997dcecd24e643b8e0ea644eb51f81
SHA5128985d245bba84d49ba4a6f36393643b3f534e67bfa061ac9e837fe7cb2146c32294935c10748cbb6fd4f384793cdbc5a43a53b5be4bc3923e8de25e50ee2e81f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5a6f0918dde9dcb6f4a9ab0b49a1cf268
SHA1886661a03dc49ce54d0dae4d7ddc6be0a4057424
SHA25693cd1f8e830e0d7155f0a1e3340ab165c5d11982df9692524955ed7a321326d0
SHA51283caef2156b16a1f4784121553f93027a65b15eb26f4afd536d447b985a5120db62d349c055a8d1bc4eb01789361de9aa78218fa8f7bd46f6c838060e115a24d
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5cc692cb067c749a1ad4949f7aab8c96b
SHA10581ba76837f3c077348f81c126dfe27073eac80
SHA25606e5a6cf8b7cb3dcbe990157a127e4121ae0b0469e09302a15e6b675987a1aae
SHA51217bf765389f6935a80fb42f09b348e8e3fd554f52669f6acdb0b7b77432d9c0b4710c62d344d703f559fbb4a739dc6d59614a3a3454185bef4158ca285fd073d
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
Filesize401B
MD5a589fde0fae68177ea0b50eec346fa9c
SHA172fb82f47ff266a4ca4f643ef11a0e179ea0dc5e
SHA256979a643eeed9fc08d75a951b5eab10c61a931d25328c9f39aec677120f3bb2be
SHA5129701128c21cd63a52443a26f77e6e7f9392deec5763b83f8c6d936ea66189781e7c2b0d9fff0ffaa3e63e99e8e2b86a2f49a58f3784079b8f9cac4ad3c849b76
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
Filesize703B
MD51a8b7e3b5a9182df6ba1f2b213dce04a
SHA13aa957a2a3fba7b0a2326d72b71f94c625ff3757
SHA2560eb92bb3678a305f4c2b489cb7530801121908de3bc118b58f05e2b6b605e7d2
SHA512dc0746d5b6d2aa42ea79926a55f0698c888e25b7d024c337fcd67d1524a0393ae073d5de18a9e69e52750f8258f1532818e5c2d39d38e0890afcc9fb592f6e92
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\MANIFEST-000001
Filesize160B
MD55e0b482ad355383228df81ac3466ab32
SHA1d558c2721a258730de404ce7ea52a617ff781b09
SHA2560ec8b07b47e1ac721fe2f3c69df94f471989303b0ed5df42c264fac04cec897a
SHA51286d27fa3e25ac45288a3febd1853511c63dd0bfd2d26b9ec6e9e4f17de5916ec30ac909ee6e2e8afef75fa447e0358f3fc8e4922a95123c183ec09d517ae8293
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\MANIFEST-000001
Filesize23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
Filesize
9KB
MD59cbf903f686720eae1957acc4ec237b8
SHA180fd7f17cfdc927ff441f0a0ab46f726390e626a
SHA256d10e81631600f84de4e96426d740e31b0aecde8d85883b2a0571f94ef3077688
SHA512ca876fbe78e312a580f119c255768622db3cec0812bd904ad8d2ece7d97cef7a23d8342feb847e1c24c9e06d80c9a59ed77ba0b7e8e8d1e88c4d3b4c9eb12da4
-
Filesize
8KB
MD5e92ffa581eae5254894ad204f93e1a80
SHA1da477f03e8a310b9643fb16295f7618e398fdea2
SHA256036360aa159dec690a3c2ac21fd7edcf02f4327b5a98d7b6c3edc38a62cc3992
SHA51216e56d3644752b8a9fc7e04e7a4daf87f7dc593aad439fa34c402cad4453a537a4a89417f5d25fad91854c2ac864a55ea148f9fe480efe69a9e45732b4b0bc7b
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State~RFe5a9d5a.TMP
Filesize59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
Filesize
3KB
MD50b1fc3835f25b70d425b11c05c1f058b
SHA1bad6c8f2dec9f1f2341e519150a8d18c36b1eedb
SHA25695ce7b25ff0d9acafb1b625aaf4b9bd1dc7b2fdd19a14581478c38edef5d77d7
SHA5129e838ab4046cc044cbdd888f6d02c7b1840bf798403670b5713ee8646f17650a723c3bb5bb57bcfbd2e6b7d8dad2dc0792c05870f69624d60235fb036a9e5927
-
Filesize
3KB
MD53ba75ccd7a98cb1dbc5ea9cda7459525
SHA1b7193012d69be22cf73db0d25062dd9c6f219f8b
SHA2565f3d5304b5113ff851095fd45c3712e38812cd68b830f1d77b3dd6b705ce2945
SHA512398c84306a0695cdb1d13455a28762cb1fac534a36ab394aeae2dbbb18db6226460d47e9cb25ffdbd0342345a86815c40fe21e05d17b4c14c025c530b1c0ec9a
-
Filesize
3KB
MD51ed1627f6027664c02a4248261e8f4f1
SHA145fb7ea5defeb26b7bb877e8598ff6f1a78478df
SHA2567aeb0eb4b529b741508b96a4a416d96066e1705f95d771d660bafc1b9ee65cc8
SHA512cd97c4cb4eeb3ae0602110d04ce20fe0d667f65bfe107868de7d81fcbc2d308b80021fd38b3bcef6068bec390acf23b6ee3f29114187b3d1990d13076f9433dc
-
Filesize
3KB
MD57fa88de268580f8059bca1246b1369fd
SHA1e47607e11e3ab5fc916a2c83547c838b15811076
SHA2560cbc3f99d5ed0e1bd901ab78a98f121cc7083ac10a350a1cb6dd211a0f0f3c59
SHA512bf693816ed9b19183ee6be754e52b11c56608f23e3d629ff0ed69ec9e0a91d4d0426bf528a0f69ae466faac43451007f7214091bd3d4ed7fe6c5af21c635696a
-
Filesize
3KB
MD59e5502723f3ff0d115373088090a8332
SHA16d59795b65de0c9ecc9431eeaaa5b2393465e50f
SHA256aeac64c55dcbdf0cd7874535f8bd44728dbc663270b4b137e6aa2712761f425f
SHA5123eea5f72b1ff78543054936e465d692b9438ec32dcbbe674f7ce71776b6a38de964f7ee2884de510078ad3b0c24a7aa0e3a35696e1cb34d55195e5e2ad7b589e
-
Filesize
3KB
MD5f87a748c2be470c93b61ab1096bb134d
SHA1169aa19b1b1d1d794dcde5b6b45d69bbf3774a19
SHA256c2a8055d66bc78ba82b4756de78725c07e0cb4f47b0029aa814c240bbd7dc45b
SHA51281589a64527ee35c63dab16c095ebf7f14e2698d4c1c2a1c7b6d5d0653e09342d7f1f54d924ac322b2d37585792ea1ce787e06c5998400aae2826aa4542c03b0
-
Filesize
3KB
MD552c15f88ccf2abb0daedcc763f94c1f1
SHA1edb8ff88bd0af1c306f150cf04606978a9665919
SHA25638dad1701e14f11f280f9c083eb7567483399e2aa80f25b2faa7ebb516b2e95b
SHA5124ef787153ef035f4d4ca44b31eda652e1756591c7bcb41d4509b03bf434d94c4784a85e35aad220668a8979534a8d691f604df87c827a7fa9d40904e6b839e39
-
Filesize
3KB
MD566696636f17fa418aae3019fe9eef89e
SHA1f74bcdbce6ed3775e9c8bdf061a7de34fa8b852e
SHA2563660cdaeb039eaa2b82400b6a8708d61416dfd96efe33e281fd658ff0ab8d0d1
SHA512fe36b48b43a19a7bce827458472c29b395ff6f689f70fdcd0e6685bfe2a71bb8a66d2c521955a425d1c2791c42018274a80945eee05d0306f471f4473dd7f129
-
Filesize
3KB
MD574993a54635f336f3dee57f259efe277
SHA1b968748162a3633d917d1888451f70944467b70a
SHA256fe1180cafc1c82413a2bb9e20b238ffcb3fdb855ad7afe98c7a5ddb9a3e7a102
SHA51257003887f785c12475e77089edbe9fa408cf5bc028876b1ee7494c2360e3cbf30227c4d60091d085bf89231e127f7da79cb249f3da8962b9bd7710bdec4a6a80
-
Filesize
3KB
MD570f245b38933345b1352a471e8f78b48
SHA11e6d0ce34b7273812c167f597ef9647e3fc92c16
SHA2568e3e8e465de6c279da0ffafc954735fd27daf5e5688bc92fe32c5bcceda95379
SHA512e3846f71f2995f4ebd52ad5d32b24874ee48ad6a2c5295d80fc2abc9cddb24a2ce9642687101ce56dbcb431622386162b587b917518d8b0da618815f5c798143
-
Filesize
3KB
MD50c14b233ec25613d6095ac4b3a7f3dc9
SHA14af8d6ba4675261cf3021204734602ef93f77fc0
SHA25629456894dee99595121841a336556d517f5895166589bac6ee22b49d901e2795
SHA5123d6e31af5f6f8fb4fe0a4d99e0b2f4d478b86d66d9298ab35d17ef1de60288af9e22c0907b1eb927a4045f9e38b959f767d692b041580f3bf7cf9e3ef9788f80
-
Filesize
3KB
MD5f226144d977daf8743cfd5097ac7207f
SHA18ead670d5822976d7b3212a2de2a02b00eed1ea2
SHA25653aa040300fbe7235f96e583b83c90cc9654ca3a92169c26bc6ece825eb6223f
SHA51206dea2159f50f07f59b080d140adcfd7be9d6886a4efcfd4f7e70f4286248404521e83c8b304cb71cb399668317dc2968fc90992498d2352ea3626ed08ea02b1
-
Filesize
2KB
MD549e18a366212d0ac948a6c2e58ed09a0
SHA1aae5fa3654eedd1d09457d505e96cf1e699936bf
SHA256086f9e1528ebcb41b2d2cec25596658e0f0e707b0d45fdcd6e1cc868ce8b0156
SHA51279cfa47be52d5acc0399db287e2423f48682fa9133d0c147b50f15f5de51659c3753703291c8d1d352f029e37d0f32574abaf8d72a364a6fd19afc2876ac909b
-
Filesize
13KB
MD57f9e85c115534e7cc68ca51f44c02aff
SHA1f0b2f96e5fdbf17ce538aa767ab2c59e1b6ec6d2
SHA25606d78f08be76108a93fe5dbefb75d99d350f812ed15922e8c340aafc18517dea
SHA512d5a44c9f57a5d29d1d2d161c6ebd12df38726a1b749e954dd9ba28ae85ce185ec59de1d1af68bf81aad06740d98dceb0afebcc9576ac187baf4e0e02252a29cb
-
Filesize
17KB
MD507037b81c8fcae6c2e360fd02849ec3f
SHA17947212b3ac4556ee08ee2b222e3d23a99725eed
SHA25675781093a32df73151679a132074ff85653a157b77c634d88fda25ff2e4e15d7
SHA512c6d7cf74da0af58fd243f753dc78bdbac35ef415285e664d8a36474e4a2222cb4f1118679f43ce976a0a14b840bb8cdc27f260f103e8235c47e9c897e2ea301c
-
Filesize
5KB
MD5b2809c15d396bd36d495ea83947b8518
SHA1237b7ab0b330158ca2dbe8d38edfc3bac1561fe0
SHA256562462a1f7bfa1902d1875e38bb4c09fbcf423dad472e29270aa2d2f1662af77
SHA5124cf860cf230d09d1d87b3b099e7be5bba05407c476bdb8668f5c5499e0a69d129811fe751cc691bca2fe526907813dbf4e9e0587e8e5d9ec9bca431835629842
-
Filesize
48KB
MD532168f0b76412cdccba4962d4749de50
SHA10841052b684f67f039acb1be8e7f2cccfa674e34
SHA256084ebeff748d00cd2ad6d424fdb6f3088b29ec76a8c802c2687946d512182f24
SHA51239fa546143ee2c36d8653cb359156210c9c9029eeccf0d2bbec01d503db5eb3252c0f9996cc85baf22d969a4f09dc0b9a84cb8793444f45b830f0ef380de5217
-
Filesize
18KB
MD5cf936094686772a69b7fb3e2f69c70f7
SHA17e3a17040648e84db61bf17487272b46bf87e19f
SHA2567e6a3b16eba7e30f37c5f0fed5ccce2d86bd16d6b0e99b4a2516418efad0ae3f
SHA5128f7d9724572aeb9a00539e6448f4bc1c2c6332902f7e07e8a6e25a84c22ec436e9cce15c7dd7f4ff369120c272480856f8250a5337c8defe8b1c1e3d342db03a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_0
Filesize168KB
MD53263784a317da549ccaa744a0269a333
SHA10915ba40a6a6fb0e6dacc2d33d3b4faf06fbc023
SHA256432713f85eb5da1e558e30e3d32af9efaa18cd5a41e5953ee8cd1d49f71d025c
SHA512dd9c7f708b6f458aecee04d95915640398d1a3a56e5bb75e3d8d2c7e3b99c910970293bd5f6c422e9229bd44849cedd68fc6191a9c199fdb4b49bcbd6c4a28bf
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_1
Filesize381KB
MD5c6131371275c269e5304f24f86f57f36
SHA1c20a57e6c263438999c4b3f37b35cfb4c51d78f8
SHA256e1ba5101f376e9767bfd9f79638bd4975a105018acaf982e24d275f1cd271dd8
SHA5121a94cd309ce242ce7b42979011d82b9823cb88542e886c3553adef0232743027140b84834f2e0f5d6a0d18d3530260b9d34b380a3ae7bd4ce9636954fcf96340
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
Filesize449B
MD55ff21d5d0dbb126cc3f0db52fb7b569b
SHA1406fb3297b1f61b109ba578b94bbd8c126a092ce
SHA256d8e3d37c58f45e6328e0c1ad75d6eccf46a2af3c47e7f71b0be69304889fe730
SHA512620bad2ada6c31a2bffc05767eeec4ce327b3334169dc349b00ace0df5042ed9238a69c519cf58730f2d6255620392b6f67fbca8af2f397ec7576f86c7831b0c
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize288B
MD5797a2e3efe43ecfbe29900c71a40b176
SHA162d199fe2baaf23834d42ad309d8a23ca6ca74fe
SHA25654e823fda6ffd30aa1f9f40dac3855df7af104b758aa9d12ff07998e4f2e5cfe
SHA51251e60ad2b942caa2e42f6a37878f7362cde2eada5f5456a5f8beda61110fe3f6b61259cfce49661f3b557a350dcd6b8f3247402dcf8e3a44f8fb77731c96527f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a1f12.TMP
Filesize48B
MD5c01c06e474f67e73663e253b306e0fd9
SHA1f05ee173d9f1eb3b67f1d1fcd671c2044e76971d
SHA25676b1bf4d20a6c030a3c34bc28b22ec9c712ffc4358ac6f291407bcd683843613
SHA512c03eb92a01443eb98ded7f5921a087365c8dc01e0c9cae62f204608598629d2cb664a60b8130a3d53ff0726a412b637b180a05a355299f00b404db154b205123
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Site Characteristics Database\MANIFEST-000001
Filesize41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
1B
MD55058f1af8388633f609cadb75a75dc9d
SHA13a52ce780950d4d969792a2559cd519d7ee8c727
SHA256cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA5120b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
-
Filesize
173KB
MD5f3d32d9918947cd0ee98a95e6782ea0c
SHA17d352e9a4799b5a180e11eaae4a7ef1a6ae51d2a
SHA25633845d8a8dfe591b8eed4b27f2c47dc856b11d86c6bfec08074662c559ed4d01
SHA512e4818c7e56b2a7f28610f14f738fe92018528517182e5cfa2e17750796bbdecdc2bca3af71afaad2e27a19a17e487fc321e8e20c286268dfb7a126135817804d
-
Filesize
7KB
MD5b486a2d22e22545b4d7ce820c38245ca
SHA13be7e3d4e07c581b9638a73a062809fb1f535ca8
SHA2562f490c4adc51b58604c99546925f091dbda66ce6e54a0ea5b75e675d1fbe019c
SHA5125c47112085670e0726401d436984accf4ab21c23fd785f0031997b786238618a163cd194749b8f625c3ab18d211f31711cc904c3164671bbc9347550c3b72ace
-
Filesize
8KB
MD5cf89d16bb9107c631daabf0c0ee58efb
SHA13ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA5128cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
-
Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
Filesize
8KB
MD541876349cb12d6db992f1309f22df3f0
SHA15cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
-
Filesize
7KB
MD562ecdaaa29a82faa7bf29bdee1331ff6
SHA1f8e85ba6b1ac569675793c02737d3fbb9ff18591
SHA256fb1c9472f064f56e25d0f536849f7b27b1f54d18ff142fb324ed4bc3e49c506a
SHA5121a1ad1624ab459a02a834ff8de16746f098abbc9feae2007e4947ff32bc75c4819e4054c3c2ec11bc03a0dda03c29ac11c2cf91e54aeb64608c43d8dd79e9969
-
Filesize
7KB
MD5a9d8f7973a7f5b3ec8fc0b9de84962bc
SHA151a0b939a098e5a8e46a1591390eb3fa0ddd14ef
SHA256e6ef5ba52cf438076f74126f7d8a01ecdcf21ad041201115f70bfd3a31ac6ec1
SHA512d312787cf24f4874cc0a5989103265636a032cd3ff5e97e1ec66261f1f6215b632df8dc40e67ee1eab491f8cea4118e7e172081df02fc113defe272e13c255d1
-
Filesize
4KB
MD57c380549bb9df52c45b839b660a290b2
SHA10d14ecb4976f38474a899322d202ae03e0d5e3c3
SHA256e04aaacb547c28ccf562a97b7370ce65a446c007d2a85ffb3bfea6e632d756e4
SHA512f040fbfc59eebed27aab9195a85acb7e2578d7eff7d615506ae1bf90498cb8466d746a416824fefd8dc1238757f3ce7ebf6522efb97455e5e55c95631a1dc32a
-
Filesize
45KB
MD5a2d043663d9769324713c0150f9920ec
SHA1052638835119367df6bb907070129324714dcc62
SHA25612c2054de88492eb1023bfec6392c80b04f9ff5045ebd25d401dbbef2c081e75
SHA512ab9a5a7c699949c59d57e173a554d72d2fa55fbab4ae1ca817fd261426c0ff3d76db0f7b4b9b52d650059066fe2a8fd3d4de3c4da8e2f785384efa69ed1d9f73
-
Filesize
143KB
MD5a5ce6498c85fd6192c0cf8163dd1d78e
SHA10aff2338c879a878cd04c13c760133d9d00d3725
SHA256de20add60a38918cb64a20f26a13d59826f85c2ce3991dc4256f4c93c6e0e729
SHA512199e5db476382bac2fae6f3daba68a5d4013848c2ba82989dafaa1cb55922d39b3ec4fb428c1f7767321a1960d83e2bf642bd51e11f141ba96bc4bd006d29342
-
Filesize
11KB
MD5c4b867c149aef179ccfb5a8d0ca5b762
SHA1f0bfc09c2a0c4c00583676392c67ecd8f9800b81
SHA2566b86aa4c1338b3041bf16ff831b7afa2911e70f9b2bb8c694dd4e6b849ae1a7d
SHA51224eed07688b9868e97164f59c87e5116b682f917d4b7cfcd54f51e47a045f6f320f596751e5ea49df402546955f14d7fcefd2014c373feb15f87c86f78211ff7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PrivacySandboxAttestationsPreloaded\2024.7.25.0\privacy-sandbox-attestations.dat
Filesize6KB
MD53b1ff7dad84b556dcdd920fdae0bb30c
SHA1f92c256a0ddd8b03e56020a56444f2e0b9f728b8
SHA25618a678e39fb6527cf183ba39f23b5556e435cbcf5bf52862606c618fac9fc35d
SHA5128c4483c9446ab1ac9720f2b9e38ef90dd6a64cb6829331cd807e2fd5fcde62db87f80f6502a4a22c9da27e0979ddc74666aa9b64b3aa57e5c7f69c839a06770a
-
Filesize
2KB
MD5e2f792c9e2dd86f39e8286b2ead2fc70
SHA18a32867614d2a23e473ed642056ded8e566687f9
SHA256ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
SHA5126a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580
-
Filesize
153KB
MD5721ed2e6ed1eaf8e0827a583cfda4273
SHA1dc0670cf8b7e5f6a98909af4b31253efde619459
SHA256e742cd44c999acf5111b8d186311450981067d6cae7295ad590efe61f8a28f73
SHA5129a5fd566074565605d7a95dbe0721f561eb3fe944cb8e35905d43022c5b90cb124c3f6f1453a938e0792d81ebcec9b9c20aa82f475ff94b0bb1f790b3f6d75c3
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Subresource Filter\Unindexed Rules\9.49.1\Filtering Rules
Filesize68KB
MD56274a7426421914c19502cbe0fe28ca0
SHA1e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA256ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
SHA512bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5
-
Filesize
30KB
MD56d1e8c8a66429be05a9596b49a64857f
SHA16f0cad8024b302c64ffecfc303176552fe9f5729
SHA256f6c86fe24027cc175e24731767e630a5ba4db07e106049e7d19ecb0e7c10a876
SHA5122016131ffb6326cd1525b0814287a8112e3ceb4cfb93841b9322b6ec809b6446f6712fe55210c2d9c1f7facf976ac01b10d977bd845cdefc1c755bcbce3c2d95
-
Filesize
6KB
MD5e536959b694e00b49d62c39595c7dc27
SHA1f8736bb63c3bc72e7fb2932407e777b85533eef1
SHA256c1498042aebe3f9edfd3411a5852cba8877d6a23840a244a1fe928ada2aa60c7
SHA512d8c50833e0e8ec8f82096c697055f5739c5770a61985c29f13645a4e31834ce0a321f858dd044dd3538988e23cafcd84e3fbdc294870c58e9dccacee803cb26a
-
Filesize
865KB
MD5959460a18173908111523bbf4c39073e
SHA1c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA2565820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
SHA512291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
2KB
MD5ecad6dfb8b7c839aa8e3ffc63e636327
SHA1cad21e8b48648bffc44c052fcce4c7cfbd2bea5f
SHA2567f4292f4b2bd901d8a089ae1db0c40a413664fec34916cb184dfaab4c950f082
SHA512c5843e8cb3b618d78efc288f5bd7d0a6a32ed41d6779ef5a9ded35ff5dde16cdc9687c0932328612692a1b580eec87b09e5c5c670326cfae35607f7c07b7441c
-
Filesize
19.7MB
MD5962b10f87bd46cca3e8511ba71b73716
SHA1b78400f3abb469bcbb5d85248b31fd7ab2a8235c
SHA256609f33e031790e0c969aef60e1f18796478faa2983ebd2093329e838b702f326
SHA5128ab270b07c1e98f9b1bf5979f6d48fb6c9dd4df067bf11aca4c489c5148013a4a4fa89303060d02890cf9312933df6d65830e408d350735176168981bc7ec9e4
-
C:\Users\Admin\Downloads\@[email protected]
Filesize933B
MD57a2726bb6e6a79fb1d092b7f2b688af0
SHA1b3effadce8b76aee8cd6ce2eccbb8701797468a2
SHA256840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
SHA5124e107f661e6be183659fdd265e131a64cce2112d842226305f6b111d00109a970fda0b5abfb1daa9f64428e445e3b472332392435707c9aebbfe94c480c72e54
-
C:\Users\Admin\Downloads\@[email protected]
Filesize240KB
MD57bf2b57f2a205768755c07f238fb32cc
SHA145356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA256b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
SHA51291a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9
-
Filesize
55B
MD50f98a5550abe0fb880568b1480c96a1c
SHA1d2ce9f7057b201d31f79f3aee2225d89f36be07d
SHA2562dfb5f4b33e4cf8237b732c02b1f2b1192ffe4b83114bcf821f489bbf48c6aa1
SHA512dbc1150d831950684ab37407defac0177b7583da0fe13ee8f8eeb65e8b05d23b357722246888189b4681b97507a4262ece96a1c458c4427a9a41d8ea8d11a2f6
-
Filesize
10.7MB
MD5822b9b6f481ab65ec6d3f50b97aaadec
SHA1c2e2af04abbd6fea7e021cec34aa536e09006473
SHA25665df6d4832b46399c27e1e39ea9020104f68609db66c448699bb63e6b779311a
SHA512e56ab7fe4392238ffcf56694e0d3caa2dc390edbed5740c48d903d8e6305aeefb6b2abbc19823cdb9a531f3ca032f0a82dda015e0a8699a72987996236f2b0ca
-
Filesize
437KB
MD5083f8d2b07443203a44f7f997229c47e
SHA17d3b9ae5022bdf69dfbc51d8616d607cae9e2d27
SHA256afd731bb658525845c8ee4216b05ce0c9c8b2e8b745884fbefeb01ef331163a1
SHA51296f07fe9f56a80204cdaf7f61ed42d0cbc643449b5de3c15aa02db1fe879bdce52065f51f92ae92d6fdb3079a0cb041e2ba32f34ed5d151c15b2a2b8e3a636fd
-
Filesize
3.0MB
MD5fe7eb54691ad6e6af77f8a9a0b6de26d
SHA153912d33bec3375153b7e4e68b78d66dab62671a
SHA256e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
SHA5128ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f
-
Filesize
1.1MB
MD5f0a661d33aac3a3ce0c38c89bec52f89
SHA1709d6465793675208f22f779f9e070ed31d81e61
SHA256c20e78ce9028299d566684d35b1230d055e5ea0e9b94d0aff58f650e0468778a
SHA51257cdb3c38f2e90d03e6dc1f9d8d1131d40d3919f390bb1783343c82465461319e70483dc3cd3efdbd9a62dfc88d74fc706f05d760ffd8506b16fd7686e414443
-
Filesize
7B
MD54047530ecbc0170039e76fe1657bdb01
SHA132db7d5e662ebccdd1d71de285f907e3a1c68ac5
SHA25682254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750
SHA5128f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e
-
Filesize
23.4MB
MD5bdab7df23e3ba88d276c2767f03a750e
SHA1b86df23eee31f8680327e7cdb546db9795f0c746
SHA2565842eae2cd2b8d44bbd170333e1a4bfde388d8ec57776cd97e6191aa390809a4
SHA51271ba3ce3fc3dc7c49ca4bc679d9a6f150ae92b8c3aad59faf31ba9469cfe194fbc1ad2e9966f209bd40b3be9122a7802e351b4d31f3e3f0dbf5c101192a32f49
-
Filesize
1.2MB
MD51684aab6fae1ed888cf6d3c45e3f5fa7
SHA16acc87b81836575bf7b497f0e8a9a23a221f06b7
SHA2564114122c0dca23f637d83eed33f9abcdc92709e2ac6f63ffd55f5aae519b58ab
SHA5126d4bafe21686ce62cc129082e8dcd4da87fa7dcaea5eee9862a99adbb0142e89fe0e9d097ee2b9a9a6b6eab3ee23b6a26c4fa587d7ce1782a1d2e2c1454c2e71
-
Filesize
246KB
MD59254ca1da9ff8ad492ca5fa06ca181c6
SHA170fa62e6232eae52467d29cf1c1dacb8a7aeab90
SHA25630676ad5dc94c3fec3d77d87439b2bf0a1aaa7f01900b68002a06f11caee9ce6
SHA512a84fbbdea4e743f3e41878b9cf6db219778f1479aa478100718af9fc8d7620fc7a3295507e11df39c7863cb896f946514e50368db480796b6603c8de5580685a
-
Filesize
68KB
MD5bc1e7d033a999c4fd006109c24599f4d
SHA1b927f0fc4a4232a023312198b33272e1a6d79cec
SHA25613adae722719839af8102f98730f3af1c5a56b58069bfce8995acd2123628401
SHA512f5d9b8c1fd9239894ec9c075542bff0bcef79871f31038e627ae257b8c1db9070f4d124448a78e60ccc8bc12f138102a54825e9d7647cd34832984c7c24a6276
-
Filesize
3.4MB
MD584c82835a5d21bbcf75a61706d8ab549
SHA15ff465afaabcbf0150d1a3ab2c2e74f3a4426467
SHA256ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
SHA51290723a50c20ba3643d625595fd6be8dcf88d70ff7f4b4719a88f055d5b3149a4231018ea30d375171507a147e59f73478c0c27948590794554d031e7d54b7244
-
Filesize
26B
MD5fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98
-
Filesize
780B
MD5499d695d6051ebe05ec6740c1d61e77d
SHA1ef22c6bfca3d8ba7e65093609f2a681438aca63c
SHA256b6bee8f572c19fb66c4f236e087270b8ec6237e1fedbb4a6b18755f69c30210c
SHA5126404d2f775bce2ef19f77f76f3c9eaa7800d88abab185a4ed590c82376d1e22d3178a4d7eea683d2d39bbd027b3732c6920444b3023a021230127e2923657d9c
-
Filesize
4.4MB
MD56a4853cd0584dc90067e15afb43c4962
SHA1ae59bbb123e98dc8379d08887f83d7e52b1b47fc
SHA256ccb9502bf8ba5becf8b758ca04a5625c30b79e2d10d2677cc43ae4253e1288ec
SHA512feb223e0de9bd64e32dc4f3227e175b58196b5e614bca8c2df0bbca2442a564e39d66bcd465154149dc7ebbd3e1ca644ed09d9a9174b52236c76e7388cb9d996
-
Filesize
53KB
MD50252d45ca21c8e43c9742285c48e91ad
SHA15c14551d2736eef3a1c1970cc492206e531703c1
SHA256845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
SHA5121bfcf6c0e7c977d777f12bd20ac347630999c4d99bd706b40de7ff8f2f52e02560d68093142cc93722095657807a1480ce3fb6a2e000c488550548c497998755
-
Filesize
77KB
MD52efc3690d67cd073a9406a25005f7cea
SHA152c07f98870eabace6ec370b7eb562751e8067e9
SHA2565c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
SHA5120766c58e64d9cda5328e00b86f8482316e944aa2c26523a3c37289e22c34be4b70937033bebdb217f675e40db9fecdce0a0d516f9065a170e28286c2d218487c
-
Filesize
36KB
MD5fe68c2dc0d2419b38f44d83f2fcf232e
SHA16c6e49949957215aa2f3dfb72207d249adf36283
SHA25626fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
SHA512941fa0a1f6a5756ed54260994db6158a7ebeb9e18b5c8ca2f6530c579bc4455918df0b38c609f501ca466b3cc067b40e4b861ad6513373b483b36338ae20a810
-
Filesize
36KB
MD508b9e69b57e4c9b966664f8e1c27ab09
SHA12da1025bbbfb3cd308070765fc0893a48e5a85fa
SHA256d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
SHA512966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4
-
Filesize
37KB
MD535c2f97eea8819b1caebd23fee732d8f
SHA1e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA2561adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
SHA512908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf
-
Filesize
79KB
MD5b77e1221f7ecd0b5d696cb66cda1609e
SHA151eb7a254a33d05edf188ded653005dc82de8a46
SHA2567e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
SHA512f435fd67954787e6b87460db026759410fbd25b2f6ea758118749c113a50192446861a114358443a129be817020b50f21d27b1ebd3d22c7be62082e8b45223fc
-
Filesize
864B
MD53e0020fc529b1c2a061016dd2469ba96
SHA1c3a91c22b63f6fe709e7c29cafb29a2ee83e6ade
SHA256402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
SHA5125ca3c134201ed39d96d72911c0498bae6f98701513fd7f1dc8512819b673f0ea580510fa94ed9413ccc73da18b39903772a7cbfa3478176181cee68c896e14cf
-
Filesize
2.9MB
MD5ad4c9de7c8c40813f200ba1c2fa33083
SHA1d1af27518d455d432b62d73c6a1497d032f6120e
SHA256e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
SHA512115733d08e5f1a514808a20b070db7ff453fd149865f49c04365a8c6502fa1e5c3a31da3e21f688ab040f583cf1224a544aea9708ffab21405dde1c57f98e617
-
Filesize
230B
MD56b23f6352e1de036cce5eacb78d81cdf
SHA1a146988c360e593cf0a519d96c3cd7e9ac8f340e
SHA256f00ae2a15c65e2fbde68211b8f36ade140d27aba0cdf68af901247f325c70f66
SHA5124799a2c885a362d862d1646a371bb26acb40df56051740880b5e961b69830de24372bc366c8783cbfe0822fe65fc872889f482a14a0fb577d8e608c874c065e1
-
Filesize
64KB
MD55dcaac857e695a65f5c3ef1441a73a8f
SHA17b10aaeee05e7a1efb43d9f837e9356ad55c07dd
SHA25697ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
SHA51206eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2
-
Filesize
20KB
MD54fef5e34143e646dbf9907c4374276f5
SHA147a9ad4125b6bd7c55e4e7da251e23f089407b8f
SHA2564a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
SHA5124550dd1787deb353ebd28363dd2cdccca861f6a5d9358120fa6aa23baa478b2a9eb43cef5e3f6426f708a0753491710ac05483fac4a046c26bec4234122434d5
-
Filesize
20KB
MD58495400f199ac77853c53b5a3f278f3e
SHA1be5d6279874da315e3080b06083757aad9b32c23
SHA2562ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
SHA5120669c524a295a049fa4629b26f89788b2a74e1840bcdc50e093a0bd40830dd1279c9597937301c0072db6ece70adee4ace67c3c8a4fb2db6deafd8f1e887abe4
-
C:\Users\Default\Desktop\@[email protected]
Filesize1.4MB
MD5c17170262312f3be7027bc2ca825bf0c
SHA1f19eceda82973239a1fdc5826bce7691e5dcb4fb
SHA256d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
SHA512c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c
-
Filesize
76B
MD5b5dabcb6b1744da449b7ee8f85258f7f
SHA16602da5eb5d1e64644f5427f210ce1e57544bfbd
SHA256082775d5ea6bacc6bee71f31a68e966b4a7cf8d39adc681894b0e1f89bfbb47b
SHA512f89296d1dd2f6acffc102c45e1d51516937f4c143eb642cdf6c79d35b121a1c712063f56fdb6636765882246fadacd67cae71131831346f7b5770952070d76a9
-
Filesize
703B
MD58961fdd3db036dd43002659a4e4a7365
SHA17b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA256c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
SHA512531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
-
Filesize
687B
MD50807cf29fc4c5d7d87c1689eb2e0baaa
SHA1d0914fb069469d47a36d339ca70164253fccf022
SHA256f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
SHA5125324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
-
Filesize
141KB
MD5677edd1a17d50f0bd11783f58725d0e7
SHA198fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA256c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
SHA512c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
-
Filesize
82B
MD52617c38bed67a4190fc499142b6f2867
SHA1a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA256d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
SHA512b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
-
Filesize
72B
MD5b242c7366b864357e4b4a78a2e92da63
SHA1fe90d44f5768e0b81e990b0f9f5c319e5b6419fe
SHA25620ae41f7b0c29118b0a6c5618e06fd8e8e4a82d73dae7b23b8363073c6fec384
SHA512a24112b6ee189ca094a907dfde915956414fe45de63cd74396c5ac313e0d5333cd25dae15af600458aa9fbcb971d5724d6c72f8639255a72642878b0560a252d
-
Filesize
114B
MD54c30f6704085b87b66dce75a22809259
SHA18953ee0f49416c23caa82cdd0acdacc750d1d713
SHA2560152e17e94788e5c3ff124f2906d1d95dc6f8b894cc27ec114b0e73bf6da54f9
SHA51251e2101bcad1cb1820c98b93a0fb860e4c46172ca2f4e6627520eb066692b3957c0d979894e6e0190877b8ae3c97cb041782bf5d8d0bb0bf2814d8c9bb7c37f3
-
Filesize
69B
MD5fb195043cfc35ce711b45934e387267b
SHA16f1aaafee57a3da2687e9fc8defe2dbc7cba0e07
SHA256aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
SHA512bd7fee1d6f8e51137c849d76ff53f3b501d60ddce83cce18f3a217703d3d8b1a1cc7696b656c666d4f6de62a17ea2407c857137d12e0b6ac7bcdde4b3c8ff86b
-
Filesize
107B
MD53a4a9393b7dc4dbd4ec089f3af3a5fda
SHA1dd4e11a18f55ade0c7c398cfb3132666bb2ebbb1
SHA2564fc4129b157c96f7a26765d18056a2640015ac488dfdfafc33e4d674aa3b2fd9
SHA51281d0061089facd717e02ead38972dfcb51322a08d24af7cf86a3c9cc68c85a09cd2fa68be7c63b66a83c080999ff47d4b83477c8d505be5fadf638ca8ae40779
-
Filesize
97B
MD50d6b38ea511f753b5f928a3e1fb7798d
SHA157b7e78d42fbba61dca8d251bbacca53a0ff06a0
SHA2564b5ae6442b7577628f0c417bf26a279f4036417123d582bc0e753dc32b05958a
SHA512d9b60d77e66d96799083898450f7d8b90d1ec8a7334771c24e436e8bc5031a857f6b3f957edee49f61af8ba8340267dac66d81b207bd1830b4250a651f178a8e
-
Filesize
76B
MD54aaa0ed8099ecc1da778a9bc39393808
SHA10e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA25620b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
SHA512dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879
-
Filesize
300B
MD501f3de10093b3b262105724e85817fa6
SHA197dee66ece41b53a27cbd4579f44c204e35d19d6
SHA256be1b2d4b5880584961c46ec8ed276b6ee43ea595da56720268e05bd3d5c95340
SHA5129646b13e23c4214bcc45715fbc60eb9afb29f934d5d33b3471ee89a6f399a68d83b5bdff14748f73ce6a7c2c9fdce782a4ce849f855a900514636b529e9b400f
-
Filesize
79B
MD5057c59cba39f2699931f3daef841199b
SHA169922e53fc8b2f256c55b6ba87a4c97adfcf5dd7
SHA256f325aae8fefccbd930b11b95e5f294d39659be3f38adb1c62077f484e4342057
SHA51250493c8ecb51de90aebb8c4ac96ef3ed84e5b116060bcb47688198c44b101d804e1d2e6d036f79c034ba3771c696036d9d524a0bc7dddfd970d6683f890eae5d
-
Filesize
108B
MD5f226f2485b41a6989a809fd2cf6bdcbb
SHA107b6fd5dc38e7ade71c909e45f9298dc289a7b3f
SHA25681d30ab6c7a621f03ad7107ab1c767f55419efc72248fe2c88bfda0ae76d4dbf
SHA512641512ad0ceb0ea542c530965a68ea74acca75f2c62eae066e802765a1a8d21a7dd2a9294a8824aa52bab8c56b52e689533ac6448263d2e018c25588bd95d55c
-
Filesize
110B
MD53f1496f735ac3c3de4a5c9bee0b692ee
SHA15ba9b321eaf6b26ce9d1dc811c77b0a4749e6a9d
SHA2568570ae9d4bdbfa9a76d303da090476896352ef170c1309e053998cc484bbfd7d
SHA512759cff3e1e2f5b11f4fab12fbadcac97304b748801221c50447b550d75c9afcab1accc7b2423dbc63b996206c36c470a6d422e4fb721652216406bbf648b4b0a
-
Filesize
108B
MD551776c09b42cbf9a68f3adc85a55855b
SHA12f7824407cc456180d3b52170b5b2a0d2ee08167
SHA2569d414e6677697a1f23d5f280eb48787616968a6a0254a679d86790520d6651b3
SHA51262c0c3ab04359118e312eb7f7561e32de61294b23e5f0eda194e09efb0bc42c24bffe202b80e83227a12cdd40ca83869080b73ef93c3bfd3c768c1abf94b88c6
-
Filesize
73B
MD5f5ad66e2ff38c237003d73f45533fb9d
SHA1cfc73dd136ffbd33d1bc0c486510c4ad062cdbd9
SHA256917adecce521b99c91d0a800553b935e927ea4e57ed02f69c46df019e5326629
SHA5124d6951bc38ae18dc50765ab288f3b8bd7089bcd2cef0305984fec155da74cdd6afc71a6a6a6ef447a50bc260b3cea2de5b1ea1cff4a98dccdb6a5c486c865e62