Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
563s -
max time network
564s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
08/08/2024, 15:40
Static task
static1
Behavioral task
behavioral1
Sample
text.txt
Resource
win11-20240802-en
General
-
Target
text.txt
-
Size
168B
-
MD5
10a317ca10f0fd2af4bf2043ff8dd8fd
-
SHA1
c02bdb3aba83817ea599a004fcfbf09c419c326b
-
SHA256
2dbd1033a26118d27915184864ad2a0add89d5ee3153eca157fadaa62ad19af5
-
SHA512
192f635707607a716f2d12f191cbb12a42f65d1aa5446ea7a6fc6adfe8b1c88d3210488ceec2528d6e276593ed9603fac14939bb431b689702dd4f1829de44e0
Malware Config
Signatures
-
Credentials from Password Stores: Credentials from Web Browsers 1 TTPs
Malicious Access or copy of Web Browser Credential store.
-
Downloads MZ/PE file
-
Drops file in Drivers directory 2 IoCs
description ioc Process File created C:\Windows\system32\drivers\JitDriver.sys kwjd1ewy.yjt File opened for modification C:\Windows\system32\drivers\JitDriver.sys kwjd1ewy.yjt -
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x000100000002ab85-1959.dat acprotect -
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE 64 IoCs
pid Process 5952 DriverUpdate.exe 5208 vc_redist.exe 5412 vc_redist.exe 5184 VC_redist.x64.exe 6168 DSOneWeb.exe 3692 WicAnimatedGif.exe 5752 Setup.exe 1828 WebCompanion-Installer.exe 3008 DSOneWeb.exe 2356 kwjd1ewy.yjt 5852 DSOneWebWD.exe 5856 WebCompanion.exe 3928 CefSharp.BrowserSubprocess.exe 5668 CefSharp.BrowserSubprocess.exe 3940 CefSharp.BrowserSubprocess.exe 5660 an53gnk4.wlz 4568 CefSharp.BrowserSubprocess.exe 1536 CefSharp.BrowserSubprocess.exe 7792 WebCompanion.exe 852 Wave Browser.exe 6328 SWUpdaterSetup.exe 6040 SWUpdater.exe 5456 SWUpdater.exe 3644 SWUpdaterComRegisterShell64.exe 7052 SWUpdaterComRegisterShell64.exe 6084 SWUpdaterComRegisterShell64.exe 5980 SWUpdater.exe 2240 SWUpdater.exe 2236 SWUpdater.exe 8464 WaveInstaller-v1.5.18.2.exe 8568 setup.exe 8436 setup.exe 9728 setup.exe 1068 setup.exe 8404 wavebrowser.exe 5964 wavebrowser.exe 9752 wavebrowser.exe 4036 wavebrowser.exe 7052 wavebrowser.exe 8416 wavebrowser.exe 4212 wavebrowser.exe 9244 SWUpdater.exe 5240 wavebrowser.exe 6836 wavebrowser.exe 200 wavebrowser.exe 3808 wavebrowser.exe 4964 wavebrowser.exe 4044 wavebrowser.exe 9756 wavebrowser.exe 5180 wavebrowser.exe 9436 wavebrowser.exe 6312 wavebrowser.exe 9988 wavebrowser.exe 7164 wavebrowser.exe 10104 wavebrowser.exe 1728 wavebrowser.exe 3544 wavebrowser.exe 9500 wavebrowser.exe 8452 wavebrowser.exe 9380 wavebrowser.exe 5456 wavebrowser.exe 6388 wavebrowser.exe 5576 wavebrowser.exe 6556 wavebrowser.exe -
Loads dropped DLL 64 IoCs
pid Process 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5412 vc_redist.exe 6960 VC_redist.x64.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 5952 DriverUpdate.exe 5952 DriverUpdate.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 6168 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 5852 DSOneWebWD.exe 5852 DSOneWebWD.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 5856 WebCompanion.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
resource yara_rule behavioral1/files/0x000100000002ab85-1959.dat upx -
Adds Run key to start application 2 TTPs 4 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{3746f21b-c990-4045-bb33-1cf98cff7a68} = "\"C:\\ProgramData\\Package Cache\\{3746f21b-c990-4045-bb33-1cf98cff7a68}\\VC_redist.x64.exe\" /burn.runonce" VC_redist.x64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000\Software\Microsoft\Windows\CurrentVersion\Run\Web Companion = "C:\\Users\\Admin\\AppData\\Roaming\\Lavasoft\\Web Companion\\Application\\WebCompanion.exe --minimize " WebCompanion.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000\Software\Microsoft\Windows\CurrentVersion\Run\Web Companion = "C:\\Users\\Admin\\AppData\\Roaming\\Lavasoft\\Web Companion\\Application\\WebCompanion.exe --minimize " WebCompanion.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000\Software\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterCore.exe\"" SWUpdater.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe -
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\I: msiexec.exe -
Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
flow ioc 283 https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html -
pid Process 4568 CefSharp.BrowserSubprocess.exe 1536 CefSharp.BrowserSubprocess.exe 10784 CefSharp.BrowserSubprocess.exe 3928 CefSharp.BrowserSubprocess.exe 5668 CefSharp.BrowserSubprocess.exe 3940 CefSharp.BrowserSubprocess.exe -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 an53gnk4.wlz -
Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer wavebrowser.exe -
Drops file in System32 directory 52 IoCs
description ioc Process File opened for modification C:\Windows\system32\msvcp140_1.dll msiexec.exe File created C:\Windows\system32\vcamp140.dll msiexec.exe File created C:\Windows\system32\mfc140ita.dll msiexec.exe File created C:\Windows\system32\mfc140jpn.dll msiexec.exe File created C:\Windows\system32\msvcp140_codecvt_ids.dll msiexec.exe File created C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_01cf530faf2f1752\display.PNF chrome.exe File opened for modification C:\Windows\system32\vcruntime140.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140_2.dll msiexec.exe File created C:\Windows\system32\mfc140.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140_atomic_wait.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140.dll msiexec.exe File created C:\Windows\system32\mfc140enu.dll msiexec.exe File created C:\Windows\system32\mfcm140u.dll msiexec.exe File created C:\Windows\system32\msvcp140_atomic_wait.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140u.dll msiexec.exe File created C:\Windows\system32\mfc140esn.dll msiexec.exe File opened for modification C:\Windows\system32\mfcm140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140chs.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140cht.dll msiexec.exe File created C:\Windows\system32\vcruntime140.dll msiexec.exe File created C:\Windows\system32\mfc140deu.dll msiexec.exe File created \??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_01cf530faf2f1752\display.PNF chrome.exe File created C:\Windows\system32\vccorlib140.dll msiexec.exe File created C:\Windows\system32\vcruntime140_1.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140deu.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140esn.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140ita.dll msiexec.exe File created C:\Windows\system32\mfc140u.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140jpn.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140kor.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140rus.dll msiexec.exe File created C:\Windows\system32\mfc140chs.dll msiexec.exe File created C:\Windows\system32\mfc140fra.dll msiexec.exe File created C:\Windows\system32\msvcp140.dll msiexec.exe File opened for modification C:\Windows\system32\vcruntime140_1.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140.dll msiexec.exe File opened for modification C:\Windows\system32\vcamp140.dll msiexec.exe File created C:\Windows\system32\concrt140.dll msiexec.exe File created C:\Windows\system32\msvcp140_2.dll msiexec.exe File created C:\Windows\system32\mfc140kor.dll msiexec.exe File created C:\Windows\system32\mfc140cht.dll msiexec.exe File opened for modification C:\Windows\system32\msvcp140_codecvt_ids.dll msiexec.exe File created C:\Windows\system32\msvcp140_1.dll msiexec.exe File opened for modification C:\Windows\system32\mfcm140u.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140enu.dll msiexec.exe File created C:\Windows\system32\mfc140rus.dll msiexec.exe File opened for modification C:\Windows\system32\vccorlib140.dll msiexec.exe File opened for modification C:\Windows\system32\vcomp140.dll msiexec.exe File created C:\Windows\system32\vcomp140.dll msiexec.exe File created C:\Windows\system32\mfcm140.dll msiexec.exe File opened for modification C:\Windows\system32\concrt140.dll msiexec.exe File opened for modification C:\Windows\system32\mfc140fra.dll msiexec.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Driver Support One\CefSharp.Core.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Data.SQLite.Linq.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.SignalR.Common.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\DotNetty.Handlers.dll DSOneWeb.exe File opened for modification C:\Program Files (x86)\Driver Support One\System.Text.Encodings.Web.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.WindowsAPICodePack.Shell.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Uninstall.exe DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\WICAnimatedGif.exe DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\DriverSupport.One.Service.Model.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.Authorization.Policy.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\vulkan-1.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\TriggerEngine.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.Http.Connections.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Threading.Channels.dll DSOneWeb.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\SWUpdaterComRegisterShell64.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Driver Support One\snapshot_blob.bin DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.Authorization.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.SignalR.Client.dll DSOneWeb.exe File opened for modification C:\Program Files (x86)\Driver Support One\System.Numerics.Vectors.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.Extensions.Configuration.Binder.dll DSOneWeb.exe File opened for modification C:\Program Files (x86)\Driver Support One\sqlite.db-journal DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\ServiceLib.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\DSOneWebShutdown.exe DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\SQLite.Interop.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.Http.Connections.Common.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\DotNetty.Buffers.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.Azure.Devices.Client.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.Bcl.AsyncInterfaces.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.Extensions.Configuration.dll DSOneWeb.exe File opened for modification C:\Program Files (x86)\Driver Support One\DBPersist.db DSOneWeb.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\SWUpdaterCore.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Driver Support One\LiteDB.dll DSOneWeb.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\SWUpdaterSetup.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Driver Support One\icudtl.dat DSOneWeb.exe File opened for modification C:\Program Files (x86)\Driver Support One\JitDriverLib.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\sqlite3.dll DSOneWeb.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\SWUpdater.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Driver Support One\d3dcompiler_47.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\vk_swiftshader.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Polly.Extensions.Http.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.SignalR.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\an53gnk4.wlz DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\libGLESv2.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Management.Automation.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\DnsClient.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.Hosting.Server.Abstractions.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.Rest.ClientRuntime.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Security.Principal.Windows.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Text.Encodings.Web.dll DSOneWeb.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\psmachine_64.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Driver Support One\DSOne.exe DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Azure.Core.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\DotNetty.Common.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\CefSharp.WinForms.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\AsurvioSnmpLib.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Microsoft.AspNetCore.Hosting.Abstractions.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Diagnostics.DiagnosticSource.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Common45.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\HookLib.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Text.Json.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\System.Threading.Tasks.Extensions.dll DSOneWeb.exe File created C:\Program Files (x86)\Driver Support One\Asurvio.Client.Common.dll DSOneWeb.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\swupdater.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Driver Support One\IotLib.dll DSOneWeb.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\SystemTemp\~DFD155F4B986E4F873.TMP msiexec.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_755788499\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_527266860\ct_config.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_218725684\safety_tips.pb wavebrowser.exe File created C:\Windows\SystemTemp\~DF968BA27DEF7B79CE.TMP msiexec.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1734092715\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_2045963759\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_2045963759\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1076273682\LICENSE wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_218725684\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1537380018\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_82625399\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_574807225\_metadata\verified_contents.json wavebrowser.exe File opened for modification C:\Windows\Installer\ msiexec.exe File created C:\Windows\INF\c_processor.PNF DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3008_794023224\manifest.json DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_539337563\crl-set wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_539337563\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_755788499\LICENSE.txt wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_755788499\Filtering Rules wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_527266860\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_82625399\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\Installer\e591989.msi msiexec.exe File opened for modification C:\Windows\SystemTemp DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_539337563\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_527266860\crs.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_527266860\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1635765304\manifest.fingerprint wavebrowser.exe File opened for modification C:\Windows\SystemTemp\Crashpad\metadata setup.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\INF\c_display.PNF DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1734092715\privacy-sandbox-attestations.dat wavebrowser.exe File opened for modification C:\Windows\SystemTemp setup.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File opened for modification C:\Windows\Installer\e59199c.msi msiexec.exe File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3008_794023224\manifest.fingerprint DSOneWeb.exe File created C:\Windows\Installer\SourceHash{3407B900-37F5-4CC2-B612-5CD5D580A163} msiexec.exe File created C:\Windows\SystemTemp\~DF6177CBDFB7A68715.TMP msiexec.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_539337563\LICENSE wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1076273682\_platform_specific\win_x64\widevinecdm.dll wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1076273682\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_218725684\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_82625399\optimization-hints.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_574807225\manifest.json wavebrowser.exe File opened for modification C:\Windows\Installer\e591989.msi msiexec.exe File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3008_794023224\_metadata\verified_contents.json DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_755788499\manifest.json wavebrowser.exe File created C:\Windows\Installer\SourceHash{F4499EE3-A166-496C-81BB-51D1BCDC70A9} msiexec.exe File created C:\Windows\SystemTemp\~DF898BF3E080437E1B.TMP msiexec.exe File created C:\Windows\INF\c_diskdrive.PNF DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3008_794023224\_platform_specific\win_x64\widevinecdm.dll.sig DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_539337563\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_755788499\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1537380018\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1635765304\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_574807225\metadata.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_574807225\manifest.fingerprint wavebrowser.exe File created C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3008_794023224\LICENSE DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_2045963759\download_file_types.pb wavebrowser.exe File created C:\Windows\INF\c_monitor.PNF DSOneWeb.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_2045963759\manifest.json wavebrowser.exe File opened for modification C:\Windows\Installer\MSI1F29.tmp msiexec.exe File created C:\Windows\SystemTemp\~DF58EC475A6DE191F8.TMP msiexec.exe File opened for modification C:\Windows\Installer\MSI20EF.tmp msiexec.exe -
Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 3 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\DriverUpdate.exe:Zone.Identifier chrome.exe File opened for modification C:\Users\Admin\Downloads\Setup.exe:Zone.Identifier chrome.exe File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier chrome.exe -
pid Process 9728 powershell.exe 2216 powershell.exe 7732 powershell.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
description ioc Process Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe -
System Location Discovery: System Language Discovery 1 TTPs 31 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WebCompanion-Installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vc_redist.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaveInstaller-v1.5.18.2.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WebCompanion.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WebCompanion.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DriverUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vc_redist.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language kwjd1ewy.yjt Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language VC_redist.x64.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DSOneWeb.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WicAnimatedGif.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language an53gnk4.wlz Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterSetup.exe -
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 5980 SWUpdater.exe 9244 SWUpdater.exe -
System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 9728 powershell.exe 5292 dotnet.exe -
NSIS installer 2 IoCs
resource yara_rule behavioral1/files/0x000400000002aafb-670.dat nsis_installer_1 behavioral1/files/0x000400000002aafb-670.dat nsis_installer_2 -
Checks SCSI registry key(s) 3 TTPs 23 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Service DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\LocationInformation DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags an53gnk4.wlz Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Mfg DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LocationInformation DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Driver DSOneWeb.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 0000000004000000b38cc7aac7e825c30000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff000000002701010000080000b38cc7aa0000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01200000000000020ed3a000000ffffffff000000000700010000680900b38cc7aa000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff3a0000000000000005000000ffffffff000000000700010000f87f1db38cc7aa000000000000f0ff3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000b38cc7aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Driver DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Service DSOneWeb.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 DSOneWeb.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Mfg DSOneWeb.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 an53gnk4.wlz Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs DSOneWeb.exe Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0 WebCompanion.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz WebCompanion.exe -
Enumerates system info in registry 2 TTPs 9 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName wavebrowser.exe -
Modifies data under HKEY_USERS 13 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29 msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28 msiexec.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry wavebrowser.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\26\52C64B7E msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27 msiexec.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26 msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 msiexec.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\29 msiexec.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133676053143284932" chrome.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\.html\OpenWithProgids setup.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\NumMethods\ = "4" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WavesorSWUpdater.CredentialDialogUser\ = "SWUpdater CredentialDialog" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ = "IPolicyStatus" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ = "IJobObserver2" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser_64.dll" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\NumMethods\ = "13" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\NumMethods\ = "10" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\psuser.dll" SWUpdater.exe Key deleted \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WavesorSWUpdater.CredentialDialogUser.1.0 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\CLSID\{3C41B0C4-B5B6-4293-BED4-C927CCFDB909}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.133.0\\SWUpdaterOnDemand.exe\"" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\CLSID\{9E0CE9B5-C498-40A8-B7F2-B89AF1C56FFF}\VersionIndependentProgID SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.32,bundle\Version = "14.32.31332.0" VC_redist.x64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\009B70435F732CC46B21C55D5D081A36 msiexec.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\NumMethods\ = "6" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\NumMethods SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ProxyStubClsid32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\NumMethods\ = "5" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\CLSID\{1BE9D40C-2307-4213-830E-7E3CE9EDF0C2} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WaveBrwsHTM.HG6QSHMIR7V6ESS3JVFWG44V4A\shell\open setup.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\NumMethods SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\NumMethods\ = "4" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\NumMethods\ = "10" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\ = "PSFactoryBuffer" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\CLSID SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods\ = "4" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WavesorSWUpdater.Update3COMClassUser\CLSID SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\NumMethods\ = "23" SWUpdater.exe Key deleted \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\CLSID\{2B2AD342-8BBC-40AD-AF1B-6887EAB9D3D0}\InprocHandler32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.32,bundle\Dependents\{3746f21b-c990-4045-bb33-1cf98cff7a68} VC_redist.x64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WavesorSWUpdater.Update3COMClassUser.1.0 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\CLSID\{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C}\VersionIndependentProgID\ = "WavesorSWUpdater.CredentialDialogUser" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WavesorSWUpdater.Update3WebUser\CLSID\ = "{30FB944E-9455-49DD-81C6-7542E47AA3E7}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4272559161-3282441186-401869126-1000_Classes\WOW6432Node\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32 SWUpdater.exe -
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4 WebCompanion.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 WebCompanion.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 WebCompanion.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13 DSOneWeb.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 DSOneWeb.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 DSOneWeb.exe -
NTFS ADS 4 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\Setup.exe:Zone.Identifier chrome.exe File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier chrome.exe File opened for modification C:\Users\Admin\Downloads\DriverUpdate.exe:Zone.Identifier chrome.exe File opened for modification C:\Users\Admin\Downloads\n̵̛̗o̵̘̔t̴̽͜ ̴̮̈ǎ̴̖ ̶̡͝v̴̮͝i̵̟͂r̷̖͐ú̶͕ṡ̴͙.zip:Zone.Identifier chrome.exe -
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2016 NOTEPAD.EXE -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2268 chrome.exe 2268 chrome.exe 1480 chrome.exe 1480 chrome.exe 3136 msiexec.exe 3136 msiexec.exe 3136 msiexec.exe 3136 msiexec.exe 3136 msiexec.exe 3136 msiexec.exe 3136 msiexec.exe 3136 msiexec.exe 1604 chrome.exe 1604 chrome.exe 1604 chrome.exe 1604 chrome.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 1828 WebCompanion-Installer.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 5852 DSOneWebWD.exe 5852 DSOneWebWD.exe 5852 DSOneWebWD.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 5856 WebCompanion.exe 5856 WebCompanion.exe 3928 CefSharp.BrowserSubprocess.exe 3928 CefSharp.BrowserSubprocess.exe 5668 CefSharp.BrowserSubprocess.exe -
Suspicious behavior: LoadsDriver 8 IoCs
pid Process 664 Process not Found 664 Process not Found 664 Process not Found 664 Process not Found 664 Process not Found 664 Process not Found 664 Process not Found 664 Process not Found -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
pid Process 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 2268 chrome.exe Token: SeCreatePagefilePrivilege 2268 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe Token: SeShutdownPrivilege 1480 chrome.exe Token: SeCreatePagefilePrivilege 1480 chrome.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe -
Suspicious use of SendNotifyMessage 62 IoCs
pid Process 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 2268 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 7792 WebCompanion.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 3008 DSOneWeb.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 8404 wavebrowser.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe 1480 chrome.exe -
Suspicious use of SetWindowsHookEx 11 IoCs
pid Process 5952 DriverUpdate.exe 5208 vc_redist.exe 5412 vc_redist.exe 5184 VC_redist.x64.exe 3908 VC_redist.x64.exe 6960 VC_redist.x64.exe 6184 VC_redist.x64.exe 6168 DSOneWeb.exe 3692 WicAnimatedGif.exe 3692 WicAnimatedGif.exe 2356 kwjd1ewy.yjt -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1152 wrote to memory of 2016 1152 cmd.exe 79 PID 1152 wrote to memory of 2016 1152 cmd.exe 79 PID 2268 wrote to memory of 4428 2268 chrome.exe 83 PID 2268 wrote to memory of 4428 2268 chrome.exe 83 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 4548 2268 chrome.exe 84 PID 2268 wrote to memory of 232 2268 chrome.exe 85 PID 2268 wrote to memory of 232 2268 chrome.exe 85 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 PID 2268 wrote to memory of 976 2268 chrome.exe 86 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\text.txt1⤵
- Suspicious use of WriteProcessMemory
PID:1152 -
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\text.txt2⤵
- Opens file in notepad (likely ransom note)
PID:2016
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2268 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc1e7ecc40,0x7ffc1e7ecc4c,0x7ffc1e7ecc582⤵PID:4428
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1792,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=1788 /prefetch:22⤵PID:4548
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2052,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2112 /prefetch:32⤵PID:232
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2184,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2192 /prefetch:82⤵PID:976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3088,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3112 /prefetch:12⤵PID:2756
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3140,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3284 /prefetch:12⤵PID:2984
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3748,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4408 /prefetch:12⤵PID:3968
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4752,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4768 /prefetch:82⤵PID:4312
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4984,i,13641674365666040826,3699785444393386746,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4976 /prefetch:82⤵PID:2752
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵PID:3792
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4568
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1480 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc1e7ecc40,0x7ffc1e7ecc4c,0x7ffc1e7ecc582⤵PID:2720
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1748,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=1732 /prefetch:22⤵PID:3524
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1784,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=1912 /prefetch:32⤵PID:4552
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2248,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=2244 /prefetch:82⤵PID:2052
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3104,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3264 /prefetch:12⤵PID:2324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3140,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3308 /prefetch:12⤵PID:756
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4440,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4424 /prefetch:12⤵PID:2128
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4748,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4760 /prefetch:82⤵PID:3728
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4956,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4920 /prefetch:82⤵PID:4844
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level2⤵
- Drops file in Windows directory
PID:4252 -
C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7aa8a4698,0x7ff7aa8a46a4,0x7ff7aa8a46b03⤵
- Drops file in Windows directory
PID:1804
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4416,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4580 /prefetch:12⤵PID:1328
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4308,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5196 /prefetch:12⤵PID:1692
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3404,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3272 /prefetch:12⤵PID:4192
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5252,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5264 /prefetch:12⤵PID:2888
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3360,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3372 /prefetch:12⤵PID:4060
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=5224,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4552 /prefetch:12⤵PID:2508
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5404,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3324 /prefetch:12⤵PID:2816
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5568,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5592 /prefetch:12⤵PID:4836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4560,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5720 /prefetch:12⤵PID:4312
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5864,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5572 /prefetch:12⤵PID:2932
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5880,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6044 /prefetch:12⤵PID:4044
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6184,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6148 /prefetch:12⤵PID:1164
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6316,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6284 /prefetch:12⤵PID:3328
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6008,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6456 /prefetch:12⤵PID:5040
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6176,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6584 /prefetch:12⤵PID:3404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6764,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6476 /prefetch:12⤵PID:4884
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6888,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6900 /prefetch:12⤵PID:1404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=7052,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6728 /prefetch:12⤵PID:1796
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6708,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6620 /prefetch:12⤵PID:3636
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6652,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6660 /prefetch:12⤵PID:4576
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=5688,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6704 /prefetch:12⤵PID:2732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=6500,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6028 /prefetch:12⤵PID:5004
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=5764,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6572 /prefetch:12⤵PID:820
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=5752,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6016 /prefetch:12⤵PID:752
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7344,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7360 /prefetch:12⤵PID:3404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=5820,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5808 /prefetch:12⤵PID:3476
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=7024,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5796 /prefetch:12⤵PID:5444
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=7772,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7640 /prefetch:12⤵PID:5500
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7940,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7948 /prefetch:12⤵PID:5560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=8076,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8100 /prefetch:12⤵PID:5612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=7232,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7280 /prefetch:12⤵PID:5920
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=6180,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7468 /prefetch:12⤵PID:5976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=8124,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7932 /prefetch:12⤵PID:5984
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=8232,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8260 /prefetch:12⤵PID:5992
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=8536,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8420 /prefetch:12⤵PID:6000
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=8672,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8680 /prefetch:12⤵PID:6064
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=9128,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9044 /prefetch:12⤵PID:5248
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=8280,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9120 /prefetch:12⤵PID:5256
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=8852,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8964 /prefetch:12⤵PID:5264
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=8928,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9200 /prefetch:12⤵PID:5272
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=9388,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9340 /prefetch:12⤵PID:5328
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=8416,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8080 /prefetch:12⤵PID:5884
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --field-trial-handle=8120,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8136 /prefetch:12⤵PID:6136
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=9104,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8996 /prefetch:12⤵PID:6116
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --field-trial-handle=8552,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9112 /prefetch:12⤵PID:6128
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=8736,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8760 /prefetch:12⤵PID:5852
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=8240,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8340 /prefetch:12⤵PID:5864
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --field-trial-handle=9300,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8876 /prefetch:12⤵PID:6104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=9064,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9108 /prefetch:12⤵PID:5360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=9604,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9600 /prefetch:12⤵PID:2912
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=8504,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8364 /prefetch:12⤵PID:5824
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=8168,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8716 /prefetch:12⤵PID:5132
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=8744,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9308 /prefetch:12⤵PID:2516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=8112,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9384 /prefetch:12⤵PID:6068
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=9812,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9852 /prefetch:12⤵PID:6088
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --field-trial-handle=10100,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10216 /prefetch:12⤵PID:5396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=9796,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10512 /prefetch:12⤵PID:6048
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=10636,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10640 /prefetch:12⤵PID:6056
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=10628,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10404 /prefetch:12⤵PID:5780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=9816,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10820 /prefetch:12⤵PID:6212
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=9924,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10932 /prefetch:82⤵PID:7056
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=9940,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9856 /prefetch:82⤵PID:7064
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10368,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11076 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:7152
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=10220,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10092 /prefetch:12⤵PID:6440
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=11064,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9152 /prefetch:12⤵PID:6356
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5660,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5640 /prefetch:82⤵
- NTFS ADS
PID:916
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=5616,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5580 /prefetch:12⤵PID:1364
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=3544,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9948 /prefetch:12⤵PID:2876
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=5332,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6564 /prefetch:12⤵PID:5340
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=8884,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9840 /prefetch:12⤵PID:2140
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=6432,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4532 /prefetch:12⤵PID:5740
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=10856,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3356 /prefetch:12⤵PID:6568
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=6244,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8516 /prefetch:12⤵PID:704
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=9900,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10660 /prefetch:12⤵PID:5928
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=6256,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6216 /prefetch:12⤵PID:2496
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=6204,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6464 /prefetch:12⤵PID:2320
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=8820,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8264 /prefetch:12⤵PID:5644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=5556,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5600 /prefetch:12⤵PID:3616
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=11076,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9584 /prefetch:12⤵PID:4420
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=5640,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4996 /prefetch:12⤵PID:6168
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=4520,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9840 /prefetch:12⤵PID:3492
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=7504,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7732 /prefetch:12⤵PID:6668
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=6896,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10880 /prefetch:12⤵PID:2580
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=5860,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5704 /prefetch:12⤵PID:4436
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=4756,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=4760 /prefetch:12⤵PID:5588
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=5708,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5340 /prefetch:12⤵PID:5744
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=6216,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3448 /prefetch:12⤵PID:5324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=9144,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10344 /prefetch:12⤵PID:4336
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=5416,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10212 /prefetch:12⤵PID:484
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=9040,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9028 /prefetch:12⤵PID:1396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=8796,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6208 /prefetch:12⤵PID:5560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=5004,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5008 /prefetch:12⤵PID:6152
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=9148,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3368 /prefetch:12⤵PID:5956
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=5484,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9488 /prefetch:12⤵PID:1912
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=8256,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7744 /prefetch:12⤵PID:3484
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=6524,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6700 /prefetch:12⤵PID:3796
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6584,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5160 /prefetch:82⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
PID:1604
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=7628,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=3444 /prefetch:12⤵PID:3076
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=7864,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7816 /prefetch:12⤵PID:1068
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=5788,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8340 /prefetch:12⤵PID:6744
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=8564,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9008 /prefetch:12⤵PID:6280
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=7876,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8088 /prefetch:12⤵PID:6004
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=6948,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6968 /prefetch:12⤵PID:5836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=6972,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10436 /prefetch:12⤵PID:3752
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7512,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7568 /prefetch:82⤵PID:7028
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5940,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5920 /prefetch:82⤵PID:7036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10384,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8316 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:1020
-
-
C:\Users\Admin\Downloads\Setup.exe"C:\Users\Admin\Downloads\Setup.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5752 -
C:\Users\Admin\AppData\Local\Temp\7zS876E1F99\WebCompanion-Installer.exe.\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240401 --nonadmin --direct --tych --campaign=18264794070 --version=13.900.0.10803⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1828 -
C:\Windows\SysWOW64\cmd.exe"C:\Windows\System32\cmd.exe" /C netsh http add urlacl url=http://+:9007/ user=Everyone4⤵
- System Location Discovery: System Language Discovery
PID:4248 -
C:\Windows\SysWOW64\netsh.exenetsh http add urlacl url=http://+:9007/ user=Everyone5⤵
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:6592
-
-
-
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe"C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe" --install --geo=4⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
PID:5856
-
-
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe"C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe" --afterinstall4⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of SendNotifyMessage
PID:7792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" https://webcompanion.com/en/install.php?partner=IN240401&campaign=18264794070&4⤵PID:7864
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffc1e7ecc40,0x7ffc1e7ecc4c,0x7ffc1e7ecc585⤵PID:7880
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=4972,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9372 /prefetch:12⤵PID:6504
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=10484,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9252 /prefetch:12⤵PID:5344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=7192,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11016 /prefetch:12⤵PID:6976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=7680,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7892 /prefetch:12⤵PID:7028
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=11232,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11224 /prefetch:12⤵PID:6920
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=6836,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6036 /prefetch:12⤵PID:916
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --field-trial-handle=11140,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11144 /prefetch:12⤵PID:5600
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=5336,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11068 /prefetch:12⤵PID:6908
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=10532,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10688 /prefetch:12⤵PID:7144
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --field-trial-handle=8788,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8784 /prefetch:12⤵PID:1644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --field-trial-handle=11164,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10020 /prefetch:12⤵PID:2120
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --field-trial-handle=11080,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6336 /prefetch:12⤵PID:6748
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --field-trial-handle=11056,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9420 /prefetch:12⤵PID:7112
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --field-trial-handle=5736,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9416 /prefetch:12⤵PID:2776
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=9412,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5124 /prefetch:12⤵PID:7412
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=3780,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7708 /prefetch:12⤵PID:7420
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --field-trial-handle=7740,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6384 /prefetch:12⤵PID:7436
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=7604,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11336 /prefetch:12⤵PID:7444
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=7040,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11476 /prefetch:12⤵PID:7452
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --field-trial-handle=11696,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=2640 /prefetch:12⤵PID:10020
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=11712,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11708 /prefetch:12⤵PID:4012
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --field-trial-handle=11744,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11732 /prefetch:12⤵PID:9368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=9788,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7108 /prefetch:12⤵PID:4204
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --field-trial-handle=11760,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10528 /prefetch:12⤵PID:4576
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=9948,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6228 /prefetch:12⤵PID:2176
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --field-trial-handle=7160,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9808 /prefetch:12⤵PID:10120
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=11952,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=5680 /prefetch:82⤵PID:9932
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5172,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11880 /prefetch:82⤵PID:10116
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6808,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11700 /prefetch:82⤵PID:10140
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6844,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=6864 /prefetch:82⤵PID:9948
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5508,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=7364 /prefetch:82⤵PID:5484
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=11856,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11908 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:7412
-
-
C:\Users\Admin\Downloads\Wave Browser.exe"C:\Users\Admin\Downloads\Wave Browser.exe"2⤵
- Executes dropped EXE
PID:852 -
C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=vpro2%3don%7cSun%2c%201%20Sep%202024%2000%3a00%3a00%20%2b0300"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:6328 -
C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\SWUpdater.exe"C:\Program Files (x86)\Wavesor\Temp\GUMAD1A.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=vpro2%3don%7cSun%2c%201%20Sep%202024%2000%3a00%3a00%20%2b0300"4⤵
- Executes dropped EXE
- Adds Run key to start application
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:6040 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver5⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:5456 -
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Modifies registry class
PID:3644
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Modifies registry class
PID:7052
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.133.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Modifies registry class
PID:6084
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSIyNjEiLz48L2FwcD48L3JlcXVlc3Q-5⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:5980
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=vpro2%3don%7cSun%2c%201%20Sep%202024%2000%3a00%3a00%20%2b0300" /installsource otherinstallcmd /sessionid "{C233234E-605F-47C9-B8AD-87E2EFFB65D0}"5⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2240
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --field-trial-handle=6516,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=10416 /prefetch:12⤵PID:6732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --field-trial-handle=8312,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=8708 /prefetch:12⤵PID:4044
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --field-trial-handle=9060,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=9996 /prefetch:12⤵PID:3540
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --field-trial-handle=10468,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11720 /prefetch:12⤵PID:5884
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --field-trial-handle=10004,i,5546014507611164121,11285869934785158126,262144 --variations-seed-version=20240808-050142.731000 --mojo-platform-channel-handle=11980 /prefetch:12⤵PID:2888
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵PID:3480
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4844
-
C:\Users\Admin\Downloads\DriverUpdate.exe"C:\Users\Admin\Downloads\DriverUpdate.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5952 -
C:\Users\Admin\AppData\Local\Temp\vc_redist.exe"C:\Users\Admin\AppData\Local\Temp\vc_redist.exe" /install /quiet /norestart2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5208 -
C:\Windows\Temp\{7A0FB3AA-E0E7-4739-A7D3-512939CCDFDD}\.cr\vc_redist.exe"C:\Windows\Temp\{7A0FB3AA-E0E7-4739-A7D3-512939CCDFDD}\.cr\vc_redist.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Temp\vc_redist.exe" -burn.filehandle.attached=592 -burn.filehandle.self=712 /install /quiet /norestart3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5412 -
C:\Windows\Temp\{8047818C-D39E-42F3-9B91-B949C7B61F78}\.be\VC_redist.x64.exe"C:\Windows\Temp\{8047818C-D39E-42F3-9B91-B949C7B61F78}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{CA8A3B70-A9CA-469E-B9BF-C0CF4C0D56F9} {771B0262-5991-4B07-9377-166FC75F8A0C} 54124⤵
- Executes dropped EXE
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5184 -
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={3746f21b-c990-4045-bb33-1cf98cff7a68} -burn.filehandle.self=964 -burn.embedded BurnPipe.{4520AEC1-DD33-41A8-9059-2861AACA345F} {8D09BF4B-2C35-4C9B-9853-EB674036226B} 51845⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3908 -
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=572 -burn.filehandle.self=588 -uninstall -quiet -burn.related.upgrade -burn.ancestors={3746f21b-c990-4045-bb33-1cf98cff7a68} -burn.filehandle.self=964 -burn.embedded BurnPipe.{4520AEC1-DD33-41A8-9059-2861AACA345F} {8D09BF4B-2C35-4C9B-9853-EB674036226B} 51846⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6960 -
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe"C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{0DC0C72B-AEBF-4240-89AF-2B326527DB61} {69EDD7FC-9349-4523-ABA0-DF7C4B8751E1} 69607⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6184
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\DSOneWeb.exe"C:\Users\Admin\AppData\Local\Temp\DSOneWeb.exe" /LANGUAGE:1033 /WELCOME_SHOWN:true /AGREE_TO_LICENSE:true /TID: /BOOTSTRAPPERPATH:"C:\Users\Admin\Downloads\DriverUpdate.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:6168 -
C:\Program Files (x86)\Driver Support One\WicAnimatedGif.exe"C:\Program Files (x86)\Driver Support One\WicAnimatedGif.exe" -file DSOneWebInstall.Gif -timeout 1203⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3692
-
-
C:\Program Files (x86)\Driver Support One\DSOneWeb.exe"C:\Program Files (x86)\Driver Support One\DSOneWeb.exe" -frontUrl:"https://front.driversupport.com" -channel:"gdn_ds1web" -install=true /epid:6168 /installPackagePath:"C:\Users\Admin\AppData\Local\Temp\DSOneWeb.exe" /updated:false /bootStrapperPath:"C:\Users\Admin\Downloads\DriverUpdate.exe" /installerID:{90AC3716-E964-46A1-BFA5-119BD1E6A85E}3⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SendNotifyMessage
PID:3008 -
C:\Program Files (x86)\Driver Support One\kwjd1ewy.yjt"C:\Program Files (x86)\Driver Support One\kwjd1ewy.yjt"4⤵
- Drops file in Drivers directory
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2356
-
-
C:\Program Files (x86)\Driver Support One\DSOneWebWD.exe"C:\Program Files (x86)\Driver Support One\DSOneWebWD.exe"4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:5852
-
-
C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe"C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe" --type=gpu-process --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\ProgramData\Asurvio\DSOneWeb\guicache" --cefsharpexitsub --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --log-file="C:\Program Files (x86)\Driver Support One\debug.log" --mojo-platform-channel-handle=4968 --field-trial-handle=4972,i,1533720264964382456,13465590007717420094,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:2 --host-process-id=30084⤵
- Executes dropped EXE
- Network Service Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3928
-
-
C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe"C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\ProgramData\Asurvio\DSOneWeb\guicache" --cefsharpexitsub --log-file="C:\Program Files (x86)\Driver Support One\debug.log" --mojo-platform-channel-handle=3828 --field-trial-handle=4972,i,1533720264964382456,13465590007717420094,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:8 --host-process-id=30084⤵
- Executes dropped EXE
- Network Service Discovery
- Suspicious behavior: EnumeratesProcesses
PID:5668
-
-
C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe"C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\ProgramData\Asurvio\DSOneWeb\guicache" --cefsharpexitsub --log-file="C:\Program Files (x86)\Driver Support One\debug.log" --mojo-platform-channel-handle=6060 --field-trial-handle=4972,i,1533720264964382456,13465590007717420094,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:8 --host-process-id=30084⤵
- Executes dropped EXE
- Network Service Discovery
PID:3940
-
-
C:\Program Files (x86)\Driver Support One\an53gnk4.wlz"C:\Program Files (x86)\Driver Support One\an53gnk4.wlz"4⤵
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
PID:5660
-
-
C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe"C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe" --type=renderer --log-severity=disable --user-data-dir="C:\ProgramData\Asurvio\DSOneWeb\guicache" --cefsharpexitsub --first-renderer-process --no-sandbox --log-file="C:\Program Files (x86)\Driver Support One\debug.log" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=6200 --field-trial-handle=4972,i,1533720264964382456,13465590007717420094,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --host-process-id=3008 /prefetch:14⤵
- Executes dropped EXE
- Network Service Discovery
PID:1536
-
-
C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe"C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe" --type=renderer --log-severity=disable --user-data-dir="C:\ProgramData\Asurvio\DSOneWeb\guicache" --cefsharpexitsub --no-sandbox --log-file="C:\Program Files (x86)\Driver Support One\debug.log" --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=6212 --field-trial-handle=4972,i,1533720264964382456,13465590007717420094,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --host-process-id=3008 /prefetch:14⤵
- Executes dropped EXE
- Network Service Discovery
PID:4568
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell.exe" Get-AppxPackage -Name ‘microsoftwindows.client.cbs’ | Select-Object -ExpandProperty Version4⤵PID:9380
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell.exe" -Command "dotnet --info"4⤵
- Command and Scripting Interpreter: PowerShell
PID:7732 -
C:\Program Files\dotnet\dotnet.exe"C:\Program Files\dotnet\dotnet.exe" --info5⤵PID:10088
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell.exe" -Command "dotnet --list-runtimes"4⤵
- Command and Scripting Interpreter: PowerShell
- System Time Discovery
PID:9728 -
C:\Program Files\dotnet\dotnet.exe"C:\Program Files\dotnet\dotnet.exe" --list-runtimes5⤵
- System Time Discovery
PID:5292
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell.exe" -Command "dotnet --list-sdks"4⤵
- Command and Scripting Interpreter: PowerShell
PID:2216 -
C:\Program Files\dotnet\dotnet.exe"C:\Program Files\dotnet\dotnet.exe" --list-sdks5⤵PID:3128
-
-
-
C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe"C:\Program Files (x86)\Driver Support One\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --log-severity=disable --lang=en-US --user-data-dir="C:\ProgramData\Asurvio\DSOneWeb\guicache" --cefsharpexitsub --log-file="C:\Program Files (x86)\Driver Support One\debug.log" --mojo-platform-channel-handle=19440 --field-trial-handle=4972,i,1533720264964382456,13465590007717420094,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:8 --host-process-id=30084⤵
- Network Service Discovery
PID:10784
-
-
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
PID:5724
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:21⤵PID:2100
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:3136
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:2328
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:772
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004CC1⤵PID:4876
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:1996
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2236 -
C:\Users\Admin\Wavesor Software\SWUpdater\Install\{6FA8D561-BD9A-48C7-9852-BF9C9EC7C617}\WaveInstaller-v1.5.18.2.exe"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{6FA8D561-BD9A-48C7-9852-BF9C9EC7C617}\WaveInstaller-v1.5.18.2.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\guiDB9C.tmp"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:8464 -
C:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\wavebrowser.packed.7z" --wid=o63izdu2 --installerdata="C:\Users\Admin\AppData\Local\Temp\guiDB9C.tmp"3⤵
- Executes dropped EXE
- Modifies registry class
PID:8568 -
C:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff74fcf12d0,0x7ff74fcf12dc,0x7ff74fcf12e84⤵
- Executes dropped EXE
PID:8436
-
-
C:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\guiDB9C.tmp" --create-shortcuts=0 --install-level=04⤵
- Executes dropped EXE
PID:9728 -
C:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nshDF46.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff74fcf12d0,0x7ff74fcf12dc,0x7ff74fcf12e85⤵
- Executes dropped EXE
PID:1068
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --from-installer4⤵
- Executes dropped EXE
- Checks system information in the registry
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of SendNotifyMessage
PID:8404 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffbd9d6ccf0,0x7ffbd9d6ccfc,0x7ffbd9d6cd085⤵
- Executes dropped EXE
PID:5964
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1976,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=1972 /prefetch:25⤵
- Executes dropped EXE
PID:9752
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=1796,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2012 /prefetch:35⤵
- Executes dropped EXE
PID:4036
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2244,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2348 /prefetch:85⤵
- Executes dropped EXE
PID:7052
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2912,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3232 /prefetch:15⤵
- Executes dropped EXE
PID:3544
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2920,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3420 /prefetch:25⤵
- Executes dropped EXE
PID:8416
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3272,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3588 /prefetch:85⤵
- Executes dropped EXE
PID:4212
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4464,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4472 /prefetch:85⤵
- Executes dropped EXE
PID:5240
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4192,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4604 /prefetch:85⤵
- Executes dropped EXE
PID:6836
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4352,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4608 /prefetch:85⤵
- Executes dropped EXE
PID:200
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4684,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4772 /prefetch:15⤵
- Executes dropped EXE
PID:3808
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4704,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4696 /prefetch:15⤵
- Executes dropped EXE
PID:4964
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4712,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4984 /prefetch:15⤵
- Executes dropped EXE
PID:4044
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4720,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5100 /prefetch:15⤵
- Executes dropped EXE
PID:9756
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4728,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5220 /prefetch:15⤵
- Executes dropped EXE
PID:5180
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4736,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5336 /prefetch:15⤵
- Executes dropped EXE
PID:9436
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4752,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5452 /prefetch:15⤵
- Executes dropped EXE
PID:6312
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4780,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5568 /prefetch:15⤵
- Executes dropped EXE
PID:9988
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4788,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5684 /prefetch:15⤵
- Executes dropped EXE
PID:7164
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6368,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6380 /prefetch:85⤵
- Executes dropped EXE
PID:10104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6372,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6496 /prefetch:85⤵
- Executes dropped EXE
PID:1728
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6672,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6748 /prefetch:15⤵
- Executes dropped EXE
PID:9500
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6048,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3428 /prefetch:85⤵
- Executes dropped EXE
PID:8452
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4688,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7260 /prefetch:85⤵
- Executes dropped EXE
PID:9380
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6996,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7404 /prefetch:85⤵
- Executes dropped EXE
PID:5456
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7008,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7548 /prefetch:85⤵
- Executes dropped EXE
PID:5576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7040,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7688 /prefetch:85⤵
- Executes dropped EXE
PID:6388
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6880,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7832 /prefetch:85⤵
- Executes dropped EXE
PID:6556
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7012,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7976 /prefetch:85⤵PID:5940
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7076,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8116 /prefetch:85⤵PID:7916
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7100,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8268 /prefetch:85⤵PID:3048
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4756,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6268 /prefetch:85⤵PID:10604
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8464,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8460 /prefetch:85⤵PID:10672
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7120,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8644 /prefetch:85⤵PID:10748
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=8696,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8708 /prefetch:85⤵PID:10804
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8596,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8140 /prefetch:85⤵PID:11080
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6960,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7056 /prefetch:85⤵PID:11092
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6168,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6072 /prefetch:85⤵PID:11104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7016,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6224 /prefetch:85⤵PID:11224
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4664,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8508 /prefetch:85⤵PID:11236
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7148,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7232 /prefetch:85⤵PID:11248
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7228,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4504 /prefetch:85⤵PID:11260
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7216,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4556 /prefetch:85⤵PID:6472
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7204,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7264 /prefetch:85⤵PID:6732
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7192,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7472 /prefetch:85⤵PID:4180
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7180,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7336 /prefetch:85⤵PID:10312
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7164,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8836 /prefetch:85⤵PID:10420
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8844,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8376 /prefetch:85⤵PID:10308
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8956,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7136 /prefetch:85⤵PID:10284
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8992,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9000 /prefetch:85⤵PID:10500
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7212,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7144 /prefetch:85⤵PID:9368
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6584,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6624 /prefetch:85⤵PID:6168
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6560,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6404 /prefetch:85⤵PID:10840
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6964,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6608 /prefetch:85⤵PID:11200
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6544,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9268 /prefetch:85⤵PID:10752
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9256,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9416 /prefetch:85⤵PID:10908
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6524,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9564 /prefetch:85⤵PID:10532
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9704,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9716 /prefetch:85⤵PID:10508
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9700,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9868 /prefetch:85⤵PID:10944
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9408,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9260 /prefetch:85⤵PID:10996
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9708,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10160 /prefetch:85⤵PID:11032
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10304,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10316 /prefetch:85⤵PID:11184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5996,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10472 /prefetch:85⤵PID:10248
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10148,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10608 /prefetch:85⤵PID:5712
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10744,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10756 /prefetch:85⤵PID:10452
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10888,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10896 /prefetch:85⤵PID:10912
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=11052,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11060 /prefetch:25⤵PID:11568
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11040,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11036 /prefetch:85⤵PID:11688
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=11336,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11344 /prefetch:25⤵PID:11144
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=11516,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11544 /prefetch:25⤵PID:9380
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11568,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11696 /prefetch:85⤵PID:6660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11844,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11840 /prefetch:85⤵PID:8584
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11988,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12000 /prefetch:85⤵PID:9444
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12144,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12156 /prefetch:85⤵PID:11460
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11984,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12292 /prefetch:85⤵PID:11752
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12444,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12456 /prefetch:85⤵PID:11764
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12440,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11976 /prefetch:85⤵PID:12152
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12732,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12596 /prefetch:85⤵PID:6084
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5688,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6152 /prefetch:85⤵PID:11708
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12884,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13016 /prefetch:85⤵PID:11936
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13164,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13176 /prefetch:85⤵PID:12248
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13168,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11980 /prefetch:85⤵PID:10480
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13332,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13512 /prefetch:85⤵PID:10760
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13316,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13652 /prefetch:85⤵PID:6756
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13340,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13796 /prefetch:85⤵PID:11216
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13348,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13940 /prefetch:85⤵PID:10692
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13356,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14080 /prefetch:85⤵PID:10408
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13364,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14224 /prefetch:85⤵PID:7888
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13380,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14368 /prefetch:85⤵PID:11108
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=13376,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14524 /prefetch:25⤵PID:11076
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=8116,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7232 /prefetch:25⤵PID:10548
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=14724,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14716 /prefetch:25⤵PID:11316
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=14772,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15064 /prefetch:25⤵PID:11324
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=14796,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15232 /prefetch:25⤵PID:11840
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=14828,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15440 /prefetch:25⤵PID:11892
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=14848,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15512 /prefetch:25⤵PID:11940
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=14860,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15844 /prefetch:25⤵PID:11872
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14940,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16024 /prefetch:85⤵PID:12192
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=15312,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14952 /prefetch:25⤵PID:12016
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=15504,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16340 /prefetch:25⤵PID:12124
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=15872,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15896 /prefetch:15⤵PID:9312
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16368,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16724 /prefetch:85⤵PID:11500
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=16544,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16540 /prefetch:25⤵PID:11548
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16548,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16048 /prefetch:85⤵PID:11556
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16696,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9864 /prefetch:85⤵PID:10644
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7136,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7332 /prefetch:85⤵PID:12144
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=9000,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6552 /prefetch:15⤵PID:11328
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16644,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8360 /prefetch:85⤵PID:11140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13812,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5668 /prefetch:85⤵PID:11936
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=17016,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6716 /prefetch:85⤵PID:11192
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8792,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4984 /prefetch:85⤵PID:11220
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=17064,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5576 /prefetch:85⤵PID:10332
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5328,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11156 /prefetch:85⤵PID:11132
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5324,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6956 /prefetch:85⤵PID:10744
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5344,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4968 /prefetch:85⤵PID:10608
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4828,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11372 /prefetch:85⤵PID:11368
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=16404,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16080 /prefetch:25⤵PID:11716
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5084,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11484 /prefetch:85⤵PID:3868
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6736,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6852 /prefetch:85⤵PID:11040
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11424,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6684 /prefetch:85⤵PID:8512
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3376,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3352 /prefetch:85⤵PID:9808
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15712,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16560 /prefetch:85⤵PID:3020
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4000,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3176 /prefetch:85⤵PID:11040
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=496,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16496 /prefetch:25⤵PID:5844
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15956,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15948 /prefetch:85⤵PID:12140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=556,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15960 /prefetch:85⤵PID:11224
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16496,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15988 /prefetch:85⤵PID:10840
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=11556,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15988 /prefetch:85⤵PID:10628
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --field-trial-handle=15976,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15536 /prefetch:25⤵PID:11644
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6228,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16480 /prefetch:85⤵PID:10588
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16488,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16436 /prefetch:85⤵PID:3320
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6700,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16444 /prefetch:85⤵PID:8252
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=16452,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16492 /prefetch:25⤵PID:9132
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16468,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8932 /prefetch:85⤵PID:9776
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1088,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16356 /prefetch:85⤵PID:10480
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=8564,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16088 /prefetch:25⤵PID:11084
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16484,i,16998099422918462049,7133190635655145068,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16480 /prefetch:85⤵PID:7920
-
-
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJTV1VwZGF0ZXIiIHVwZGF0ZXJ2ZXJzaW9uPSIxLjMuMTMzLjAiIHNoZWxsX3ZlcnNpb249IjEuMy4xMzMuMCIgaXNtYWNoaW5lPSIwIiBzZXNzaW9uaWQ9IntDMjMzMjM0RS02MDVGLTQ3QzktQjhBRC04N0UyRUZGQjY1RDB9IiB1c2VyaWQ9InthZjM4N2EwNy03N2ExLTRjNDgtYWQwOS05OWMyN2FlZDE3NzR9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHJlcXVlc3RpZD0iezhFQUEzNEE5LTMxRDMtNDY3Ni1BN0JCLUUwMUQwMzJDQjQ0MX0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iOCIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIvPjxhcHAgYXBwaWQ9IntFQjE0OUFEMi1DRTRFLTRGNTEtQjdGQy1BMTQ5RkFBNENDQUZ9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxLjUuMTguMiIgbGFuZz0iZW4iIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0idnBybzI9b24iIGluc3RhbGxhZ2U9Ii0xIiBpbnN0YWxsZGF0ZT0iLTEiPjxldmVudCBldmVudHR5cGU9IjkiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI1IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgZG93bmxvYWRlcj0iYml0cyIgdXJsPSJodHRwczovL2Nkbi5zd3VwZGF0ZXIuY29tL2J1aWxkL1dhdmVCcm93c2VyL3N0YWJsZS93aW4vMTEyMDk4NzY0MzkwNi82NC9XYXZlSW5zdGFsbGVyLXYxLjUuMTguMi5leGUiIGRvd25sb2FkZWQ9IjEwNjgxMTA4MCIgdG90YWw9IjEwNjgxMTA4MCIgZG93bmxvYWRfdGltZV9tcz0iNzg4MSIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9Ijg0NyIgZG93bmxvYWRfdGltZV9tcz0iODkzNiIgZG93bmxvYWRlZD0iMTA2ODExMDgwIiB0b3RhbD0iMTA2ODExMDgwIiBpbnN0YWxsX3RpbWVfbXM9IjEyODE2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg2⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:9244
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:10956
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:12280 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:1676
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource core2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2508
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:11176 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /registermsihelper2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:3968
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:5576
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Component Object Model Hijacking
1Netsh Helper DLL
1Defense Evasion
Modify Registry
2Pre-OS Boot
1Bootkit
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Browser Information Discovery
1Network Service Discovery
1Peripheral Device Discovery
2Query Registry
7System Information Discovery
7System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19KB
MD5c3cb54ae28ff303abe59970598274f17
SHA1b7d951f9f7e0d245a0116e63383b855d9b5425bd
SHA256b4da3f39964646df27bcf5aa9d3c1b212a2437d42fd80cebd8197dd9195ce87d
SHA512f24f8d100fa0db885147bdfca2e9489c98119f14d0a517bfd0d794929ce339a57691824864540c35c7756318ede78882d511771dbc5fe3ae40917e7b936a5e33
-
Filesize
19KB
MD5cf2d83931c95b448247e9448a80ee3cd
SHA1c957524042743013825dafc9f5a9ad852798348a
SHA256a4e5e0bf1c606570257a1742250c2f5aab6e8be687a75ff4d48b6b58b8d95f0f
SHA51244dd3638d0a75ae8b9fe20d3d542f9729f7d740ad4ef8002cc332f7d67ce5f4300d0e651789a5a10c35809f6e68eda587ca0d3c199dc940c42f52e106ead3f3d
-
Filesize
21KB
MD59c352756b665b82f1f18a96c6200edeb
SHA180ce8f146afd8b4c58e8470eebe610594914b8f3
SHA2567b5dddd80aa8d875e2aeaa74f4564ffeff0cd6583bc501c1e4aae581a4e5b0ba
SHA51271b6bd29577708337a5add9e1d42550b74a6b5129b7912641b100c0e81d6d0d283e4bfc9b2a75d23f1a584c6bef975831856dc78ccff696f837eaefe8cd5b710
-
Filesize
21KB
MD59a5b5fb651b2e53a0bb25f513796c85b
SHA163858aff5218a5779215e13dce6cd0dd7061917d
SHA25605ea79ea921a4c89eeb82c263f61b4d552b59f908aa593038c6ad4dfb44b9382
SHA512829cd646af667d49c4fc0bd9e218344abbab8b3fb3ecc62e653c61083877ee8cae8023976e359eacf53abd583cf08a94eb75ab5abb83a6c5f75f4b17b907afce
-
Filesize
160KB
MD53ba9fb29b98cd0a1e2bfdd64f26c352f
SHA160cd9979521d9c54403d38ec6300405e44f992bd
SHA256b3578d2ee9c17f8d06b6cd17e31a71da09b8a8d524d391fa68dc4496cff5f1d8
SHA512a3d4076eb2b1eacd9437096e82b466244b462d8410dbfa8416717584328707652214614d7156ea9a0af02206a72ab3f0d091ed3a41088a94c8c384723e1ccb47
-
Filesize
26KB
MD567fadf4e324b69c791cf5e15124e08e5
SHA19d09ce00f1c69cfb26533da564b0f074ebe55caa
SHA2569b6ed5d3ba038acd0a7aaa0391ab5fe39f04f6b681fa4e09811165595dcf7570
SHA512d844711eb2fa9661d7c4a451c98932d6bfd2eb55c31bc19b408840b69661e3f13896dfe05519a3bd3589d9d7bdbb50b9cf0073f989bb57e66e04c6c9317303a0
-
Filesize
104KB
MD5c2152eaf7868611ff5a82023fb1c9246
SHA1a1824a6c044e5f1c275414107e3ef2a015b45fe1
SHA2562691ce039c1df4206c4d2134e3212caee0e07eb5c90a57efb6a8d7a9efe03dd7
SHA512162468ab0427ed6227bfc549a31629bbb752209a5367382f87009021481a4d30eb49ad4401e03c2d8cb6cdd1b8e3f0b29023b055a822365cc74ffec262556d06
-
Filesize
100KB
MD54342a006f2e7d1e96e7ea8a7d904dd16
SHA185e786c38e0e74f2967b4807cdce58d9009a7dce
SHA25619fd2dee12db4abe1378b4725dd3a7ca62b73faf36b98b2791b20870fe6200b2
SHA512458b25ff7f865724bcb2bf6f14b7cd3015652e316bfa95ca7edafd0dd6ce69a79f337d2355cf510a0f3db204babf00db10dea701a86a8fc5691ec10f974aaa1b
-
Filesize
100KB
MD58743d426e4869ba830fb3af9091a8eee
SHA18710d4d053898c5f721833808089fddf2ee3bb48
SHA256704d2b060d7e45811bdadef6ed88601a26505e67b368cf3d50bbc99e48708629
SHA5121cd471da5bfc726029ce08195af46dbddfab37fd080f48ba3994898c5cc94d8d51ba6c861000f8008bbe79f7e4128ce7c9b23f1512b186613c4b40aabe0781fb
-
Filesize
100KB
MD58c1843d02330d1e0e17c04b1ddc85b4b
SHA1cf438f83e8c2ec2fa256cbe6e9f3f8bd7bcb8890
SHA2565b83dea395dd20353fe1f7bff71ae86061baf5c344453ee62bfde2ab51b5c54a
SHA512e849fa0eff31ef05e541f04bcbea661493aad0f171508d2560a4527afebd190b064e7ed7e436ae45f193405aa838f78b38fac1833bf3f36567ac1ee88477b42a
-
Filesize
100KB
MD59b69d07056979ff9e5ef15307a28e9dc
SHA143a6cf58ed2eb7769f8d49cd111c7d0759da51af
SHA25680596542df6c6f118cda1517fc6fe487dddeec5db318cff32c92d94a0b8859fd
SHA512ff2ffa83ff516bfdefbaf32a19c65a961bab7e8fdd3e8d0042107d5c90a6841ccad52de9bf8ad8c5581d6f04bb1561064d850af9c504f8f9c3f0316f5d8079b6
-
Filesize
881B
MD5d84f62093fb7f55b652cd3adf5c3e874
SHA1becc1d305ac88de10b2930f9cbad5f90a0dbb100
SHA2563e453fb385df72069fbe8452bb3e22b46e4876eed2ef64da739c99b57ea5923b
SHA512043821188b80ebf3f30c589f0e5c4579c1c565d8e0e22ea49bed5b7b46e49b44b8bdcf88b4bbec2fd5a1787ae68bec12582b9d9493ea47f88ced88aea84dee8f
-
Filesize
8KB
MD5cf89d16bb9107c631daabf0c0ee58efb
SHA13ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA5128cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
-
Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
Filesize
8KB
MD541876349cb12d6db992f1309f22df3f0
SHA15cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
-
Filesize
738B
MD5645e4e85d3bbfa6c671d747a124c0d5c
SHA18d43de3c8e65e0a0981328832b52d850ca02a211
SHA2565a8486e83af50a1375bcd87be522ce104a86db47e609cb0c2f75a5e56090bbd8
SHA51282c20b760b684a6e8da4ab10b151e2a3ed50a68d109b69f31ed5cc679e20a5cacf9a76c5dd71ff323c66b104f625b8f0c033caad9ecf8aae20ac2c8959a3c571
-
Filesize
831B
MD57a68a95a3edffa53746bcd6b5fcf461f
SHA1033debcbdd3ed192d0663f521550cef99458c631
SHA25633f4a8c0147a22d685a0ea260eea5732d63764b0f16ae9bbed9868cac71b9ba2
SHA512aec73e56a9338726b68db3bc71ad0161be097044b9874a2d47f7db87d95aa86aba1e7b623924390e8733d132350886cdbf2b108f7ccd1f6852280483cbbee180
-
Filesize
529B
MD502bff9a2c080e9eae99fcff31005b4c1
SHA1b9c45e4b129ae590b3732997c3b0aca76189d08c
SHA25673b3ef90212c0b39e2f89dfcd988377e370c83103363a71e0788503a8e96395c
SHA512b9759effb466770dd17f1fcd06318a5e5cf9047cabd193948b06d2c47ad361deaa6feefe696e4296ec346ab7c5d7a9a5a471e75ccc6ffa164f0b91ccb74322a7
-
Filesize
697B
MD5bf58778cc928a909366113ba6c593f70
SHA17aeb608b2a224bc0a526a78118d05064e2b85504
SHA2563b9554f1d30fceb57eab69c416e382caad83a7de2b0dd1f20ffe5de88cf534f1
SHA512aa6bf85e965588af7f7f4ad55efc737bc8f5e61f8fc8277ffd61c5d6a0197056b6ca6ea32c94f318dd1faa8f4fe5ec9b9f080ae6c649cb5156de6903773b1410
-
Filesize
59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
Filesize
64KB
MD5b5ad5caaaee00cb8cf445427975ae66c
SHA1dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA51292f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f
-
Filesize
4B
MD5f49655f856acb8884cc0ace29216f511
SHA1cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA2567852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
-
Filesize
1008B
MD5d222b77a61527f2c177b0869e7babc24
SHA13f23acb984307a4aeba41ebbb70439c97ad1f268
SHA25680dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff
-
Filesize
40B
MD5bd16a469a2f384cca65c4880add00f20
SHA16ce5bac367836facc9df6a687f7de6f479697e5b
SHA2561bc3ea81c6094652b7c8b0f3c09394238ce06f7ac9ebc94394fe3024bb24169f
SHA5123091254efae254d49da2e59112d963c4fd86e70464dbcd1fcff7e61dba632f1c4a69c6270a15b33af7a5d95ae9569d0365e5072afd9463a8ccce0a3c719990ee
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7a5c9465-c78b-438d-ab2c-73698d2c5456.tmp
Filesize13KB
MD57c3d16c99b58eaacb674cceb37fd18fe
SHA1cbea050a252b20cdf039d49d6cce9c7b7dd8470f
SHA2566a080486352090ef1bae7dbe6e7cb7001f909ca57c369cd388ad7d3d5c6a3573
SHA512227d0686a4da4cdeea02ddf515aaac5d7bf704c3cdd75d46db71703b71f7533b58da1b25fec3a1271eec4453581eb1715407d8698c82aacac28a913be280de0e
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9670d490-b3dd-45ea-9f9f-37ec851e57c3.tmp
Filesize12KB
MD5babed0ba5033374b603d59f01bad123d
SHA1c93dbaefb327b5a99f921a8d88c32a31d41b2ca1
SHA2564a291ed1e5034c893e69918612cc02aa59feeb0e0dcb648945dc3c0734f07021
SHA512ae974d1106bc9ba28142af376aca43b3229957da0bacf1fa16a8b4f51e2b7364a48e47cd754aef44a7c84c4976cbffcfe41152815c53424a7316ab51f18e7de8
-
Filesize
44KB
MD55d92970d76433c9cf6a87f6cb3f644f6
SHA1113285d2d9957392d2f9bc8db56fa6e0db153606
SHA256b7fe95ff01aa4f6d0f4a4bf12916bce5579b2beddaf54aba9bfb165579849937
SHA5120c45843ffdc545ddec2af882f2fe4285b7f9d5b993ca93ef8c7ea8664ff5772835056239aeae7e5e884f790fac0e7e5d279f4a295e9e7a7120a3a86c228f310d
-
Filesize
264KB
MD57a7fde31fd1eac02df88c3948c9e717e
SHA19fcd0603e00bf6561448ed02c67680f7621a6a85
SHA256100ae6d81934cfbbbd034f42aec45c5a8f495b547d913159026c276fd78860cc
SHA512490e5745cc4956afd2edac572093997787b7d4259b4d9f624a31bc4d044103989ae517997f5b8ec3089dbc15b5c3b412a2cb313178d664f2ee92a1c7964dbde6
-
Filesize
4.0MB
MD57c2a5abd4e0b2ffccb7e181050a2a840
SHA1927c9a29125974061b9573223619026c401abe8c
SHA25612effc9c7cc36d4fd912e4bd518133a5ede98902f87676b975b662a2a3d79480
SHA5120b488e883469802ba14cb4d7716220ffb5933a48b8940c7652a45f6ae1a29213d27977253d476c5e792c8b19602261a054a6024e1f1204b2cde8ecd55ef08e0c
-
Filesize
44KB
MD598a412d35f2c691627b997a80a60122a
SHA1f221bd097a1802a98801b752a2baba3c8c2774b4
SHA256b742c096800d10e9bfb06eb2f34320ed61061ccb9fcc0503cff7db1eff39d02b
SHA51254c2dbb1f79900b341f040df7aa091648fd9b7c877c0bc8ef9284b8679ccf808b959eecae3321ad67adb8a5979da57f825b937f8bd50c7d1709b95dedaf1136a
-
Filesize
134KB
MD557b4723ef388715ed347c52247a0d557
SHA14078b20a5f35fc013088b15d5c0a2ef41f5efb86
SHA256d2c2754b58a13eb0804b319d929928d9335f25e321bcbb9020eb73e13ba135ad
SHA51293f1a21a8df09fc5ffe96083d942339295031b8818a47ba97a4c3e4a5ab5a7190c7553bd9c88eba4b7a67d63115062ed9d312af6c8863699316a7275d689605d
-
Filesize
20KB
MD5ec83cb3fe760f6f5c1506482841b9793
SHA1ddb6c07606999aef94b61098288bdeb9e6b47820
SHA25672141038e8eb1c2ee88abf41cc4960e258210aca7190bd6fd6b3b9dac0279ed8
SHA512a973b3a2ea021757e3ad0439dd396fd96684cebfad675e6e17e5885ece60b2b13556a49012f7330a881248ae0700b604d3f50e8c5f50749c3c8dcd2e86713c80
-
Filesize
91KB
MD517e88e85cc6dc68c2661cf2cca4e5199
SHA1d0a27e06a35a5eff399e927f3845dcb6e6494303
SHA256a8dd3aaee39b504a4d7ab8959dac0fa14c4b2dcb80c6d8ef449e618ab9700c45
SHA5127e063ab7d31b664a817d38e90d3e76fe0ec72262fb9e24299e3204c8cc013100bf2ef50cda5896907509cccda5c30afdebfdfe2935f35883e98784b21b6e2d45
-
Filesize
96KB
MD52997145da605f19e1cbbb3d2dd9472b8
SHA1d0c3658152b6c6fa17549ead1a3ee1e2c1d1dbb0
SHA2562e85683c86466238710b630c1896716b438f814effa4e0bd80150256eee7a04b
SHA512ec2f8f788d6690745ede0d76c44f03e4f61a3f9a2f1a4ce6b66b57baeafc90b5d86d8961b9d5eeae99e72d6970c5614f485c2bb6c0c129485c147a29024c41f0
-
Filesize
42KB
MD523d5f558755a9d58eef69b2bfc9a5d99
SHA1fa43092cb330dff8dc6c572cb8703b92286219f6
SHA2566e5bec69b1c6424972a7f5481ac57049811f0f196535b707613126c11292c5cf
SHA5129c56c94d059a27dab9f69c9dfd718382a8eb192b8c0ce91cd6db6ec0769b8756acf9c0956a35561474b87d6278b13fbe88a6e4df6260c278b1ae06e9be55dd6d
-
Filesize
16KB
MD5bd17d16b6e95e4eb8911300c70d546f7
SHA1847036a00e4e390b67f5c22bf7b531179be344d7
SHA2569f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352
SHA512f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb
-
Filesize
17KB
MD567e30bbc30fa4e58ef6c33781b4e835c
SHA118125beb2b3f1a747f39ed999ff0edd5a52980ee
SHA2561572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba
SHA512271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228
-
Filesize
19KB
MD55be81d7ad6cc31905fc542da6f7c572e
SHA17e8aa144a7be977232b0fa8433cfdd422a1cdeb3
SHA2567bce00c6824d69355bbbc48b3418183b4ebe106b6fab6d6c6884679a83e86054
SHA512f5d3418399d2b20d1a7baef59b30810583d836ac82cc54d3181e5d21852fee36391e9d485b0832728070d0df4602df7d303aa76d55e0738a452184873a5a1831
-
Filesize
104KB
MD57651b1187bb58ac4c7be625337b35e5b
SHA1307d969ef4137a66fe2793737dc1c546587c7f43
SHA2560632850d01a46bc2f8c223155a4bf6c398b33596bb711e098440623f118c3968
SHA512a81d2f768af155bdc642941404e7ddf95a2cea33c9374acb5fe32f6f5266e337fbef32f904551f61fcc9f9ab5a1c6a5ad130ab85b38bc2258e2f82c0ca1e9c7a
-
Filesize
98KB
MD5bdb61e69541d615ee0f23adb44a0eec3
SHA1bb5b23f0b71be5065a005be7e47d421b3f3bcfb3
SHA25675f0bc641c46aa7c7da2ef49193e3884dc12f6cf296606efa8906f3084f1f0e8
SHA51283ee355ea2b87984297e06bd2ca53fad78ed026cab8cbbeb67d36686727e7c14fdb488ce15d1da8157098e3db8ddd662ff85fad2afc1a893bb81555bdaabd967
-
Filesize
31KB
MD596560ec2d830bde1583cc187d0b58094
SHA17e747f686a453115546d6970ea94c2cee4f3749e
SHA2561dcf43376ff09ffeadb44efbb77a89dfbd06c6c1f20dcf44ae42e4c76c10b1ed
SHA512c7bd17a12952cb2cb0d6c9a6ca0f4b54ffe093b9c767bbc6c1195e9dfc8df176f7015c3827a024bdfb36a1f5a6e26cb1b491da03842f976f5533eea8f0a9c5b4
-
Filesize
81KB
MD5897983faffb94b8d7ad1f31fca0cd342
SHA1097bbede1747915baafe914dce09b9d515aef266
SHA2567fde46e50ee339b39172dde6e27e69510ca66eeb1255167282944f6b97250252
SHA512f84f45f50397dce55d02f689a777ad6244dc428b057c8b22fd5f262a2612f1836b4b40ef86bda374b8dade4747ff7d0c684715ca576c3cc85db9b47155a691bb
-
Filesize
77KB
MD552a678bad7cf8a5ab8352ba844aa634a
SHA194eb8f18e3ddc83221edc05c9859d15e233618e0
SHA25604ce000fad91c9fbff6923993aa0d9e387c5bf4f2080504351867b47dbe1530f
SHA512780f8cb515231e7744048813e5fea7f901286e50899681059a84863c978134aeb04c8cba7178dd378cd3ce13a7c671b547e1bf3f5cc33a8825b6b01ac23ca9f6
-
Filesize
148KB
MD564111e743b9fb7f28729db31e1d43eae
SHA1434b657b4b34adba5aa1ffebc0c3ae52d119afb5
SHA2569629ac7fee76a0e577f655abbc3823015f404d55273876c9d62c2616757870a2
SHA512348d30606659f5628ad6b68aa7fdc7bff0ad3ce40bfa7fba598e9abcad1eaf1ed3cfea3b8e9347c8291a9a9564b54c87e1b444d292f48464543e46cdbbf2f924
-
Filesize
47KB
MD56d1d23e4bb4a20859c39f21acf21c990
SHA18a56bd8bfee0dbe8b35d0f7865c647e3c24d3f3a
SHA2564562c8ea80502aea67dd990ce748223cf9cebef990d8cb711e66b079357e573b
SHA512da20123a20a3caf3cb55e82951b009be2fe42ae7ce4211dca4f5aef2498e0795bf4267fd2bb81b8c2689b33b9e8ca9767872b47371c03c47982cb39df8639032
-
Filesize
81KB
MD5ece0c96b02dabd4bd16b0c30349c0980
SHA1beb495634674dee4bce7e12aedd5fb8c82273c80
SHA256657af0e801b0dd889acf35e4933f0b4f162c36adfd6d8f798fb1c9e13e8e686d
SHA51229c9aab659a324db88d2c3c2f8457b2a5bc387cd81a6c3fb180782547f09e80d153a5fb8815682fbb6803b638e5b893a6297071f47dda478c32c6300d87dad8b
-
Filesize
27KB
MD57820201f0db0c706a0ea5bb7ce018ef2
SHA16d116650afbb3b25bfd6226c7d5ee00dd1fe4515
SHA25604f262a5cce0399379de17e5635f1e1acaf4371afe981edaaf792625a682c44a
SHA512bfecb88d8852c413525e1e1bdb3eb69c97a10e4ff67ae3ca5eb97fff5a2ee369a1b80a0d314440a375d0f9e950e0e970a6de6afed09062d8523ca28ac878946f
-
Filesize
38KB
MD5e45f95635508c9b063c4e562836dfb4c
SHA16ed7c9b0ce19ddd5322255faf090d285a7da2fad
SHA2569d8660164c1677ef3bfabfe0bbe12d6abb1b7c285ec2a390c16a8d50abcc6bca
SHA512532db66cdacfc95b0f8afb6bec048bed2fc2decd79d5b819edb17c99dbf38eda7af0ecd5108bf7f332432b6289bd24fb032fa3badf6072dab7193df647f2c783
-
Filesize
62KB
MD50800f316866f3b20e5443bf0b6c133a2
SHA10c26d720ec1078b683068d5586b3a204ec118bba
SHA2568bf6fdda34cb70a0e5abb753af6440a64d37ed2fee81ab1d9c478f7d77aff84e
SHA51284d9961ef0b3890094c0809750708d57ab23a9e21f76fbddae37fe04443b44c693dd087e51ed06e5ea2900f1fa7f2bda76f8991d3f8396dacfaf923438e48d75
-
Filesize
18KB
MD58eff0b8045fd1959e117f85654ae7770
SHA1227fee13ceb7c410b5c0bb8000258b6643cb6255
SHA25689978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
SHA5122e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058
-
Filesize
20KB
MD5631c4ff7d6e4024e5bdf8eb9fc2a2bcb
SHA1c59d67b2bb027b438d05bd7c3ad9214393ef51c6
SHA25627ccc7fad443790d6f9dc6fbb217fc2bc6e12f6a88e010e76d58cc33e1e99c82
SHA51212517b3522fcc96cfafc031903de605609f91232a965d92473be5c1e7fc9ad4b1a46fa38c554e0613f0b1cfb02fd0a14122eaf77a0bbf3a06bd5868d31d0160e
-
Filesize
16KB
MD59c6b5ce6b3452e98573e6409c34dd73c
SHA1de607fadef62e36945a409a838eb8fc36d819b42
SHA256cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA5124cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
-
Filesize
54KB
MD501ad880ee50b786f74a5e4fae9ba3d71
SHA1111387dbe885b7f3af44cdbbeea17eeb04bbf803
SHA2569368f2d586a1d2727921605892048bf5201ef8caa044f2e939ef431aa881d83e
SHA512d8dc47e5d55e6598988281539205936c56b716eb02b4e643fc917a68ba4407ece36a9d4115d5d0e32ac630d44eadb94ad2607330de082629fea82a9bd35fb83c
-
Filesize
28KB
MD513d4f13cd34f37afc507ac239d82ddbd
SHA16d500935a441d438ed052e90de0443bccc8c6d17
SHA25676464e77d22532976bbe5d1829e97854d5c37ed5a46ff300ad9680876ec81d01
SHA512152e6449d09a7b544cf6f986c9695ae07c330f4b13068cca028ab56ffdad6ff2467f371ea4385ad71da023f3beb83fe0ba1d6d413f1ddde14372efe82ae36b6d
-
Filesize
20KB
MD587e8230a9ca3f0c5ccfa56f70276e2f2
SHA1eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA51237690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8
-
Filesize
25KB
MD542e84ebcf5470237abd1f9e322b751fe
SHA1a828a45804554507d9e8521c36109e8bc3d5eca2
SHA256a9fc7baee3689f0331e46617f60d6e7c3ed631209b7211e7dd09cf20d22a64c1
SHA51236606d42aee5689819dedf221af3c6c0da06aeb9997b9ce84b42db42ab80a0926352219f1e47f2287dcc850fcc96e4eefd5e487e09e1f1228102eced11271e25
-
Filesize
210KB
MD548d2860dd3168b6f06a4f27c6791bcaa
SHA1f5f803efed91cd45a36c3d6acdffaaf0e863bf8c
SHA25604d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77
SHA512172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e
-
Filesize
19KB
MD571eb4b465deb13c46c296ade6cd53b2f
SHA13a534cf4eb1d184a04c197a4c5283af0dd7700d4
SHA2561761c14c95dd8bd3c3e2cd6f920be46ffaa85063e0499c937eb51638624a4786
SHA512edf9fa89cc18d986ba2177c8f8e110dc6e71a5c8c23784c0e1f2a42e22260618e9a45cdc70f47c41aa30c336c8f9642807996ac150c37caedd7c4e5c5700a8a3
-
Filesize
16KB
MD5ea05a9615ee91a2098e3d2ec4255a861
SHA16daede33eb2e0cd831c1606947ffc3f312e1dfe9
SHA256b85bec1a1425290641c5a32031770216e83d127c5cf840e69fd01a250279bc9c
SHA512e11a9cbae5c2d4d91dc65ab7a16d36bfea29f156466e6e2b380d1793cdeb4a2b0fd7666102bfba5a0e2344cdc2efbde3ae0ec1ed134aca269467395843a15426
-
Filesize
28KB
MD53372e695908e25eeb98abc399b905f09
SHA10be42c417ef57e433725e5a8d5711d7cc46c1877
SHA25606d5c9b1e64c4d512fbd35f6af9b394b8760fb374d2bdc912197bcced82c24e7
SHA512bfcda76ccc41c08941ad425f001a3e2f2c3e6c8e5cab5a4761c9511add98b3ac10559444eb5eb72034c53622796d4390ab52f891fd6406f4af343f661ab53f58
-
Filesize
85KB
MD51aece581726547e73975e787dae6df65
SHA1d6c0f5d1350ea05cfa94a115c58723d257bec654
SHA2569f65cab3331d125537a534e0e4841fac7b4bf8ca070d41730d01b9ccdc6863e8
SHA51287327ee654d83d58005aebbfe95af1169543d36f76ac480c97ea5cf5f92c74ea13136a930f97f08cf57fa7f2c84203fc0a210cffa6dc54d785ecba278e4924ce
-
Filesize
79KB
MD5101d18bbe767a9a5889fa732a22e8d00
SHA1ce78ca16833d113d441ad18bff602f22b44a2718
SHA256d317cd766e3ac1d0dc226a2d719c6f7513cea545d90843c0c129b0e207df5aa7
SHA512df4c111b685c4029b64827142f2ca05b65568b907eeb67763292bd52470cdaa277e2077e8e858e7f5b2329e716f6fb77f19b3d78771cdfc36f1050d20e4e4b64
-
Filesize
103KB
MD55689e38c399b5dee32f609266d875809
SHA100126b3f4c7957574057dc38fcb1a5163b65008c
SHA256c5a6ea9aff3a49acb2f60f068e5a3d677d0c5df391e8db1ec201404181e83b97
SHA512f63c8afc309af3403fd6fafad4c3f07994fd194346e37042012976727aa807f3eed87593c71a34cb984b5d5fa0c68797a40b000c987a63c15f766d2243b040ae
-
Filesize
93KB
MD5b2533fd60503ee0a0b19e2a749c4dcc2
SHA172d63800a69c7fc7b184b982e631b3a5590c18f2
SHA2561ef073bfa4e8ded57bc0ae575866e23f98a5cd47109e6e887d5b8d15fd1f1c5b
SHA51240902b9e87af8a78c7e034ca2489b9e486f34ee8b93506553b3fe5fd4cd1373b5e49e522e58857cedfa37c1d469efb086bb5a958735ac5d5e0063d9bffa59bac
-
Filesize
107KB
MD5914a1d9251722970c439410f91117760
SHA14aa4354ca567c6317af74942f3a89a4568321dc4
SHA256ee55eef7d5bd5ac4d0cb0208b5f5c0ed041bf6829cf7c003527f37261c0f17a5
SHA5127533c12b3ea4a5302755fe3a49bea6fd10c19cf7d6b40ba3e3e905467606f41b7482a87fc69158a18d2d772b44a5fd34ed9b960395d8410b7ecc9d3ef95a5ab0
-
Filesize
532KB
MD50270e56d892bb43d3a925db689068977
SHA1c67c86433aea160fb1a8b7fc9173656c730e6b8c
SHA25608a707bd5a2876d2190c326c87a27372725d6ac8dbb043f377c0d178c47a8248
SHA5126ef8057357a941aa10fa04cd0aa8579c30e790d713c024c9b1d7dc9491dced11707f054cc2380ccfd08147df7c658dc76d1dfe7bbfe91d2ec942532a7be70fc7
-
Filesize
57KB
MD5be1f6aaefa820251c64a81cc8062b64d
SHA10dde12114c5b4f29e1ca8372453f97ae2e9c3125
SHA256eb1619e6a949ef0e8eb0dce4ddcac0d5342ccb5903ea77ad8cef0166149e6643
SHA512b778bc24ef091d9011e3b7969a2c9eac3a257476d39276347c8eb5b72e40ce4f4e5df20a2f7e82398df710db22930018b43b26f0407dc4d6174a118710be2341
-
Filesize
24KB
MD5c594a826934b9505d591d0f7a7df80b7
SHA1c04b8637e686f71f3fc46a29a86346ba9b04ae18
SHA256e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610
SHA51204a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961
-
Filesize
303B
MD55f63cc9df1b1e6bde8133edf5b805eba
SHA19a5b565874d9a10545d18561771d3f47b4411c29
SHA256649465db42f722a30b627f9ef5962e38715836f3eceaf26420945f8b8c6a5db1
SHA512a8f34f50083c9763d7004414a0128ac8d9f812b04f5a4ea47dfcd1be8e0d4b56eae42a6956f41f213ab966ebc419b70dbf463cd2c4ea25a4ad6c77ef15c8a9a3
-
Filesize
17KB
MD5d38e483e06759f8b9fea03add200e63d
SHA1758fe0799294c336607fac4c18695148b2f3a8ea
SHA256f08a09b4242092b974dfed955c3a1e652fa157ae118e6b9b53dcd9dd78bb4223
SHA512e569bea0d95c6a2f4a6835f468e6084ad3e02f8f0b3b89d69df8d03cd04f3a197ae5fe1038ac15569ff4fbec2e635098f2891202fa3722b7cb11489e7d065343
-
Filesize
268B
MD506d51075241c596c96d0afb5a0d5a2de
SHA1d8d0ba25dc43f946d9f4ec040b10c67fdb0ed0bb
SHA256b8fab6cb531bfe4a753bed7595887193f23c1cb68814b05be57d30572af6fd2e
SHA51204d44db9c8e3b7a9a2c46b2997d50fa4332a31c4d2b54e6f6ff6b675f4df1cb166fd84d14bdd78b603542a9955ae08b70877ecef33408d1e32ee291c2daf4fb1
-
Filesize
8KB
MD50937e771446a602ed71354043c145e15
SHA1b4db035a431ad76c3cf6f7a72c2900d3ac033143
SHA256f81f3e25983b97ceb39abb7218ca2d3ede162617dd4d814bcd7c5b1333ad665f
SHA512acb5974cf7201ae6034dd702c3b11ecb74c7c2403c0e013a92573cd4f7d9230709f70c050da02f4d88c0ab723628b3a42aab251bbef56749e26eb5dc03c76902
-
Filesize
35KB
MD5dd94ce0a48b7d5ed85a3d2407cae58dd
SHA1268acc5956bfd964746fb77dcf61b3eef3c6e72d
SHA2567a54dd974aa9853e95de54d0ccaf4c8dfd080fe470e184956bec13bb7b8ee45b
SHA512279e7e74b631adca3d555e61d58660806f4caa67ad18ad6072cacc2c4369e99f170e3e81fc0efc0700295fc76e07c3019dc447991142eb79c3aba32acb9fd023
-
Filesize
276B
MD5676dbb92b84cf6b51891610acd0cea50
SHA17957eea959c1e78d958c66064357b64e8747bfb4
SHA256996ca4fc874d49e6d8b7ff169921cdcb1b5ebcffb6e8e101ff0494bb82bb0f86
SHA512d55b24e1a2c2d05eb759d5a6d38ac8079e34495bd8b4850e806bf105a1eef340ec7b851db1d51c59661c53ee9ba540c77ca5f60d97fca4b31fe18e6adf3345e5
-
Filesize
286KB
MD5f47629c28ef02de02a2d23b4bab48f05
SHA1edf9f7220465ec636a786088fce0ca22dd313963
SHA2564259f5b94cc5dbe84d1aa23d188aa4f3d4a9cdb027f5343790b34b575205b9b6
SHA5126ae2134212c3385151708ad3bcc0057b241744578fb99b99014f26bab73f15cc56ab6cb4f8f15a81c15121b679ab7a73307a0afe2effba690d080d0fe7c88619
-
Filesize
54KB
MD5d85ab9d13b594b9a403c1bdc50b1cf8d
SHA1e614b80bf9103c4935bfaa0f1b3d9e8dc9c06d92
SHA256210ad73728bb8e499fe136cea9b4f9f5204cc8bf813cdf412437eb9c7837ce4c
SHA512cc0f99d2a096415d4f0e7b0da4f0bc23eca251fb5747d99cfe9ad3366473ab2571aa2ebba975c85fc2d4a849cb4a427a4515503bbede6d305245fd84b9be11cb
-
Filesize
273B
MD597a23e49f62aec31b154adbfb39a3b84
SHA19ca7f035ada20e221cf05a61c63f2fc44de30899
SHA2565d1b9eab86a3a27fb144f161b28e93db4ee5257bb8c569a674b50dd7df7d6663
SHA51287f3a2740797fe8618be788a47d21e7ea9a99e7a2b3224920295a5c4df6b7e55a4d39fcb6023126199aab21a21c9d3d2c28aa2cfd363cd3b7ce375b3753c7bf0
-
Filesize
289B
MD5fcfef3fe65acb89811618918d76477fa
SHA18d95c4a63cc6bbfda18727bc3abf00efd5975408
SHA2562663447c05d85be7c722c912a7495ebeb679f8ed2220be4775989e9c322486fa
SHA5123fdc0c6f2a8cd472d3ebc82372b87e6e4650e8cee88b12443f78a94921d8c32e8f97d7fd877c2120cb087bf1e97a7b83155d16c18d1f23468e33ae850a5dc9f5
-
Filesize
73KB
MD5dac3adee6ddc8f3cb9dc2d01143878bc
SHA181c972e65de6bbf43c137cb8063f8c84187a3789
SHA256703e5a1d47f680816f23b6ac628c5e725dbde81fa0a6155a775cff63ffc72eeb
SHA51221c21efb7de878cc6b1474043fe53b2b30ff214bedee5d63b453cb4ff85dc6acff0b8d9a2d77e1d1f15e237a4501ac2e4f7a068f97ef4199c3cf5f5aed40e738
-
Filesize
3KB
MD587daad8b438133f41535af1625d226d4
SHA1a0b4adaea94bbfa5aec62bdcdfbd35aeccee68f1
SHA256e510eafd6c716c0895e46da8ab95f81d857ddb30145e22354ea90dee10f28897
SHA5127637d0381e4cc3886941e1656659fb33720b5b1f5b305ad58b6e1eb4b29c709390a71b8cb2e81d2eb40e2d08044f90e945ff4593a6e4a92aeea0a20ade29c543
-
Filesize
278B
MD5daa2514380684980eb2bc3cabc7acb00
SHA1aefc62eaceb1b05c49597653b9d2684e000c29ac
SHA25620b99d46f90540dbea4b6739f78f7c2c4a6d5bcf5baf5f364fe1c72f1d789bc5
SHA51274fb53186cd74fd26680e41682e8747f41dbba6c9ef084eade82f9c37b57a180a0a5d321530fbbeba7fdcc281da628b9ea409c6b59aa2ded6ebde05924959848
-
Filesize
52KB
MD5c869a6d5d5e2f9f4693ffbbf52ce2793
SHA1053bbf99f076f1e1649e295775ba257942ce6201
SHA256657844c801ce52c48520bbabc549c6a57584e70d1d85fd185662faff3cc6d291
SHA512212b3882c27275e3f9a7bfb776d1b99faaf177c1fbec6e0a3bfdbaa00eaf024535fa5e1e672947ab73cb6bcf05361ba0bdb0c8eb11e55fb71970156f6ca720df
-
Filesize
2KB
MD53527244b6a42e31a0bc0221d03f10697
SHA11a26bb01c283a25b7c34c5d0c75efe55d554d517
SHA256462e5454a4635f30aac81dcc80d3f0969bd3aee1809c980b2281fa81803e0f06
SHA512223f261d1aaa91051b495ec9703474d2d5dac8ee56d0094916a9bbf08a5310eb86b6f29eb960f6f5c65833756554743667e9c0462b4ae7236eabe1b36ad844f4
-
Filesize
7KB
MD5f8ef3951ea8ac459cb3a0bbc76532a1d
SHA1d6983fa13807b4a484f02c8162f1198960a96f38
SHA2560fc541818c0d06559bd52bb62cd3111519d36f90f931edcfdacdcbf46206fd90
SHA5128a59f58cd8819b82851606aa2f9ba213c6f68dd4e2b01569f19fe2c7a0e17d49dbc2c155dae210acf5a26cafd8e03090cb2cf5b519444f667d7f2f0a73634547
-
Filesize
6KB
MD55382dea5f0497bf85423b35dfb7c4ff2
SHA1167420fa56bb55ead77ac18df031d0b600b691b3
SHA2568a7ff04792ca49e034e7ac53d7c06cc71a9c7c7ef88e8523b56d7acb7fc3abba
SHA512c691a9c1462bf7c56ebef2f06f36f63eed28ded9a4da7805fb26020c7eda803dd849d155ab473e7c8602c56c35a4a6b1861656ea8ecab4b4ff53855179cf0560
-
Filesize
7KB
MD5e3fb65c50d1c8fcab7ff8df2942abd8e
SHA1a35674a8b5c30f3859382f5e19cae9fb553ba7c4
SHA256eaec2c77c69c469a0d01089aed8f357f7eb2909cbfbf317dbeec4dd84effbc91
SHA51283adc91ad69f818f717ca8174cb32a7c49db02fc361a683cc803ccba3d0065b655d1ec8f641eaf3a27826863893da6c0d87e1a6efdfb673d02559d15e19cc38f
-
Filesize
317B
MD5c9cdcf4511f124b0d49c7e5bdc5efca3
SHA1eb0236290be74cbce7f26699b4f32ec9383ec31d
SHA256c7929c2aa41797de311c45c7b31793761542989a5044c27f4eb3022eda2dccb3
SHA51297855bc5df1973110b1b6c786dbcbf4d44b61edfafdf5aed9ce73e73b740b8c3646b417dcdab7fca8de5e611f0a15291b2da71ab7c9194ec4aa22884a8c0bf50
-
Filesize
330B
MD5439168ebf0cabd2137ccc14fef7f8237
SHA1bc7c75ee4b71b455604a8893262e640536ae4a2a
SHA256c26a9210801aad3dda79e49c19f5248887087971e1b428a0cd852230cd39854f
SHA512ba3e6da3c1aff9c46e2bd88a41542b26e53014b55f097bad7ecaf620c050b8e9f0102456d27f3db2e651f23dc7f6183bc128acca1da375fb98046302e88fc7f3
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
44KB
MD5ef8f8084996eaaaf7f7592dce3386eb8
SHA174886c265bcc7364757ed64ceeaa550c7a07bbcb
SHA256334db9e708bcee23404870cd395d93c6eac2f228decd5305f56771464f4aea74
SHA512c06b7ae3ee38cae305fe5dcda287f11f910a2d1760540f08c54421a7ffdb24150dd7a3c38cbc5ed099b249e17318f86af5b6a2480944657794c45692113982ee
-
Filesize
264KB
MD5eede9cb32d4b278f1bb7085453077efa
SHA154498931ce7ab9c4a3f7754072aaf1e7e0320f27
SHA2569d2bdc7869954d6894b78df3496423713478d3cdca3501e097b8d71754154086
SHA512559cdba5bb3e969e8721e664c6c0aa31ea4a9d298545a1154db8213c84b350a15c2dd4824cc0c69951df4ed9499906aa6e49ce4b1bd35c1631ba4c8208dd811d
-
Filesize
1.0MB
MD553f8def69555d079fb5421d00d812978
SHA11aa391f1a4cc896488543aafea542449fd3b9533
SHA2561e14160b1604940b9e749f16a96f11dbcce44c98a5609d5351959fad1bc8dbbc
SHA51281eae3f84345d7109fbf06654c0d408a2eee66159869d548b43f31e8c1f70390b2d5be71b485a90a6c028a5cb36e7a84d1acecb455a0e242617355883ef9deb3
-
Filesize
4.0MB
MD5cfa172a650b84b3abdbcc47097ea7b57
SHA15b45943b506c37225942826c102fcca6bb743847
SHA25674581baa80a130006b3dd5628aa4845b20089bb80a5c5710c459e2708c95b038
SHA512fd8626ec91e0b48a17bfe1bbf51ff8419717f631109ea2ca39b908dbc06d7628b4ff5d861bee7bc2070685c59a63c9c3759db1cb589299a0cf430a7d3b5dabfe
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\000003.log
Filesize12KB
MD54d3afef90f77c6dd714670c229b0b7bc
SHA1209a3d7f3a637f8e6201e63dafea0c01d5d54a12
SHA256339b7cc4f317318b4ca2518cddb65f81e736d1659992a7e8d443375ff23d238c
SHA512c18a0bc01ea52a6b930236191abe83f52d4cb569d11434888c8a208a38a152db9a9080b67ce24d40e2ff5a5627abc7bcd635bf9089e41ba4d52943b4e7a35dda
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old
Filesize392B
MD541dbe6b44b91d853a08f3c87cde11604
SHA1c7f7b3e59525407ed1b0fa1d15fc7b68f55efbdb
SHA2565c0bcb64c98d14af7fd323b9f60b682bec8d9a1ef3034fc7af0e4a99c31a1ffa
SHA5120964ddfc3472c1bab3abd5a7893ad3e8c5526815d9f0efad5256ef3e4e065b726366d350a94dd2ee216e90c0522d6f2b73db2c567f95af0fefad16dce92af278
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old
Filesize392B
MD53c53a0ae308fc1c819d9e32125600692
SHA16f75b224571721704aaa54559af889894c94d003
SHA25683ae9a29ca56fe13ce77e3bf3a6e3fd1fd96c7e9c1b899037dd348bbc69a5b12
SHA512a54df1ab4bc4a3367ea0f8ab6b2f171dfee7a805c907c9a7941bd0c2a337c1544a3b318e4d1d170f1426bb04e0f0fb327af09cffbfa5c051fc8e42d0694e115b
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old~RFe597891.TMP
Filesize351B
MD5244af68858788eaec5f4615add8e2683
SHA143652c04db444977c3b18f94c680ef3f4e8de50c
SHA256f1af466b98cb64b671bde397e65bb6056e9fb9f8530d68ff83cfc4f99898e5be
SHA512bc5341354c053e5228be853babd3432cece1d79d84c4526570489bea156abfa3b4558e616e987e70dadc9c35ab0e469624e7164e2e4d5e1c624cca421168cb5b
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
Filesize
329B
MD523e895b0bfa7112293d187f673331ae2
SHA1ea98cf859e8ef69121a27cb32915941e3c03c8b5
SHA25689d8cefc35a638d72b365ea1913deb9e21e876fc4230041292e3cdd1f48c3f16
SHA51277e7cb8980cb25f32febb18bc69e5cdb8069d3c7a5efbbc3394291b34bbe94477c9d03d10cb27ce9555456efc55497405090bc8005f2eebb1d08f1749b4279e6
-
Filesize
34KB
MD58bf03e3c82b2b1e1671826c61361cf4f
SHA1224ee3274ddb5d91bd2f2196fe411e0e7f2849b9
SHA2566747fce33b875721c006761df858e9440df5ba555108bdbff67c399d84050d48
SHA51231b7c7431726e65dd97e80e3c97ed01c6a3b30b8ff6976dd04101e95a33cca1e1f9d14064b970a582ad0c5fb09b493ac7ffa377a678b98391262c20d8f8b1484
-
Filesize
46KB
MD5fdf625789b6860696eafbd4371715b90
SHA1794cff338eac8519d9f74eabf3f5d4b0cef30a92
SHA256feced01573fadfedf5d1c52e37c31866137363617a5e27caf42636956283c025
SHA5127500feba83e6e3de03e497eeb21e98734e126953cce846d5ed3052b4c3ba9f79ee3a3a6c1a7d3c4295f9143ddc241bc430d038de254fc73aef77730bb0d837e5
-
Filesize
56KB
MD519304ef415a7f8c514caaad9875593ed
SHA17b671dbbcfc3a33e6d4a2705be530308f1e0ab14
SHA25654fb025f72907077371716d2965a3dc8d784b7f581e2713a40d5d9bda97a36d7
SHA512b69ebc19b8559e57838e8afc15b0af38d1470ecbf3668a4fea559f81adc0033cc8076a8e457752258a313baa3dfe77cff6c4d17737679e2afe84527af810a19b
-
Filesize
61KB
MD5d5706e4dff5e100adb6efa2e6ebf562a
SHA14b46c0ac06fff782822b45c7b017406e5aa2feea
SHA2564f5c1019db1a32b6dbd5d86002beaa4fe760f59eadeb4a284bebab5412b3379d
SHA51209c0b72701e0d445edf8b8c008bfbde8719006dcdf7246bca4690c44349a0809ad02124f84cdb58e226e639f6065a46ec128c6229260f17757dcd48925bbfdaf
-
Filesize
1KB
MD52e9ff3102d60a8bc6f26daf81823b627
SHA136efbfa84c2a59db8d45b8fefdf56f218d6201b3
SHA25699d024087f1079a2cd002de1ef581c176a993ae8399beeb13f5a4acb3efe0bc3
SHA5123dd788fdb7faca53c77e7a97631a8453327ea01f704a2848288d9572bb5bf50bbb64d339bc776d63a27fdd8590f71e63f28e0e63251b7eb94bfd5e7b37b5b1f8
-
Filesize
60KB
MD58f4b40763050ac68978aeee249874107
SHA17d0097cf37b5bbc510574f99d431510f4916f6c0
SHA256e0ac3acfdee0c5eb4054ba2cb365ca74e004ce14221660bc86d1b7427e2a1d5d
SHA51251c3b82e9a2792e1d58c05d24ef3315416587452e666344aac5a72190b8f4576e4a063c24d2c3a60f62cf4e6b85ac91399723b816dd813fc89739c90f3a68295
-
Filesize
60KB
MD587fe39f6cfae36cf40a13270553b6633
SHA16fc73b486fe8ddcd1e3010103fd4fe5f449eb541
SHA2564295c6aeeb145e8e2fd6134b7ce7dfd87b906207b70dbe54f8657f332335e279
SHA512a5a2d02c80f93f97de174f68bf4b7c7e256352dc2e8c6ebf07e141327bb87f57229e57e83e3f3aa80568efde33115a524d1b1faa3ffd94e3c9de16b6687c7acf
-
Filesize
36KB
MD5b4ed4c2bc0df80253b8accbb8efc1995
SHA163e61b5c9f2135103e76dbeb08df354111eaad3e
SHA2564ebd5ad4646d222ddb403033b279b960beb3fd5cc90aa2488a0340dda10b8937
SHA512902236b96264fbbed584be586e8fabcecef4538204c9227ebd136ad9d29f95627848261c3aa8d6224fd75374246bb3afb69bbfbb3139df318783f2bde1ef9a62
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
1KB
MD580238e5d9bc43f852e7b98be9c56f074
SHA1d219a3c0d958dd3bdce9738259650069c5d67017
SHA256df75ee61450ccd0835fc027f77df0b27ee2e65bdd6fd4917be655464b91f4d0b
SHA512ce9f0181da75b5f0374a15e957bd0e62722b8ae97b40826bab57cf816211676d325182fa1f2b50568f5f8a18719bf400c60f694bad80333f2a274c04e5e199fa
-
Filesize
9KB
MD5650d823eb1ede08d0336f945c3fb1b5c
SHA1ea9c8068b2592f9986ac2e24b4961f98b016b84c
SHA256bcc314893be2878330455cd7b1fb9f5a8189ab4881e0516f5afc08530f777ba7
SHA51251af9ba7dc4953fd61ba0f6639bdf161160d1c265769ba9b6cf3f4c1428057a24179bf486d245246900918b1c41082009049f0d2d1d5537277b3d99db01bfc02
-
Filesize
9KB
MD594054bc5e636c8f6cbff1ee5fab51d5e
SHA1ac895988b09e0c5e28174d6f14ad29c86fa1659e
SHA2569e2e106dd8fbd06067ccda6b30d4cb8e75dbc9e86821ddadaf559bcbc48dd501
SHA512884a785cf6b295d77fcd96ac62b9e1f084cd901ce49ad36726b6eeff8192c3db9f156fc83c503618303b1fbbf2320bf69298ee7dfb885faed7c5543aa91f49d3
-
Filesize
7KB
MD52f39a9c7d66871190f9fcb6f6c1dace6
SHA1dcf6c512f112bdc2a5bfff96e0bd02fc2fcf2004
SHA256d59f23e33d6561e5973ea93b2c27b4d503a8281b0aebedadad91b7cca88bc660
SHA5123b7d8d054a80a89ee662e0e332439989c42d71cf541ce467d6ee0d8d870b9beb0ab3a826608cce9062a5365deb4ab119d27ab17ea56579d98071cd8a98241122
-
Filesize
7KB
MD5f92da2fdfe597cf5015f2b63e4e1529c
SHA19c93933f34bd8f8290949318dea3871ffc61e193
SHA256db42eb21b852cc91f5dc93adcdb1bfa7bf87a78cb9edf0ab8fd9ac9a00295faf
SHA512f001ff5c84137026fa2da2a6f0674387add2fe31a181d2b7e2fa1ecbb427700724300ca8fc5b1530a16c9b85a96508107c30d45edf69b5af36ef89abf771f686
-
Filesize
10KB
MD5a5c93cc07779e90734985bbafa2aec14
SHA1e4e960158684321ac6c897060fa57bb0e41fa162
SHA256dee43d1f04156806dd07a61f6e7894808512ea722c78c8a2c80d759c33cabb67
SHA51277290b1c09e912211198e30164dd392b74d63a33ead6d97956ae82a289c972d3aa3379f1ee92e8508496a48792f9cf001692e36a28f58ecd01324c91fe888c32
-
Filesize
9KB
MD5bed0c144d81005a610f96cd5b555c9fb
SHA1b39fb26c1fdee6e04f93243dcf316200a82891d5
SHA256af033544287e83cdc24ca3c1441209c2d94ff4e616c2af684b408b912a46e716
SHA5121fb437f062c94e1353427c6836cb554fe982df7e2d6c57108d790b234aefe4aaae68bef1e22f5d9211fa4b1517fe79a66cace7736035c596d93dd414ecefc5bb
-
Filesize
7KB
MD571cf9c40d078353c1a06dac03ad01a30
SHA12a494a32a4518d3bef0cc7453e07302a6d3bd5b3
SHA25626e5cbef7e980b0f36415973769dc975ab725d9e4a41914c2aabf192b1994976
SHA512cef62ccf767e60ef60aeed9ae2c2042d5c6272a224fea057c6ef04e228afa686844f2d91965f56d08f031ff27f326d0470f61a7bc196cab7cdd3ffbdba8e5d01
-
Filesize
6KB
MD53382d0038701f3caed4ce72f439a7f17
SHA1578959b6741ffe37ba3ee9219141bc153086734e
SHA2560acda70e530eebc588b86d012dcc0063a4324c8b1493699b6f55db3c1544d8b6
SHA5126e959a2aa609089275a8e7c21be4c2b2e79de11840442ed8480753a78212f6fc23627b9f378eae9ba44b2ede4248f12874765af97bfc58bea5154a30cebddbb9
-
Filesize
9KB
MD5836550e68d256d148186d0e2812c4750
SHA13c52eca6d6f7e4b58cb711f582f523b210a8b035
SHA2568889a7245c8e0fafe0bca45f77df23dfee476dbdb68d4c0c4168d5c3244d8998
SHA5129722ace091058518f55ac07323e5ccd999ad4d48c0cfd8386d6485723658f797b4bfcff14521555a4e0b38e6330e5785c07f8a0ca3f970e19289feb80547caca
-
Filesize
10KB
MD585c77b6e5bc7ff1569cbbd8ab24acce3
SHA186650a44883115b03f1cd094c751d3cbb964de82
SHA2561b47b8dc05e56431e800b04a1b62a9f88a9858719323a9c457b3aed8b57a6c19
SHA512081058cbc611e994acefa813530d6af713baca124c77302f335d2fa0125fc81ccc397c8fda1bcfa41bfd43f49a00cd5574eab75b6a989019d9a3e1540c27fb19
-
Filesize
356B
MD5181e538399a627bb3cb55c4972ab2363
SHA16bbd239de782cb746b86fe5c6f24f670e822ca97
SHA256b0153b3154c459e952c5bee206e944632493fc69fa3c92b6abdcebbe0d47086c
SHA51294d76ef457b270cf39956439cd5ea1efba281b481d8a20b454ed4bab30b75efd1705c4f687a53a4087e35458a81ae302368b46444060e86029ca00cec8b19948
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
9KB
MD5fc017331c62c7187a1b272550b4da6ff
SHA11c40f552a101cb0c6a688b4d8675fd5115670578
SHA2562d011efc3a6de4c5bdf42258531c98d143d8fa217267657f1023edb330ac3a3f
SHA51258e4bdba6a38469e4d5034d0561e89391490f5525b90fe4805c53e9eb9aa8ff04c6540ff302a98a2841772f5c9fcf183a5926718674414ce650c00b3c86f7e4b
-
Filesize
10KB
MD5100ed15db9c6da567113349fbd101d46
SHA135f05b14cf0b7e0def87061877741fa754e93869
SHA2561a3509d29f7c9ef7a1493cbef55231b3f99f4f51026d5ea3c3a9e4e141eef450
SHA512a1208f467017a6b11c540e38fc6a9da06f1f91f46bc07131a4cb8a03d1c9c00c33a0bcd0fa96034b07337d5ca44d3598ac89d0c7e3874bebcc3c556e726065f5
-
Filesize
11KB
MD540a7ec26554f743b0e2162776185e28b
SHA195d373df105f19e44eeb0943263dbf38f8536adf
SHA256958bf653af6e19f34b81c35394e431c3456235f3ddeb47a603e6b050837f46bc
SHA5123c6bb9ec079ad47c155dbe5bca82ddda021274c931a3542ce99b1f791d3df31eb6ea4f4b59576b3ca646f964031c789fcdbe4d72449b5396cc13d207e4ec9dfc
-
Filesize
11KB
MD55d4c559a130de9a06e1215609c77f41e
SHA1449c3445e713e1701e13ad14b862e7088325d656
SHA256d086d7e05e4901abc61a4d3fb9f344e2196c3d6a1e49ff51d5da7593ea4e71e2
SHA51269535872425e264c665af5c3c8fae8bf166d33d26e0aef9428c1e42fe9622f6f1836106d97d338095233d6dcafaf1872aa3d6ed04b6032828d979aa1631e3ad8
-
Filesize
12KB
MD5be3014aaefe91b441612a056def7c985
SHA194f0aeee99e7f36698bc83098e189f03cadc8f48
SHA256850934f58308afa078298ec85a31b0c13f6cf4acffa0766e6c54ecf8f465c1bb
SHA512bd3c00d74a76515dade6c3940faa644b87e2bd2e9f1e612f3df4c42f7e3c0ce86e411447457b518af4eed409b0f0bd60ca1e22bfd8f0a8f3392a5aadac7a26d5
-
Filesize
13KB
MD5457106abaa2a400e61ed1c2a19eb391c
SHA1e1a0d73b40cc8b4a67d90464e7d4c0458e73a3b0
SHA256a95e41a3b4c3f10388eb18c47e3a9a5d76308cb270f80eb96c02367eea733352
SHA51286e562a20d75933f97171e7baa96ad658d609e2c0dad38c16e0081c9d747dae0ee63d6a8f1f211502bb9c6b59cad59b3325e3ff7f03019686e2c3034f3e75471
-
Filesize
13KB
MD5883c0a78f1525ae1dfedd0a314b050d2
SHA14b08c2faaedc0b4b5c7c40d50398a25a2f192d57
SHA2567a41eac31d4cc6151d16646e0583010a6f91e867bd8e22f28dcfa4ec4a4457d8
SHA5128114044706a8ce326efbed05b85b2ef88e3804562ddd8db33226c6a2ab5b78a018e55ee4f0b2f6dd97aa68ca024a071d15ec9653237c39ce6b276fef0d0bfb49
-
Filesize
9KB
MD58f2f2d4d6e4351f62a006821a548e51b
SHA1f0e28f5c2dab5ba9ec3a64fd34ddc45cbdcc7738
SHA25600855e72b4b0ebf4c170a099f67ee234ecb36611bc4742cad907847228bd30f5
SHA51202303d2f8257bfea90192838fa9b7c3e983aa99000d6176001c930c396b4dfa6fb7914dc54032a351801a5530830809082305671f9db3c2d408232798b271d12
-
Filesize
13KB
MD50678480153ce3cbead958513f8336999
SHA1b39b55c6456c8c42009ebbd31d8dbe9767f602d6
SHA256e8c4a01df69f5cd953b47b4373c0f754dd99e3ae4e4c3c5efded5d7847e8f090
SHA5127c638977ef000e9e9eb9c0852e4f13ddc589d581be47c432689f1ce26796bd604d6812da222c93bdc4a05fff5dc448c83fe10d883499d9e360f8c63693137f30
-
Filesize
11KB
MD57dad42f62ed451d09da8227bcc9b92ff
SHA1fd17d70bec6dd7aed2dd6065dfbe7eeab9e89829
SHA256b6efb59310a4c94c407644ec43fedef9d0a4f5d85ab4d38b12090960cc850b5d
SHA512257ba7f4e46d5ff573acacf275c846bb3c19d4af7532dca297657c7ae7843d98fb2f4860dca3a4b47c15d8b85cf0ad62392cea539aecb3507540615126aef178
-
Filesize
13KB
MD54b1cc8ed006073cc7f6328901b1e8743
SHA1fe7b609937c4a1fbaa0951e62b7b35a55da8ddd3
SHA2564f656b9c71aa8f9b4debddfe2fbcf8dd603f0b19cfafe1caf6b2532a3bfa3b90
SHA512fa2c650c9d5d736cdbb8a3b6c1850a6fa7a14718a4ff3a16c7841dba44b29de6bc19a8b707969f8b754f489c4a1f537ca09853cc9d0ca65222e21ecc88b7a065
-
Filesize
13KB
MD5e98d391b2affc7d379d9051f698e6e54
SHA1cde13d2c7e9deec7c258008e0646c3f79050ff4d
SHA256fea6ae0e858c52219f2ffe3096ae3d4e7da1c031170280c1cc3265363b28cc3c
SHA512d5a014bfc7d583610605f72c98224587f40555f78b674d83f9c6b9008e7063152039e277bcdbe2ed90824d0c85e2f3610486f2a961f64bc9a1f93b953a38843c
-
Filesize
13KB
MD5a1b577fc3f34a30696ab4b3947cae481
SHA1d3a4033526189fe538094691f491bf8af2459b1f
SHA25689fea3922142ff6b1ce610ca5e2ac7bd3ad358a19dd0da934de86dfdd6b742c0
SHA512ab09b7524be25119abd76f3c138f1be4a4f9369859d74f0a0809ac201164d01b10bd4bd369ca292c5061d9a14d5a766776f54f4f4ed545eb41b2bb0037035644
-
Filesize
13KB
MD5ba1fbfc4c968cd257ae69fc19b76be25
SHA1d3cb5f0e6151522267fa261192c625c80893d6d6
SHA25617f82ca19c0284f269ec3da374eade8d5012a534e91fc891cf65b77127c2e9d5
SHA51293475bd600a9ecff425e188f88c33a4816b9234b16584a4f434ede6e9b8f8fe9da64124d41366af0f3f02e08ce0dcc3fee07ac7aa15f86dcfd27f005c889a4f1
-
Filesize
13KB
MD5f8b9cbc4675dbe67a9ba9b8674ff6feb
SHA1a62c89a05f92fca84a2646b404607a9b24b9d11a
SHA256f22dac09853df33336c4bbf58b8eb72e72c59c3413955c0be7efa17d758458c7
SHA5122614133571cd49ca92f54c52334c13ad91f4f3f06d63335a9c63cdc63781cb328aca071f93f2c4886e09504fc1ae4890f6b6c8b4dc519a0c519861d751544eaa
-
Filesize
13KB
MD5781357b1fd599904e53bf2590b1a82a8
SHA1eeb6232c4f1f7188f749f786f4efb630481baded
SHA2564dfb350baaf2fee15834fc07e9b2c55b485ed62f833327c65c26c1ac03ea6c81
SHA51258956d2fef1ea2786856f9b271ed4f8cbf1d52faa212192aee585ee8e0e01646386e7227b6c76519a7feedd0b2aa91da13c949fb69687bb658ba9048832bde62
-
Filesize
13KB
MD5440a2b92d60b5e2635a0257f4440f20b
SHA1d7fe65bb601a71ea87919f8f9d72cc1392645dd6
SHA2561752c971c4ea47c1a2f31902cb888b9b556872083cd531c8570309754883e511
SHA5125eeeb1084484bb47f2e78bb50dbc6901e3e38845b6ce87cb1cd499c45d323a0fc792318c930f378e997311c8739f2d03e9126fb7391eec5a4cb993207cbaedcc
-
Filesize
13KB
MD5fbab1f1f5c933a32fbee3399e007f61e
SHA177ca3bcf5fb9b35a3b5bf3b5a29d5f7bc6b36497
SHA256401a33a55941ec277325997d8a19c2444f6bfa8b848e7c8e72eff80b161f1e51
SHA51210f4af9965fb3de71e6022d63ad957046257f1d64e729eb1b39e5ab7d17e020edd1635132b222158a3cdc30fa411475ebbd90c1581322a777e27021bca140350
-
Filesize
12KB
MD505b6c8bb95f8e266bf1da9da0aa083f4
SHA149fe1a68bfd69b1f10f68e693e150cd440bd32c4
SHA2563f589a5c4d17bd77ff82c5fa84a56b3740a27a9135fc37266b662275fc0b842a
SHA51248f386ce30e8312048fd9629e63191ef5b8d602357ae2044f8ac67df200bee3fe82e7e2641f22b9910067b63af86c64ab7e58c11e20de31289fef78626dea065
-
Filesize
8KB
MD5428f188f17e2ae180ec7eeb5c382f7e4
SHA14aeb40dd87f588589757c15ca37aac44e3c9cad5
SHA256dbbe3399b2bb2834d66cbb07df3f959ab64b7cd88fba01f7d40c97374144f31d
SHA5126c86ca1e66f26a2dc084d06be154dba7b0c04eba1da941317c5808831328e7c4afe34abf48800e623e3fbfa634097d353e35d4520df694eab5104c4cf29fb98e
-
Filesize
9KB
MD5c78a9e044fa858019a73ff1e906f218b
SHA1a5ceba4c6984752da10e296047c039cdfd0af545
SHA2568482ba8e2a5f50ee47e09647fc82e320415a1094c21e506df4c6c53521e628f8
SHA512bc71ad8a2f63deb57e32de4edef6e54692e976c4e721c0306dda2759daf1bc107425134aa43d53f2ea28efea1bc4e13700d1b32576a9d7a95358a3840069b6a5
-
Filesize
13KB
MD54dec9776c285fbaf8013d25f390f1a15
SHA1de99319621f1373041a970b65e5623a95059767d
SHA256d84011aac3e51028a28564f4c4543a7eb140830a3a4be0dba6228ef656c1dc6d
SHA51231f54f2a4c7987cd63512973d71032d1c6e60823ece7247b2e979e6b394c9efd34321c21241c17aa02766c2b0a3e578519ff66f5b66d74a2d4b27ddaf29ea7d5
-
Filesize
13KB
MD5148554d16bc9dfb5f61132a6c28d7277
SHA1e65aa2bc842eeedafe8de6b20ec4ddf4e642258a
SHA256f85433f330c5acfcc73abf2e834b6cc82c65f35e1bcf3511c58153b6c73111f1
SHA512da84566a3e793f35dba7333d3649aedfd2932c5e1514bf7fdc93df032d4d7c2506add47ee12dc1c4685a3875de285a75ce88654b6c96c1e00f396cde5d9f198e
-
Filesize
13KB
MD551823f6d4879d4efbc226d0771af8bfe
SHA15609404af39554d4ad49c3dba5eebbbc5ee53efb
SHA25688b8a3b85d3b8a3857fadb0e0f10ce7a18894e8c5bd3d1e8672a37a19d198e2d
SHA512cf58f5558d51f6e2d2239f4d03d08dc749891f946dbc9c9aa6411d3373413763a7462397ec9f10982f950276d8789a31e9b9ff15e3715a447569243dbae1f354
-
Filesize
13KB
MD5112639f2cf5cbca41247bf83d01d24f5
SHA1c8765aee50107e0f6c7cc5270ba52d78f7e4120b
SHA256487abd07454d53bcb1e03acd490ac6fd9126424b7e73925c4143a1d9c7d09653
SHA512473538090c2598f24c6f99702bbd5a7b276496b4762c604b51a3186b601b7c6a9a1d2c5205a404170c85f7ea0fafc9a27d8eb66e3d8ccd778a5541020636539c
-
Filesize
13KB
MD5fda6d736eeca494f1a9529d8e3e1d602
SHA1a5fa824fe401aa644ecb4a76b5b086a9faeb11ac
SHA256417dda57767a8dc917524bf81149721d34ed676a104ae82289f3008b60721837
SHA5120c2cf46f68345723acc09f589464571628c09ff3359efd2fbda8598f37dfaf5e038501b58fd81cdb67d02af6913d795f4de21be18aa2f00febde7de77d65f59f
-
Filesize
13KB
MD5394b843f843c9245115146b82c380b4a
SHA129bcc7df551e90dc63639607e2f29780415ceec7
SHA256dbd236d378a7ea15802bf7dc86ce4d46576a904a7917af6c903d6a17061d2164
SHA5124f628de8517923f332e811fdd837eb16fb5ead57acb50b01d6d9355c11713331c22eb990b9b89ced2a4dc19d4774486450b2ed910ce5ce6f3996bc73a39028ba
-
Filesize
13KB
MD5b0a8ac6cc6b36d65cab0558a5672058f
SHA1c86f9295c42a255fa6326b5d02a4110e8584bf5a
SHA25603ce50cfe503ef928a32f6417e1342b6a83e97c6fde70e763a85fa609c44e0a9
SHA512061244969562f88266216309e740f28ff2e40893368dc6c8085255403ff1c8b9a1acf0b17284ee0849f2e18ef0e5fca9cd4b829ecae99fd89afad56fb23ac26f
-
Filesize
13KB
MD5245d029da62d0ad3512a09f02189e3b7
SHA19bbace581046b5d65fdac7e46ec90efdd799bf70
SHA256b7cae9b741d48af0fed5488aabcdfe614ba5efd843641b1fd3f02380ccafb96b
SHA512975c54e52716cb618a6db2e2105171321f2163defb5299423d97c21a7ab4f753cc96d026b5566f00b67bd720945965b158a381f8947ab3953e2e18dc279e1d59
-
Filesize
13KB
MD5822c9715f2e3636a16da78cad6431dd1
SHA1ed7a08bca032c25f3310f2ef3af5f02369bb4031
SHA2561240b9fb555eb76192ee1e3b7ffb3ca29915583b39272477a61ff22b5092d2ff
SHA5123f1ae386d8fe71306d99f458c50a230b1a561477f1a1082932215885a157e1242ec918e430c5a682adf6e964e1a595282e4ac42cdd8bc8c4202b7b9c7c42fcc2
-
Filesize
13KB
MD55b6d4d3e23cd01b02fd31918fd83da14
SHA1ccc1644d1fe99209d5897226c007c4e460892524
SHA256dd2cc8ab1db87be50697529b3e1b7d1b68861e6be168aba767c089d5f122ce62
SHA512b67925cd4bbb5205b060ec09c0f99fed0fe386a1eba74958f235367320d9222065124e8ded1d4f56475ade5edfd637fea05de099e792be1babf7bce257172bde
-
Filesize
13KB
MD5e501658e5b1df7b815e28582ab48c8b0
SHA1b081a5339e80678e2ed15319438258b4529267a4
SHA2568b4666ea69e4d148b5c8d1e79991340b0086f727928bf5c46216294fb50f5032
SHA5122cf74f3e7b105c83758b42c89be6de1c71183d33dcaee24e32a8ccab63c2aef641a12a13d36e448edbd06e4aebf5c472842f12518743d618a7fe75cb663a1eef
-
Filesize
13KB
MD5f88456f3de97aed9e9eb068e6bdec83c
SHA14d028e89acf523c9e643dbe65ce6bf0eda9d33cc
SHA2561c7d7d8a6a9fe83d77a0acfd5c3772f25503e9c50173aba35de0edb7faa9d508
SHA512d70abfb1b6aab4a5cb13b4019a084e49a62c19988068a77ce4eb63bc8e37afd3005d3de3817269c694364e462ccc6120ed619cf19cb065049b61978c19d4cc87
-
Filesize
13KB
MD5214ecc392bfc6eaddc03401970ef2361
SHA1d70168e218303b035793612c4b230b75baca7f3b
SHA25674f7bc09aa5d10d86bda1450b1e780793d3b577509077394ac74ae85e36682ca
SHA512d55144559c02ef42c7a74423d8a63d118306d346e846432c2458222c92114f8a2a33d5a65593ab80b0c8fad49340a9758c6e7d2ebd0bde7db15ed3336e8f670f
-
Filesize
13KB
MD5269dd8d5f045b11aec0c3446b5577a02
SHA1a4ea1c67ced90593afa41f153c9c238d029e3ec1
SHA2566679e30ed7ec1f0cd8b178c2a079b24c44c936e3d192b385d67c88dd313507cf
SHA5127bf375a715c22ce4748c16ba93967eee256ad91d58237d4055303535389c969703563a48459ded031b1ffbcdd8249aacf4bad993766211b0d580314678802f30
-
Filesize
13KB
MD5051aa1cd87e99526c0a858cc207f571d
SHA14266df2ed9bd8b0183fcfd2eaefad3a1eef2d23f
SHA2567a583944840dd87d2f3d42b4926cce99e267e7f2b327915c6ff39ca5df13f13e
SHA512dbdb8d90c6eb880e2a0b3bf2a99cd0de7dede94b16688c144f4a65ed7139301214f2d3a48afe35fe052f3d469168df537590ee08e3cdab8a16baa161a60757ec
-
Filesize
13KB
MD5a44c96954f9d5910d844e133773e4cf9
SHA1c04de7dd51cc9c0278c75217b6e4e21af22d8a8e
SHA2569ab460be83960a2963acde421d47ccc6333ccf2c41e5593d4eaa6a11e47207bb
SHA5123d9535f563ba15ff9eb45ff81f938fe2061de03225e857d62b246fa025ce39ae8826204479ed903d902818f4889e406339eb2803751ede33318012a7df45d954
-
Filesize
15KB
MD56fa598f5d9d12d983bf9f7af1d6e671b
SHA182352632cc573971e64ce57cc0a3f498edb19c00
SHA256e16a0e97da6bb8e7ff00ea8bf18b16496b4edd14694e8254133a27e918099efb
SHA512b97d14b93ee5e58a0f0255cf3f5798bea6ad8f6bc1207611fce0f1a7105da3fc8b6597af6f0ed5a49377a629304728852625930539957037a55e6d91edbb37f6
-
Filesize
333B
MD5bc515f829a8a1b773e654d03a3b2a871
SHA11d39ef65137843ed042880174c85d1e418ec6c4f
SHA25626b8a23c100095a92ef844eef1afa711b4835d4d28e86730f88608b178ec56e4
SHA5129ace5791eac71bcb16397e4765956eb6304316730ceb0e2f555f5f919322d71dbe57e7fc48d01add14249a8ceab6d9c82f081b47d65b4bcf27ced5aa80038411
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Filesize77KB
MD5b3cb6906fee178601d6fc75839757ee3
SHA12ec8b7f9ac36a0fbfabc80499498686a374a7ee5
SHA256e8278f2800857d44d9bf51cf33465ff830efe4846fa07b641bc9c7e6bb2d9163
SHA512fbe53914c23d0d5071a19912de20fccff4fb681aa523b79bb5231802f6e8a630815c1d10b33c36e0108d32f741e07aa05f8208671ad424803fc726304f334947
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize120B
MD59d3e8c32fa01940f45c5650fa569367c
SHA18ab5c55f0b56e59a3cd3142522d0afef4037b0c0
SHA256510b9d8ccda6f5a1df75f95873610e2fd170bcd8f5c3662c63223cb03a3888de
SHA512d5f71ce8f2cfd3cd3b5d6fcd45f574b04e4b73dae817f362f2e56b23bde7d98d74e7dd6df98fbbea41871f9655a7b8f31204b2e135b7bb777ac14e72b01ec97f
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize120B
MD52a2e92f470356d4fee46a24e5cf8f9c1
SHA17f5e2d62141e2446e9cd3a54343019f266b98ade
SHA256ef34bb96aeab84c849e72bf304c57dab6219eccb9c69aa73643613056c24fa7c
SHA5129cf2c83c2e450240d00b0081387d4bb0ee82e4af4e07f12e11cb6556efa3b7c7180e36e92aca08402caf0ff7afe24bbed7bb0517db32fd401bc097227dbd288f
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize120B
MD5f80a26bf524723d4e1bfd9a79f36a09a
SHA177b27b0ef3e6f6b26fc1a476ea9f4d89c00695e6
SHA256cfc728271f695f589a3788ad3abe36ae440f298c435e8677023491a61330d791
SHA5121ad2fb81da4593ff5ead5c7462420615fe28702a34cb41061a3f0ac26e82bc04f86d7a3f55f8275f8bbe3702d719192ae7513ad5178743d5a55a2a22b06a8dad
-
Filesize
327B
MD5a66efaa590a0d16b1874a35836ba0a4b
SHA1bb750c61e162420271f89a90f2b58f43587680e1
SHA256b9ab1ed7609e2254b7d4fb655b57b21b2be601646c4ff0b207c411e8bdd9e654
SHA5122b1ea0c798b69b360ab1546d14fccf7d5f9cb224b31bc8430cdb956c8cc570a086e4cfa10e6a843292deb862f4161dfc9b9abbc44afe397ff0ec9563646ff7a5
-
Filesize
317B
MD54f691368bef22e2be0b079cc7747503c
SHA1b04fb4e8734117a1e91874aee1540cf844995c31
SHA25681ebc25568b538fa639b81a14f7f44a79f2f92ed4554b469370078907a06ed6b
SHA512baaaaf5840cd87663536db0ee1ad81f33b1f5373069ff586fd5d403f9238a2f70db315aa506a307a9cefcd06c9435f4d9ac2c1d84d5425dfef7019ab7e62cf4f
-
Filesize
2KB
MD52634bed95cdc56414c83674f9b300c6e
SHA1974bb93fa564ad22f430d8a89d220083355c0ba2
SHA256080a3be56faba3e87503bd622153f72809dba1ca03ba19ba60fe39a3b94df30c
SHA5120a086ebc94c430f033921ca36c82aefdff0a7c9d1fe12cf80f7206ad438be3a1cc160bb4c0819f645928bf3299c46132d14414b04d00173fb0799deab81f1022
-
Filesize
345B
MD56a44efbc87e93f572aecb94381950477
SHA13d445ca49ad61b6844cd472c7c0ee7ca3ebc8bca
SHA256c6854bfad339cd3a6286864a8b82271aa7f37db3014651ea7403c93ef2e5dbd9
SHA512d03fee2a724bcf11a1615913495b719f13f03605a14b225f02cc25bbb0c3e8c3a2c95d5765bbc44f8b576fece057af061be44363d4bf3059b3f1f75f26da71cc
-
Filesize
321B
MD55bd83d55825cb11f4267d9f5bc6c2dc5
SHA122b02b8033182f3a77386636c8912f033cc1e5ec
SHA256381079ff677e090445f29e50e10a013815e7e498271eba3db6d3e22902d35336
SHA5123a588a402221fb2bef18a41a9d6feb8e0e3fd289e2dc203aa9437d1a800f205707e118e46f89c34065f6a4f7fd94054e1380789281df0be97fb0b07b2ce136b4
-
Filesize
40KB
MD5505f5b34b404ae4162670c5088700d49
SHA155baa3a7f4fda5e7431344f4cf87a2d0855404f4
SHA256a1b7f5211e090d93a2e971c650f40db768e61e25a3b0d1287d79ed7b42b48459
SHA512cd39339bb9f6dd12cc5b26d8a8022ee5ac389e497df146b97130052dadb7901f57a7f58dd46d0f54670a99e06ca986043aa8023cbf7005f37b7ee712b325f0fa
-
Filesize
8KB
MD53a85479d235dd8e8ae2a2a81a325558d
SHA109377ea3cebd9521b0beb84b5bf06b41db6cb2ff
SHA256fe70892d982df9e2508b134406f55c03d3b3b85a9257e3d970fbf5f12feb14e8
SHA51298c19c670e5fa7255056f7b3e8e0fe007d0afbb2b3ca47448bc3e52cea69c870aa5e01aefff9e29a5f382e8615ded2937d37e879f3875e7127152d2e5aa5d365
-
Filesize
16KB
MD55fb60bc649483ebe575c5a6898b96b57
SHA18c9e0ed6136240de34c900445b5f1ea7f6c8f3bb
SHA2567d02960ee0d8cdceb5a3a0c449b983cf44a64b0345fbb70380c912f9d6ab36f2
SHA51262c4305410b7847e069b9b771da54879c663254061662ca51874e1da67c7d6c681fbbde6fb7351068dc4f79ae7ab7bd5c616e0f384104800bd6e673aaa9b1928
-
Filesize
317B
MD5280616db56eba534e51ed1d686fee195
SHA1763a1605fb1d3e3d206e407ea72d4a966456e56d
SHA256fe1499c2b2c4f32bfbd967a4962b17a5d20de266e1e9a8806436e249a52af6cf
SHA512406f0f65ec44516dbaa190ce1b67152a6e578d63a16f5e0c84ff4f39219fb60046cd6651abc91a4c5558b73c1475590861d9987ff8a6df37c16bdd0488e4b801
-
Filesize
1KB
MD5d9d927e205ef2ae7c815a713151c6406
SHA1e0bf847f5ec3ad0d59d4eef1d244b0a0554e6157
SHA25653b88efe73e0291d5804b505561d7136871688ebfd120eef14aee8f4ba2a979f
SHA5124b46a649d972e9b869dabfc0ddd9cdce4c2e718a35945accb1727983956b409916992f10f617aa5027e8090322a2441cfaeeb1054755b3c1b5f62682185381c5
-
Filesize
335B
MD5d04325de64ea0dd47f1949535ff7bae0
SHA1281c413cb76cc3ad61d19dc8a2b311eaa9426c28
SHA256695834a684bc085e21601939ee413bf18818dbb239304bad76d91bfc7f3888c8
SHA51285b2880b0994b66bf7a15125882e8034da437fd1ac340f48a856a9592492ec41dfee710c4ff91d056e41f1aef326ebefa5fbf7ea8789fdfcb68bd3815d00765e
-
Filesize
44KB
MD5708c221d00e862347ac46caddf00be8d
SHA13b300c0b772d73ef27ac66aed05e23dbd9cf035a
SHA256b44cfc950b320c83df8d5d8dfc5a5a399d302bef3590e3ebd10e3789779e5ab4
SHA512b1935819805efada8b95322fb1d5ffd6eed597e052df2e50c81e41126e3a91f8531b0dd36deb8181c8de28d007ba84e667183d7b8dc83df2bb92ecc91989223d
-
Filesize
264KB
MD54cde8ab6e7110caf1dce6716b46d18a3
SHA18bee8ebf222cb4975c5b7c98413af1a5e4ccc591
SHA256e3befb685803222a9412a21fb83260569e453d2fcec362c739f26003bdef6cd0
SHA5126841aea3d13d4739767927a7c8f2c4d87a02642a208a308ec5e18ebea5e5041994340ac51ca2a60f35d34d7767b606c359187dbf9de92637173f4fd53a8acec0
-
Filesize
4.0MB
MD55a58b427637b5e16a8994295f07f269e
SHA11ec114139a527bec1e487e4f926bc37fea8d3bc7
SHA256fc87ae48bba7dbf92f7d610ee49009de4f9c3fa48d074da886ac121b65f037ee
SHA512f640a7920d403189cff1a8f6c2a003deefc91237ac3e763feaab2afe17df8fd66515badc659892db7566b06caab18951201b3725e3938dd1068f3d45b6c84ece
-
Filesize
106B
MD5de9ef0c5bcc012a3a1131988dee272d8
SHA1fa9ccbdc969ac9e1474fce773234b28d50951cd8
SHA2563615498fbef408a96bf30e01c318dac2d5451b054998119080e7faac5995f590
SHA512cea946ebeadfe6be65e33edff6c68953a84ec2e2410884e12f406cac1e6c8a0793180433a7ef7ce097b24ea78a1fdbb4e3b3d9cdf1a827ab6ff5605da3691724
-
Filesize
14B
MD5ef48733031b712ca7027624fff3ab208
SHA1da4f3812e6afc4b90d2185f4709dfbb6b47714fa
SHA256c9ce8dbbe51a4131073db3d6ceef1e11eaca6308ad88a86125f221102d2cee99
SHA512ce3a5a429e3796977a8019f47806b8c0671b597ead642fcbfbe3144e2b8112d35a9f2250896b7f215d237d0d19c5966caf3fe674165a6d50e14cb2b88c892029
-
Filesize
98KB
MD54df545029d53a0a5697f133f80153219
SHA1577b45bb8c8f55d3d99f38bdff542a2c7825c593
SHA2563c8774e0c1d6a321fe6e442bff4906345470ea533dd385c19d2c80e3de2480f4
SHA512c4b73b8fda0def9bd3d08fe3125f518f1a024d55865cf2ea29a88ea9eda34f55f00e034a18bb27bb810f7e2ef8a8ffcb952f203f13a5a7e9dba5a12dda79fc4c
-
Filesize
98KB
MD52835b2c01adea33ef0f088e0d3818224
SHA154112f4001769e7fda83ba0b18f64724eb2fb282
SHA256a118e7063b9accae4bc5b5d222cef290e881a46407b1969fa62c64ac4fe725fc
SHA51219e5dbc9a6adcd02d9b60a42f39055dcb6baf1d7a98100ab74585e92fc48483106166f0690d31a6584091a7fcfed527e9363e660828547469a90fde7125ca1f3
-
Filesize
98KB
MD5a64c2a28a84715a15c7c481c288e09fc
SHA1ffaafb32e8ee00da88aec569a1c3abc33f5199c1
SHA2569841d188ce919ead92b8b0ed3e0639c056d5a400a7c7902a2956a900db7b2018
SHA5125b0685612221cbdec5e6f5dc3760f5ae85a442e8782ae89be9486489da8272effaf66c544a035d3501fd61c90bb0515f2058d943262a5822f5bf7fcf72bed77b
-
Filesize
98KB
MD563d1b3a8cb07c129366cb8c966c7e232
SHA13584d05a480344ae1d97cd69f23e382e3b2dc44c
SHA2561c77c16a46b320a7e6eef5204254b345faab890b81f1d839964d5e6ffc0c8b8b
SHA51279062b97cea4ce3c9b01bdc0f37b59dfcc58964209b234a3796d5b2f29cdf661d471ca27daa0c677d4d7ce0f41eeccac8913b2eee0216e55c28030aff0713840
-
Filesize
98KB
MD599d0bd3ee336c2ea84b4559927e8b8dc
SHA1dce54cc8f4b19ea3f6f6e8eb36d2f28b3c6024b5
SHA2561a4f529110ff0cf79e2ede21c48fb0bbb19e08ea096f8cc2ed7f7b808128b50c
SHA5121f956760d7fd569806724113bfe2f68b09e03af4e3ae2b9e7955ab5dd0ea18d2820deb4ae353cf77791e4a5510ba0c31c28c2caadb9c203b29f3430e14449c5f
-
Filesize
98KB
MD5c31ceb4333e39f762886d4ef4a494ffa
SHA1c1319f3232f50b27a5e1709d5a2ff719a19e33ca
SHA256de49eed4c9926052deff0b356dcce3566a7feac5af1904c20a62c3664f1cb7db
SHA512832e136142e9fad1afe8a033f16bf1d15ea626438972e27ba259307e08c8769a235061671ac8bda0178f3dd9196aef4ec62a3b1dfef9ffdba43d195bf29e7aca
-
Filesize
98KB
MD5214ce2710b4eb126dd6e7f0903bf929e
SHA137613cff08ad0b2c26463edfe41aff98ff84a012
SHA25680cda55b7b41f5d5cea40da8f135ac596682194a739eff47f846708d7ce7bab3
SHA5122a438d3616f60f9f6f86ceb73b8e3bfe3db53e280870d2c5bd0a8bcc15076fa81f1596aecbb61a5b782f00c57d6a694a254e2b0977e7462cde5e373616336f27
-
Filesize
98KB
MD5f524a2f32fc2893452ddde767320b82b
SHA12c6fdbe76b28920a18592d0fc53917da67e0ab59
SHA256ffb059f153a8129de5a6babbb0958b3acbdf69fb9fa1bfa42fe043e9d2cf6deb
SHA512c35c5fc0daace64bd806509ca824e16a885cdc64d5de050be9105b0022cf928cd3d6ae79d08db38f221234e82156c638db2fddc7109a2c9f7cb8fb1afe7f3b81
-
Filesize
98KB
MD55f3848e8eefbbd68d836b8e141d56655
SHA135356f82e16b961855c45bcd5c39dbcc4c1ff132
SHA256309b7a764b924f3f44b6e757828287521eca48fdaa7e9812678e619ecbb2e0b8
SHA512864ae22e33eebcb803ebcaf734999eb45db6d13ca0e41410349cdf11a37d35b7b243a093b11ea8ceb669ed0bed74289f2a67e8569049e48546aa177500aec253
-
Filesize
98KB
MD55c0a5cb165c47db98cbe6449cb3dae06
SHA1346f89034313864d86ca7bcfeccab8ce466a3734
SHA256a45e09785f1ed35936c31ea0de7a4a13d4c8c58fe00986ffdbb3016ebf36e6d6
SHA512f9359274000200ca4c878186013a3f908e218947378dddddd3dba65cce8f0573417818423a32b5e528cf99f12971cf1d4f76b2bea2767febef9ecf5a89838d1a
-
Filesize
194KB
MD5179a61e2fa59de4dc4e69cc0a56ad679
SHA195d8157c944d8e055f318eb2a639c5e855e2fc98
SHA2569733257786c5d878267e69ba9114b0a96a5673f9ce2a52edde278dffabf5cc7e
SHA5123a167192dca66b5b39e8261dcb0f9e1015a39f0049fef980b72e8f3487346a047083a88d9564d8c6ad9d60434188674bfe30aea6fc6fe8f338727aa6215daabf
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
86B
MD5961e3604f228b0d10541ebf921500c86
SHA16e00570d9f78d9cfebe67d4da5efe546543949a7
SHA256f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
SHA512535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
-
Filesize
48KB
MD55a1706ef2fb06594e5ec3a3f15fb89e2
SHA1983042bba239018b3dced4b56491a90d38ba084a
SHA25687d62d8837ef9e6ab288f75f207ffa761e90a626a115a0b811ae6357bb7a59dd
SHA512c56a8b94d62b12af6bd86f392faa7c3b9f257bd2fad69c5fa2d5e6345640fe4576fac629ed070b65ebce237759d30da0c0a62a8a21a0b5ef6b09581d91d0aa16
-
Filesize
1KB
MD528ca01044313e25073ea1a48976fc98e
SHA1e28dec30fde0bc5ffc91bb2e2182af547367e3ce
SHA2562c266bfe800d6f29c0c57e9ff1c897a4d8cfa796c653319584ff8e83b851d225
SHA51264a11028348db6f278c4dccbf855199ff6721c7ed6d08520ae2fbb2d59cb03dbad436bc1c3b0e22ce2a95beb7558df2fca270771f2cf5f0980466797b5079c41
-
Filesize
3KB
MD5ab6db89ffae32bcaadb6c8d998c7e015
SHA10f38b43327a285e73adc09f067e1085a1ba548bb
SHA256220d79fea206070cc7e9f7bbdb7c6f3d7485dd9a34c5ef07c1bc38678cb1db3b
SHA512dfb81416a23878b31c291abd0d8ff09bfdc5466f60d91fac712803f7c42ca5c136ae60feb16a80b1053fa23c594efd4dbbdc0fdda833b34f93c4e15dc7410e65
-
Filesize
4KB
MD556cd1e79e223ec9299b6d9119186b29c
SHA15e65a085a00320b3b2e7e74f302b2f5080837028
SHA256bd277d06a364cb21ff19cfc888aca37290ae15296c3248659059328381cb756e
SHA512096755720ee715634e72ff8ff476a5fe04a073a9fd8ef3937b64846581b3d68b812c9479d21c5f6a78fb0b85eaa0251e57a5c2f5c71802d28fa37b4ff104b892
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\30f44nop.newcfg
Filesize1KB
MD5b0628594873ebc9a43dd09053c427832
SHA14bf395e5f8b9fb106b49b8117f465567b55185ed
SHA256356bb6636c434b416dab029df028dc8fdb398377135a0d11769704e2d0b1d533
SHA512c1bf0609ceb8db44a2c43ba263a97e25b62daa0a4781a08407d2d1adbe7ad33f613f72a5b25acc6f9079d4f7cae1945f8777b3623a1b6ba8d915309d7ce32a82
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\4trb3pig.newcfg
Filesize2KB
MD56e82e11aef34a3c2c31c2b802aca7226
SHA1678d758fb4f647569df9c535aff572ee68044455
SHA256e435cf71a0a0c813263ea8cbc251cb1304b29dfe6b170e67a17df91d84d4dddc
SHA5120466d3faced28c01812f985eb24775e80f6f052f100a4476d22b2e6d1453471c37199852d8b4f5015aca5415e2721bbe4655919ec75259595fcd94b738db3d5c
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\cmamonoj.newcfg
Filesize1KB
MD540dae90324df32cffc9b8a194abb8d06
SHA11643bfe6210a7aa323a55020af197b40c341c540
SHA256e9ed2364b05eb499ab88bce43410685a9cc9004ead882e43200849bcb8fe5e89
SHA5121f431a4e2b457dccea9d88369dc8faf4b858d31192cc8b9fb5e230ab1e0026ea971629891935c850b753c40df9dd9e7346ffca261727224b0f350084d64932ce
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\e02nnuan.newcfg
Filesize861B
MD58fcfed0307b17dbe792fd477141ebaa7
SHA1eadeff417fee31215a1449982f3e58b9f52330bb
SHA25604119e97067e832137e094aceaa61f131aa4984fff9a8930592ca8c30914f982
SHA512ffa98e1347556f207e958c923f0a98f84891682ed5c28f60e81b2b7d8ef10d5fcaec81dfe440d51eff53dbcd77249596bb8c471e0056f807a7985a3f47e27544
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\g4jtmy2m.newcfg
Filesize2KB
MD5d2ef01963d662126143d983df1394026
SHA129a0d3edb6d85c81bbb052b6ff15e90497a39145
SHA25683a36ebfdbd101a14d67a972617315a7bca2c7714d688ac036294df22989c5c9
SHA512e85d3025155de57b70674838f105ecdf7d82cf6e02fbc48cf00a595f14ff83a259888d7f8beb27deb7f6e0db67f927e135f83d07607738bac77fe0cc12fe3b0f
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\hheo4pmy.newcfg
Filesize2KB
MD54f8e7195c372ad5e2aa5874b6351d669
SHA1d54815326c39ea1e1c28bbef95d512d1d067b39f
SHA2565026b6e39660a5ae8cfc2f2255af073c95651e04037ad135738eb271afa3bdd5
SHA51289196af17e0ddaab1f91533323b3fd1c523be7b796f1f86a2f0bd43a0cd67022d49f642a9fba1c94769a46c0a47a6271e3e83042c817e7ed53d6bbe736690523
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\imffthj5.newcfg
Filesize2KB
MD57d3614e087f4f4edacc5989b5ce7f7b6
SHA11db7c7cb09cae8d62e4015bc948d5ddbf1e5321f
SHA256bc825d10d5e5292b09cd4a70ee503639f5485ae6febf07941b2c421ccc13cecf
SHA5127553ec8e17c85233fb33231838923e976872624bc445aae62e6365fa9dc3e59c8761505c81f568aa0d6e97971efd3548e912822add41e5142b64cd225f6c5e86
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\iqeoadlp.newcfg
Filesize723B
MD5eae39683b5f9117fcde036e28aa6ea09
SHA1b362a0882a2afb7d470b94ec9d72dcacad82737d
SHA256e205315b625f88ba5db9fab72956be091f45fdc9e298f06d3408f04bacf183a0
SHA51244d032ef7a455e11f20425ad351c743363d5583554db23003f3cdfa3aa12a0fd7c175f5b0e2d363619909d76ba92617784705f370ccb902295f2e96c2b6ce5fd
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\k5vqnl10.newcfg
Filesize1KB
MD533c2b9cb68c850f660d38ab219f096db
SHA1db3c41f94f579104987bd3e987d85b6ff09aa0d8
SHA256c239a2bb14b95c4734254d8f47af9dd58e91b455b893e8940b59cda187f0f767
SHA512115d20d791df326b54b40edd033fe5d81c738d94b698408301497d643debb788db0f21dc4206b02bac86def3e4afb2cebbbab32abd70036896401112061aa5bb
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\krpztjke.newcfg
Filesize2KB
MD5e5462120c79b5baaa3629ddb3763dc87
SHA14aa2b0d77b6db39a2acd1c823142f125b581721f
SHA2567c28f5a12c043af757e3cdd5c363ddde504be23e305d17d9457e02e53c29c0b6
SHA5126db2871ae779b4d72bf2f5479458e1f9d8157b746b39b1c1a6ca7e786a4e6094232943f68b99420c1b247e9107b60ccbea46d7ad58fb918e28fd43a134697b1c
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\m4g1uwts.newcfg
Filesize2KB
MD5eac81923f6178fc3f55c2bf6bf3c5ed2
SHA111dd455a3c6da54ce638e191cafbd0009f8fb2c0
SHA256fd8bf2083553be06976fc032d14d22b014fc3912a5fe8259399342f1fb7ca2de
SHA51224cea71b209d3f624d2cddd03f8d4de9f0c9b442cfe251f3695e90fb3a940c138a6466df5fc3c59d12cad9c165aa205c64c5b272f47502edf146de0027a1907a
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\user.config
Filesize330B
MD5335d8b10a6988eb38995ef38644b1552
SHA16e7f535cfa1e3ba2a2117a5a0801a00c6ec1e523
SHA256aa0da1dc9950d1e0ef36e6429976cd1388561b5320aefef1f3f99a1a7b05c1dd
SHA512f5060a2e0f2d5d5bba229a8a34442efe0b5334b41c9b76fd52f09325efcf6efc599f87e59f3a904ee299fbc9eb6519843559d539396ac25039a4696f045bb3ba
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\user.config
Filesize3KB
MD5cbeba2b26cbc9f0f44ba998b8c498090
SHA1a52393526fd9d03051dfa58c8588d488d2764501
SHA2567e429d20776b0b2519838cc8df2a6ecb9a1589932988ec1d6b62c57a2e3d3751
SHA5123acb676008773957ba48080126df65e35289a2e1d5c7219274062404d97319254cd2a263e14db27c21949b5f8d55e664e628d16ad73de2f5b8853fbdb5b3b5b4
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\wl0cmtir.newcfg
Filesize1KB
MD5503758332f80d2c0cd5445e7fcd507c1
SHA1897977a2e51e562e20fce5af1af7cde0fa2ca136
SHA2560022a59125e8f274ec86835d3218f0b89baaa85cf2d25a4d8cde5e7ab1626822
SHA512fb7b9f690b73f559edd5e3ea60e450bda2ee7438f819aa766ada3485a67a683623f381337726f2682615f9e0e266bef2417fbda6870c31c65fe05000ac29b285
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\x3oqdu0b.newcfg
Filesize2KB
MD5f26a3ba267ca561256d7bf131af3595c
SHA1e88a4506b555a13703ab29e1ef6c7f11f347898d
SHA2569bfd86cd3b913e40213252c63d34c6f75bca6802ce3e060d3670b6a210376b75
SHA5123f48708e8224d6aaee0861af8666c324c9208a152cf3afe50eb501f07802930a890908bb51199b1805e30b8513640fd565a4f3656b95133116982e9c6fd1ce55
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\xbpxn3fs.newcfg
Filesize2KB
MD5a69ed48d38dc8ecfcff425dbecd05086
SHA1014faf1921dd7983d16065d48a50fe9754f09f05
SHA256eb237d10be41f972f62e89b467647ecbb4bafc68d4c36bb476a67ab256545649
SHA5123f3268ced19a236629fc9d955ba161d9417625b964f15b3980a393619016849afa6a92059f172f6a55e1ad142488f9ae9aedfd3f29fa0ae9fbdef896ad4870f1
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\yiuvljbn.newcfg
Filesize594B
MD5d2a31af04b72f10b334cf6d83e329178
SHA187ce6a8c7c38b66bf229932daa43d10acd43f5df
SHA256be6034c3d1169b8b945d3a6e939cfd25759ac788ade5b59dde8aa299d1cec49b
SHA512f5dcd0d132ee4119550ef8f2c6675120e03647d36e2a1dd4e5bcae2bef0445398f4fcb4dac8287ba745a14e89d93c7cdae7c6701e4c6ede89a869c5b354f95bb
-
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_kleyaxrtenldtfqjmu2cbjmsn1otpqzk\13.900.0.1080\zpyio5jy.newcfg
Filesize462B
MD56c7428ee170827af95a42c36eea3c79b
SHA10f3c9a3ed6b8ddb27afe69932de2b96a5ec2a84a
SHA256acb6dd2a0049c987baaa2d46c6fcd6de74cc90aa79f3b5a5713454fceb299a46
SHA512e4fe547e171e2d90a48876592dbfcd688ac61d63ff2c69fca4ab9bd4935600f362bf18ebcee1d7b2e2a8c16f15695627c28133d55e79be18d48c27c63c2e5b54
-
Filesize
1.2MB
MD57a3bc6142be9b7c9664464759974c08b
SHA17055fe5cf3e31a24687c3fcbc06394eaf097c6ae
SHA256446839b455f486943d42e46c8230b6b00d59943de94449fc418ee626aba4dbef
SHA512c881916068cfbd73425e1a6662d1049f02b8f1ed34b8546a9555d43b2b05ac3507e94f996435123a7694a2f2ddc4ef9f97d839b9a9584ae3ebca37f1b45d63cc
-
Filesize
344KB
MD59772cf99f14ea49a1696d332d5fefc66
SHA19f77dbf43b70767f316228be37fd1e2e0b1ec1d3
SHA25603ddfcc1603ec9669159a6398e586d7f54bc3146fe265c16647b2f5bd8758b70
SHA5126f5b2c0124ec7d4a6038a51e6d5d8ecdf3594aa37e9973692bce325789ec276f02f4679606176e36db84e9eab0e2524e1039fd1c970862ab9da5776ca650b310
-
Filesize
59KB
MD57361d437f5f0152896832358e4941350
SHA1918b3e9825ceb47f873267918877de97de71be8c
SHA25611c5652a64869d8146a56f83f7b431d72c40a8dee538b78291408347a8f504d3
SHA51245435876b782ef718a10edb14263d16a56e60d8da8843c164baa59713717ab1ef96bf10cffbb206da24b0ebf186f0228dde3804c6b9c586848dccdcd9ba6cfc0
-
Filesize
187KB
MD53008e7672855a4e6fbbb835c2a4d3e18
SHA1fd1cd9538985773ef4b6b1cca8f9bb99e76fc8eb
SHA256cf40f88d5b46c423f0243bd7ce1adc39bf52f19208eb763f08c36388068760a2
SHA5126e1752f5bd155670c8aabe0ef97631257f4f2780b080978251df7a7bb0b18d1bea25dbe27a4e2a37cd77df3842f6b314001df5077fcd168d87fb239985f4e153
-
Filesize
796KB
MD518693249f3a283e83b8179e692ffbba9
SHA1546c0d89f8c8096d22c6f6be7e843cf5ce08e220
SHA2563d828bcccc628e7096856337b178da5608a6c3db99383374e6c49d50a1895e64
SHA5121ab246fea99daf75831f26930d458a05ff0efd5f9c71c9c4396681a065fcf9f5c04af774df34ad55e140b71d41e42254ee2d9dabbb18009800bdfc62170a8c39
-
Filesize
60B
MD5d17fe0a3f47be24a6453e9ef58c94641
SHA16ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA25696ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA5125b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
-
Filesize
84KB
MD5f18364fa5084add86c6e73e457404f18
SHA16d87c4b9dbf78af88fddf0d4d5febe845c8e4e6a
SHA25639c43d67f546fc898f7406d213b73dcb1bc30fc811ddfa3a02b6b50c29d11f91
SHA512716892492390fe4314f3289286f733d07b8b84de1f5af0676b26e68c0be01808682d35ad2bb9e9491247b7bb5a0ea297a6850e26de9baf88621c789206107db3
-
Filesize
5KB
MD5ea60c7bd5edd6048601729bd31362c16
SHA16e6919d969eb61a141595014395b6c3f44139073
SHA2564e72c8b4d36f128b25281440e59e39af7ec2080d02e024f35ac413d769d91f39
SHA512f9dc35220697153bb06e3a06caf645079881cb75aed008dbe5381ecaf3442d5be03500b36bbca8b3d114845fac3d667ddf4063c16bc35d29bbea862930939993
-
Filesize
8KB
MD514b655f0567e2d13459a4c77b2641ad8
SHA116f073c74680f4ef8b6b477e86b75d8f136824c2
SHA256d5684110f61200ac1142648f06a4df3ee30acf38b96538496c33cac69942c4cc
SHA512f64ab83cbb87986d0356a7b9f0ebd0314d1341aecb6be627861b6a35df80d765cf85157293950eff82d44901f65068de177780a829c4d34f55a4f5089a0ddebe
-
Filesize
4KB
MD5c051c86f6fa84ac87efb0cf3961950a1
SHA1f18f4bb803099b80a3a013ecb03fea11cff0ac01
SHA256d0949b4c0640ee6a80db5a7f6d93fc631ed194de197d79bf080ec1752c6f1166
SHA5126e9de5d07aaed2ac297faa5049d567884d817ed94dece055d96913ac8e497ade6f0ff5c28bae7cc7d3ac41f8795efb9939e6d12061a3c446d5d2a3e2287d49d2
-
Filesize
199KB
MD53f52e40243f5fede19a3c8372268e1d5
SHA176369687a0726109ac216d09f4c14db2d91cff46
SHA256a3b534269c6974631db35f952e8d7c7dbf3d81ab329a232df575c2661de1214a
SHA512881183c7fed512cab763a6145f0e07c5bcdc143589baf433f7ba92223d215f18f48782fcfc04860db0671849e2ceeecedf6704f77148f588e17c4cd9a34cc8f8
-
Filesize
9KB
MD5ee449b0adce56fbfa433b0239f3f81be
SHA1ec1e4f9815ea592a3f19b1fe473329b8ddfa201c
SHA256c1cc3aa4326e83a73a778dee0cf9afcc03a6bafb0a32cea791a27eb9c2288985
SHA51222fb25bc7628946213e6e970a865d3fbd50d12ce559c37d6848a82c28fa6be09fedffc3b87d5aea8dcfe8dfc4e0f129d9f02e32dae764b8e6a08332b42386686
-
Filesize
4KB
MD5aa849e7407cf349021812f62c001e097
SHA14cbb55b1d1dd95dcb7a36b5a44121ad4934539af
SHA25629b0e5792679756a79d501e3a9b317971b08e876fac1c2476180d0ae83b77ba5
SHA5124556baa49e8182d72e29e8d809635312142eb127039f5803ca0bf011b4359f0b584a670a3bd26a9969165a332cfa14a39abeaeae0b4d90519f91fdea755c54de
-
Filesize
14KB
MD590f7c0f400fdc219ae149ede95c06cfd
SHA1a39c3bc64c9dc68fbc44d729511b03ed4573e6aa
SHA2565f9d4b41a10578f98e469466e55feb0141644842a4e246b2cbae6666cebd69a3
SHA512f9e0476a4078c5435274cf2d8bf00e115e75b37ff3355388c040b1386b604090b85ef3170114d50958ec2f8bc8fab5d3b3ebda30d4c84a0e5d49138e60817272
-
Filesize
3.6MB
MD516e134ec014d74e9b798c9b3fae3ddcc
SHA11a8cc259f7b193018167484c30d8803b09ed228e
SHA256eda02e626e8ca71dbff5389c062f9e9542661b43413b0a37ae3d262567145ce2
SHA5123e5742934076066125b82f4b2da45a499b22440252dff4ec14660fc688f075f886ac76de89f4c6647a8c85e483c83507edfcb22e3dbe3363e509ae18b1c4636e
-
Filesize
11KB
MD555a26d7800446f1373056064c64c3ce8
SHA180256857e9a0a9c8897923b717f3435295a76002
SHA256904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8
SHA51204b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b
-
Filesize
3KB
MD5cc888fec62967cf5d03f9898e0cb65cb
SHA1b219e1f82c318797eb36700d9d88d3eb461d382e
SHA2567d9235c4c34be7ef9b31efcccfd97bc604d0cd4fb37df9b62ccbd1d460c20d96
SHA5123578f5b36a85cd8726eff15335f6586a583dbee8542a95c5d4df6744ac0c5c41115c7f100cd4b7fb74094d13b22058152ec9fa6662587889427992444668ce41
-
Filesize
3KB
MD55c6b12fefc626a0594f4412b5be04b22
SHA1b7e8af03e3f264fa066224687547de7e62318db3
SHA25683d8c52c47d81dd019c8986deb1108166518248ed0d0c691906f8cf9de57a672
SHA512b4306c41b1f60e9aaaf55867340dbb3648c792b48cee770202f9274e7fa94c144e1b619ece631f769e9bc3d6a2e96181bcf43bdaa5f19a68beef4996c3211b7d
-
Filesize
32KB
MD55e167c6bd5d01f63ad7e7b0c389e12ca
SHA1db50292a8843e7fca5434032cb213be7b76eb957
SHA25616161d986c93df5e4222aff2ef2d4128cd15464a4aa9d8d155d5b5903675c817
SHA51232861db2c9328db251d5760893dc72d998ba90d3a64c83590bffbed77b8e8ab8b0519c2a2ba65b35cd3477569ffbdbdb0f4d0059194a26700d181e8f2439d8f5
-
Filesize
201KB
MD5dc307178edcf316064abb7e099c7b2a5
SHA1b32fcb6288d9003e32629a0863e686a464a47718
SHA2564497888e6948671b345f762e3c692434290f8e06c7711465529eb413260702d3
SHA5127a64334676472b15f67ade40922bed6f4a46536458f12edd4dc0078298acc1fc221ae775bf30cfc3cdee14bea00ae4132b799c122d3faec254cbe216d4da4409
-
Filesize
321B
MD54412726553d501aed1d15c8c1b3f13f0
SHA166712161a492bec8dde824bb869954cd0589849b
SHA25617275e738cc22f8e37f3eb6e3f7829e83f595cb50118788c773f3548cdd457fb
SHA51277168be66b988bb79301d99eecad0a777efc352ea771c2045ee472f3228e717b6ad4679adb92d587f74e3ae4db22472d9d0674965639556f68f6c83c97ba0e4b
-
Filesize
856KB
MD504398d23bf4733785de3a5ca05ad80c5
SHA172b193836a47aa3f0b7182de92a6a3f6f862131e
SHA256a89ea036242d4e3345ad54ea9bcdb5c73ee5b78fa320996398bab4ae46cb578e
SHA5121e7ba8e738c16af9267e7f9da427c23f2159214839d6e59bff66228375e9c7aea0f86c1ebd352cae248fd8508f762c1e81dd680e27cf7c1b5bd8084ab383148a
-
Filesize
40B
MD5c862cbbc1b82064465f98482ef73948b
SHA10e49a12b9d1fd903e0c44cfe9c9db0ae7a5b50fc
SHA256988dfba4289e28ef42d0ce93bae58926ae7a9528de7bdf97898d1c2cd2f2016c
SHA51212befd2966f25464dd21377d89b5d3c9b8fd9abaa8f257fe88bd1d80759fc5375439e6160f99dff7ec7a61135d9616992b611b63d1a6e094fe2eb29e23420559
-
Filesize
3KB
MD535a10dd7924dc7a4205fb3807812896b
SHA153583f9a14b35a9529614f7cb8c2f26a3a2a31a4
SHA25643cdb582f3881db7584ba1cab29ca88c74bf51819033ea88a02b0614e398ee8d
SHA512a7220a4c8cf583c334d78c108b7da9402a79eb2c57c428c5f740f8b2c6c19ac1c761da8d57074f2b9cfb063da84410f6558a8b61f978d536d9ac48428448a681
-
Filesize
3KB
MD5b6ddadfa381c9d9297812d2dca3d92bc
SHA19f83febb785d4c87730164f7cf020d036e0e11f2
SHA2566b2d97ac7dff812bbb826852feb506a4a300b7876fd6985e6b8a16ad710efe89
SHA512d89a308fc1b9b6ba055e88ac91a830169547c8aea734a773762767fe4c6a76033a8d3f20b8e82c094239d25c8e2f17e4c9b1bcd083d294db368aa28f2cfe85f4
-
Filesize
1KB
MD58307716154566dd5d4b7f87f7e536824
SHA15b746f1c97a036b190d4cf1db76760902ae1ed87
SHA256a7e44db42aa52a276edb6a2dea7dae1a8d1f683ae67d0179b5930271e3138d12
SHA5128dcd2e9dea6c147a4c9578b42fd1613a55e790d3a6ddf98809f123cb06270784b0c0e3ae27bf2957e6066fd8bd831cc09777270e2bb8f6f7c144721f95e3c5fe
-
Filesize
1KB
MD58e84151e901f61a135d941979efd8ff9
SHA152841c4272dc039438ce59943489367d1f2e4482
SHA256738e199707a5027486e17e9bfbd50a1dd295d2d6d5c48ccac17fecaec91b70a1
SHA512c2e2c027d3655bd549ec59d75cbe307c8e6b66838c72949b965ce2c7ac3c730ffb873a948cc055f6727964cf048d403262e8262c6c6559410ae682e2963c013e
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir8404_316561963\CRX_INSTALL\assets\index.ts-loader-12fff2f5.js
Filesize341B
MD53db80d2844748cb8365541c6c260ae47
SHA1f26ea3d817c75932e73fb361eb87c34d2b74c731
SHA25612fff2f5f6d8ec89484ecb1b6337f693745c56c4b4f1d2b81774c532d21f9450
SHA5120b9266ed937bb441f76dff6757861a24c963f95cdeaae304f396edc093e088824021f92471f60b68f4bf135896dfb4dac9105e295572d2cdf85d629ea9c5b67e
-
Filesize
6KB
MD51468a1a0ff233c86a8e2907d68340386
SHA1b8967319c5608bd85e7f9a4dd9c0f84c4c27a1e9
SHA25639842949b7fafd93d429c76c2866a7d6f140d3e4c5a3777304ef80b4b3167e51
SHA512e0540178459087302fa88472f5b5d62382273b1babb26e932291cae875c9c8c0112149805992e337efa397ad24379be763cbede2d0c3a417af6b6d3adb86554e
-
Filesize
162B
MD5bf28ef9468e4e1cbc5f3e055adfa69e5
SHA1d5cff2ec3851f3fff649d688919f9f4f8511420e
SHA2560e86dc475bac19122a3134a18cf8af26b83831df3346bcf5093739ca2891b4b3
SHA5127b37e27f56b8ef1aeec6f25bbe7336ad0bec837af4390e47932adc67c9ed873c6b7cb5d643b39d0b6f383d79c7ee0ab8aa39e70f894ce8f2b90a884d1325c3f5
-
Filesize
4.7MB
MD53ed8b711eec653109353e1ede6f67c8d
SHA19aa8adb977ad5c43d8bab4bbe7c832959853bc53
SHA25698c596736bc33ff9bf00a0204a2715205ed8ee7f7f1b336db120078a5e6eef21
SHA512deddf2bc110f04d495dbbf863606fe2010299705d2b1adf3af5727f1eaf2e86abb7bf4ca0307decfb50aff585de667203ec949e7720b844f182e6a4127a46d38
-
Filesize
438KB
MD508ea8d386e0888bc24a0e3daa7475b5e
SHA17b569cd7b3710d80deaeba22c0736df987f00257
SHA256d25b0b7fbb312dbd430b9df7ceac2a61b94a59ab0ea52301b5f04c36b730b0eb
SHA5128d03d7697f1b0592aeb363c15cd4345b6edc4ea67441c0bbd4007ca0ad6f48140a578b9839b930c6bfa8460964503f53efbf1467ac3fe2968b56b4937c6938b9
-
Filesize
4KB
MD51ecccf3727b0b0de7146a8c1f8995ba0
SHA146c6c0928a37c1bb22dd8793eac75cc3c18e28c6
SHA256b7cc1a26a8357540cfe359a23da85f808944e43a686bca9065b9222415aad1fa
SHA5125386782911458fad6ff523cc8e75af627f35561d3e2d7712e3a8aff932b43915e4f8fa1c927db8cb4673a3397b28e983d9cb0fe077370d2ae74c4021ee0706d1
-
Filesize
20KB
MD5184d022e56c9b162d6d5fc95e91951c3
SHA181767cb862c1c99c299b43cbe6809aa915f63166
SHA256b04c55cee3d66c5ed385b38653e2b3f420486d813d5ec2f76965d4c7cbe1df16
SHA512add6e2d118d22fe934d277d9829bc9fac856ebc28135fb71fbe6a8ebb0e25754f1d534106cfdb8cf7053a3c415fc3a074199bdde531178ea1997f9e75f28d216
-
Filesize
21KB
MD5437c0a716cbcc34514042463014a2d32
SHA1962cc110c81254c10ea1410a66250bead1245c68
SHA256674f1cc9627c84c944891deec8c5355ddf1f2c7e1ba3e0721d973af562509c20
SHA5126426d801e1406be2ea332cfaa3f1811d7edd2a27fc8736eac1e5e93a50d4b34db9af65e2766a5a8481a4a7771aeb3fc198af8da108993185175a284c8a17ba83
-
Filesize
14KB
MD52d6190bacdcda0d53d288a8c669dccb0
SHA1538851314ae37fff4d62f080eb8d0abbcc463ca5
SHA2560b8eeb069bf7d7ccc736af06d16cb97b5e184f687cb417f3697d8c7ef01c2dff
SHA5126b16ad4a812d2b627868dc258134a84dc3f34cd93f7b0eb6e6ea5db60366eeda9120220eca2f0a78b4e27b0e175e5ed05f15be95a75f477059d1f355a630f075
-
Filesize
39KB
MD55c2bcf85387ad7cddd68297ebf7ae2e9
SHA1a4e54f68fc05f49d603b654f8c44f482f6eac32a
SHA2565d1caa2deb5d5bb23a2d969cb6d8216f4c5ef91c5e87b52e99df1cc84cb94ec5
SHA5128503a01b183e5282d3bf275c3b107beb5496244e3d2b9edc3d23f1cdd401562a256eacaa87d3cfe03ea3fe9d5f9c7db4257d360e35cea15f6930f1d1d86bd035
-
Filesize
24KB
MD533d0ab2f164ede0bc598921a89635534
SHA1d4341a501529df9068aec7d96bcd1dfb0f573b94
SHA25612a5ceaf1210fb0ee20821c46b7272fc5c0a290076fce3b196bbd27240b156d0
SHA5126f94e0b2c140abe2c0fcec73ef48a18452be8a68f1b0a7dea569fe31070beb05e1cc2871b1270c49c49eb9410d80e47c6b70f957de75897b0df2c51e61d5c694
-
Filesize
39KB
MD58ac9dd4affeafc8104360b139946cae6
SHA1e4dac0c729aa58d936575fe42714c8af759c32d6
SHA25625205354a6d77d94f623b4b81fa44098faa34e217078be10c2139a55637326c1
SHA51242235b2af5dcd3d60ad0008919681d15114e98b53b74ec2b7d8ab63edd5c991820a3b8daaf7b397e0850e49386d0f6ee651f2d16ed0841e24b9d7e24a5851d8b
-
Filesize
15KB
MD51a5883daf427181232acbcfb26aaf4b7
SHA1e20cb80b41bbf883cfad2c76376bf73a114afc6b
SHA25684ca8a05a21e4581a451a1b1f58296b34f78533ada681d1fb57731078d157183
SHA5125a7e9eb2faab7fdc9b6ecab9551f34583c7d53677ce27e4132704322fe8f0fa5d70b990e6ed76da7f09e2db199aae739fa53d3a6cc374330c0a411fbff9ec390
-
Filesize
35KB
MD5d6905b36ba69707b36406ffc24481aef
SHA12d93c39f9ecb81829eb6fa9b52752a0634823f2b
SHA256682548803e818d420b512bb2a37eb14d0b08f5738a01ea425043981e7ae6349f
SHA512a1aab562c19a6e25493a59108dbee24e8050a791da9c816c4185c65242c2f59105f64733cdbd86f9fd2de33d9c1e2ce70ae1a185bba9fd84ecb3eaae9dacbede
-
Filesize
31KB
MD5ba969da9fb92b7090b2eb4062c23ba12
SHA12ac6088bb4ac9c8a65bff6f7d48767c86ba5caec
SHA2567117f206bc0a85960f6288b3bdd2c724ff7069cf504d1d86f6c589f2450b0d2c
SHA512de9a516cd9dc781d6e76a468738d6a701065c6878e6e6920f9dcef49d87148338693a51387b707eed3900e4f8cdde55f0e27ee9db55d10bbe5673755de300023
-
Filesize
23KB
MD5fec0b9d55691ef7473c43beab0c68309
SHA1d6823879117416548015ab55d63d6de89554df6e
SHA256f61e9919266582b8d88b22a639ce5139a68defaaadb903fa06d2508b543ab171
SHA51246677b3b0a2e6b4d265affee11bb78875e4dc77c8f1805d74863ff45d4eebe37a38f7809ebb3ac8fc86d37783646102f54b2925ce65284ae350c4600a4f8ab2f
-
Filesize
8KB
MD5634b1cda8c2ff22648951883ce763808
SHA1f1b90e5689143cab1b7733407275fc093fdc0e46
SHA2568d0b040cd6b275ea8a81572b00890a50cd6cd44a0d4acc2462e6d74f850c4445
SHA51236cdda4dc687828a57380bbecea1486b80b1ba110bfcebc765c73cf550b2f847c06cb6bd4953412869950a6f34884d85240a3382634cb5a5d3b093504aff7b53
-
Filesize
6KB
MD58fb7fee20641d6c4cff59fa8acdbaf55
SHA12362cb62a7dca93076dc89fa704b6f78e102f92d
SHA2565fc4b9e5c1b174bdf456a58dd0521c4ac308e0101be3a6be2cfe471335fc2ecc
SHA512c47090ce5bcdaa594b3558c78a662044bdefe7545c830ad8ce90c519e97547d6bb2eab8e6319ec6d612138b5240a4fc51c0a3c8f306fa703a1ee3e792523040b
-
Filesize
24KB
MD5d4c0cf7859096ca5e4d5963a3d66d430
SHA14bf09c26b57ce85525ced073914c133ce8d1a547
SHA2569d3a166b4bf6ede8c1631c1dd927cd3a164b99020f5b84b2250938091302c089
SHA512e59aa8ec0e811702d158f9ab9586a1b9f39d826aa59ac1ae879cc7a7fa3c3f3ae188a769ea5b74ae6a0bbcfeb5153e0d0a1d242be4c9c3fff8e9bb7139692202
-
Filesize
12KB
MD554ccbfcb05bf5fd08e6f642e730c808f
SHA1417e85b55a8aadd0058e37dbfbf9aee2d0184acb
SHA256fdb0db6d8ce5dbc5c23473b7678cbbdfdbc44757717fd4f86f358fa2f0c32252
SHA512c144649281781431550624439a4dae655e932f0843e22939444806a23e7041c6a1cd17a4bfdbc47757b0bfbbb85c8555378ef2c8f388d9e68ae2ba8f907168ff
-
Filesize
4KB
MD59a77cbd079b939086c48c7fb182d4dac
SHA12d9a3dbe2d92ce9ae628f027f7aeefd214ea654b
SHA256caa98052707859762c16c68edf71326df22935bb7ad7c3edd87477b820a24fe6
SHA5126a24b904465898360f8fe37d5c01f174f7c8334652e45794e911c387ea133871f75cb17c2a08c52bf95088e96116471335577971866d49ba6fccf12b6df3b942
-
Filesize
10KB
MD58f7f31f0b68664025d20d1fd2df054d4
SHA1f1d788c66cbf5fd78992ab41e6bacdd371dab093
SHA256077db2c7a6df93e89b2ed6b47bf56d0b55f14183206876bd49e15caa81a7cafe
SHA51244c624c0ebe401fc2be27a6bab750530aa1da7635144655b7d0ed116bbb14936a249be59b2c79c5b9ace5d32a1cb000ba56533c811d4aa1a47672d643162ad9c
-
Filesize
13KB
MD563ec931c2fa1c10b6dab10697804240c
SHA125fa8ba5a405fe7e791684bacab461555f777c85
SHA256de2d901c76af3b38ac4c5dfc25deef9cb818ed5270f25578708657ea827a56e4
SHA512d0b376f377c74c62d781075737ddae856efbe2b2a5e99387d7e3f2f470e711a752df395d12341032926e86d66dbc61f17da37de4083e5310a29405df81db78d0
-
Filesize
3KB
MD5f29fea0520b913e773c68f5f81a5b040
SHA1fd09496394d5e17d080e6fc53e0e5bd07b0d26d9
SHA256f1c32e33d351f299b20ce8e2878352d0eee6e470a1795acc52fde1d828c77d3f
SHA512b75d53e920b47d91a9da3d1194000070b918252125c463d4e2ebddfaf6d11e413a55782852f59a45cec39aa5dc0c537be0e5deeb04475b2cb7f25bd243dc75cf
-
Filesize
12KB
MD57610bf7013fccabbabe3b404ba68f4c9
SHA1153dc672b18c1349e6dcae23cc9d9b140090f7d7
SHA25696024c68fd93ac6fef0d9cd4082d69387c773ec55659d49bcdce5f7bfbabcf5c
SHA512ee814145068bded6e3f58d566f41be5ec10c47166607b2f98a870a88e21b3a9ed723b8876ddba8a2de6e7f0c04087e6d35ab572fe627e5fc251c433260a30183
-
Filesize
22KB
MD5825e21bc0fdd7554081d2bd6dd4976b2
SHA1f31ce6f8c9e3c92324782ea93b2fbfe124544a6a
SHA2564739ad9aae27f9f1fd7185ce37dae8359001b2538b8be65c50ca665ffe8e0ac4
SHA512b1bd369656d0e0a4b7797b4b9859217aff684b52f62dcdbca4c2226ee8d8b3e20bd6169eb3012cfc2546646331156b38fc64bdf93b3ac58198a855c56763b41e
-
Filesize
28KB
MD5981fd18a74497c20fe19b39abc9a2001
SHA13088fb60c64b659e25b99416368fae58139cc4ba
SHA256eb33011c809cd1f494b04d17755bef40e917be0117e31cc60cddf7465f3e7763
SHA51202becce2f527e7260000b0bf436763eb4cf951984c285ff957eb20d8d51106c452d899df7ee1ed1ab01c47a6c4b6fd77e50e84e7c6ebe6291dcfeceb51f21a2c
-
Filesize
22KB
MD5f1491de14dbd1363c191abb03b4a27a1
SHA14924b4497f9029e16a077b4fb02f809188c0cc8e
SHA256e7aa6671d43fa45d9281f5cb26d1a426c6c173940d74d67cd6acaf2f61afff6c
SHA512b1f034b1a1c61b731b8df9ba25a39013c46da5cd48b88d8db481631c1a72031d1db9de7e63de81d58534b865887d8e272a27b6a9c02962ee2581a5dfdd384acb
-
Filesize
21KB
MD51e784abdda8b98c2067efbea06b0147f
SHA158568aa88f769a4319efa7025f05d5642354f4f9
SHA256da0a73595ee17a1b036247730dbfe1e1216cb86fd312e08795798ccdd872c490
SHA51201166a5a511c50aea65c9501f1f0ae70399d5de61eaf8881c610bfdd0e8181f017de8bb4d8486adda5c52a0db19303d52ca39d8658aa6e20726fc9fb3091695c
-
Filesize
40B
MD5cc2665a369add98a28c210fabc9f390d
SHA18b8decdf30465791167c91f3f36b9530723c8e84
SHA2562da70d3bae00cb4fc40c351044703f974b515c0a37ee1c64d2886c517c2e0462
SHA5126f4503a64f5befabca7753322820ee190880d1874aee6cd39458d18d0f4e4452bc197184e4e6b1e27dd3638845423674c23c4061e27f5a984e44422cbfa0b26c
-
Filesize
12KB
MD595f14fa7cf5f40efb6aab13d6f879dd1
SHA19ccf36a812d0a8c396a3c3049c9802589a6f84d2
SHA2560cf70eea2b4dffa36719b9a7bf9fb2f40a29728029b8d0bf05144c1a297899ce
SHA51208b8bda79b3c0fbb48fc42b293bcb12443834242d5358117a22b595bd623d00e1ccc7a244e26e44a7c2e37108269ad4b0a629f97c4bcf2bee3ad5434b1a73afc
-
Filesize
1B
MD55058f1af8388633f609cadb75a75dc9d
SHA13a52ce780950d4d969792a2559cd519d7ee8c727
SHA256cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA5120b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
-
Filesize
173KB
MD5f3d32d9918947cd0ee98a95e6782ea0c
SHA17d352e9a4799b5a180e11eaae4a7ef1a6ae51d2a
SHA25633845d8a8dfe591b8eed4b27f2c47dc856b11d86c6bfec08074662c559ed4d01
SHA512e4818c7e56b2a7f28610f14f738fe92018528517182e5cfa2e17750796bbdecdc2bca3af71afaad2e27a19a17e487fc321e8e20c286268dfb7a126135817804d
-
Filesize
23KB
MD5c2935832073d69b70a3369efbd1490c1
SHA19c008bc89c0b6d50c89c6246e2061b58a9242f19
SHA256aece29ef481c87f8fa1b6f0042637f0a8d721e0805004df23c13a96c3f1a214d
SHA512e1f0e4b05f92e44beb4e7b3a39a113836cd1b8064658c41ae24a2d0f43df61334d0f4659fc48152c426cd1cbebccb6372328d440867e11fe4a047a2d3ac9b5f7
-
Filesize
24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
Filesize
1KB
MD50e856e0b9b750bb3105efcc08ba16bc3
SHA10835ced6ebd07d243f6a1f7d16794622c62204a4
SHA25681c19a4e7c53546156f64919a78bc3887ee2508e21d6c51c46cce8a34d622d65
SHA512500551bba605dcb568c94ddcf03511ccfb05ef568506194ead71aefaced44b275fb343e8d1e8c43bb0854d04d3cb219a983c98150fd53728ba15a75a81e953eb
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5b8a89.TMP
Filesize48B
MD5cb878a3dc1d6fd1ef47aa94e0da7d802
SHA1297d1318f75143353a58ac19cb29e30a531ba0fc
SHA256d78e39b4c70a2031f8f7b11ad5417ff632cb195a05908f8d233f34bc5c301240
SHA512cfe69cc19cdde033585ca77d0498cc54819296bca00d741074a22b14d0341c20a0a6f5ead2ab8685a3aa9766775fd043811ef3c5cb94c50fcde53464ebcc93f0
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\background.js
Filesize11KB
MD59e44b41428e8f1794bd94c1c1b80e795
SHA1748bfde28c6f5821b1002d0aeb7ade573a69d8fd
SHA256119bee705656331f59f3c7ace09c7e9a42496742a23f0405f6f1be01cabaea9a
SHA512a3b48ddff3aa87d9bf35be67769f41c3048a257dae0779472692ced66e18aa8c1d7a721a5aaed67e95aed51df4e97cfac4a9d71e29add23675706d8127e12266
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\bbddbf12672a339b7dc0.png
Filesize103KB
MD5d6506d55722e451f4d13151ee693f680
SHA19b2f8a60d9da27b05429a9ab30d62c1c518da669
SHA256d496c91adef2aa2223dc421188e0af4b083e052552d3a246e62d36483ffe269c
SHA51255cfea26435d14a1bd5486167f79f1e65bd965e3aae05be36d61e0b38f813012621b8f2d32f2f0087f41009ab579def4f777ba5268deeae1ccbaaf9665c7120f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\d3897737645de49087f1.svg
Filesize10KB
MD5136d1b4bf4b7adf44865978068718c94
SHA13383fcfaf01c48b73f9ce7f2f662d0115577f9ac
SHA2561f345b3511f67dc4216077e858defc94df174e04e0c917a72f35f7c708b855cd
SHA512e9d16dabec6a07f7652d97b340cda70f0d7b2893f940278a9b3b621ce0062294e335614dc2f397d4726c866355a176ad0048b272614e36a55247b32c2dba2ff7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_active.png
Filesize9KB
MD5ed1684b544f174bedbbe56fff098d55e
SHA157156112678c4b69ed91c940acb7a5bfb4fd88bf
SHA2561e5e0fe10bf786171e13fcb21d64f3fd6065a146d94e28362f9a4d1b748a4c09
SHA512f85908f7df635a960a117be42e377785b193103893bd569dc74bf5085c67ed9dd947a21648f54aabee43eeb8e08ccf8ba95d275a63801d2643fd520a2be6556e
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_active_128.png
Filesize9KB
MD54673bc2d427c607eeefb9d63d354ede0
SHA198d5204c36700b6726d24e74ef5d6c413dbcba7a
SHA25665178d9950c22d956b00e2b4dae250baf20c3ec42bde65bfb592b262e8f1cb14
SHA512515cd7f8d89395c34958a0494b502fb7e29965cf01320c61c13e66bbaa36c3ef8124bf99537cebe694e40c43bb3c58aac5550a4348e0e95e40098b2856def96d
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_active_16.png
Filesize573B
MD577d8a759c443b390bfd3002d9730e820
SHA1302091d092ca259a9d644ad2ea247018be964709
SHA256bffc1f1f85bd444c6e2bb1c3da3c595b379c1b52f35af673143c72a3022ff5d5
SHA51257c122c7080028f67f02ff15e1131fd250be2fb1cdbc14478cf4b52172130cf0ca4548b7134a87d7e6a1c9e3432d9c4a7b13c76608ca5ae104923268cf76a87a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_active_32.png
Filesize1KB
MD543df6293b8620911c69c8a99de75329a
SHA1d534dde11a7d4ee4cce9c29c42616fbc274fd598
SHA256b5e86cc3d5e48c2ab42f33a11660bc07868144a37bb9cd363b68f5f59a2c9713
SHA51224d507260be213562ec289bc7f07ce0a1828e135b336755aca45ce24d16a47d72c9289a3e600490d8651ea0cc849bfd9ca2d37d71302f0bed6022d3f419dbd79
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_active_48.png
Filesize1KB
MD5342b54b4444668574ab0ef299cf94b04
SHA1f16a82a3c376c380833b9c2f59bf784405c9b120
SHA25617283c2e0d6479a0eb653cd6853e6dfe4b5b2222752d0e3561a9c2b3db3eaa8b
SHA5121a322e20ffd14de6082071efec090d00b2dd7e28194c148b250a7ea52f0cda67cc5a77f71539552fc610d34891cda8d33d558dd21f0d000093328601177031fd
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_disabled.png
Filesize7KB
MD59bd3c2b9ef38d034f61a2fefa8382684
SHA13328f6ff00107677c6ca25a87e7952c60dbf3a6d
SHA256d1de05811ac158c96e6c59414031165e4a88eb6b48b593a1d90511a578921070
SHA5122013c07257192d08d3cc7ed1ed22faa47472389238a445f05ba52258c8295739fa182ffdf41680575fbe6758446dc624f210b32a187e7a1861cb92b5926471d2
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_disabled_128.png
Filesize5KB
MD59f13303775bab8c1da2ee041357498b8
SHA14cbb02f26fe05cc7d563f00124c067da8d8ff8b6
SHA25623a9d2a492145a3f8e7d6e6af4facf63c4aa56075026f1e2f2c4969f9cb85db5
SHA51288f753fe99604449aa8929bf23e4f177694cc17f1faaa3a3ff18a602e4f00c01ae7e2602d5a8b363ef23bd2732f63361873b845e9062e4a2dfe09c952fe541a2
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_disabled_16.png
Filesize591B
MD5f26a633ef6d8deb06af98c0297dd377f
SHA1cf5bcbe22640f4e916421883fa55b7be489036b6
SHA256a4ad504d5604ebb417640ddfdb994822fcdb7c722705b0c4dd7eb30d120ad65c
SHA51201b5d1047400c6407605804e16a8aae6d35d45ecc8521de635eeb47a5af6b7eabc737e346f5719c8912df0a7a7942c011780ee5c533343300bcfafc72702b922
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_disabled_32.png
Filesize1KB
MD5e19026ff54589a33003a07f85d55b0fa
SHA161f80d7705209f71fe786e949cf8e2b14fe3f5f3
SHA2563e2a29c243afbaaf66113a8984b23eba192f37cf6464b16b0509353f4290fd5d
SHA51211b8b217d800594c97251739437867fb614b11384ddac75f5c2866958d3e0e1d47794154f8a686900de8151ac2a7fb49254a13e8e9152eb5f070fad4a5f8372c
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\icons\icon_disabled_48.png
Filesize1KB
MD565786452dc69c7f21273519ab9d5cc09
SHA196e2b0815d8e74b304f4be725b8746712cf4c4ee
SHA25602558efb6c057f740cab6e907f6d472be5d538c6c8ab0a2d4df3497aeacec92a
SHA512bd3087bd0c97b843f3bd78006898e4a796e8ed185fd9e6ca2e40dbae62c0aa6120765bc8539f7bb48d3ba34bafae9a21bea83f6347b7cd57fb75cc826193cc08
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\manifest.json
Filesize1KB
MD522ed7d699466b23bb9c77b39567e5e49
SHA112c8b60e8756b40efeb6518784e6e57492d96d51
SHA256f94376d79e56f588f1977ad4d574dadd4172c184662a501bbadc365dca027774
SHA51222fc94df1794581a21076630567716ba43f7f0795b4ac293462dfe7403ea55c10584dad8977a18cf9cc1a5092ac5ae60c1951b3ca630aaf4168cc79f66e04c57
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\popup.html
Filesize230B
MD58dbeb11860aa56321c607337cbcb86e6
SHA1c209b2465a5821a5ec9e8d30b90fad362a500933
SHA256d05e125f910c646a127da2be326c62a1648bc90a3ca682afdfca6a2bfc5387d1
SHA5121f3ffe249bdf93a935ded209a27436d6645acc83efee224a1d10b934eeda87599a1ea7cf14fc333691e5c5cc8e2ca05534ff41f17f3721b085ca50766b8be449
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_1778925734\CRX_INSTALL\popup.js
Filesize82KB
MD56b72531e17ae11282061c035f7a71b03
SHA1b99ba4e4bf5ec5d611ab56a54f1d8493be99a643
SHA2561de06fc52b09897637b4cdfb49421746adbddc7e81feb6f5b05513b56b93cdfb
SHA512418f79818abd96616c7861c256113a134c564e48e0c4a0a83f24700e74634ccf6219440ad64de44b27f61cffc6f80a3e76e502b17dbc09239ddfb5c11ca64378
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\assets\index.ts-68082f05.js
Filesize53KB
MD54b1999e443b36d6b3fbd8b0655fbd9c4
SHA19ce799c09220d286590d98f025b2b1e254d1a4f6
SHA256ce01cce8b0b3614b1655f40f28c7a39f9532ca9e94c3fad05021940ff8b9a0ca
SHA5127d260afb87d8bd2e8d104d49094fd681a3c6f39fe455be0d2445901c2e0d224a1a2416bfe3f0c4e3417760ad4d530be26abea2f9c07f80fe047b847efed91a77
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\assets\index.ts-ae5ba517.js
Filesize15KB
MD550bcf1fd951bbe65d3e9ceda508d29aa
SHA15812417e49b521dfc2623434dad97380b6c5d1a6
SHA256861428d94816c77a78e1ba0ab7e0c460c0716d3725b9988e96eec719ed9c73a1
SHA51212dd93b2a22fe1646b060ea5912e56b987ceaced3f836e46b1b6b3296c8f76d2927dbb25b6c76fef9e084fca0d2afd01a33e92319bb916fe8f03b3c461be5234
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\assets\messages-86fb7e29.js
Filesize21KB
MD56d62c5de88a2381b5627e0d2df7b9a30
SHA108c76dfb73e09780b0b3f98e5da414494904417e
SHA256068f97ff81dc092e4d201f575a2d330a0f5830e847edc6e0e80f8a97684ba75f
SHA512a193d284bc5c017353e8ce1a51f2449e2e58f0f35fbfbe8173f812bfaa91840f2cdede70897c64d271601f8836ef4f694dc099c2271c18b448b9892e5043e291
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\manifest.json
Filesize1KB
MD5cfd55d89aedcb24f5dc14662daea26de
SHA10eccccf18b2da8a23a34f983641c7c28f2ef5864
SHA256b027e1e1bf93d33f4aaf3d61f7a5a6b34a48134be16f1defef2dc5349e2e8800
SHA5129cbadad89a57705a74a0d96055437a394ebca0752adbc1d1c56f8f8878f0594b65bf7c8826cbb8a48fafc2ff976152a79ed1b82776c83c3f54b0e5de11d3fbe3
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\service-worker-loader.js
Filesize40B
MD534679a8029e867292c60d4a37a5c597e
SHA1994e855eec5b6ded3e365ce828f8646c6b6f7ee3
SHA256a04c0b004f15f9058d16dee395025cf6f054fa33751242707fac789d4536d814
SHA51203734f81215043de34aa60a7d685114542d8cedb3be763d5292feb164fdb8b521f89d1641235da2d82a64da5278a30598cb7fb8fa3d9a87d026b572fc9f17482
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\src\assets\icons\icon-128.png
Filesize3KB
MD5af719a0c95789b088fe4b9f82dd5ee98
SHA1cca49d2a728cd456b450cfcc20f91acf781c3105
SHA2565b861963c613fca1dc4aac9a416e43b2165b05a4277478f74b7f6562a378ff5f
SHA5124a6f77684b3bc459897ab2709754849868bac64f4e099c1e74970339c944738278454d6c043ee8a2a0337e9891e7e7126bfc41e6fb0f5fac544b978ae36f5082
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\src\assets\icons\icon-16.png
Filesize425B
MD546c4711e8452178b9c2471f9c59c2667
SHA1e020f7ba4a787f840d204525e8eeb21d0c21e2be
SHA2564e1aed06fc4105c64aabe9580069d0cdeec3464a693241e7c02771e1beda860f
SHA51242f2161205f28003aff9ea4a8bb33a0a0ebbdbb9bb5e9446efbca4f000a4315b2bf7184d79254c148da40597cc15bf8f22a02a3da78cf5c9026ae35e4bd695bd
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\src\assets\icons\icon-32.png
Filesize764B
MD59caefef512720012470700a11b0bd456
SHA1bfc11bafa996fbbce1566a569a79d5d72b08f1e5
SHA25682c0a843e1df5cc10a8c6beabee8416281aa89c73798d7bb6a2cf4a237a24ae0
SHA5123bb42b23babd54cb902e595b84a398ad5b2c9bd2e4bd4951a8b0cdfdbf91f6d0e04bb1fa944c54d673babdbcf0400c1947d0e12fba8057c3f69ab1e61b89aea1
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\src\assets\icons\icon-48.png
Filesize1KB
MD52184400582c25500a74577359a1f7e7b
SHA1e69eecf84f7d2d98bf236edbcfc143fa42d01bc3
SHA256c6c3593c7d0af5c9a7f2e26b98ef2629e392c5da87df80653d94ebe412d5c9c0
SHA51224858ebec11fc0bb586eb2d6f555f5e798ec9708ad89b0a94957a1537dc150a584b70865d7fed53d3f122789812d390eb6af6b68ff4cd93296b2b0e5a21b103f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir8404_255089470\CRX_INSTALL\src\assets\images\adblocker-bg-1.png
Filesize16KB
MD5404ead15b3040c2a16cada6a18088aab
SHA157d6d1b3d601532d1825c738ee51d0971f137af8
SHA256bd474396ecae2864798b9b33062afe3b599dc834db30b6a2f4cff0d0cbb9f9b8
SHA51212173b41f487987aceac82c13f63b1318107c48d6803dc1f89053245c1c08d092761399ab397da44f0ccca5d9ee3c79ab98081cbdb25a78ab5b97f0b52a4f784
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cboeampladkmkcbnnepgijfpdgmeaapc\1.0.1_0\contentScript.js
Filesize193KB
MD5f51ac25bc69b10b94385af2eb46ed86e
SHA12fd062ac0e474a067bd0335980840a69c282e9c9
SHA2569d04dd37cb36276203523f8bdce0920d42ae86fc1263520ad1f7d281718878ea
SHA51209c665c4ba5b22cb37da4f0fc1b865d0f020e1ff9fba8a478d957890b885ea75aab0b645184fe0f57f0bfcce3d0e0c5cad98c7560b9d95b767e82f632309a9e3
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json
Filesize7KB
MD5a192304f63ef26c80086f835cc4b7ada
SHA16963e90e752209132b728a938844c4c64dc94d43
SHA2564f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon_a.png
Filesize2KB
MD5c05285aad074c0872dd78908176b1052
SHA1b8a5926d153dfbc503a38a749baf9099903c289f
SHA2569a4a7e0c2969562d5d1299f80317d4560265b4a843cf17491c7d36fa74a91cc1
SHA5126006b22ff83d0afdc346179a4c2dbbf927efcc62fcf9105fb45efd768bdba62af5839c3efb21e2555e0090639ab2dca76397d294b51db0dca768def53ce00a1a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log
Filesize24KB
MD554f14948a2d87ba509acb81c842d7ea1
SHA14444bdc8b72cf4707b8fc5c13e04deeec9f7179e
SHA25679672291a6793388be33efeb9e523e5fcc5cb98ffc900e1808e41f754811fd30
SHA5120f619d787ccc949c5c11fa3ba4bfeaf153270675bd8ff30a0e021b22009911b51954bd3ff5cc0439068d9077a2143f25101d047d81d2bacd219f907e448473c9
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD59ea3304e28726dd5431ff754377b2b18
SHA135c5104bb05d6b79e5f4035a3a919e31a039a339
SHA256a0b1db01a040725651d02b1c40a2278d89faa2eb1bd3dbbac9eeb6a98c6acfa6
SHA51202382d38fa6755d47b26ed9f0d1f3b0ec7a3657b46baed88652ba782076a130c9d61c71b41478443048add9b1d3c755455f11472dd9b21b26a9c8f676982ceac
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD57b06e3e79ed9b509522ffd89d2e5758c
SHA1beb7f7640e59fdd29426ff05574a0b431f059941
SHA25668676a5695eb84947d8a7aeabb4fb7ddff79e82505e6d40eea06a7084cca0eb6
SHA5121504b6a3f000eceb55f63e3ee39fb8fbe7c9700cfd427dcb7ab5616473ecec2a6942adc8527fc8f031d6a988e964477521429897a503da4ed1e0ef93cbaa3502
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5d6d8ffdc86b351e7d41e85cf91b70dca
SHA100208dc9812f621d5100c1c74c3d53639ef2a396
SHA256e957050a90b29c164521bf109cfde9a9c175c6851e36127f027a5790d3864133
SHA512617361f0c42a5ba54b1ddab72bb6c5b45e38a00fec269848f493aeb902e2e8c2997d8d9df530e14da7d9a4fb94ddfe608846a269f44dbbdbeabd467252b141a7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
Filesize403B
MD57f539290dcf2b9b5ebd50fa4bc16fc60
SHA17d279f4f1f00ad4685309c895735e0e2a9be0212
SHA2563e10b5799deebc6744725fe9618368f7275779e84bbdd73af24574bcdb9caad3
SHA5122ed6b4a0a6497b0e3769b2e66dc4b43a7c60a4eedfeb715fd1ebfe5e19a6832c2ed31793d4947d31c3a9e3c7cbec86ea97733c0f66bc6c64580d6db4cc55f2bd
-
Filesize
8KB
MD547a719a895465906cde5dc5d02360393
SHA1de1b7485ad638b8e5dab05c875027b05870bd0ba
SHA2568b37f8f788e6b36328961b73d9fdfc10e8fa3956c6963aa38f24d97635d6deb1
SHA512859c27c306fafa9cd855c0992099166aa8b96c1978e2668c554763b6d811bd6266cc60d47d6ed72e6d4664f99fcebc30cb1ae599df49e47c05cbf1f8b55ed075
-
Filesize
8KB
MD55f25dcb35ff6f0a824f38cc012daeba3
SHA13b91ce106374b93e624adfe3e963463dce6ebbed
SHA2566f54b6af6db019dd894be7c633348b3e972066220d4f131f11523d03a1dd286b
SHA512d7e4b26299673eb0a3540f9020ed8d45cb5cee380ac0017f3ed2da8ffc9b91a45c39bca3c33df0904d6e7ed8df332be0d7e2b6c45acccca03062679881e4d8fd
-
Filesize
1KB
MD5e158eed0fc1e32599a70578daa80d42d
SHA19bf4f25bea2429ca79dc4f68f0f84c3f0e45ed67
SHA25601589212e39a24660fa07ccf27ca660c7459510eebece940a98a152c6559bf75
SHA51288e11bf2c8f9fb3409b8945e8709ee98632cdd5619db0191daa4d5d40dbd3ba749d9adb503f02f00d160152621469c807db199c0ad2ba36ebb6e9b00dced106e
-
Filesize
1KB
MD5af36bbe15fa60fe59e148fda0806e55d
SHA15a7bce18ee365ab60c5f2b20e019cbce11161cb3
SHA256bafd8a3f909eb92d21d21acfb8e0e4b4c1171af3c4f19e9efd8a9aa1c3048bd4
SHA512c8b4fb7f2f15eae8279b7293667cd0faa7c30b76b3458305ac68b0339625d6fc77acb8e9a3b680ff5ac7e52f0f956893a7e34a9477240c47c9434d05afa8aade
-
Filesize
1KB
MD5c3f1bce75fe23fe9661b9de7c11ad374
SHA1a93e3a097fa325d4a26382f777d71d60eb945b3d
SHA2569669319a919fc30a55cb98163625ab9c00c34860c21b8fe369cbdd1ff4f75a6c
SHA512708508be4d429469e701cf78f0fec374e86525c8feba7006ec1290214dff48b51282f026da341e876418bf6277ff2de577a9e7e6f28ffa2136da85e1e9c522b9
-
Filesize
1KB
MD564b45cff346effaf6ea66897ef55c989
SHA17c97c7d5f97ebebbe9668039cae4c8355f790c80
SHA256221e16e0d87325bd59dc2455e938e1d9076936a36a00683dfc58f92998201cde
SHA512b4cc34f1549b3c4cd0ce1a901de9975b6808ab660a6b6c7008761fb1f5a38a4812d7d389da4f234f923141a55ebab84bf078aa4512ba817d471d757a182760c0
-
Filesize
1KB
MD5a37ca1202b7b95261083060e84175328
SHA10df0294a8b89fc1281e1bac6334d318a79abb4ed
SHA25644c83c3cb9786925a16eb0a23d91926d378a4ca39ba07f728060136f6f272060
SHA512870535e3cc344799a0fda331a260f0d713b63f5bac1180983959d729421caa5e6ecae81d22e5c56da912a1615d90f3228dc2942de1df10ae855ea374b81d6e24
-
Filesize
1KB
MD57b74bc2644ee99a10ee2db5885fa59f2
SHA14d7bea979194119066eae6627d6c497c1ad988f2
SHA256ab4fa83dc88efc81801be6e9b0361c9d09661ac00af0822fef1e2ffca6585b1b
SHA5121cc3a9ef07f0fa65b04c2f4543fb18d5bccaf2018df1c158618140b4e138eb258469d5a4350f0fa04ed3f12a319d8cb785acc3a27defd932aa55f535c6d9189f
-
Filesize
1KB
MD5b633c6048443f6b4c0aeabb68c4f5d6b
SHA135e23018e2a40c7c4a276a69a224c6acf6982e72
SHA2569d6fa0418a01b7a1fd1aef22d0841295b7827379df83ffe3ab6ebbad99a8a208
SHA51207e01b866a72579f9344e482a28730f279214c49d6987acc03a216a7dbc344e86282ba5ab14f1668e28ebea76c743431c7ec3ba13cd7c4a71ba7e10a60b44606
-
Filesize
1KB
MD5819f266d34aefdbdbf637f61f21c76ef
SHA1a1107800372e5176c3ddfd7fa7dc2e0ebdcb8568
SHA256f664de3b9a346b15823651d52fede605bae437add6a0e252182a5fd3bacafcd7
SHA512e543941e019f9e4d3117384a94377ad5f25f560979f3b157dc2d9f5cff46bca1d5dd195d801f8bb56384fec8de3def0f22ea69809924a4ff416a27391187c401
-
Filesize
1KB
MD5ad3ef75abc3fd5e3d55f601df4649627
SHA13a8c705d1654d382c4b86e112ad912a09b40a73c
SHA25699fac5e82c305dfec6d8dcd510752f7d08896b8b2eef722e68237cf6105eae83
SHA512524424cada4ff4a79316c194fa99a939fd3713c860a30877ad5009bafbba8ad28ebbadc59e1ece5c24b9842fd22435a88dfa80b4f773b04fca60a9bfb41b82a1
-
Filesize
16KB
MD52dee2936ddf08f34ae89c070d155c588
SHA135571d19cf8d42691dd4b84d6def39ad13309307
SHA256b1f662d6ecbc20334f8cb8a1139d4c9274455ee0cfe0a7725ea13add72e7070a
SHA512be3294ff3491a391b952151e5053e26bfb7a5d70e549525846a0201864a4cef91efb6d89a54aaed59f64dac8aa69c8e2b5af28a5e14ee80e6d6ce4bb2d42b4de
-
Filesize
16KB
MD5f6198f51d49b737d3f07a09b08cfe7a6
SHA1e34dda840e93782d1af2fa246f66ec7619e04289
SHA256af4170fc9e3cad11a3d117a5c7caf84d33b9072fada1724c75f8e41f89a5dfc4
SHA5124aa7b262ab1529a5ce1ce5a5b4a41d06f3b47bd56f83274baca86425f26bd1ff8476edb0b90b20309cc755f9652a2475e348648fda15cb172101200e9e519a0b
-
Filesize
5KB
MD565ae2f0a99f48d4c2f6b01d6489655b0
SHA117e4c2cce7ee1cd19ff2cc79e16e7c9ae8094b60
SHA256ebb862e84a25d854d51108caa0202277da6b5c297a4febd3a5e19d70179d7bd8
SHA5124f6afedd9abf3d1dc88330e2b02ccb6b2ea37227ae48ad8dcbc2c157c0f5dc49dd89982ba4310fb356687cde17e73d2a908b5e13700714ab3bca6ed8ec722ade
-
Filesize
50KB
MD5b37c0e656e9ea43ae42e16c82a1c5990
SHA118cfd51908637d776a4688e8b8fb913028615226
SHA2561128450a73f5adc45bc7ae57b4d092faaeff134b976d67c7637e94ebc615ed65
SHA5129a3e1dffcdbad1a856fd9e43a27eae8233b20f03327c5e6145f4c90b396f30cd1cf58d8a310428cfaccc7929113cd08a739b1ea4e0996400029018c71fe43d2a
-
Filesize
50KB
MD5e5d3851cdad1a1d47addd4c5140594ce
SHA1c50a54aeb9bd9c7722cf5ae61038104dccfc46e8
SHA2562dcc6f04ef84ebd1af7f08e36c9e1a8f8c1f0f147cd32d31640a1887a9d2c568
SHA512790e33629c6ee86e3fbbdd18b2aad494014e1e3d65e6a1327d1cf76114b535acf8cc0c7644c660f05a8599b5a10e7f2ed86b366f95920de31eff5a423bc2c100
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_0
Filesize168KB
MD53263784a317da549ccaa744a0269a333
SHA10915ba40a6a6fb0e6dacc2d33d3b4faf06fbc023
SHA256432713f85eb5da1e558e30e3d32af9efaa18cd5a41e5953ee8cd1d49f71d025c
SHA512dd9c7f708b6f458aecee04d95915640398d1a3a56e5bb75e3d8d2c7e3b99c910970293bd5f6c422e9229bd44849cedd68fc6191a9c199fdb4b49bcbd6c4a28bf
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_1
Filesize381KB
MD539ca16b127ed9c99026047f6adf4abf0
SHA18d9cf57b84de5a580b975b4044dec6857e449bb8
SHA25660e54aa803bd69bbd34552acb7fa82967c5ce34dd09234854021a03687946056
SHA5120244c48f12da959443a6f42032f3b9bfa0a5fcdbce1f5e4628ea8a401a5b0cd0c49da7f9a3365931ed99b5003442f1976cccc59b60f7eda8d5542ee324bdf921
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
Filesize449B
MD55ff21d5d0dbb126cc3f0db52fb7b569b
SHA1406fb3297b1f61b109ba578b94bbd8c126a092ce
SHA256d8e3d37c58f45e6328e0c1ad75d6eccf46a2af3c47e7f71b0be69304889fe730
SHA512620bad2ada6c31a2bffc05767eeec4ce327b3334169dc349b00ace0df5042ed9238a69c519cf58730f2d6255620392b6f67fbca8af2f397ec7576f86c7831b0c
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize264B
MD597137720d241a90598e98c2a7fd6917d
SHA1439af5e66918985ab8b92dc231d00603d19a4192
SHA2567d733ba0178dd1398bb888a552853c6adf1f3eea1840f02774d1bd0d306d0c37
SHA512985a0dc21a7487a8faff337c453e6c0e63322f7d17433ed9404a7f9604c0c1be09213762d40f1594c85fc1d595d282fbea19add71568ba3f923d033de84f38f7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5b8a5a.TMP
Filesize48B
MD56e50e766df18d6f715cc347d148a63cf
SHA17d54b98ad46061068c611d79e10df3c524d0c6f1
SHA25601923f4db600467383e28613b52b69f5882cf88e5b9f7f6b5ac55770336508c3
SHA5129506db3f36d175738600b45224f8663f6c98525eddca180732465a8128e581125f310759b4c36030c5b28ff263fb57e78581d952080541e5895551d453b287ef
-
Filesize
7KB
MD5b486a2d22e22545b4d7ce820c38245ca
SHA13be7e3d4e07c581b9638a73a062809fb1f535ca8
SHA2562f490c4adc51b58604c99546925f091dbda66ce6e54a0ea5b75e675d1fbe019c
SHA5125c47112085670e0726401d436984accf4ab21c23fd785f0031997b786238618a163cd194749b8f625c3ab18d211f31711cc904c3164671bbc9347550c3b72ace
-
Filesize
7KB
MD581bd4aa29c18e00357aa2905bb4f104d
SHA141c1ab89e08deab9c2b7900e095b1d5760f1b7bd
SHA25604633a0da8b41d299b229940f081882d98108eea98869b443ea9d9ead6c25d39
SHA512e07a4ce4b668e6ce307502db2ef28ea93b6bd79eb59a312c0d908c090f340347f5700902e6bf77af491833a33c0da15e349903ef52522d5a72281922f0331576
-
Filesize
7KB
MD5665e32fa3df24dfcf8f049c1c4364e02
SHA1cf75e0051019779c5726489f8e91c7754bae8f56
SHA256923d6bcdd71a002032f8040246ab7a18293846bd005df3325c44dafc1e4e3415
SHA51266851ca36fa1a20263b8b847e78caa3e033f7a056a1b0433cffee42b5949f32eeb0078b2ddeb1fdcb43c328f3c8108e58e154c533863358ed473b787211c8fd7
-
Filesize
4KB
MD5c28df60341666a2619ac9206f0fd681c
SHA145aff4ed176d208aa88714c4f98022a0804118d1
SHA256984f6052527e95a2db6a0595fc504a2edc44659549ec858d629127a5ddc60638
SHA5126a5bc5a10ee484ad04ed391276df76f819c54115aaa1a3ad1b6d2018d60bde412ebef13c7b93366323af49dab146ff12fa0c4e8e30181c9a6c7ed1de4b7e2646
-
Filesize
45KB
MD5a2d043663d9769324713c0150f9920ec
SHA1052638835119367df6bb907070129324714dcc62
SHA25612c2054de88492eb1023bfec6392c80b04f9ff5045ebd25d401dbbef2c081e75
SHA512ab9a5a7c699949c59d57e173a554d72d2fa55fbab4ae1ca817fd261426c0ff3d76db0f7b4b9b52d650059066fe2a8fd3d4de3c4da8e2f785384efa69ed1d9f73
-
Filesize
154KB
MD560ec8890171ef29186ef10e14334387f
SHA1740b0a3888fbbe25fbee2f906df666d91cbf7c02
SHA2564813873b42ddd0e989cab4d79c9afdd06d94eaa9594adae588c380a3ce8560fe
SHA512720d2884be0cdfc2e3bfe30d5d8d8e5d249b79f9dfa32f24af0730363627136d440575527447a357b9b441157f098be4108cb56ddafbb0758de5236a328a93fc
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Subresource Filter\Unindexed Rules\9.49.1\Filtering Rules
Filesize68KB
MD56274a7426421914c19502cbe0fe28ca0
SHA1e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA256ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
SHA512bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5
-
Filesize
30KB
MD5d08b8654d892618c3ad72d6ff9b4febb
SHA1d4f0c78517dcd66774f0a197641e032de9eed38b
SHA256743d01fa315419d743319e51a43771e3541407b6e139bd031b81da31ded58400
SHA512c8500eb9e435fe4b58fc0277388c7b282541cd715f887f51d6c7ebd7bda3d6a35205a285a104c7eea40938acbcf1cd5e7e90b505f319873a4f48da4480a0b3ea
-
Filesize
403B
MD599580055fbf4b30371f098ce543d400b
SHA1c8ca4eda3c04a91340587f01136bc7c2400005c1
SHA256f87d88a5cbe07b97223bd7e2255df80fe6abb990f7fd30a95daaf1c3f23c46e9
SHA512790ece45131a5e0a0c93664269390d339be9071562409121a3206e6c7385eb39a4cc8b205b9b75c2449a6fa3351a8e6d000ee4da063a7f581b743b3777244d19
-
Filesize
403B
MD56974899a5a491ab94cd7c508c6b42eda
SHA153989f6ec57c5b2d6ce0a1ecc4ad425ff7b1b72f
SHA2564c2aeed7e57d7e0c631c6c088c32d18faea1db1957257f7f241830eb45a4944a
SHA512b60373bbf008cedbd1340329888cec7fed5d91fff8cf7e69651494be294d39a083140ee03e65b1e367b6f7a7c2b953a940af486b0484d7e47bcdf9bd352440d4
-
Filesize
332B
MD5590fd86ad024f2b655deec8333e240a9
SHA1f1946050248dd1aea834f139063ac8eb3e41677e
SHA2567afe6a8c5bf14cace6e9bb2d40df2adb5f31325fc024f448138106cf7b63f7c1
SHA512c19bf730552e548b6caaa27f5ff2c5b34d34ac9408b3b6e388361635ddfd4f619b9205fad76b9141f2804b8dd364cd843dcbabd4d9d7b7b712f320f6729d87ec
-
Filesize
209B
MD518f8576627f56c8528068bcb90155e07
SHA1524a3e61980799bae4f57989ebc664a1eb3744e4
SHA256769ce606ab26701f32cd90f3405c0f67d378367352a0885b644e42c374513d54
SHA51209f54a93e3a9d09716f1c3d0daf08f2324eabac4c6c2049746519640e1f6b2d016cd96d7d8cc3d8578c3a4389eaeef3e7334e2bf3bcca43ca2252c1810e88dfb
-
Filesize
208B
MD531c80b204868d611001b7c609e487698
SHA183b5d47219cb6914ea3640a56c4cd42b007dcb3f
SHA256ff30a17e9fef182a542f7f9702f23dac78cb5fc418afef4cfe53040c23f44fce
SHA51210186c8779676aae7b76a7c30e9604aa649c6ce45aeed6bb1f3e3b70381a3a4af70284ae250580a133cc8cd16689837332f7721bfb2acddc5615a626fda29927
-
Filesize
656B
MD5c269a5199c69f208c448bbddfda1be5e
SHA15f915276de7dcf8d5a95fd3b9644f88a77b1d862
SHA25600a8daad2f897e35d00751a45acee7c45b4e3a208e6409b5c51680cdc9c67b7c
SHA512c3fb5b5c5535556848935599a7b3e6bf8b89c25c0c4fb60c0efc553920ebad30277804de79f227bffbb7a0e25a73f7ec9d92c17ab474c8321d7f98eff0a06ba6
-
Filesize
185B
MD595d9718460c5208633c373c521af233c
SHA14d3b929038e5193315f0b060d4aa7f33e4e0d265
SHA256fd040c1f4d95d58f91dcfdadf380418bed55d91adca2a00aee6396bd559a7c75
SHA512b495e8ee924419c7a70cdd655b071fad508b468ff7d99acfa73468ae09e48f402486972e3b8fbbd077e564c0d74ecdf6c1754d6f862477c936ca2b4b22e0047f
-
Filesize
308B
MD50cb1cc6ebd3113ffa4d08cb8e611b0c1
SHA1c084178a890875d41c400e8950537e1f8a58a50f
SHA256b578ec7cfe4cdf6690c83daa66b068fc585a8b35fc3a8722e29f2dc0fabb26e2
SHA512c86f4c9a16249313e1a4e0561dc6241e931c5d382a830b64e3aa9d1447734716417bc2f08e4860edc0d2945cc5091170b90039194c90985395d33a36662fffec
-
Filesize
2KB
MD5b88028010e3ec10804bd0d329be28aae
SHA15be6bc64b448e59693c90e97097c499d34c316a3
SHA256a3a30f2634c79706064fe1ae280130cc27fe1f890b8ebbcc6ae0206f401197cc
SHA5122f499b351a85407a19d00516b60142387843e241c6ba613f9ab417792e1b4a95b8890f7f6fa5a43ce63c619d04f6e55a45e7db6e534261d94a33613bc7dbf9ee
-
Filesize
2KB
MD56e823200517304d28dfe106cd9c18f6c
SHA1a5239276429730e814cdbc922f334818c209e4b4
SHA256c015744ed7c4bd19588ccb0f063e1b973ad08366f3dd6da39e099214c3a6e8d7
SHA5125fd3afdf6d405a17062a1ce84ed119b423803668735ceeff2367bf1e338420474d33d129d16e96a02606f4ee0fba044dee18c33f3aead34c7a4bb08f07084d68
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize9KB
MD515b5d5aaed1df0046978de026a5f5f4e
SHA1fa674f44cef8b1261b8982e6fa9f27a4180681d1
SHA2560628ad05ac7ee45635c4c48e32d2fcd67fa44ee7576e3242492f4dddaa1a77bb
SHA512fc211d074e89f8cc31e92f56d7f840e789fb313301a3a1c220a6a855dba61e3c1b60d42bae395c69cfddb740ac21c4bbcf4518a2f3bc5b28a2acb2f53a2c6f09
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize13KB
MD51a1a77066b9344d09be3a53b601bdbb3
SHA13d3b3cc313412b98c39eff4291fc701ff8552003
SHA2566d11fad1e3cc159954126e59d766f5716927ab50c0f543b7be306bd9080ac40c
SHA51253d457d299f73ca38347a720e7a90389dddc346cccb0411d9c2892cf9dbff2a0b033a74f04296b286707b81cf110eb1edac13d1b125b475fefc2048fb4519eb7
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize20KB
MD56c2e3b4977d4315597a04330a40a63b3
SHA1c23750bbf754068dda40d8ed4276483d32b9ccbc
SHA2560f09705a03edb3a1d9c4284d42377810a9ec0ce3fb79f54a7e9ecdc48f4f1678
SHA512b6a7c554aef68ee58a87ae5787c7bd8d7eda9fecbde7290f28b3cdca9dc304eb2bc8ec7f65caa0f182e623d0ab30a623695d2bf990e681b7b1226f7076f7e2b0
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize16KB
MD5ac6377c94c81a53a66cc17fea5f9c05e
SHA1e4bdc4084c2a6619510eb84ba20bdf04c59004ed
SHA2561c6cd3ea09169225e7b30665f715ba5916a18aee72b690f4ed1f91827e852321
SHA51277c49a5867f382da688a96692477e9e590e8fe198f15965be6f92b6a1807052b470b8c006ae4d5d039f6252eb27a7e3007025a5c60a5089bcb184f2268b0bfa3
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize14KB
MD5b6630a470cad492586d12d221794be72
SHA1b83442acbf4ca269aeebfa83f7b566898caeaa82
SHA256fdf866e9f363e8b5e90cd6245c1ebd0fbe1cbc0491c91083a41647c15a941c31
SHA512b59b6b8ff2f7ae808e048a69fd926a9873f07288932bc18134a8c99f67be37383355a6b0c8eb1b9f367a57bbeb84005fcffda385719b7c6c4ad63ff195ef82a1
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize19KB
MD539fcff811cd2fe9287d324a37a117b04
SHA1aefca6fd5684b31378b219f373cc5fbd43fe4cf9
SHA256516cfba7113be47c9b4ed95536dcc855dddd737214006ff3d3db788deebf490d
SHA51219fd49d0629b03a3f46135275bf696d7ea4aaab066995f2e0c011b905d988ab8f735aa5ea7c0c361860e15a9280b631a162e90b142add170a5de9d38a14e58df
-
Filesize
2KB
MD5f6f60b404fbc80ec522f6106ce280c07
SHA1dd55d51447bb82fd0f4c988f752166dada8a0d62
SHA25604ae1da98b5bba3151175096f7a75079eb17d8fe42dc159ed6ded4cca4bf364e
SHA5122c856eab9f5becf8e3309dc35a95ea8b2f34e697a960b5a848de161d10363d837d4d78d2b52503e5696906ed929b5f1f37a084dc145e4c6f54d5db45f0d2213a
-
Filesize
1.5MB
MD557f352259e6a51faf1b09a1cc384526b
SHA1b2fc8e78846f894a046b2d453199a4a3d132d084
SHA2569c9993f49f60ee77b2f584c5b003718c517424e6b78b39d592c7317a710bfaa6
SHA5126aa9f6f6c19c156421f0fed924a8636f1fae256760029d08533d90f3c3ecd588cd6cc3abbd7c0d485688089477dac3abf584352581f5188a7a3fedf590619f6e
-
Filesize
1.2MB
MD51684aab6fae1ed888cf6d3c45e3f5fa7
SHA16acc87b81836575bf7b497f0e8a9a23a221f06b7
SHA2564114122c0dca23f637d83eed33f9abcdc92709e2ac6f63ffd55f5aae519b58ab
SHA5126d4bafe21686ce62cc129082e8dcd4da87fa7dcaea5eee9862a99adbb0142e89fe0e9d097ee2b9a9a6b6eab3ee23b6a26c4fa587d7ce1782a1d2e2c1454c2e71
-
Filesize
108KB
MD557428456c6e6c2ea328c864681db5df3
SHA12dc7329e0b346c435b6ea5cf44a3d0a076f8d398
SHA256ee87747102eba8844939352740d0bb6c4a67f10c2656961cb2722cd42ba99f40
SHA51240fb34fce07f094fdaf78c499a21c3f534f0c8ae1246b6cf382ea7e63fa08b4de56e6c81eb8fadce8a2e508ae5d03831590a06ffda3d46026fb894e4997f31b0
-
Filesize
180KB
MD561f974cf8f47f9a47760c3fb21a2ce3f
SHA116ba7bd668619f8e284bd7cbce08fad3ce97fcb9
SHA25678f2a39485d7b48733bc4767619baa34310cf8f9dedc120d054d0842eb4201ea
SHA512152a520fb24857ab0a834f1c94e0f7a21c1b998c71861843e37d55a2364a6730fae2f3a02507941ff593a9c1c9f57018d9912bd0d80ab0b87d7b4158194b927c
-
Filesize
1001B
MD52648d437c53db54b3ebd00e64852687e
SHA166cfe157f4c8e17bfda15325abfef40ec6d49608
SHA25668a3d7cb10f3001f40bc583b7fff0183895a61d3bd1b7a1c34e602df6f0f8806
SHA51286d5c3129bec156b17b8ebd5dec5a6258e10cb426b84dd3e4af85c9c2cd7ebf4faea01fd10dd906a18ea1042394c3f41a835eae2d83dc8146dfe4b6d71147828
-
Filesize
473B
MD5f6719687bed7403612eaed0b191eb4a9
SHA1dd03919750e45507743bd089a659e8efcefa7af1
SHA256afb514e4269594234b32c873ba2cd3cc8892e836861137b531a40a1232820c59
SHA512dd14a7eae05d90f35a055a5098d09cd2233d784f6ac228b5927925241689bff828e573b7a90a5196bfdd7aaeecf00f5c94486ad9e3910cfb07475fcfbb7f0d56
-
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1076273682\_metadata\verified_contents.json
Filesize1KB
MD5c6a8dcff24d9d1852b0175d5ff59231c
SHA1b343627d458933aab66d303aa57c723a1d00dead
SHA256d0715b04bb7d32c7f7d888834983406ceef885799520af976dd164e6b8d1d535
SHA51252905fdbfcf9b24708be49c1bd481a066c7091e8769e049a46cde0da866aae92e2daaf4c930a9234c4253eff383c62414e8837fe5a4ff3fcd3d0827252bbaaeb
-
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1076273682\_platform_specific\win_x64\widevinecdm.dll
Filesize17.8MB
MD5daf7ef3acccab478aaa7d6dc1c60f865
SHA1f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA5125840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75
-
C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping8404_1076273682\_platform_specific\win_x64\widevinecdm.dll.sig
Filesize1KB
MD536e5ee071a6f2f03c5d3889de80b0f0d
SHA1cf6e8ddb87660ef1ef84ae36f97548a2351ac604
SHA2566be809d16e0944386e45cf605eae0cd2cf46f111d1a6fe999fec813d2c378683
SHA51299b61896659e558a79f0e9be95286ebf01d31d13b71df6db4923406e88b3ba72584ef2b62e073b2f5e06901af2c7d1b92d3d12187fe5b4b29c9dd2678444f34e
-
Filesize
66B
MD5a2c66c5636ba1d6c6f4e6f6e2beab7b5
SHA172f4d77d5fcba521e25df2ae082e339d39f7bae3
SHA256a47ff5dba25765c696476506ed4cba5e7ef5dc1b402d8acc5887bad76083f6aa
SHA51223b9484380a44db3fa7f45bff40928f3e940d67899d2d0ef3c7faa80f943aed69e878964f4cca3405563a87af3db2b7bff8fb88f66698abb94293dccf940fe38
-
Filesize
108B
MD5f226f2485b41a6989a809fd2cf6bdcbb
SHA107b6fd5dc38e7ade71c909e45f9298dc289a7b3f
SHA25681d30ab6c7a621f03ad7107ab1c767f55419efc72248fe2c88bfda0ae76d4dbf
SHA512641512ad0ceb0ea542c530965a68ea74acca75f2c62eae066e802765a1a8d21a7dd2a9294a8824aa52bab8c56b52e689533ac6448263d2e018c25588bd95d55c
-
Filesize
110B
MD53f1496f735ac3c3de4a5c9bee0b692ee
SHA15ba9b321eaf6b26ce9d1dc811c77b0a4749e6a9d
SHA2568570ae9d4bdbfa9a76d303da090476896352ef170c1309e053998cc484bbfd7d
SHA512759cff3e1e2f5b11f4fab12fbadcac97304b748801221c50447b550d75c9afcab1accc7b2423dbc63b996206c36c470a6d422e4fb721652216406bbf648b4b0a
-
Filesize
76B
MD5b5dabcb6b1744da449b7ee8f85258f7f
SHA16602da5eb5d1e64644f5427f210ce1e57544bfbd
SHA256082775d5ea6bacc6bee71f31a68e966b4a7cf8d39adc681894b0e1f89bfbb47b
SHA512f89296d1dd2f6acffc102c45e1d51516937f4c143eb642cdf6c79d35b121a1c712063f56fdb6636765882246fadacd67cae71131831346f7b5770952070d76a9
-
Filesize
72B
MD5d5aa769547c3e82d22eea169f9bb5503
SHA10c6920524b9832a74510dd11e03c92aec6def0bb
SHA2569a72c32fd87b2b214b8bf46857f4d2e1364201ed3797a612a11c274cb91dcd24
SHA512a28364e21868df9b108b55269dd4eb05a88abae52023a348b21b49516af8139ac3be820709d6fb321efc379538c627540434ba8b575e20637d608835df2c23b7
-
Filesize
95B
MD5114d678c3f6e8483d80c93a49548acc2
SHA1ad3c874c8228e887ee24000123496fc8f87a575a
SHA256df99f037cd238d3b04aabd4699c04c3a3b89449d0fb4415f957efa3436e702ca
SHA512dc8e7a24d5308eaae2280bba2d6a00c60ad938030fff24166895e8fc32732f30ba25635481eb01a6bc5863af9e4a330af1cb5d5eedb9889d48ff4de95385ec42
-
Filesize
107B
MD5f239b207bab8ecc0857fcc74d7ee3ebd
SHA16a725ba3d1efa0042c8aed551734440cf16c82d1
SHA2568d4b3876eebae506970d0169345672314776687b44c346d3d1dcd808ccc0d846
SHA5126ab9371914a41a21d8ccf64cea30c55fd80162415fd7a369faf55063310133a0e9c8951b1ff32204ee495df429b97bd221e4eafac2e75fe7b5e87e5978f61169
-
Filesize
114B
MD54c30f6704085b87b66dce75a22809259
SHA18953ee0f49416c23caa82cdd0acdacc750d1d713
SHA2560152e17e94788e5c3ff124f2906d1d95dc6f8b894cc27ec114b0e73bf6da54f9
SHA51251e2101bcad1cb1820c98b93a0fb860e4c46172ca2f4e6627520eb066692b3957c0d979894e6e0190877b8ae3c97cb041782bf5d8d0bb0bf2814d8c9bb7c37f3
-
Filesize
108B
MD551776c09b42cbf9a68f3adc85a55855b
SHA12f7824407cc456180d3b52170b5b2a0d2ee08167
SHA2569d414e6677697a1f23d5f280eb48787616968a6a0254a679d86790520d6651b3
SHA51262c0c3ab04359118e312eb7f7561e32de61294b23e5f0eda194e09efb0bc42c24bffe202b80e83227a12cdd40ca83869080b73ef93c3bfd3c768c1abf94b88c6
-
Filesize
1KB
MD5d6bd210f227442b3362493d046cea233
SHA1ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA256335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
SHA512464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
-
Filesize
635KB
MD5d940ea062ed6e99f6d873c2f5f09d1c9
SHA16abec3341d3bca045542c7b812947b55ddaf6b64
SHA256a0fce2b6c865ae4f00145c9b366c39484daf3160b526c77005e59f6f65adb202
SHA512e4069e41311e8bd4599de0a1bdf0ee0b76316359a0c83ac663c23da8833e5dc0effa260fe8d0e47f4befa94c87fc7bf93bce2b79792abe8befc59acf5401cfe1
-
Filesize
191KB
MD5eab9caf4277829abdf6223ec1efa0edd
SHA174862ecf349a9bedd32699f2a7a4e00b4727543d
SHA256a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
SHA51245b15ade68e0a90ea7300aeb6dca9bc9e347a63dba5ce72a635957564d1bdf0b1584a5e34191916498850fc7b3b7ecfbcbfcb246b39dbf59d47f66bc825c6fd2