Analysis
-
max time kernel
468s -
max time network
469s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
31/10/2024, 20:20
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.google.ru/aclk?sa=l&ai=DChcSEwiksvqcuLmJAxWChlAGHVTtJOcYABAAGgJkZw&co=1&ase=2&gclid=Cj0KCQjw1Yy5BhD-ARIsAI0RbXaaBnLOgxFwmlyhwdXueiGpxaWeVHzg0RtYbSsSHxL1WFzD5H_AyQgaAqxLEALw_wcB&sig=AOD64_3HtDN3DUY8_5VDKL_WCcyj_TT_Sg&q&nis=4&adurl&ved=2ahUKEwj05PWcuLmJAxUvV0EAHQ9PL4EQ0Qx6BAgIEAE
Resource
win10v2004-20241007-en
General
-
Target
https://www.google.ru/aclk?sa=l&ai=DChcSEwiksvqcuLmJAxWChlAGHVTtJOcYABAAGgJkZw&co=1&ase=2&gclid=Cj0KCQjw1Yy5BhD-ARIsAI0RbXaaBnLOgxFwmlyhwdXueiGpxaWeVHzg0RtYbSsSHxL1WFzD5H_AyQgaAqxLEALw_wcB&sig=AOD64_3HtDN3DUY8_5VDKL_WCcyj_TT_Sg&q&nis=4&adurl&ved=2ahUKEwj05PWcuLmJAxUvV0EAHQ9PL4EQ0Qx6BAgIEAE
Malware Config
Signatures
-
Downloads MZ/PE file
-
Checks computer location settings 2 TTPs 64 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation Wave Browser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation wavebrowser.exe -
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE 64 IoCs
pid Process 2320 Wave Browser.exe 6016 Wave Browser.exe 5296 SWUpdaterSetup.exe 3360 SWUpdater.exe 460 SWUpdater.exe 4540 SWUpdaterComRegisterShell64.exe 5916 SWUpdaterComRegisterShell64.exe 5528 SWUpdaterComRegisterShell64.exe 2572 SWUpdater.exe 2744 SWUpdater.exe 6120 SWUpdater.exe 5860 WaveInstaller-v1.5.18.3.exe 5108 setup.exe 1852 setup.exe 1208 setup.exe 1424 setup.exe 5548 wavebrowser.exe 5272 wavebrowser.exe 1600 wavebrowser.exe 3592 wavebrowser.exe 5376 wavebrowser.exe 5652 wavebrowser.exe 3412 wavebrowser.exe 5784 wavebrowser.exe 6288 SWUpdater.exe 6452 wavebrowser.exe 6480 wavebrowser.exe 6552 wavebrowser.exe 6884 wavebrowser.exe 6904 wavebrowser.exe 6976 wavebrowser.exe 6988 wavebrowser.exe 7000 wavebrowser.exe 7024 wavebrowser.exe 7036 wavebrowser.exe 7060 wavebrowser.exe 7012 wavebrowser.exe 5320 wavebrowser.exe 5152 wavebrowser.exe 1688 wavebrowser.exe 3660 wavebrowser.exe 3184 wavebrowser.exe 432 wavebrowser.exe 2044 wavebrowser.exe 2464 wavebrowser.exe 7076 wavebrowser.exe 6184 wavebrowser.exe 6196 wavebrowser.exe 6224 wavebrowser.exe 4168 wavebrowser.exe 6248 wavebrowser.exe 6376 wavebrowser.exe 6304 wavebrowser.exe 6312 wavebrowser.exe 2576 wavebrowser.exe 6956 wavebrowser.exe 7048 wavebrowser.exe 6188 wavebrowser.exe 6984 wavebrowser.exe 6964 wavebrowser.exe 6916 wavebrowser.exe 1552 wavebrowser.exe 6660 wavebrowser.exe 4664 wavebrowser.exe -
Loads dropped DLL 64 IoCs
pid Process 3360 SWUpdater.exe 460 SWUpdater.exe 4540 SWUpdaterComRegisterShell64.exe 460 SWUpdater.exe 5916 SWUpdaterComRegisterShell64.exe 460 SWUpdater.exe 5528 SWUpdaterComRegisterShell64.exe 460 SWUpdater.exe 2572 SWUpdater.exe 2744 SWUpdater.exe 6120 SWUpdater.exe 6120 SWUpdater.exe 2744 SWUpdater.exe 5548 wavebrowser.exe 5272 wavebrowser.exe 5548 wavebrowser.exe 1600 wavebrowser.exe 3592 wavebrowser.exe 3592 wavebrowser.exe 1600 wavebrowser.exe 1600 wavebrowser.exe 1600 wavebrowser.exe 1600 wavebrowser.exe 1600 wavebrowser.exe 1600 wavebrowser.exe 1600 wavebrowser.exe 5376 wavebrowser.exe 5376 wavebrowser.exe 5784 wavebrowser.exe 5784 wavebrowser.exe 3412 wavebrowser.exe 3412 wavebrowser.exe 6288 SWUpdater.exe 6452 wavebrowser.exe 6480 wavebrowser.exe 6452 wavebrowser.exe 6552 wavebrowser.exe 6552 wavebrowser.exe 5652 wavebrowser.exe 5652 wavebrowser.exe 6884 wavebrowser.exe 6904 wavebrowser.exe 6904 wavebrowser.exe 6884 wavebrowser.exe 5152 wavebrowser.exe 7000 wavebrowser.exe 6184 wavebrowser.exe 7076 wavebrowser.exe 6184 wavebrowser.exe 6196 wavebrowser.exe 6196 wavebrowser.exe 6224 wavebrowser.exe 6304 wavebrowser.exe 6224 wavebrowser.exe 6312 wavebrowser.exe 4168 wavebrowser.exe 6312 wavebrowser.exe 4168 wavebrowser.exe 6248 wavebrowser.exe 7076 wavebrowser.exe 6376 wavebrowser.exe 6248 wavebrowser.exe 6304 wavebrowser.exe 6376 wavebrowser.exe -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\SWUpdaterCore.exe\"" SWUpdater.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe -
Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer wavebrowser.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\VN wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PA wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\GM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\EE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_1469942880\manifest.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MS wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\JP wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\FJ wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CC wavebrowser.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psmachine_64.dll SWUpdaterSetup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\ZA wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LY wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LT wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_656480185\manifest.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CI wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CA wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\manifest.fingerprint wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\TL wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_1400251971\_metadata\verified_contents.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\TN wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LB wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\ET wavebrowser.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdaterOnDemand.exe SWUpdaterSetup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PS wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IS wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\RU wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_1328200556\manifest.fingerprint wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PG wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_419895823\manifest.fingerprint wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\UY wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SI wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\KG wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IQ wavebrowser.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe SWUpdaterSetup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IN wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LC wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\FM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AU wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_965243136\LICENSE wavebrowser.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psuser.dll SWUpdaterSetup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\XK wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\GQ wavebrowser.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\swupdater.dll SWUpdaterSetup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\RS wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MP wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IL wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AG wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_965243136\_metadata\verified_contents.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MA wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\KM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CX wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PK wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\ML wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\GE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\EH wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CL wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AL wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SB wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\RW wavebrowser.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 13 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaveInstaller-v1.5.18.3.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe -
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 2572 SWUpdater.exe 6288 SWUpdater.exe -
Enumerates system info in registry 2 TTPs 6 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer wavebrowser.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry wavebrowser.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133748797700048643" wavebrowser.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\ProxyStubClsid32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods\ = "4" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ = "ICoCreateAsync" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods\ = "9" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WavesorSWUpdater.PolicyStatusUser\CLSID SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\NumMethods\ = "10" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{CFDE680E-8700-4808-BAAF-8B1F50F2CC87}\ = "IPolicyStatusValue" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\ = "IPackage" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\.xhtml setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ = "IAppVersionWeb" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F} SWUpdaterComRegisterShell64.exe Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8}\InprocHandler32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\ = "IAppBundle" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\NumMethods\ = "12" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WavesorSWUpdater.CredentialDialogUser.1.0\CLSID SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\ = "PSFactoryBuffer" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods\ = "4" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods\ = "4" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ = "IApp2" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\NumMethods\ = "12" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\NumMethods\ = "24" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods\ = "10" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods\ = "4" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\.shtml\OpenWithProgids setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods\ = "4" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods SWUpdaterComRegisterShell64.exe Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ProxyStubClsid32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ = "IProcessLauncher2" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WaveBrwsHTM.V7UCG3NSZVD447JAIOWFWLOG4E\Application\ApplicationIcon = "C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\wavebrowser.exe,0" setup.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8}\InprocHandler32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{3C41B0C4-B5B6-4293-BED4-C927CCFDB909}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\SWUpdaterOnDemand.exe\"" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods\ = "16" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\.svg\OpenWithProgids setup.exe -
NTFS ADS 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\Unconfirmed 719390.crdownload:SmartScreen msedge.exe -
Suspicious behavior: EnumeratesProcesses 26 IoCs
pid Process 3992 msedge.exe 3992 msedge.exe 3924 msedge.exe 3924 msedge.exe 4920 identity_helper.exe 4920 identity_helper.exe 828 msedge.exe 828 msedge.exe 3360 SWUpdater.exe 3360 SWUpdater.exe 2256 msedge.exe 2256 msedge.exe 2256 msedge.exe 2256 msedge.exe 5108 setup.exe 5108 setup.exe 5108 setup.exe 5108 setup.exe 5108 setup.exe 5108 setup.exe 3360 SWUpdater.exe 3360 SWUpdater.exe 3360 SWUpdater.exe 3360 SWUpdater.exe 4404 wavebrowser.exe 4404 wavebrowser.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
pid Process 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: 33 4108 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 4108 AUDIODG.EXE Token: SeDebugPrivilege 2320 Wave Browser.exe Token: SeDebugPrivilege 6016 Wave Browser.exe Token: SeDebugPrivilege 3360 SWUpdater.exe Token: SeDebugPrivilege 3360 SWUpdater.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe Token: SeShutdownPrivilege 5548 wavebrowser.exe Token: SeCreatePagefilePrivilege 5548 wavebrowser.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 1208 setup.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 3924 msedge.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe 5548 wavebrowser.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3924 wrote to memory of 3084 3924 msedge.exe 84 PID 3924 wrote to memory of 3084 3924 msedge.exe 84 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 4124 3924 msedge.exe 85 PID 3924 wrote to memory of 3992 3924 msedge.exe 86 PID 3924 wrote to memory of 3992 3924 msedge.exe 86 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 PID 3924 wrote to memory of 4112 3924 msedge.exe 87 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.google.ru/aclk?sa=l&ai=DChcSEwiksvqcuLmJAxWChlAGHVTtJOcYABAAGgJkZw&co=1&ase=2&gclid=Cj0KCQjw1Yy5BhD-ARIsAI0RbXaaBnLOgxFwmlyhwdXueiGpxaWeVHzg0RtYbSsSHxL1WFzD5H_AyQgaAqxLEALw_wcB&sig=AOD64_3HtDN3DUY8_5VDKL_WCcyj_TT_Sg&q&nis=4&adurl&ved=2ahUKEwj05PWcuLmJAxUvV0EAHQ9PL4EQ0Qx6BAgIEAE1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3924 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa3aa46f8,0x7fffa3aa4708,0x7fffa3aa47182⤵PID:3084
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:22⤵PID:4124
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:3992
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:82⤵PID:4112
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:12⤵PID:4544
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:12⤵PID:4000
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:82⤵PID:2992
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4920
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:12⤵PID:2400
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3840 /prefetch:12⤵PID:3776
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:12⤵PID:4352
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:12⤵PID:4748
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:12⤵PID:5004
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3828 /prefetch:12⤵PID:5592
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:12⤵PID:5720
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3948 /prefetch:82⤵PID:5868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:12⤵PID:5880
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:12⤵PID:5888
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6180 /prefetch:12⤵PID:5896
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:12⤵PID:5904
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:12⤵PID:5224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:12⤵PID:5516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:12⤵PID:5712
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8080 /prefetch:12⤵PID:1324
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:12⤵PID:2844
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:12⤵PID:2044
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8052 /prefetch:82⤵PID:2432
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7772 /prefetch:12⤵PID:5740
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7208 /prefetch:82⤵PID:2368
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6556 /prefetch:12⤵PID:5712
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8476 /prefetch:12⤵PID:5384
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7952 /prefetch:12⤵PID:3172
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8484 /prefetch:12⤵PID:3196
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5528 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:828
-
-
C:\Users\Admin\Downloads\Wave Browser.exe"C:\Users\Admin\Downloads\Wave Browser.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:2320
-
-
C:\Users\Admin\Downloads\Wave Browser.exe"C:\Users\Admin\Downloads\Wave Browser.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:6016 -
C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:5296 -
C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe"C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3360 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:460 -
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4540
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5916
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5528
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:2572
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{353A1D61-7332-4D24-A075-2B24E64D54D4}"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2744
-
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7064 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:2256
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3116
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1292
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x300 0x2f41⤵
- Suspicious use of AdjustPrivilegeToken
PID:4108
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:6120 -
C:\Users\Admin\Wavesor Software\SWUpdater\Install\{2009C0F2-4102-487E-B238-FC3E1BEA7698}\WaveInstaller-v1.5.18.3.exe"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{2009C0F2-4102-487E-B238-FC3E1BEA7698}\WaveInstaller-v1.5.18.3.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\guiA426.tmp"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5860 -
C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\wavebrowser.packed.7z" --wid=uahiylfs --installerdata="C:\Users\Admin\AppData\Local\Temp\guiA426.tmp"3⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:5108 -
C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ff64c22b370,0x7ff64c22b37c,0x7ff64c22b3884⤵
- Executes dropped EXE
PID:1852
-
-
C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\guiA426.tmp" --create-shortcuts=0 --install-level=04⤵
- Executes dropped EXE
- Suspicious use of FindShellTrayWindow
PID:1208 -
C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ff64c22b370,0x7ff64c22b37c,0x7ff64c22b3885⤵
- Executes dropped EXE
PID:1424
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --from-installer4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Drops file in Program Files directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5548 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0xf0,0xec,0xe8,0xa8,0xe4,0x7fff952bccf0,0x7fff952bccfc,0x7fff952bcd085⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5272
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2072,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2060 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1600
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=1868,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2240 /prefetch:35⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3592
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2348,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2452 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5376
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3176,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3236 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5652
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3184,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3644 /prefetch:25⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:3412
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3940,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3840 /prefetch:85⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5784
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4544,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4576 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6552
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4596,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4636 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6884
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4580,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4600 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6904
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4608,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4864 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:6976
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4704,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4576 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:6988
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4720,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4996 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:7000
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4724,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5116 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:7012
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4764,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5232 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:7024
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4784,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5348 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:7036
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4800,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5464 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:7048
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4812,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5580 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:7060
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4820,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5696 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:7076
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6172,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6232 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:5320
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6248,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6240 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5152
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6272,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6480 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:1688
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6280,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6600 /prefetch:15⤵
- Executes dropped EXE
PID:3660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6320,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6716 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:3184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6328,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6928 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:432
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6424,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6964 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:2044
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6436,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6948 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:2464
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7596,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7608 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7760,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7764 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6196
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7904,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7928 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6224
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7916,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8096 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4168
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7936,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8244 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6248
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8392,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8420 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6376
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8400,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8428 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6304
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8412,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8712 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6312
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8932,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8972 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:6956
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=7532,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9180 /prefetch:25⤵
- Checks computer location settings
- Executes dropped EXE
PID:2576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=9244,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9176 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:6188
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7500,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9472 /prefetch:85⤵
- Executes dropped EXE
PID:6964
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9464,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7412 /prefetch:85⤵
- Executes dropped EXE
PID:6984
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9724,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9740 /prefetch:85⤵
- Executes dropped EXE
PID:6916
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9876,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9480 /prefetch:85⤵
- Executes dropped EXE
PID:1552
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9900,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10012 /prefetch:85⤵
- Executes dropped EXE
PID:6660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9880,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10160 /prefetch:85⤵
- Executes dropped EXE
PID:4664
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7984,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10320 /prefetch:85⤵PID:5268
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10452,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10464 /prefetch:85⤵PID:7068
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10304,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10152 /prefetch:85⤵PID:5412
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10756,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10744 /prefetch:85⤵PID:6880
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10904,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10740 /prefetch:85⤵PID:7056
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10896,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11056 /prefetch:85⤵PID:7088
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11160,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11172 /prefetch:85⤵PID:7456
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11388,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11424 /prefetch:85⤵PID:6352
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11412,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11156 /prefetch:85⤵PID:6608
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6736,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9440 /prefetch:85⤵PID:7784
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6296,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10772 /prefetch:85⤵PID:6376
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10348,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9424 /prefetch:85⤵PID:7912
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7452,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9712 /prefetch:85⤵PID:6904
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7384,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10480 /prefetch:85⤵PID:8136
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6260,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9748 /prefetch:85⤵PID:3288
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10764,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9588 /prefetch:85⤵PID:3660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10780,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8068 /prefetch:85⤵PID:7104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10860,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8044 /prefetch:85⤵PID:7268
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10848,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9888 /prefetch:85⤵PID:6476
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10020,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9568 /prefetch:85⤵PID:648
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9380,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7736 /prefetch:85⤵PID:5192
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8072,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7940 /prefetch:85⤵PID:6984
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9580,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4636 /prefetch:85⤵PID:3552
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10924,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10736 /prefetch:85⤵PID:6448
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10912,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8540 /prefetch:85⤵PID:6184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5944,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6120 /prefetch:85⤵PID:8200
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10308,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8308 /prefetch:85⤵PID:8216
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8660,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7880 /prefetch:85⤵PID:8452
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=7608,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8104 /prefetch:25⤵
- Checks computer location settings
PID:9092
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11608,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11616 /prefetch:85⤵PID:8268
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8332,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11756 /prefetch:85⤵PID:8320
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8336,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11904 /prefetch:85⤵PID:8436
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12052,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12040 /prefetch:85⤵PID:8500
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12056,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12208 /prefetch:85⤵PID:8576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12200,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12344 /prefetch:85⤵PID:8912
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12044,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12492 /prefetch:85⤵PID:8836
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12500,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12648 /prefetch:85⤵PID:6152
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12796,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12800 /prefetch:85⤵PID:8440
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12824,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12944 /prefetch:85⤵PID:6908
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9496,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10300 /prefetch:85⤵PID:8280
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13172,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13188 /prefetch:85⤵PID:8308
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8740,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13332 /prefetch:85⤵PID:9012
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13344,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13396 /prefetch:85⤵PID:8940
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13364,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13652 /prefetch:85⤵PID:6328
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13372,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13684 /prefetch:85⤵PID:512
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13380,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13932 /prefetch:85⤵PID:8532
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13388,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13972 /prefetch:85⤵PID:8588
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13392,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13376 /prefetch:85⤵PID:8560
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14364,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14380 /prefetch:85⤵PID:1684
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=11380,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8324 /prefetch:15⤵
- Checks computer location settings
PID:8476
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=7456,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14516 /prefetch:15⤵
- Checks computer location settings
PID:8240
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=7840,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11312 /prefetch:25⤵
- Checks computer location settings
PID:9100
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=8308,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14556 /prefetch:15⤵
- Checks computer location settings
PID:8756
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=8136,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8728 /prefetch:15⤵
- Checks computer location settings
PID:8596
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=11060,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11500 /prefetch:15⤵
- Checks computer location settings
PID:8808
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=8216,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10992 /prefetch:15⤵
- Checks computer location settings
PID:8904
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=11072,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7228 /prefetch:25⤵
- Checks computer location settings
PID:9140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=10876,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14384 /prefetch:15⤵
- Checks computer location settings
PID:8800
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=10744,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14360 /prefetch:15⤵
- Checks computer location settings
PID:6532
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=11296,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13432 /prefetch:25⤵
- Checks computer location settings
PID:7768
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=11188,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13544 /prefetch:15⤵
- Checks computer location settings
PID:2908
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=9436,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11884 /prefetch:15⤵
- Checks computer location settings
PID:9212
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=7448,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10628 /prefetch:25⤵
- Checks computer location settings
PID:6364
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=14580,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6760 /prefetch:25⤵
- Checks computer location settings
PID:7776
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=8776,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14584 /prefetch:25⤵
- Checks computer location settings
PID:3660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=8692,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14064 /prefetch:25⤵
- Checks computer location settings
PID:8220
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7892,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9656 /prefetch:85⤵PID:9060
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=9588,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4728 /prefetch:25⤵
- Checks computer location settings
PID:6608
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=10220,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4620 /prefetch:25⤵
- Checks computer location settings
PID:6888
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=6112,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9852 /prefetch:25⤵PID:6864
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=11540,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13908 /prefetch:15⤵
- Checks computer location settings
PID:5192
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13652,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10360 /prefetch:85⤵PID:6424
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=13140,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10024 /prefetch:25⤵
- Checks computer location settings
PID:8656
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13656,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10692 /prefetch:85⤵PID:9048
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13496,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8252 /prefetch:85⤵PID:9096
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8088,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11692 /prefetch:85⤵PID:5628
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=11652,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11732 /prefetch:15⤵
- Checks computer location settings
PID:6324
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11756,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11704 /prefetch:85⤵PID:9144
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=13244,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9792 /prefetch:25⤵
- Checks computer location settings
PID:9148
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7564,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10256 /prefetch:85⤵PID:9188
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11668,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11988 /prefetch:85⤵PID:9048
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8048,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14160 /prefetch:85⤵PID:2296
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4728,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3948 /prefetch:85⤵PID:8684
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7628,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10424 /prefetch:85⤵PID:8728
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8272,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11884 /prefetch:85⤵PID:8788
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11780,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6036 /prefetch:85⤵PID:8524
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=7368,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14708 /prefetch:15⤵
- Checks computer location settings
PID:8696
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=15804,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9664 /prefetch:85⤵PID:2716
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=10180,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10724 /prefetch:15⤵
- Checks computer location settings
PID:9724
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=13116,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8952 /prefetch:15⤵PID:5580
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7820,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11692 /prefetch:85⤵PID:7912
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=16336,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13224 /prefetch:25⤵
- Checks computer location settings
PID:9288
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --field-trial-handle=13204,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13264 /prefetch:15⤵
- Checks computer location settings
PID:6800
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=10588,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6428 /prefetch:15⤵
- Checks computer location settings
PID:7944
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13300,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10660 /prefetch:85⤵PID:9944
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=15760,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7976 /prefetch:25⤵
- Checks computer location settings
PID:1692
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9688,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9848 /prefetch:85⤵PID:9292
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=16372,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16360 /prefetch:85⤵
- Suspicious behavior: EnumeratesProcesses
PID:4404
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9856,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15972 /prefetch:85⤵PID:9592
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --field-trial-handle=11692,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11888 /prefetch:25⤵
- Checks computer location settings
PID:9656
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9112,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10380 /prefetch:85⤵PID:10216
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --field-trial-handle=7424,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9828 /prefetch:25⤵
- Checks computer location settings
PID:9400
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --field-trial-handle=8544,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16064 /prefetch:25⤵
- Checks computer location settings
PID:4984
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8528,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16076 /prefetch:85⤵PID:5640
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=15912,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16020 /prefetch:85⤵PID:5636
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --field-trial-handle=16348,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11888 /prefetch:15⤵
- Checks computer location settings
PID:5768
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --field-trial-handle=11876,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15992 /prefetch:25⤵
- Checks computer location settings
PID:2000
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13288,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16236 /prefetch:85⤵PID:3572
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --field-trial-handle=10668,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12064 /prefetch:15⤵
- Checks computer location settings
PID:6768
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16292,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15880 /prefetch:85⤵PID:10184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --field-trial-handle=10760,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14220 /prefetch:25⤵
- Checks computer location settings
PID:9476
-
-
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNTAwIiBkb3dubG9hZF90aW1lX21zPSI4ODExIiBkb3dubG9hZGVkPSIxMDA4NzQ0MzIiIHRvdGFsPSIxMDA4NzQ0MzIiIGluc3RhbGxfdGltZV9tcz0iMTAyMzUiLz48L2FwcD48L3JlcXVlc3Q-2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:6288
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --strtl=ti1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6452 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0x11c,0x120,0x124,0x100,0x128,0x7fff952bccf0,0x7fff952bccfc,0x7fff952bcd082⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6480
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:6548
-
C:\Windows\System32\RuntimeBroker.exeC:\Windows\System32\RuntimeBroker.exe -Embedding1⤵PID:9188
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3544
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2620 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:3088
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource core2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:1236
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler1⤵
- Checks computer location settings
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:3056 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /registermsihelper2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:5300
-
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
108KB
MD5b282ce9b81f606d1c6cbda554dcd4efa
SHA17554ca07096a2e410f2cd3c98beb7b7e6be27f3a
SHA2561893941e9dd1ca1296e7f575a9442fa1cc53dfeaf2d1bc94d01608ba9e7e31bb
SHA5129e71f3cb4ea67831dbee5bb4cbb2dbd9f8ff8ffd1158fe2fcac41c89169a9aa3236c8d163f7d4e9df5e2b70ba2be20fe3af97bef70be40f45dd11acb5b4bc184
-
Filesize
97KB
MD5c209d2a5f427b8dbd6ec71d6e57c7e61
SHA18340f5b41fb70e01791f1c1518d0308084b2dd63
SHA25676a54d6c150e7f38a08032a260eb5396c8df89ce9cef27f99a2a2bdf23d9f381
SHA512b2f24a876ed8749642ad353a2b32168f7d5fdfbf0acf78aa39bc4615a96016350f92406e8a657d289bc448a62e0acfdc57004595ef945bcc5b813d1a67d32f89
-
Filesize
190KB
MD5b483bb4c375468cfdae4a2ed4e40d056
SHA127311ef3b6a323335f46c4e81889a77ffb1b3002
SHA256df80d9477a45eb1ff233f3d361a1d82729c368987de14c09747df0f959184902
SHA5120116e83611626c27099a0171654a4f24d64c0c901bc597bf168f889a300a1f3aa62ef48759a78081fa1add6d82a8dd63d94eeba1d828d1aefa8ef17d2b0fb141
-
Filesize
208KB
MD5c2540f15c66d32d867f8205e39ba5c2f
SHA17a835852b20e9721eab276543e0202465e702d07
SHA2569b296f4894f4a969f2f3ce0c5c2ddb8eea503deb4919b23555fc3f04fa0aed41
SHA5123e0cd859f84598a409370498ba601147559c42f77a685bb131080e92e3cb87af1fcb793711d4331ce880deae4491cef3969f9e996e17b63caa3aa1d98d6c13e9
-
Filesize
97KB
MD506dd62361bae24f8dac385c07c162b69
SHA1ee385799aec954fe9fc3de7c81f48e7d2dd7eb71
SHA2562700573511aa417faedc4767645ef3334f46e73195f164a960c474717a3e0b0c
SHA51245d3c62f51f17231c561848da47ee2a9865130e98a38bab3afd4c048bcaf739ebd556922112f675b4635fb771331720bc971149168153800a6581ff20272d830
-
Filesize
259KB
MD513ed360db95682e27c69f74912f17140
SHA17519f2202e581defb7be93716d461470c1d91270
SHA2560d2e7bf4108138bd73343d7415181b20c4656e57716ca9bbb07b4ba9ed04e1b6
SHA5120f783fb106a68f532cf5f6d4be0f96233ea61441b8785206c49f1f2dc409c5a5f3976ac3f0244231e88c9113dd04f227069501d8217f7a254e180dde5bf4ffcd
-
Filesize
323KB
MD5d75403c05d96bed42e8e27d1e735e6e5
SHA17be275392bc5dab44818ddc48039bd2356605b69
SHA25604dd87e70d8cdefae35953763a23ac30fd9d8b5ebcf424173f001e2c1889c08e
SHA512b2e96840aabeb1677a225b2789104bb923125c8752f6e5a55d6c9074c381974b48232e0c0e419e0f4398480ba411f2e3843dfb092553fb32bb6bedea1095be82
-
Filesize
259KB
MD5db8b356ab2314b130b4b85593576de14
SHA1f89395e6bc1ea5ec03f2a8aac940218d9e3b8a52
SHA2568a412a690343346783c19967ed0ad7e1d8a1e6e31015c62828e792fb0a5ea626
SHA512769eb74dec2658053b7bbfbe4393fbcaf6598c41fdc894817b2db4b0a5eaa8748a174ffc7b41958ae7de10bf8c5db930fd2d783f32ee07c5c1f234b2bf41eb88
-
Filesize
323KB
MD57f956dd9ae7c4d18789c62f545e21295
SHA11a9792cd0280e20c06555e2c82df8767aedd9acb
SHA2569362a40da1c9ee1b600311eb2aa0f732299dd68e693254ed118a4dc5273b813e
SHA512bacb1e1f829a1f1e28527468397d45ac9010f63f810eb73ec98546dc00f967e91b37b1ed087a86f0db6aa0249551d04188f1a8f24e0c78593f3333f49be8f925
-
Filesize
1.0MB
MD59d66c62b0a6b9d86b2c90d45d0655701
SHA193b230c4c942ed55a84c5a1e744e924bf988ad82
SHA256ab9b3eba2befb88ab1919fe47ab74d181abd7c85851164bcf8f200e7c0db3a54
SHA512a5484333485823db0f7f11c978e2e110294ce8e9a212d3d6c7b56a1a160cdf33a8db0146809e52e5287d75fd474307224d6987d17b482da293a4491bb1e5e360
-
Filesize
42KB
MD54c638b6d2d9e243ee521ec29297728d2
SHA1142b6487238f0a00d016f73eda5dc7800e687891
SHA2564df4cf6c745ee927376ac7b1cc6baa9b7a749f60ce20e27b3bed209295849d6f
SHA512accb61833b6c6172768d4721c1124ebe10eae77224c2f939f33988562b5a299f3a65c6dcd5c9c3169a4831ad4873a8c1ad4dfe3340156398760535ced4bdc588
-
Filesize
95B
MD5b7db5e1ce1be54e2d4e6ed9952300a04
SHA1d3370911b0fd09fe1b07ca84eade9b64262c5181
SHA256c554c8b271339f59438d33e264a19bb51891ba45eaa350c4c6250c2624a09d3a
SHA5120a74d1679b20d8016a68e2c50bcc48521a5a3fe2f31a1f37e3f8059064756d35c114c67a574044b9203e655d04b7088461fb651d873c67af6e7f03b437f8479a
-
Filesize
98B
MD54dd9ff84cee7313157e72fe5e2477eb7
SHA1b0aa5b72af2940c10f761e2b981df5b56ec8bacb
SHA256953bfed324c6cd16befc4d9537f8972014ff33e22ec1d8bad14c543e6ed3b531
SHA512bf79799e252cfa48dd8d921325f7d0da0e341a0553ccaa1a501ae7131b11e0cce772fe4ce18f22834a4e15a21833ae1a02037155bd622118e3ac4ff664eccf85
-
Filesize
76B
MD54aaa0ed8099ecc1da778a9bc39393808
SHA10e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA25620b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
SHA512dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879
-
Filesize
1001B
MD52ff237adbc218a4934a8b361bcd3428e
SHA1efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA25625a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542
-
Filesize
152B
MD585ba073d7015b6ce7da19235a275f6da
SHA1a23c8c2125e45a0788bac14423ae1f3eab92cf00
SHA2565ad04b8c19bf43b550ad725202f79086168ecccabe791100fba203d9aa27e617
SHA512eb4fd72d7030ea1a25af2b59769b671a5760735fb95d18145f036a8d9e6f42c903b34a7e606046c740c644fab0bb9f5b7335c1869b098f121579e71f10f5a9c3
-
Filesize
152B
MD57de1bbdc1f9cf1a58ae1de4951ce8cb9
SHA1010da169e15457c25bd80ef02d76a940c1210301
SHA2566e390bbc0d03a652516705775e8e9a7b7936312a8a5bea407f9d7d9fa99d957e
SHA512e4a33f2128883e71ab41e803e8b55d0ac17cbc51be3bde42bed157df24f10f34ad264f74ef3254dbe30d253aca03158fde21518c2b78aaa05dae8308b1c5f30c
-
Filesize
30KB
MD58fc04f0a1a15bc42f5a832fd31f447a6
SHA11fdc1cbefb2a9bc601fb299241022d695b3013be
SHA2568e5e82e50f588067cd159c159fc88735d4123d3ce180b0708d6e2535b048add8
SHA5122e3d44c486d41ee24ae02e0dd8fd206b3f797885ca304d40777327d61ee494b3fa77ed1c7b8fae1a2df34120efab31fe63e2053ae44b8faa7b2976adeeb094a4
-
Filesize
21KB
MD581b7a157fdbea0969d5e5bb2283a7241
SHA12c07c99b5b3d6819766a8e5be078e601af1f1f07
SHA256c3bad58a82de5faab7b80a5a624870cb1bf2fe9ef153ef28f7f8b995532f4835
SHA5126581a367f31ebcd95d314c9ce1180c7bfba7f89065a88184ca79eef2a8f37cf9d971d05622f2a7cdc18ea5583d03bc95b12f24f2bc7cd220ec94eb0ed45062ec
-
Filesize
32KB
MD503e1fb0d8dac69154b7c09a9637b0094
SHA1bc3e2310c9f9d16e7efa591e66be3279ba5c0640
SHA256637791eebef3acf7f3ccccbed7a417c660c367e618efbd6983be72a72559c25d
SHA512c47eb817881130291806a001dfe9d6e514c3e4fb3518c241ce2813a3f13945d4e77782f864bc6200de41a71a5e6141df6e969eee525534f5884e7a225e003031
-
Filesize
149KB
MD51c560d16eb7ac2d03f9b896614ef64b0
SHA13b52ed3e9df65675fc5f286fa84d1b0d55c81d9b
SHA2560113c6fa72f864bad2c29d4567f58064df57d6810f719ca7601a9805587b4942
SHA512454e2c2e4902ecc592d9aa751adc7665621db9beffe19ef1185e59f0d7a0697546e42837ec5219146fcfb9b87d30ef6b33255bc046c249f1c28124753de43684
-
Filesize
98KB
MD59d1e050f5fcf3a2e591cecad3c52f09d
SHA1dd5915d8789365202aaacbe89b089ff08575beb7
SHA2569f6338d32bf66cd92cd61e5d0d9984c7073f6b0b6e2b92819e979c34e6bb6951
SHA51210a487db98097577e2a58a6e83a3f52fb9c0c46d3b532ae954a4933508e75776916dd89ddf92e2ded5963c0b8b438551e9f39606dadc18c03a0653332cd0e5a1
-
Filesize
102KB
MD5f646c6dd0a684d0a1a5009b313b144dd
SHA150e7d9858de1f5c059339bc6f39502b9c02a37ac
SHA256338d97348a11495d559958b8dbb76eb1917f61f936a9542226d3f31de8297bc3
SHA51232d434f6bda09bcbd7482f98fee0a3f39130068f94b71cb23c3bbbfb4a8f3930cc32bdf6443ed8d7a88f7d15257e70e7729219765d40c8e96e215c798655f896
-
Filesize
90KB
MD53f9b59725b2eb0ad88b03d6b430f729d
SHA185ff35cab803db4ba7f3be0ba85e13c8b39ee64b
SHA256602f01a1ca0613506593f671999db06ee7d61d67dc3184f8434678bd4f0819d1
SHA51265b3292b58f497915bedf2904d92ce1012f78ff5b7567db1d5a5b1bee17cc64ae8314cf0a204fdf1e0915dbb211597e4532e8a04150c040ff0dda3ec7c81ace7
-
Filesize
47KB
MD5015c126a3520c9a8f6a27979d0266e96
SHA12acf956561d44434a6d84204670cf849d3215d5f
SHA2563c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
SHA51202a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c
-
Filesize
60KB
MD53cc6eb5701113bc1ddd13fad3f6aaa96
SHA1c622b92f63670dece1cf0941a6e3e0980d1596f2
SHA256d7d2a7888b2cd68f05022f71141451a7acedf20423f3582f0b610288b3b2e43f
SHA5121bf60e5691fd12d165153dd9ffb482a15c867c7bd84f68c0953224ae228d580823f1b4c805afa13a894454bee6f5cb452b4e41e78ca4328690e49cb177c6292d
-
Filesize
82KB
MD52bf72c42fc10ee1df59af1ad52f95041
SHA10b98c319bfe50e7ee9ae2d61bd27c1c55e6fab77
SHA256c575b1cdd2d7c56777a8332c9af63d2d4c83ded501672401a6e8ba0ac9563053
SHA512048e26efa5564df806cd58ecf84203072e6ab220890af3b0c20611a6d6184f61d27e50b52d87f37f8b739b60ea4bdf1144371071ca3ce311f89cece9cf1f8aad
-
Filesize
97KB
MD5424a1e992829fd5e515ae41b785b55ef
SHA183703970f645ae18d1bbb746a93cf6dbd7ff3ad3
SHA256cda815ac13c62aa805a05edfcd3c613f40d32a2dfa56a0120549997692557df3
SHA512aa64441722a17677b0a0c521c8ead14b46dcaebb4e966ac02f2cea47033701013cb52f03239520e2db6f0468e64707550c7c1488b2cd3a05d33c059c5be57ffa
-
Filesize
215KB
MD5e579aca9a74ae76669750d8879e16bf3
SHA10b8f462b46ec2b2dbaa728bea79d611411bae752
SHA2566e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf
SHA512df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640
-
Filesize
62KB
MD5f79882e12fe87d482fe216d30ef3c93a
SHA1e3031f2d694529705d8634b397815cd907fec24d
SHA256c95d79ddd197080d143fdbaf458ce6d653621088f2d16827b3037f4417a32f61
SHA512075f20268aa1b46fd322da5220b1705e42076d6ee681417bc95d5e900c6ed9929eca102796757e5db387db56ed2e97937e074b5af75840e55b018623c0a845c6
-
Filesize
31KB
MD5c03ff64e7985603de96e7f84ec7dd438
SHA1dfc067c6cb07b81281561fdfe995aca09c18d0e9
SHA2560db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526
SHA512bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692
-
Filesize
18KB
MD544d36dfa28aa9c3cca438d311576dc47
SHA19fe9fc529b1816f23abc542265f81a4763040e8d
SHA256ccfd5be27ecf4b51ce937d357325b2bbee4ecac76abad1698b60f75bd2dcd0bb
SHA51295049aff40915d196557d3722bc697b1603f4a29377d5b457f7cc38466821d4c801bb27b3db40152f5dae4c1263ff6ec8e770a01c14945e5676d1879bc725066
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize2KB
MD5736afb0fb825c04aaab770409e181dbc
SHA1aa57361f59151d454235676aca4f4c52e29aa778
SHA2562aef800f2a26acf3d89d48df361c90c7e5d48cbaf139accbc3b13ef0930d4078
SHA5128da58d74aac6e055b8ce83bf13ef119a41bdf25ecb1c70a99d9c84bda7f1067dc2e5c9825a3755ad22e2c5efd5409c7e1fb34dfcc44225b8dadcda23b6943ea6
-
Filesize
111B
MD5285252a2f6327d41eab203dc2f402c67
SHA1acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA2565dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA51211ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
-
Filesize
6KB
MD54d0068106ea29d473743fbc549f5b945
SHA17bdd90d142d1a70578b73a3ac0f60d688a48d22d
SHA2562fa57c533a2f60269896e8282c981642d1fe335b5c4bb096c2c6fcddbcf959e5
SHA512f9cc9233a297c3363d38f1e33e185ceacb4fda95fe1057769c9dad02079d28de9999c28bd01cc1e10f56c09274804798d8542df40655d67e4f7096f5bf5cb49e
-
Filesize
5KB
MD55aab9521705679aa6ec2dd051d95e5f6
SHA1fa4d9f6d4847802c9ac8db0b36de8d04dda12d5f
SHA256345178b5a8e5f752eb91082eedaad3a6a4bc0818744c32d22eb4bfed4d52dee1
SHA51237d8ec83d11686f328cac3f2ffbb4c5bb046acaf2c64a4717c20241d5dc8ad3138c7819d63a6a22c895322c37f582bf9f5978966b37adcadb81d7dce9727215a
-
Filesize
6KB
MD568fece3de3257d22233b833e71da47d6
SHA17ae71895364dbef3b21e448f59d06d6e5e511ccd
SHA25639f5529c63dd756305213ed7ebf3dc29c9448ec78d486bd7c10b042bd6cb5a81
SHA51210038ffb21511fe2a456e20e57d87d97ccc40dad74db48ee183d42cbedbc72308c0facd1e5e32730a094efb27963b7be3c57228beb8ba55415ee029cbd11a65b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\MANIFEST-000001
Filesize41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
5KB
MD5354293d9140210a10e294af5841cf036
SHA1a489e6f637a54ee1a2d7a92ce8809cd000af3af9
SHA256e675cad33f3f47e5caa450fdf3693cb896445aacbaff3ccfc0d2f581396a3f04
SHA512f98cb60fad3f32f24cf28cf07b438cf3923d5b3b4f3a06e73454eeea11364f409dadf7ba4fefc3212f9acb9c1fd2786ed6c7454abfe191893583713afc97692d
-
Filesize
8KB
MD594cc934ac4efaf3abb0cc5fa52d48aad
SHA1c408eff4e558f675c007bac9e7eaec241fb13002
SHA25670dc1c149ba8f4f3ed5c0792e4eda40b965757b4bc0060ccb8526c78d74633bf
SHA5129dd58f7022ef51a0fc8d9c414f60746bd8f58850fd77a19369730acaf814f0747190603d074a838130dcb5a37b0fa5a843cc5db321a5bee5be0d2a2af02d9e34
-
Filesize
8KB
MD5aeda828fca2262ef4171de352093827b
SHA143bc839f06a2500b617d5bf7c43eea48ac80514d
SHA256182e06bf7bcaa42d03e34a5aa780701ba96bfe08412a58d5abc6af1533dfae39
SHA51227b037d4bff7b94f4e9cee1a42b302e45ac2607655de1a441c62546bd496cdd6542dbff962ab9533c35b2244722fb92bb1364748151a936c2291ac49f1e2a14c
-
Filesize
9KB
MD5b1407b325c07fd9ef7a868e28bbb328d
SHA1a75c2178ffb947147a78d6056d3abc71f2b269d6
SHA25603b0858f924a335fac194b0c857e9979a186eae45f2d25ff93d68a646ab2c1b5
SHA5127b1c391414a6f166dc610dd61c0fc3df9e761b6598d82811bec2c942ba9a6ddc7d03f14aa1365a3637b52990683a25b7159d00e6a09889bd0674156a5cd9c03f
-
Filesize
9KB
MD517374634e518e5dc0d830d3e6b4d583b
SHA11c0ccf3b5d009a7a6da240d9eae930b8531475ce
SHA256d256779d84f0b85eb571bb6d9b40f9a88549a02287a0d46b8330c27cbe631ff0
SHA51275379673d0255fe45f6a256bbbe05faa5b603479ad1099f7e92dbc37d7c896ad14c2963d0977df6c29b34f1e5c7b85e37ad7f32db330e5e489db5df1999eafd5
-
Filesize
9KB
MD5e4c9e38d6d7863434d763a1a5f1c5868
SHA1389340300f38c2e4e7452ba63b06bad7631a6649
SHA2567bfd4cf4f7dac274843e11cb5c519b987d452286c6ff94af24a0af3214ef6814
SHA51285f87be60a959849ae2715da5153bdf8438281bbed5cf53055a53f8fefcdb7d884417535a109bd5923910efee1d5ca32b711ff788faee0de24f001ee55592ebb
-
Filesize
9KB
MD5d81e1a5a058f2599d2d08ad6cf11062e
SHA186f0d7a448f3fec94dbb3e6236db83a3ca2bc3ac
SHA25619db1d75ed4557e7082bb2405d078f5a5b9311f58567493849aad7a39e9a8f25
SHA512c162d2e0718ef2b0fd14432707ca3fb3f4c34994c3463d2196896e4992da457a329d5f9ecbfb8b4058f214d92df47fc2b66ca26dfdb4d16db244e9a1456b8935
-
Filesize
6KB
MD59423ab1bc5a102e29d8bb1840e5a37e4
SHA18b553c89e321c6a77ffc96f26f4f66e43226a557
SHA2562b882f21fa711ecdd143c57047104a478ff401e39ed39f5ba5e368df5fe7371b
SHA512af3f1c95bdc69f852f5962abaa1d2ecbe1e4c8a30dabcd60fee0794ec4dd924ab5aa8e115ebf74c87759cd570fbac314534ba762114e88b75f275fc22a07d5b1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Filesize63KB
MD58a4a83ffe633b03323394469bb90d9e3
SHA11ae7a93cc8aedf3407a8c33da21a9976fbf77c31
SHA256c16866d8cb6cf686f8048900819cc0b00af78c39221af15849dcfe2488f46306
SHA51265856c22a5854d5be20364c06b292f477eeaef193fbfdac04ba28dd20d49bbc226b7dd934dc03dda5ee515566b2e1e7da16e0e801b84a28ce9fb75fd792ceb1c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize72B
MD56861a92b44d58789de8d89c7d449777b
SHA10f034a020af52e7eccd7a2a5c6d9a554cca564fc
SHA256849215d4370a23a891bf2138915c3ff7b55a86225108158a7119d45c1118cbf6
SHA512e3a62a96253f89a9cf2bcd2de658d797eab3a12161405b3a9c716b3d3d28cb6b7c55e32673280f19d2eda37c51344f73649702bc1069a6ef215c61884497b200
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize144B
MD56add51b132cc6a02f4bafd89b232bd85
SHA1a8835e3994894cfe762e0db018779999b6083860
SHA256dcafcee30b048cf2924f27f2fcb1100f53c40660ea9986306f3096a6e63483e4
SHA51276aebfd00541f4f577b235402518808824c693e58d88c43db533de4a8c8e0afd532b91aea8a11ab8a05b3fbfc47724b3342f7f252953859a4beecc44efb1b2de
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize120B
MD57812029996c6f194558eea5c82ec5669
SHA1d7959268a7fa06a7f2c9678acef3528cea4e697f
SHA256cd3b1d74636c523c1721a74f8c87a485b035e32b56fc7c7872baf3776ac09a93
SHA512b6eec7ab750974d5281c6320f78a8e79af32ebb91e705984d3e4a843568e5e7c12fb1db4f9598a3d57e371d6eb272779ddb542a8960ebe726997a56d0c753fbb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5821fa.TMP
Filesize48B
MD51bdf9151be545a476f75f74b00790f84
SHA124e3725e5d9c02f92334f264a2380a5d08408b3d
SHA2563d92dbc45d07912dc114eda2552c4206ec740df02c3e3d8010b0fcb8da84e962
SHA51224f98d7333c09c7b63cdb7ee865af64a035e071c00a685367cdcd1f03be39c29693d20da4ce8b7685c70dd628b8edbcb8d547585b9aba45390e00b78c7d69730
-
Filesize
872B
MD551c3097444c2d1e2a5840f0b38287de3
SHA1879f868f92068fe7e62aa52b1c370d91df1a8448
SHA25680f9a2d6d869c7fd8dc2e09911ae39e8c99b03921aeb8c225671959cca542993
SHA5125a0d64a10b6f54575e3a9e19401e722339d0b15c495da4e6158242a34c3161be34e4dc676da60847473edb3081c91fadb24c46b709ce624d10ce401c2d93cecc
-
Filesize
872B
MD5cb766157d473a3be172560330c6304e4
SHA1ba891cff735872ce2fb0e71bf0f23efe3e43a12b
SHA2560f5a8918c65740d51ff8e833a980b1c199ff17e80c822d22f664a1dc9a5e5a11
SHA512602a5dd21154a356b91aa4e6da0ffd5962be2916946fe0b96d867255ee2472ef71b77494bcff1a22c3ff07f2a23f98dc997eae91128a37e5ac91aa18fc1ee273
-
Filesize
1KB
MD55ece7f216189498f40fc1cafe1658fc9
SHA15ba6655ddf0d23801c7eea5f741339d72c2132c6
SHA256aed31dbe21afb1ec4a5f491489595a1d7185f7cba587f6b9d91829068d6f7f86
SHA5125537c0c8aa8b7b3b406be4f44c9c1f409f355bf2b4efd816276d2433fe6487322fbc591dd376a273f4341e290e25313455e4d5a8505f9c361a53e602369aa814
-
Filesize
872B
MD530a9152c7ba96620c38ea373dc645f96
SHA1a38a4af1c08790d541c5cb0f0cb8b8f27d7d7498
SHA25650c7a89921110f2ac8eada82bef17e9958262e17c2da97618bdca0eefb0f2e5e
SHA512af3074ddb1521d7fddf400f4a34999d82dc53902306e319033a39e1eb6b8c1df1befdafa51d64be8635ceabf25210f0cd45bc918f7a1a4762428dcc9d2f80bd6
-
Filesize
872B
MD5f028b35cc79d9e115e6baecb45b77373
SHA1f9644c3dcd96202d077af360af028f47d7334ea5
SHA25622786eacb43e9fb254a2c95e45390623f5f36eea847eb2c8ad97a1554db83dbf
SHA512e3dd1ffa26b4a169ac59d3d5dbeb72a48d5a1b65117df7d1ffbd16a21ae64a25287b9c7d023863b03c47f75d195983158cb1c641fbfe0c687630fc8b040a160f
-
Filesize
1KB
MD5453c7db74bc598b871abcd031c5a288e
SHA1b312c984ded21f7ab9e810761eeb23926fc8d37a
SHA256d40d5c1b18787727f7787527b42e7dc21162110fb14b9b262f7778cf56df2c7c
SHA512e9cef2379a06be7143acdcf0ec4a361779d5128558546ee0ddfcb3cd8238a357574e84ab4e516a58178d2b84c5d33be3bbcf2326b9c4201772cecac9ec6cd729
-
Filesize
703B
MD5b8d23a61e2a0d5d017859c7ef090d5d9
SHA1dbe274248cc3a14e2efca8557bd91ae37a26db17
SHA2562b2fdc9faa35c16f35396a307be7085f5e39736fc5276e54d9348b74faf504d8
SHA5121e8608567c9cd10310a7c70605efd47348b0fc2078406b336c22f399015e7a12a255c2860260110d3921155a827384aea3b59b1434c7664f495e566969597435
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
11KB
MD5732acd2b38fa6875d1a6289261a6368c
SHA1110d1a2c295866374540451ec2dd5f4b9b533b54
SHA256c315e2d23a88c23e8249ded1ba0f671781e33dd95db0d7a94d38c33862cf06eb
SHA51294e03d34cdb3eab29af557f8ccaf86b930426de942e87fdeb4fc68dfea43866481bf4860eb55d18f1e92b40e1a31afc1e4d4dc3656067889a73c0e1ad40f8f0b
-
Filesize
12KB
MD596fffb85417228ff7dccee07016c9181
SHA1fa40ea34404e401259c8561d18628676ae5f53f0
SHA25687846c7d482513046bcd8a927959b29f3f4c7867c77dd610a1a91786867f2ca7
SHA512e624a0dd36389336272e2188e291f58be04f19165e88a5d6ae830b1fd662519eb97a08814be12b4125bf3a375e87dc5ad14eaae25c3da11454da4ce597abafb7
-
Filesize
12KB
MD547d0bf859e1f2f96964a6dddef827479
SHA16651b449f730fc982e079ed43b4bc99c4d59ac8b
SHA2563452d9d698807756127b2681ca92e8103dbb996b343f71077e71127ea9b15e59
SHA51233509d97bb4d778ec3e9b35a4d02777d9ec59078e732e41c74febf1633d0a65e8d9846cabf1cf2cf830f597d9fbac62b93594c947a19670a637dd20f5eafa58f
-
Filesize
856KB
MD504398d23bf4733785de3a5ca05ad80c5
SHA172b193836a47aa3f0b7182de92a6a3f6f862131e
SHA256a89ea036242d4e3345ad54ea9bcdb5c73ee5b78fa320996398bab4ae46cb578e
SHA5121e7ba8e738c16af9267e7f9da427c23f2159214839d6e59bff66228375e9c7aea0f86c1ebd352cae248fd8508f762c1e81dd680e27cf7c1b5bd8084ab383148a
-
Filesize
377KB
MD5797684f924e5887fd19bf3e3db752b77
SHA1e19a6086c2e87eac03c802737f40e7ff842fa44f
SHA2561dc3edd13c8c702426d614addf5ef1b5380cb78b7bff7886943c21c354cada0a
SHA512bddf7202395db21d5dceb3f91338dab3f85586abff64ce78ab7df369b8b17b5fc337f2318822701c652383f7cb009da2a1e931f15676cdf1f9b3011b815625eb
-
Filesize
1.2MB
MD57a3bc6142be9b7c9664464759974c08b
SHA17055fe5cf3e31a24687c3fcbc06394eaf097c6ae
SHA256446839b455f486943d42e46c8230b6b00d59943de94449fc418ee626aba4dbef
SHA512c881916068cfbd73425e1a6662d1049f02b8f1ed34b8546a9555d43b2b05ac3507e94f996435123a7694a2f2ddc4ef9f97d839b9a9584ae3ebca37f1b45d63cc
-
Filesize
1B
MD55058f1af8388633f609cadb75a75dc9d
SHA13a52ce780950d4d969792a2559cd519d7ee8c727
SHA256cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA5120b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
-
Filesize
797KB
MD5d083a07a3dca2d0ea5ddb0e959fb8ff4
SHA186f3f43729db553d45b728b1409b73d3de5a5915
SHA25605e1c6babb787f24d8a60f8ded2c216c9bc2956970d75073a71139fe168a122f
SHA512d16259a1fcb29def140e9e1768b99d973b434c97bf7b09bd0d223143a622ee720d2531a84dd4edf082300fb5f4f00812e418c0131b196375821e612bf34f7aac
-
Filesize
162B
MD5bf28ef9468e4e1cbc5f3e055adfa69e5
SHA1d5cff2ec3851f3fff649d688919f9f4f8511420e
SHA2560e86dc475bac19122a3134a18cf8af26b83831df3346bcf5093739ca2891b4b3
SHA5127b37e27f56b8ef1aeec6f25bbe7336ad0bec837af4390e47932adc67c9ed873c6b7cb5d643b39d0b6f383d79c7ee0ab8aa39e70f894ce8f2b90a884d1325c3f5
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1131475925\CRX_INSTALL\assets\index.ts-loader-13a0f470.js
Filesize341B
MD537ba3a70722df270b2f69dd60db8f1dc
SHA18c61f83d7e13b5efed2335a14bdfce2463fbaa9f
SHA25613a0f470c87bf4ac0613fe1c0fd3fbedd5ce1606cb2d491fb93b3cb5bb2e2d75
SHA51275d1e0556a2ecc24cc3a06619b1894973d391fe089c59bd33033286de99799968cc2137b0c0099d3cc63545ef317ec82cf3534a2739c909644bb01137401d10e
-
Filesize
40B
MD5c862cbbc1b82064465f98482ef73948b
SHA10e49a12b9d1fd903e0c44cfe9c9db0ae7a5b50fc
SHA256988dfba4289e28ef42d0ce93bae58926ae7a9528de7bdf97898d1c2cd2f2016c
SHA51212befd2966f25464dd21377d89b5d3c9b8fd9abaa8f257fe88bd1d80759fc5375439e6160f99dff7ec7a61135d9616992b611b63d1a6e094fe2eb29e23420559
-
Filesize
3KB
MD535a10dd7924dc7a4205fb3807812896b
SHA153583f9a14b35a9529614f7cb8c2f26a3a2a31a4
SHA25643cdb582f3881db7584ba1cab29ca88c74bf51819033ea88a02b0614e398ee8d
SHA512a7220a4c8cf583c334d78c108b7da9402a79eb2c57c428c5f740f8b2c6c19ac1c761da8d57074f2b9cfb063da84410f6558a8b61f978d536d9ac48428448a681
-
Filesize
3KB
MD5b6ddadfa381c9d9297812d2dca3d92bc
SHA19f83febb785d4c87730164f7cf020d036e0e11f2
SHA2566b2d97ac7dff812bbb826852feb506a4a300b7876fd6985e6b8a16ad710efe89
SHA512d89a308fc1b9b6ba055e88ac91a830169547c8aea734a773762767fe4c6a76033a8d3f20b8e82c094239d25c8e2f17e4c9b1bcd083d294db368aa28f2cfe85f4
-
Filesize
1KB
MD58307716154566dd5d4b7f87f7e536824
SHA15b746f1c97a036b190d4cf1db76760902ae1ed87
SHA256a7e44db42aa52a276edb6a2dea7dae1a8d1f683ae67d0179b5930271e3138d12
SHA5128dcd2e9dea6c147a4c9578b42fd1613a55e790d3a6ddf98809f123cb06270784b0c0e3ae27bf2957e6066fd8bd831cc09777270e2bb8f6f7c144721f95e3c5fe
-
Filesize
1KB
MD58e84151e901f61a135d941979efd8ff9
SHA152841c4272dc039438ce59943489367d1f2e4482
SHA256738e199707a5027486e17e9bfbd50a1dd295d2d6d5c48ccac17fecaec91b70a1
SHA512c2e2c027d3655bd549ec59d75cbe307c8e6b66838c72949b965ce2c7ac3c730ffb873a948cc055f6727964cf048d403262e8262c6c6559410ae682e2963c013e
-
Filesize
323B
MD5d969fe9a650fafdb24ff97d049c4c5cf
SHA14462aae44d41a0d1fecca3b817cf3cf6dfb5e0ee
SHA25694c7ebd15ec9e8083853cde17c681c892364c9644bb5b820f047cfe1e617e52f
SHA512d79a177b22c33694b15b4076928c1d388c7143504faca573a0bf497a8fadc8aa60202044aa193b617c8256e3d8ac1cc01efae5e82f865bc602b49c7e3a2a5a7d
-
Filesize
22KB
MD5086a5c225049aa5546da410037871b32
SHA1c2fa675fea84c0db0d1bbbb8162ef00503c211d3
SHA2561a258e94eb1a858d782d087adff912edc26030b266e06a88d651ba33ac94aec0
SHA51243587f201a709a88f702f3620df52bcf87488a77a1e6d085118a062babe56b7a8491451f6e132b39c813013d910cb9164f1d5aaf84a971cfe63076be485866d6
-
Filesize
40B
MD5c11582e629378ceb82f2c77df1a283a7
SHA1ca49746ae7fa046cd23b5c4ee3cd865536de283c
SHA2568cb05b2c2a31caefdcdfa71b21c0249a3a42b59210426afcf73c7f0e6b05c62f
SHA51204e19e5fc00b1105e50ceef4c471cc803599972f90aeb103f7061c730cab49ed925df00083c702811b1de05ef21df280bf6d0f7d3b53c73cfc7d456e5ad090aa
-
Filesize
173KB
MD5f3d32d9918947cd0ee98a95e6782ea0c
SHA17d352e9a4799b5a180e11eaae4a7ef1a6ae51d2a
SHA25633845d8a8dfe591b8eed4b27f2c47dc856b11d86c6bfec08074662c559ed4d01
SHA512e4818c7e56b2a7f28610f14f738fe92018528517182e5cfa2e17750796bbdecdc2bca3af71afaad2e27a19a17e487fc321e8e20c286268dfb7a126135817804d
-
Filesize
47KB
MD58e433c0592f77beb6dc527d7b90be120
SHA1d7402416753ae1bb4cbd4b10d33a0c10517838bd
SHA256f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
SHA5125e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3
-
Filesize
184KB
MD58abfe6dfa7b0d9a5a4b7268155054740
SHA1fe841d96c94923c7732014a81bcb574fe2c10584
SHA25675799b61c8d93b46365ae3a603ef508acee921adbf2abf4ada583fc4e0e4bb82
SHA512a6a475c64d5e0bc3cb94bd38b38da66f5b4470f50738286f2d42030d2e32ef15d6c795dfa8da36502e536819dababe9386ca7419f2c6cb0e8580053ace1166d4
-
Filesize
78KB
MD5f536e8f265fbbd76a5f7b9fc0ea0ad69
SHA18db474f6ca6e7548d47cc3b078e66abdd5719066
SHA25663678162cb830afba8013a29be9148c72c3dd90561f1b0e7a3cdfbfd883912d6
SHA5122d8d79bf7dd4ddd61b871b3e54e61972cfd2cad17f11865707e006a4f9ffada7b9b2524a1f7ce056aefd2b36e43264a813fd9ece00b3182d034aee5fb84a75d0
-
Filesize
83KB
MD5f35ad0c20d2f7e02b99e4866a98989d1
SHA17e9960316f3eb5bc7b5f2fda0b761acf0ca898b1
SHA25686145e56e9b4bd3a42e3ddf6b7cb6bc8e9372891aa5bae35ea0f3facda3c99aa
SHA512253fe78f7ea21143f4c8d0fedbb29eb3debf6b08e5ecab1cf2a4c0dee1f80d9a870e6847aa9fb9a39d8d2f4e601594b633869b2fe77f8a1c3363372e6ff477cb
-
Filesize
145KB
MD58f1c7f5187e8e78fdb31a5e6c688e803
SHA164b1ef52851b1c5b130bd7fc12576329d1738f0d
SHA2560598e13041b04bd01dc5e5849abebac0e253bbac3ec6bdc71ca62b84100717f4
SHA512b5f744e0af9d4736b542060471404e074fca5769ffebef2becd0a311329bae985b97ffb52247e571ee0c2a9b7a99cb3fd5d91f21bd807a09d0a45fb651d12217
-
Filesize
23KB
MD5c2935832073d69b70a3369efbd1490c1
SHA19c008bc89c0b6d50c89c6246e2061b58a9242f19
SHA256aece29ef481c87f8fa1b6f0042637f0a8d721e0805004df23c13a96c3f1a214d
SHA512e1f0e4b05f92e44beb4e7b3a39a113836cd1b8064658c41ae24a2d0f43df61334d0f4659fc48152c426cd1cbebccb6372328d440867e11fe4a047a2d3ac9b5f7
-
Filesize
35KB
MD5e0476a443817a1bae7ffc480b8addf59
SHA1a10d8d8fb8fd9afd9d509b3e32f472e1a65033cd
SHA2568409efd8f08931e9ed461a86cf32732b42e82d5a740b2f3f0afa01954980cc06
SHA512e5c67b82c6496973f60672786763b92112a254747027e4851b6635a000dc1596e1d7e7768dcc7d7781560291c36aabbc537d7a9086fc95776145b04c5c1ce6f8
-
Filesize
32KB
MD54f4aae5d21abad8c6f939c5c400f6c6b
SHA19285d5a1efe672d1c27a5030105f0d5884ce2405
SHA2563b795d3fe04a46435f9f4127e61743e2d5fbb472741fc25ff20344a090fab19f
SHA512bd437c670ef6979579ff879a421a841821f118ee5ac05c7c200b004248c72e206c23daa6e732f2753e267ed2f8eedc9c6a0dab362bb121be7592fdd32f4720c4
-
Filesize
35KB
MD53418b9b27ac0a07ba926d5046bf31542
SHA10e54e673aa50e355212886f74710860ffd763619
SHA256d5b3dbe1775d3ad2a6fc5133810dfb3f6430db01c1eb6d49323d705175941cdc
SHA5123ae73a5dd60b65972bdbefff57c6091c693e4f9aa17458835cb00a496c81cf64ec455bcf92871e52671ab12be874605520f285ed77de8f3ee551763b0b50b46d
-
Filesize
282B
MD5ec0552631d8c23ebaff2a3c68384fd84
SHA1064e4ea0ed96d32f1fe6db228c906c597289680a
SHA256176004eb5bad80cd29bd6118120c2156cc9187687d87b9ea7c1d4343bc600d82
SHA5123558c9013ab91537065dfa53d33a7da46744fd549e1379b934e96b566cd536531ad127e5b8fd00832ee5245d1aa8440fb52c014b71e37a7efa8e23088f0a4e50
-
Filesize
283B
MD52d92e1e2c4e5a9e88658ece0af8f6b08
SHA1196a97f2f5f0208cf590efac4611a69f1fa2d5f2
SHA25611bfd10cb4e63e407f7638bba6a44cf91a0279e5b70489bb6ae2314323531397
SHA512970103c045dffe11e156d8440f4ba421402e6b790f97c9a7888e3936595a3f7d26e1ac7361c26fbeea1f1bedb72bc4fc63a79f280b0f2da18553ada234f7c3b8
-
Filesize
282B
MD5c20208921bb1781c1c5013cfe89cee2a
SHA11d6a5bf1d1500610a424732d8200149433b74a84
SHA25688b6708c67ad582a8d80d2472e47ffdc98fc89ef5397f666e8c5bfbad79c5f73
SHA51282d4ae884598b6fe08a6c71cf5bf92ee8f04b66f8112c6d3879d9d4bfb2c18efdf1fe188ac1fb67b9c66270c08b478cd4995638f3149994d85b18950af7064d5
-
Filesize
283B
MD5205e88a6aabdc4256733ad1c36b234a7
SHA1b6d2a69091898eec0d68cb99f28766e6486aa023
SHA256f6e3df08dc0505bb5bfd235f79ee5ec14aaed02d40a5c7ec784cb8540f4c706e
SHA512a73e66238c7bf3f545a5afa31de6e3256f5af2aea8307457ec98cfa6b2151e97567a5d354b5f4407ffdc6e74d610798243c7ee8761274b00e95513cf6d193849
-
Filesize
32KB
MD554f54dbe4cf611217f8bb94840927f4f
SHA19ec527710750e5d75c9595a67af5d9c92af0bf69
SHA25626608da826d20d4ddca9079de40709adf69ba0eb188eab67d7850148d48731b0
SHA512fde727dfe605a34ffd1cba5642ee08302328d11d2a8878d9dcfd66f7a601feb3d18000a65133594710ec314384aabfc6b9ae861a8881a37c74e9cf6daa3e74ee
-
Filesize
2KB
MD539810b14d3bbcec61b4c16760b059988
SHA19f6a9c9b092e3116e994ee990e816f06b1e048c9
SHA25607f89c785b208d85b19f8c0a5f5c1159bad4187be234e8bba47abec601f5104d
SHA5125d34f4ac38cd2afca065f4489e95d1ab3c9f122714724abeac4feb2cd8d49efee787327decf10ccfb1f7ee9b69003c53fe6cce05436da69c200952d0399a25cd
-
Filesize
2KB
MD59ff65c9267005a4e748e70d4b2c9616a
SHA1366da17175d5ada9145f966a2f3d39f5ca056191
SHA25662b292a665e95120fb00dbe39cccab46682e84ab735882d1d20d99e6616ea68e
SHA51277f593c887122fb3c3b0e9b1af079a8b91d4a228534aac5640b74290dd88ad4cc3f422aee7ec88f05a02c6fa25971d4170babbab112251cd5567c351a205f3c8
-
Filesize
2KB
MD56cba3a15ccd48b3a97ee318602a5ef36
SHA11d7309727cafa911d0de4876a2353abc718be1b7
SHA256463b23fc2e9429e0673cfa7b70efa4ce6a0baf1b50685af6d5dc10cd807a8897
SHA512e2ab15fff9385afcf99b8c3e9c2f4a93df1c281f2be14f5b680713a611803474c042c09d4d1c6b17e2da5e51ae6bad005f7f7b6931c193c6bd281e83e4bdbb96
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5b8f8a.TMP
Filesize48B
MD5aec35162912b2dd022d6d52d2cc9f593
SHA1aab30f367e819e7b70448aab5325bfeb059f422b
SHA256d050aae45604612488d33d2f3b1b504bcbe7b4fbbb44dbc45eecdf8bbd2d918f
SHA51235be54333fdfd0c1444e79d079111d48f9d5d2e66585b5c7e5ccc025db998e03df28a882888d0b1572cf42b52c96bd0d0040825a63bc5017e98ecd9f0e838a5d
-
Filesize
2KB
MD50fff1121693361f6ea660926d2fac988
SHA13c994c7283099d3c4c945926c3edd1743d395e96
SHA256d2615cd6ee7b77615be053c884236bb5de1eb1a2f7a6326e47b42ebc439cbece
SHA51281ad992594eebfb24363674b967ccf9bd47c327c0dd85a2b4ef275d712d7f462c2060241d8994cea7b543d71293cc66f75544ffa3735b098e92e0086b475aafb
-
Filesize
2KB
MD53282ee64f7fbae6eb2815e501a15c88a
SHA1b19bd0ceba4686ceec569c51a7611e5a21cf7b22
SHA25697998aeca6c534eb484a421fa8a95edec50ce3b0fc28e70a35e61baa65a019c6
SHA512adddeb23f621db1caa7b24c2c8eaf58cf4470b9d7a6c401757f59d6e3c668405f0463561ff43af798a1adb372fb9671610af025d37f008d218e6448e57e1f793
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\assets\index.ts-5c6f3b83.js
Filesize56KB
MD552ebda260d370e60901faff13e8c9828
SHA14681cb8093a4159560a8103dc32787ffd55bfa29
SHA2568146421645c3f1f6af4e87a3fb22107220ae417717d7613bb291a0fd330f8437
SHA512283e4308b2e9a93d3871853a0cd17519b39fcb29fd3e1457af8897d9bf12ff5e3430164c63f4164768ecf936e4cd2c48b8b86037d872a9e3c9bec29a9f91a5a0
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\assets\index.ts-7d59b331.js
Filesize16KB
MD564fa826b6b9bfa910fed4a18c6a12c9f
SHA1265f312f8187d56522441f869714b9d76229bbeb
SHA256676f44312864a5e6e41bb8b70412ac265b6a293b791679be10049c17fc62d4f8
SHA51232b7d2a64ace406caec91994f6eef6551fe982876e5ff3a5d694929e0fbed4bcd2c7c53b879ff5a32ada0ebd35672e50db30a0a17f39abcac34a1cd13a61abfb
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\assets\messages-86fb7e29.js
Filesize21KB
MD56d62c5de88a2381b5627e0d2df7b9a30
SHA108c76dfb73e09780b0b3f98e5da414494904417e
SHA256068f97ff81dc092e4d201f575a2d330a0f5830e847edc6e0e80f8a97684ba75f
SHA512a193d284bc5c017353e8ce1a51f2449e2e58f0f35fbfbe8173f812bfaa91840f2cdede70897c64d271601f8836ef4f694dc099c2271c18b448b9892e5043e291
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\manifest.json
Filesize1KB
MD5d1b209dd9c422ea50135dc2bb716d238
SHA1fc13c64e6b1ccb9561e8ee0378dd1418b39e401e
SHA25614abbebee800bc6e73c8302fb892faf2c9ab6df5ac2a8eae66caf583915b7d0b
SHA512f9641b3f7bf52d4dd9f3e223e220a97924ab8fef6d472924f30b15c91414df9d72ec4de00ffbfe9b17c06d8398cfdbe80095b1da06c3b0683ed6a751cc0f8c8b
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\service-worker-loader.js
Filesize40B
MD5b48149d66d4bde2196c003629e79ae5a
SHA1276944b5796793effe150b05d0e9a8c9af89bfde
SHA25622002a97ade52f1ede27d832dceab496337b59a6b6e51699d4fa231502fc9f5a
SHA51289edbd1c24a13c6516cef4d23421bfbaa61a7ab37662e393fc27c4a21c94b02a71d348b55f6f2aba66b6cac7cc2f0894487241664672bdd92f113a07984c7555
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-128.png
Filesize3KB
MD5af719a0c95789b088fe4b9f82dd5ee98
SHA1cca49d2a728cd456b450cfcc20f91acf781c3105
SHA2565b861963c613fca1dc4aac9a416e43b2165b05a4277478f74b7f6562a378ff5f
SHA5124a6f77684b3bc459897ab2709754849868bac64f4e099c1e74970339c944738278454d6c043ee8a2a0337e9891e7e7126bfc41e6fb0f5fac544b978ae36f5082
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-16.png
Filesize425B
MD546c4711e8452178b9c2471f9c59c2667
SHA1e020f7ba4a787f840d204525e8eeb21d0c21e2be
SHA2564e1aed06fc4105c64aabe9580069d0cdeec3464a693241e7c02771e1beda860f
SHA51242f2161205f28003aff9ea4a8bb33a0a0ebbdbb9bb5e9446efbca4f000a4315b2bf7184d79254c148da40597cc15bf8f22a02a3da78cf5c9026ae35e4bd695bd
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-32.png
Filesize764B
MD59caefef512720012470700a11b0bd456
SHA1bfc11bafa996fbbce1566a569a79d5d72b08f1e5
SHA25682c0a843e1df5cc10a8c6beabee8416281aa89c73798d7bb6a2cf4a237a24ae0
SHA5123bb42b23babd54cb902e595b84a398ad5b2c9bd2e4bd4951a8b0cdfdbf91f6d0e04bb1fa944c54d673babdbcf0400c1947d0e12fba8057c3f69ab1e61b89aea1
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-48.png
Filesize1KB
MD52184400582c25500a74577359a1f7e7b
SHA1e69eecf84f7d2d98bf236edbcfc143fa42d01bc3
SHA256c6c3593c7d0af5c9a7f2e26b98ef2629e392c5da87df80653d94ebe412d5c9c0
SHA51224858ebec11fc0bb586eb2d6f555f5e798ec9708ad89b0a94957a1537dc150a584b70865d7fed53d3f122789812d390eb6af6b68ff4cd93296b2b0e5a21b103f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\adblocker-bg-1.png
Filesize16KB
MD5404ead15b3040c2a16cada6a18088aab
SHA157d6d1b3d601532d1825c738ee51d0971f137af8
SHA256bd474396ecae2864798b9b33062afe3b599dc834db30b6a2f4cff0d0cbb9f9b8
SHA51212173b41f487987aceac82c13f63b1318107c48d6803dc1f89053245c1c08d092761399ab397da44f0ccca5d9ee3c79ab98081cbdb25a78ab5b97f0b52a4f784
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\weather-bg-1.png
Filesize68KB
MD58f158754f161c02baf061d230c993455
SHA141b21d1c3e2aa029ecc77dd6aa5b174d0eab34bf
SHA2560055b3b2ca2078823b01d4cf064d4ebfac5cbce03fa38c8b5e920b92b3b47f6e
SHA5128e417897690aa540ffde4ecc541a7a0a7071f355b6b663601647e6099f67310f540a40b12f6c0a2984965123d9ff3ac9e78f0be7b4abe2d6bc9ae941fd869106
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\[email protected]
Filesize234KB
MD5d336d499edc3d7205948e09647ab5826
SHA1797b756310da1f67d3df61c821377992a305cb6f
SHA25663f3d2622f4927d830412c8b089dfbdc77dbb880f9c49f072c6c8dc0b3cdbd00
SHA512fc0d6b3c8ae83f3db7c5f9ed4a999b090b2a1e8fd80f4b91ce1a42f804cf8c8c49d03dc0f362617c0df130a7b607b5ffe36fdc0edfa5f4a18b308a4a66ca8472
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\weather-qr-1.png
Filesize5KB
MD55cdc09bfeb0cc136c4b8e45114c8b910
SHA19d15f710e94409fc854c30630d70c66959871410
SHA25670697bb3558c12efe9b34ca34b05ff39dadae04df9e4928e0de6811b3efb3a99
SHA51229b8d495506291d46554e0a3951cdcd6fcd5f3c43fb52ac15c4bc13180d88fe91495c616c3e12a2c7edb7a2d64f90c391faa539199ba7532c45fcb827270e131
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\[email protected]
Filesize6KB
MD5e86f7685206ae12b271a4c50620f1f81
SHA1b5a96bdd23787dc994406c408c8db08cccffa646
SHA25628cb433c90e6ca9cfa6aaeb6ec60ee2c98d02a255d671c7c47689f9799cdd14f
SHA512fa2fb8ca2050b13193898a48da639673e706b156b666e8159b6a71d417aca7490c4faa8953776fded46226c7ac0b6465c44729cb452fd93fc961ca2bcbaedbba
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon128d.png
Filesize4KB
MD51e56327668359bfcae26c27defb340ef
SHA1c91bde25817086d9b1319c20b1710b09365a70e4
SHA2567ed951f0a157dac2b42a2b003fe76e085017cf425c827b05bf759ebb55db3d6a
SHA5125cb98cfe15c3be976ee6144657eccc05d2104bcab2b8368d1a570395c1c726fc81fe4aa09236fb8dac12c43bf12020449403ec6400c4d9cabff879f4dcd656e2
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon16.png
Filesize605B
MD5c63f512ccf8d6ef497fccbc53c1f950e
SHA1f04e832d89b4eb315d6979780ec6dbfc25361abb
SHA25609780ea3eaa0a432b03214025febb59c28fd6e105a775f065037c5e9720fa150
SHA512f4bd4dfb891c49a36cae8e796e6333984ecc081d259c496fd5015683f9779cfe1ccc53c31185f6d2f14c46ffc66032f6a69e9698baa12c5b9b439a7200fcf5fc
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon16d.png
Filesize588B
MD503bf7997beebdef943da84b05cf298c6
SHA17cd4ea284ef975b358c8dc668391274edc8cd1c2
SHA256d5ada7064d7ee67144d11a33a3c28b7856912f4989c5213978659a4ef965409e
SHA51277d68841d5c3ed12f91f8351636feebcb41f4e6984b239f72462ff5f45f2d7fb92162d2f54c32a1c3f229038f4b0a73c06054c9adf9b0a6d03f20a5e9cef68d4
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon32.png
Filesize1KB
MD55978dbf06abe1f283514daf84bdd0c54
SHA129c2084e859686315331a94c0fe080d6505bdda5
SHA2569fd76e5d4ba12a800a2368f26639a0d81b542bf65fd9f7cdf9376a9e50e0d66d
SHA51267d24797dd143c2657c8a0055e2b82bff76f297c72ff7ba26fc8d71c761e067ab14a0354958710f6660ca614bb21afb2fdeb34d1fb5d20c1981d9a723e784cf3
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon32d.png
Filesize1KB
MD57734bb666bb9fba04c15c759f9fe35af
SHA116aaae66e98153ae52b90346c6a4559a8e3b6fed
SHA2564d6b2fb743bdc348a3babd96a96cd6bca6cc191bfd02524737a491ddc99a7ef4
SHA512093209ae6d0a3aa9f909be1db3cc3be46bce496c42238f2e9ef4bca3c63b5d7c68de915a23163ec655069f81336357b281d5f830c1ddc8f0a3324d0d247de106
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon48d.png
Filesize1KB
MD5947bc5e0d15be2926c11d5a68a4b67ff
SHA175b60440ee2045545759d4e8f1720623afaab0d5
SHA256db48f163264c1f4aefdf6b4c26d9b5423e4bede72b99ec3ab85071fcc42068a6
SHA512adfd785a41eaaf4e73334cfc2bf766e960c21679de48af8b8a23a9f6a44e728833c0f7180e009418d80f48ff71fcbf752fba709fec7d1f200caf5b25733625c4
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon64d.png
Filesize2KB
MD501e4b6ec21791d162c92f49d7763e0d3
SHA13d752663c717f363328159a3094b66a4d2a5c027
SHA2562fdfb515ccb51789e74df228e98001430e21ae5b6c5e431272507bf2b9b00539
SHA512542b0c35e08dc981f06ad3fe4a3069b239308266527a1d26c5cc5a6e8aba1caec17e21781b85df4a4a81ad2f3cc795c725c05a1d75c4d9a68ca5649bee3e2aa9
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\js\background.js
Filesize29KB
MD571215d3e85aa687d34ae441706bc3e9f
SHA1597bbec974c3f5f5b2eceffb1dcb870b7bff84bc
SHA25655345b40109f7c1ee0e67da02202919b7b23e47b14651a19986bb535d2d8bd8a
SHA5122d19ea31a5903b6d638a6f0dbd27d69b61dcd4d9e8e1f916de8f4cee9c1fadc2370ded95b93443493b718b30c16fa5ac61004caae9d144dc2f8ad77144a34b12
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.0.6_0\dist\contentScripts\style.css
Filesize38KB
MD5a2de90a2190cef036f2c6df8ab8f00e4
SHA1d2c76852071c134e386b54d0163640233e8b854a
SHA2568bb83055b42d5b706abb9b10afa55c189f2e451acc976c78430c3d91f555c817
SHA512761d49c55530694df775138dd078c5b7ac91ad2ff561d00df824bb70ec7d63b6e886ff75e195eac6277c535511618bc2c034e2db7693329886b4b87696f7dce3
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json
Filesize7KB
MD5a192304f63ef26c80086f835cc4b7ada
SHA16963e90e752209132b728a938844c4c64dc94d43
SHA2564f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon.png
Filesize2KB
MD5fd727c2aaa8b364faab1828aae2250fc
SHA1bca5b2548b009ccd0b2f79c09fd628fb3119231e
SHA2561a32dcbadab7c91a690879b5425f6815c07dda1aadb6f6a7942b9e895cdecd0f
SHA5127d21b3133beea16a8713ab8a87ac7b84d8b2a312e4f017a9988e970f7281b9c41dec3f909d5483bba387e5ede366e80c210da93a78ed72b108f65934eef07c15
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon_a.png
Filesize2KB
MD5c05285aad074c0872dd78908176b1052
SHA1b8a5926d153dfbc503a38a749baf9099903c289f
SHA2569a4a7e0c2969562d5d1299f80317d4560265b4a843cf17491c7d36fa74a91cc1
SHA5126006b22ff83d0afdc346179a4c2dbbf927efcc62fcf9105fb45efd768bdba62af5839c3efb21e2555e0090639ab2dca76397d294b51db0dca768def53ce00a1a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log
Filesize26KB
MD5658a50480c8304379c1d36dba4f270f2
SHA1908140074665234707b54fcdfac389f9c62dee0d
SHA256a293922ed7b5838cfa50ea353f64afe0fb98e91b2a0ee5b456d66c6313367303
SHA512ba99600de8982956e3b999d6b0045b342f92f8ca012b8d60ad4946685cf4d5593b61cbd6909899435c8619c24d8cad2984880f2e58a258e032a5f20455a4a942
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize441B
MD58bc09404fa309a87c1b67cb634b64af8
SHA1b3431c0afc77d4a53acda5c7d315d04a3c099d18
SHA2562a3f6791a3561bdcba5eeb40cdafad161e2ec877aa86ea10ae394cf68c12477d
SHA5126ec796ff8b2fdda12132ec7963bfe58a6de66cc69d63e4abd7e528a84d338556e33fd6ad1c05b15c3f16652c77a9f5eb30b5764e8f042a2f7c0f995d118410d8
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize441B
MD5b51a991b99c68bde0a838ddf4ba4013e
SHA1d848925f4e813bfd8d5143b47b13bbed8c017a9f
SHA25642cf106d6693e627ec22429b97bea0215762dee542ed0c265bf91874fa041713
SHA512aea891fb7d36f598bfff650e9b885d2987d485be7a3ca247a5c1d5ebf4d4d6a9b635e6cd67b99579b1a43defa118978ca52b84d59dbc7e711c6177c1646e2831
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize441B
MD57f0d13248728fc5a57ab6644436d98f6
SHA1d65b1e8cdfb6ee72d5153e8fe3f03f9e6a91cdee
SHA2560737899432a75d0d13470b5a9f777b4409aebd520d81ab43d6c25cf13f546439
SHA5122149e2a5b5e22b1395a31a55e1b25804303f1131b3402c0809762f7f1a5a787e80cff0ae574e4c975009b101d97cf1ac43ae928edb6a5bcd36a76190de5d5ae9
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
Filesize401B
MD53e7fca1aa1bfa70c4bf2edffdae2474d
SHA1ddb4c4842e83b831d9132671ef1d5f623cbcd18a
SHA2566048d9d11360d91f2be83e7cfaf12cec444c72cefd8eab90ca35d6eb5fd26cf7
SHA512ed7605e2f76f7c50d8d5bf05098db4fad35ea37342d387eb6d4be7501cf527686895ab9ec5df697a5a0657a4946e35733aa0761f16aa93c520963445d58a93eb
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\https_ntp2.mywavehome.net_0.indexeddb.leveldb\LOG
Filesize393B
MD5341029c9e7830de3f051fe3cb473afea
SHA19ba751487c5b4848958e43707e44f3992503ebb5
SHA256278880215c3d88883312f4dfb7cdaf63aa8344b75ce3ca902ee94c74e2444cdb
SHA51217a5f861f0cc101a6c91f1dec2359210499c792006b404dd71d9958f4756f27c4662621f8f476834394fb8f5ed6ea3f55fc0584d90d54d80560c66132305273a
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\https_ntp2.mywavehome.net_0.indexeddb.leveldb\LOG.old
Filesize353B
MD582f01bf00e96ebf806b0ebe8e7009ba9
SHA16e36e4e0d2716cc1cefa260e9c99be8b1b7cdbd5
SHA25652be0fffff1ddb8e76ceb01c929d0f9d2a8426a993922d3c51ad219c1f30e619
SHA51228162cf76563da81b25668a4c5194f329f5a83f701c364ca26d4841475215da4151e45303ca07a10160b77f552df228d7df4b23c457ababcc24ffe2747fcef4e
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\https_ntp2.mywavehome.net_0.indexeddb.leveldb\MANIFEST-000001
Filesize23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
Filesize
11KB
MD55b31be6448cf94712f57bfba48a9fc56
SHA12f3098ea42b23b62724fb256c4bcf6bf21145f4e
SHA256bdc01827b44543e1f00bb8e8a6856f695b2e71c08bf630475898130663fb26b1
SHA512ec54473d6fc8df0449f941fd3f135c4e84ef73fc720155b02875571c0d3a48e0ffcd78f00ec93f7c0bbf9b02bc13469ff7b9a1963261faca5a1daeccb442cc4c
-
Filesize
13KB
MD55c2762b5840a6607f9fa0689ff730944
SHA1aa120afbaa836927be650cd10c16e9f7c4a724e3
SHA2563cd9b8d6eb03d7b9bd5aacf9aacc0fd2e9ce594e32850f65f4f0b3434f3bec71
SHA51240cdc39756844b8861dac8f57beed3aa2e8052869a03849a59955f6cff2f50e8f503f71631d12f2a8e34f840af05124acfbc8e1de7169e21fc3540a4d64bbbff
-
Filesize
12KB
MD5921debd99e9bfee08b2e51207ba18c16
SHA15c4d4b5503c47874d4402b6cf63c0ddfac9df061
SHA256c451c1c0372d0f6283d99a18ec1acf53e9a546cfb6c93c8c6a612b16ed2e4b56
SHA512eec74aab58df78600f52c03befbb5747cc969265f5c016cd8a60aa1bd39006684fbac8cf3300073b436c54ad28fe6e16152abd54a3917f654a0785151f0a679c
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State~RFe5adf17.TMP
Filesize59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
2KB
MD5a452ac5e5ba710f6173fe5c0c281765b
SHA19ab54e6a024ef64ca0ca2a37df05d0d45716231b
SHA256ccc7470dea3a0bfe22c2d4f263b562cacb56561c9790ed9f7e7cf1eddebf82f6
SHA512085158ade2d11a8c25e60c8fd303823afa40e6ddd15471b7bdf92e55b7e4f60c5c3d35482fa08386592c530f5fa8dcebc00d8be8683e3b8b6b42442e8a4fc0a1
-
Filesize
4KB
MD5e6f236a99edd2659d3cd49531af7a985
SHA1386e2005cbbf938e68552a7e0237432feeeff463
SHA256cdfb4f04236260d15081d9d8cc230fff9bc015c42528c1203187eec4402535a7
SHA5120ad4cf97456a953294da2f077711b7f41db2e6992defcc14568e75a8c162f54c5bfe25edcee84072a122b4997ec63dddc3e7e779dbed6c3f7985f61c148516ff
-
Filesize
4KB
MD5025501c21d614cd1619b17d00f4af70d
SHA197b87432ab65f7d65f40426b588ea76213505d3a
SHA2565ba4565a1833ca55d2ab2b3d694d902ad502fc1e6ff89d96f5e234732194a5e8
SHA5127e4d11e8b977d85c498c0f8c9e658606e12368afed71d5251f58d9fa73bed635eb3dfff4c3e1b0874885378b057154b134e24d013a55fb55c852aea90befa30b
-
Filesize
4KB
MD5d741491860f7e6671b4ca4c1d8d67c7b
SHA1ae274d38fc8760657151808adf00d23d52b14f3c
SHA2569facfee78415806d80f09ba9a963a8ed6462b1f8ccd706af2954953ff4d549c5
SHA512dc24b6d375fe4ec7ac08cc8641fe31c6fa98187d9cc893136c58daf5d67f9b7b472e5a5a7ef18e9c81be659f71603993461c13047c1dcad974e0b496fb58d682
-
Filesize
4KB
MD568ba661d0fed20f94eec0658de71bc2c
SHA1d0af092d1b8f837d22fbac187ce32d55a353b93e
SHA256886e990f88e670397f0463a20fb8b0566fc273e677b693aae2f4bc3c0ef073d2
SHA51255639882b2e9ab2ba374b5a0a08e1ab2a99117993747b15a0da517d7da348f6bf80b5d30713a3aade418622151da4db7883f4b1cbc91a1bbf08c51af5299cbfc
-
Filesize
4KB
MD5b635e369e14a8cf44ef5a537d3a13ca4
SHA17472987867360cee74b87e38de2dda000839b4d6
SHA256c04e2ebb880cc84dd15ccd273eb64580336d79aa00d3d557a01ec952e0075c10
SHA512bc021b33d5e373b56c710f7e131a589ff162879ddabad69a9d4351adf594051853f9ad27c0ad46466667ae74891d7098da08a6daafee2b4b34fe85b356f8d8f5
-
Filesize
4KB
MD5da52eaee4404c7f26ffd25e3b1909592
SHA1035a2187bfdcd3f85d17e889d2abcfaec2bf897d
SHA256d3f79fe829b24c020bcb815521a8df1c2dbaba7e83596c42a1dc19e74b81bb90
SHA5122df400226fbfb55bed9b06b61f0209a0ec2e3b6246d7c7c2c4f8d9cb8fd474a40713b9f26da394f022fc57c0a6e6c6a85968fb4a83220590d67be18d8a2bbcc2
-
Filesize
4KB
MD5e879c4384316eb90edbc38ec9da1b90a
SHA15be4cb7528e8c659c650002011c7072dfb8d25c9
SHA256c6b096f73cb87489e081898003996603f9677177bbbe570715d2b295f2624cde
SHA51234ca9a199efef1eb6c9679a035790c7052a307b28b269fd6751e94aa6a4b08030a74b38ea1b633a1b0a6113cccc01a0d36aa1b2217a1d941b254062b66e2a94d
-
Filesize
3KB
MD5db9a318c61a60bfedd5563fe72006ac8
SHA1f269f04d1c528849b9ad3393c4cdf13b129315d4
SHA256bbb5d0e7c7cb19a29373cbdab27264dcec42b5f5f2045ae2868eb0b733d81b66
SHA512addea1db4f8138cfa243655b06289c13bb819523b9c10c70bcb395b837059f02d7b920ec8b12e6c33edf9908f0c4a1bd66324f50e036e52f1bd0aea5d4c65450
-
Filesize
4KB
MD521a46575cbeb4ad85317dfc8e1096c60
SHA11856ce16f8b6c964c211736f61f2901dfa5fcf37
SHA25685ec307676e4b6e122db5565e3d295d628ed6b0a626a40bc931d0826c4a6118b
SHA512a7c0a80a3a9dc2978abd1e7c85ba809ed1e548bf8724d5e03d409d5c186dcde248df87d90f4a52ff0f8095651c8145f9820e798e68ea9fa19d732d4308377b66
-
Filesize
4KB
MD57761581aa6d4dd8f37676af9de18b47d
SHA12e30cd9a3db5a8a4688f6755a6c872a23004cc19
SHA256b43e2fd039ee0cde7a65e0e95ab757a3ec51890caf74e766406e487a569c0332
SHA512532b76a186849a6727868b797b11b5e37da1ca42a6a316e99b6eab35bdf35dc466dd3461f4ffe557e5f576fad42ea17b3d39f5b6080143c5b0d7814b5be06cfb
-
Filesize
4KB
MD5ab126dfbe9c952103335c21931b8705b
SHA1b0d45ecaba8f562b9f74fbde5aebfe35a52b1991
SHA2564f93937d44c2a6d474b015dbea4b81fc6d1ae5952b00e536f4b3de1ab3118d68
SHA51294e27dd4e3cbbb137524985f28f2e5c53f39b780e878eeeb1f9e9d71fea2b12a08304f814ce20b28881da1c3d9d9ffcbad4236df31a88e8b2668fa1109b0e449
-
Filesize
4KB
MD5d76af02acb0a419ebcefc2ad35f1bc6a
SHA14b908c9fcc14bd6f689c2be21f33a627de1a5d6e
SHA256267af1467413686385928a7f68f0080ee69c13d21236db0eddab5d51779f9250
SHA51245b3acfce67485a205f7deca4954e2fac3cf4ad831bac0def619da95263fcfb6dbb1f15d6d4be839e5bc9e877d0b7dfa5f18bcee77c5249caa5afb8f54753051
-
Filesize
4KB
MD505eacae047c8ab88feaa8657e3512fc3
SHA195e240594fd223cff3ec7299793bcfdebcc82e52
SHA256bc7133d8504a5847682fad05db93172b5423b7139faf0cc7ff3fe0801d6f370a
SHA51255034375d4421be4d25f82cccc370c3f38297f75d9f7bd9dbe107d32fe4fc29942426ea0ef05678de950028d9866bb15b067fa76581d9051be924ff5e8ad5eb6
-
Filesize
4KB
MD5af1b0c55a37af781488df9031c9801ad
SHA1eb6e7eb09ba866ec35fd98c9f28e194d28bd0efa
SHA2565c53404ab28c919345d8674c9037b705b0992b4e872553a92101651859667910
SHA5129f64c3a70f130c2175ca7c445167331c3924af16b422225c8714c8ec0b4e5c3330a322e23c458e8c4cf15ee46d0b2d711a08482c87d9811fcd791b1c109d1f27
-
Filesize
1013B
MD51bc365f88f26396daf359d4fb7f80886
SHA15634e3d8e94d4b587cacbe9491e7d500fa5241fd
SHA256dc89352bcc928b04716308b1a2d7b76f2b83146062e3692a266b3de7b1f7ec39
SHA512b978960721963b129e78c878f939d8bb75a5d9b0a7cf51847171db5a7e4c66212574583c5da08381685dda79d0211f9f33ef7daf5c784585f0a9692921f92cb5
-
Filesize
17KB
MD52f565e02ba7fd13fd0bd12b5f256af41
SHA1ac60befca1d3f385d4b2937c6e9a0a67d7db0a35
SHA2569fac4f998f05aae352ab5d4870cbd5b5d716528ffc56654e67bb67823700a6b7
SHA5120a5a89c839ee5bc389c7316c117a70af7f4d2e9b8fc9a539f920e934a16bc92df3b8f429be0b77c83fc9cdebb114c71c08e1d8456b6fbee96adb6ca3ab30b9ad
-
Filesize
17KB
MD5842e69ee4fa27d49de828ef49be5fb65
SHA10c1b448f77a2d338eb9a98193ef9384a07e52e16
SHA256c1470606bf0e41535b40af97cbb03ee826db6d2c9b9857249f5972191ccd069f
SHA5129137d5b49cc6e1efad3a5c7fc743e3e147a604d990c4a3096ec9503c62cd8f75580d91dd7035b57b849b3bb4f69ab4afff59f86f8d6e4e42e0f482a5ff404f68
-
Filesize
18KB
MD5ef2570bf88c1295d4c348b21c6bd647f
SHA175169227e208096c082692c74a35dc3ee6ef54b9
SHA2564af1a066f502022662fd20f9564b7cd7aa74afc10e612dc85a46c998cc2745b4
SHA512f836209fd0caa55a62befbcd324e11822e668f574279f04c18cd53392746a73974e9b4f0f6277da53186b1af9aeb7d8c8364bc03c060eba0c7ab940bd2a20791
-
Filesize
18KB
MD51be8882177870945104f155f870625bb
SHA1fdefc75166e82a79745e1b7ea5e3617a724b5cb8
SHA256ae6aee5e4cc13638cff9dfa0b69a757ca63dd7375e990bb9dd41a2d0d43a9327
SHA512ad28f9fa1794d9e26e9b715e39c69316f239bc55b284b3f4e9ac7e3a6ef4cb70480f00bf67567fa0aad32af1a26b4ddf3a0a3e2b756530ed20968bca240373c3
-
Filesize
17KB
MD551bd698be289f202ea928341d908416b
SHA107cf5cd938b49dcf493f3c061edc6272f427a01e
SHA2562cd5116bec5090d8bb0b3ce494abd6a99351bd93a19a07e1ab72884107073ad7
SHA5126593916f1e6c88833ec087f444b9223ede6902792ce03041196d391c58094c432e2095cc3a37a7b8b14130539ecf320da4b9fed15963a66f993f4ee7a1d44800
-
Filesize
16KB
MD5b24374c20027b3d58b488554e9893bd1
SHA1e252ff68c64e2aae44fc9ca3e0fbd671bb800ced
SHA2560c3ac4c6e1d0aabcf75127188df1965e8b04db2f8f91408a32b0d9b8e6ba5add
SHA512b788141e6576e42f70a64e6dbabf045683604abad362beb739c45c041c74484616ff3755fed2f1f3a1d6e7e1ebafe498b5b3733f9e6664d7c623f40caa2da024
-
Filesize
18KB
MD540074fc549ca87f7e6cfd2066f8c2564
SHA13a9e7bb1b03c2f5940c4c2f732000c46ac150ffe
SHA256157017e4816f1510271e878b01ffa510625f9bf1d7e10dc2a0e4d70cbcfcf7c4
SHA512cd0d97e1c01ba01b38b6bcf947149aceea4b94a0b73fc0ce49dbb882dafac9f4ce79433c10110331199d2cda6f5772fd729961ac9048ea5124470d67a8028c32
-
Filesize
17KB
MD571d18c6b042a8dc78cdbc9695cda463c
SHA1a216058bdaaf71733d2a469f99bdd436bda08904
SHA25624ab61080768463bcb34f35e20f2ee2e0b5a225bd4fdd22e8355c56ce197cc73
SHA512490113ec33edac7c8a2f6e83e080fcef83ba4d9c6648bf3e5e9423caf35046d3b9021d0bf40ec4baa5eacfb1d344966799418d7d0261205734c0bb6176e88750
-
Filesize
18KB
MD514510231fa8acb4664d8723a5c64aa85
SHA13a5d1f28eb9937e7c9ecc71682b939ce5f0abadb
SHA2562e50e8a6e7eb6f059cc3b9078d7d03afb96cab5f3c3de5314ab40f1631c46468
SHA512d963ad32ece3c57d915c75f3d42ec0f08860871644f7ac58bfcdc848bbca3a67a77c52a7ff4c79dda3ab40ac925c4003196e2cbd1e1bcc1f470e0aa7605a52a2
-
Filesize
18KB
MD5ab0b4c706d4873b2c367bc5ab62aa6b2
SHA17163e70ce1a2d26b6e355583a1028c639afe3f53
SHA25638731f380a1037e57f66467952ae5b65883674e5a85d383324c993c976cb082e
SHA512c37e4112c6fba760aa71bbafc9b65c279106a4fba33316755eabe9fb74d4cc47c35e90e03efdaf2c3008cedea02d8cc5338e7b893d263251b237d164c0f7377e
-
Filesize
18KB
MD5b2ec7d5a616d29e971989538e34f4e77
SHA132a456beafdb7ed341128794a43837bc93c8c90b
SHA256fceaed92d90818bd475d67930646e6555560cb70ee979ab826c135ff8cde8bbf
SHA512a989091c8b5ab524dc5aa8b43b45fcf93bacd36f0d72b5dc705567f3613317b4fcdde37dbd66b071be2c0b0d66a7bc76a52298cf91e90d71519a5b72982e8729
-
Filesize
18KB
MD5f52d5947ffff2d0b97f4fb66320089b8
SHA13c2e830c87c16ca550cbd8fc075e4110087f4610
SHA256dfa69031ad86d0093a7eb657a0416829f348eb651a9ab028fa3001b1e889e1cb
SHA512a23bc0f852ead9396f34c11335ac4cae86573e8a7b1edbcb5d72325638eb0530887a2915a54dde57afa19449805f97d35cc013579446905c89810199b979aae6
-
Filesize
18KB
MD564b9d115284d5127f1d0da2f419d0274
SHA1570bf85d1daeef73ac2d5f48ca39b77258890bbe
SHA256587341a67cd368c0fa1c1eca1ea0fde8b2b52436cffd6eeb4a538b2b8e535f2e
SHA5128896336093a5143784093a52af28b6a91d97add38844ceea03dd21e17af3e8b4d3ace5cf7f73d1523fd4049975fee6e0b8456ca505a249d8b219966a7eee5d60
-
Filesize
6KB
MD5b6e7034348a5a03047aa7406a53926de
SHA155703c739a59b92614edcee730f7594bfc54ca08
SHA256d1826103abfe45f557cfa447d42b477168dd40fe725124fbd05ba3cd97a582bb
SHA512e4499f7d28663bc612b650b4e983fc99e174e5e565b470616d5744aaca633ed598eae1bfa187c1ddc854902b4cc8b9026c429d4d37ab8fd38a1e77f0b026b1ec
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
Filesize35KB
MD5643cc68dc52ec3cf1d05c106d5186627
SHA1745bb77671ef1ef4d004172bba218699ec09b87d
SHA25605028d51e9dffdd880f411c28ce0c3e9ed6d22d2f07f9543f083bc79003a07de
SHA512344024ef750975838517bd1418fe32410ee0a389c7398889b080a7f686a5a0c71a32e159944204d30ad6ab5e65633b9d7714f157197af1b847c9578ec00b09d4
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_0
Filesize168KB
MD53263784a317da549ccaa744a0269a333
SHA10915ba40a6a6fb0e6dacc2d33d3b4faf06fbc023
SHA256432713f85eb5da1e558e30e3d32af9efaa18cd5a41e5953ee8cd1d49f71d025c
SHA512dd9c7f708b6f458aecee04d95915640398d1a3a56e5bb75e3d8d2c7e3b99c910970293bd5f6c422e9229bd44849cedd68fc6191a9c199fdb4b49bcbd6c4a28bf
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_1
Filesize381KB
MD54d160f4ba6ded8e0be1a52b62210261a
SHA14f5276843d0aa39d4b48f1a74ed922d612e8604e
SHA256d032702f39731aca3008e7695e2c4a361821ad84e184ad439bfbbd0f22e3d98b
SHA5122f9a522995c50d62530ac7c3b3bdfad9560ed22f9153bf8c900702fc0dc33c7a68299b6e8a48a014963c472d6c770c2e807a0b686a540e5712ef5c541adc47ce
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
Filesize449B
MD55ff21d5d0dbb126cc3f0db52fb7b569b
SHA1406fb3297b1f61b109ba578b94bbd8c126a092ce
SHA256d8e3d37c58f45e6328e0c1ad75d6eccf46a2af3c47e7f71b0be69304889fe730
SHA512620bad2ada6c31a2bffc05767eeec4ce327b3334169dc349b00ace0df5042ed9238a69c519cf58730f2d6255620392b6f67fbca8af2f397ec7576f86c7831b0c
-
Filesize
24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize264B
MD526325f25f4141df8cc51a14ae09ca36b
SHA1350fb1e904e95cad487af676e226ce7f82e3855e
SHA25678bb73eae00fb0bd7452cd1ef9eda12905163af4144640e28034b400d06fee75
SHA5121fd2540cea0d990a8d099441f84bda5f0dc50e2ee0f7c0463e4f7920447c4c4a69a585d9951fdd06105e226e6422d3a633cf82aa0f389053cb97e7281d707afa
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a4e02.TMP
Filesize48B
MD5e502bdaf98c7d91215140787e851b28e
SHA10a46ca7258329987521940ddc86fe19d79903296
SHA25628d5bb2ab4c3d2eac7c9b48970adeb69f4e8643eaa4696c3d670344747c83fcf
SHA51261503992da7fe7236dc769a5ecf40864158c4c6ee1d39ea766c662e0eb48f021f399ef76269f7e0ff2bfabb3016e8b74c48f80dd469df18536ccbc09b0d977dc
-
Filesize
45KB
MD5a4d340afc4b1278e8eba2bd1cd192ab0
SHA10b671eac1c5058a4635b8bbe860409e321447454
SHA25638707bb90ca4b23b681af26484a3a9d6bd4aa88571d43bbbdf6ad54c0b810ab3
SHA512d007bca8059beefbdff6c2f32354e145f1ac845359cd166f83e8c8faf9da790e54d8283b23a6a9756504b7368e6283f16ffff5bd13876db3ee266fac616f768c
-
Filesize
8KB
MD5cf89d16bb9107c631daabf0c0ee58efb
SHA13ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA5128cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
-
Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
Filesize
8KB
MD541876349cb12d6db992f1309f22df3f0
SHA15cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
-
Filesize
12KB
MD5d58bb70a5b8f97506b2e400835de2ad2
SHA1eb80c552f1b777f8967f5f602742182a1f4a1de6
SHA25698190b4fb68375cd1806a875abd6117ecb9c22e9e6b8ec0fe426ea4dd73de5d6
SHA512d46b7a5e3f9854c77e506d2feb7b89f3209895d3aa90e59aac9261e42eed593e5e2f959d96118b5d1064ef0639cf6a644c95bc39f1494d88e4e28cd2799d8e38
-
Filesize
9KB
MD5319b1c04c50bde6ef4260419142c6f0f
SHA1a8f32bd40de51616f671fea32cf94cc05da37763
SHA2567ab966dd731a128b3be73abf11f03e52c4f26eaeb0c4e3cdec5336d206f1273a
SHA512053a55503bef68c9decbaa6e7f80cb3b4e142da757e33bd657df79e6b540eb578669f98f4547362d38dd4568007685b620be5e57ed29d53a92b62c86c58d779f
-
Filesize
8KB
MD5850c8cc5edce55825cf22dae193158cc
SHA15544da01bc2996a3e2be1895fb3b41e126f3a26b
SHA256b5b5b318f88057e7e83aa449c3dee24af9b79450a3e48329c1eae66d5000d731
SHA51288dcda42cde1bac88194b434571e4b82dbe413b8788d1fa409c6158a18993ea833073b6bdf87b1b74a9dd20468a2607e659ae58bd76470ea2d1136cc3251f8a5
-
Filesize
4KB
MD565163361ad84d7fc8362352ebc99f557
SHA1183c1aa8eece55ff3b5c4ed7722d37c86dc506ef
SHA256b79243c81f8a9ea335ee888b3514eac0364f9825b0648a72b58be43c8ee28ad7
SHA5126535e64073806319d6ec3559f7feef80938e42aa161fec229745cb62160e955c2778aef7d2c1f6f14c18f0733e6a2ec2dd678c8cb82e795873daf5548b542fb7
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PrivacySandboxAttestationsPreloaded\2024.10.30.0\privacy-sandbox-attestations.dat
Filesize7KB
MD5d870ae21d5872f145f30bd1f887cff84
SHA17e1d9cc092c38f9e0ec91c9f8d30733c75c71761
SHA25612684b9ba04525d62d94a5c706e168b2b170c31ee9fa7587901c1690c9bdbec3
SHA512e0054e77a1a3ee7513bb32932ab55509646f40e096404e5a51e4d400a8658c851991ad027a235ec6d9a37c5f4012c6cdc304e3f402ac4ad23d6d50002714b1c8
-
Filesize
2KB
MD5e2f792c9e2dd86f39e8286b2ead2fc70
SHA18a32867614d2a23e473ed642056ded8e566687f9
SHA256ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
SHA5126a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
2KB
MD57857e48e9a2fc7f17e3aef67dff8544c
SHA12607362e967d38f52ac066d2c5374394e50ac598
SHA256ca9b84a2e495391fd2aca7f3ce212775e55d3b00d1ad6394ab1049cdd958b51b
SHA512ac0a6b0fc91a99a7c93f1ca875b70122d674818e149434b2a7b3a165427ff3dd25ee572fabb92fed662ad24bc916b7118db23eab78f528cc7bd9f5037787a15d
-
Filesize
3KB
MD5a97a5e396912cbc2f3cfd4ff210cad24
SHA1712535213bc8d80adc300ae67dd64714c38e4818
SHA25644eddd0003f129cff1e4352d94baf90eef5490d7b1bfef2f4f7b6da637140101
SHA512611955eb84dada37ca8831488f2b937ebd631f3bcbc97648cff8ff310ef458fac4987ff50c0c99972ee24f01ca671b850945ea71f14465f442b41f72f04f0d00
-
Filesize
1.2MB
MD5c9db6b5c84be13a43ad23cc204e4bc52
SHA194bd6634303205715fd04f8aa10d75158390e4d9
SHA25677200156d4773175d341aad11ab23bd52445065cd95060348da17d083dc27688
SHA5129273493c5e5ea24b2f5ee219fdf849546e85b3f5cc24c970f1ab6fdcfe961d96ca6fd41c96f9d915892ab24ce7ff409f0f5a6569b0225e95d36afba51615f8d6
-
Filesize
3.7MB
MD5d6b98af80e3195aaf34a2ee9c8934419
SHA11d7edeb2f2182cc46de5475114d6f250ac36c2f6
SHA25608fcffbf9f6b2a76c51daa787d590c9eb02602c8671952641719ac68e5f4440c
SHA512d6442cf595dc9c8fc6eba3ade22e770775e28c32c68624da5b4df76400d82b87c59b50ce8cec8f36aa1109012b3b21b4312e403bef000d136e0bf24df8d6efc7
-
Filesize
4KB
MD585753477ce12eb27bf38067c6c230068
SHA152fd03cdde1cfc04d86f22be851a58a629865cda
SHA256aff2f276485f94e47ded0cf070dc18d58961fd58b0cba5a7b43c0693aeaae40b
SHA512fab9543351f022b22a557c31ab0fe1e10fad04325f4205a66d4f3aedb913ca8a5fc814f9dca63d604fe5c2915c4e4b54d7ca713940e4ace5674f2717c8be7651